DATA MANAGEMENT AND PRIVACY INFORMATION
1. Data controller:
- Name: Resysten International Ltd.
- Address: 71-75 Shelton Street, Covent garden, London WC2H 9JQ, UK
- Represented by: Shajjad Rizvi, CDO
2. Data management rules:
The validity of this data management information lasts from its inclusion on the website to its revocation. The Data Controller (hereinafter: the Company) handles personal data in connection with this interface in accordance with the Data Protection and Data Security Regulations. The material scope of the Regulations extends to all processes carried out at all organizational units of the Company, during which the processing of personal data specified in the Infotv and in Regulation 2016/679 of the European Parliament and of the Council (hereinafter GDPR) takes place.
The concepts of these regulations are the same as in Infotv. With interpretative explanations as defined in § 3.
The Company processes personal data only for a specific purpose, in order to exercise a right and fulfill an obligation, to the minimum extent and for the time necessary to achieve the purpose. It serves the purpose at all stages of the data processing – and if the purpose of the data processing has ceased or the processing of the data otherwise becomes illegal, the data will be deleted.
The Company handles personal data only on the basis of the prior consent of the data subject or by law or legal authorization.
Before recording the data, the Company always communicates to the data subject the purpose of the data processing and the legal basis of the data processing.
Employees performing data management at the Company and any organizations performing data processing are obliged to keep the personal data known as a business secret. Persons handling personal data and having access to it are obliged to make a Privacy Statement.
If the data subject becomes aware that the personal data managed by the Company is incorrect, incomplete or out of date, he / she is obliged to correct it or initiate a correction at the Company.
The Company transmits data to the data processor only on the basis of the commission contract concluded with it.
The current managing director of the Company determines the organization of data protection, the tasks and powers related to data protection and related activities, and appoints the person supervising the data management. In the course of their work, the employees of the Company ensure that unauthorized persons cannot access personal data, and that the storage and placement of personal data is designed in such a way that it cannot be accessed, known, changed or destroyed by unauthorized persons.
The Company’s data protection system is supervised by an internal data protection officer.
3. Rights of data subjects
The data subject may request information on the processing of his or her personal data, as well as request their rectification or, with the exception of data processing required by law, their deletion.
The Company is obliged to respond to the received application or protest in writing, in a comprehensible form, no later than within 15 days from the receipt of the right to protest.
The information covers the Infotv. To the information specified in Section 15 (1), if the information of the data subject cannot be refused on the basis of law. The information is generally free of charge, reimbursement of costs by the Company only in accordance with Infotv. It shall be charged in the case specified in Section 15 (5). The Company can only apply for the Infotv. Rejects it for the reasons specified in Section 9 (1) or Section 19, only with justification, in accordance with Infotv. With the information specified in Section 16 (2), in writing.
Inaccurate data shall be corrected by the head of the organizational unit handling the data, if the necessary data and the public documents proving them are available, the Infotv. In case of the reasons specified in Section 17 (2), it shall take measures to delete the processed personal data.
For the duration of the examination of the data subject’s protest against the processing of personal data – but for a maximum of 5 days – the data processing is suspended by the head of the Company, the validity of the protest is examined and a decision is made by the Infotv. It shall inform in accordance with the provisions of Section 21 (2).
If the protest is justified, the Company shall inform Infotv. Act in accordance with the provisions of Section 21 (3).
The Company shall also reimburse the damage caused to others by the unlawful processing of the data of the data subject or the violation of the data security requirements, as well as the damages caused by the personal data violation caused by him or her or the data processor used by him. The data controller shall be released from liability for the damage caused and the obligation to pay damages if he proves that the damage or the violation of the data subject’s personal rights was caused by an unavoidable cause outside the scope of data processing. Likewise, it does not compensate for damage if it was caused by the intentional or grossly negligent conduct of the injured party.
The data subject may file a complaint with the NAIH regarding the Company’s data management procedure:
Name: National Data Protection and Freedom of Information Authority head office:
1024 Budapest, Szilágyi Erzsébet avenue 22 / C. website: www.naih.hu