Privacy Notice

Mandatory data processing under the Adult Education Act

In compliance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council, the General Data Protection Regulation (GDPR), we hereby inform you, as the Data Subject, about the processing of your personal data:

 

Data Controller details:

Company name:          INSEDO EDUCATION AND SERVICES LTD..

Registered seat: Cserhát lakótelep 7, 8200 Veszprém, Hungary

Licence number: E/2020/000259

Adult education registration number: B/2020/001363

Represented by: Miklós Horváth / Patrik Horváth

 

1. DATA CATEGORIES:

Legal basis for data processing: Article 6(1)(c) GDPR (having regard to Sections 16 and 21 of Act LXXVII of 2013 on Adult Education, hereinafter: the Adult Education Act), i.e. processing is necessary for compliance with a legal obligation to which the controller is subject.

Purpose of data processing: Delivering training covered by the Adult Education Act and meeting the data processing and data reporting obligations required by law.

Duration of data processing:

The Data Controller processes the data until the last day of the eighth year following the conclusion of the Adult Education Contract. The Adult Education Administrative Authority (Pest County Government Office) processes the data in its records until the last day of the fiftieth year following their creation, after which it transfers them to the competent archives and deletes the transferred data.

Categories of data:

1. a) the person participating in the training
2. aa) natural personal identification data (name, birth name, mother's name, place and date of birth),
3. ab) electronic mailing address (email address)
4. ac) highest level of education
5. b) data related to the training concerning the person participating in the training
6. ba) highest level of education, vocational qualification, professional qualification and foreign-language proficiency,
7. bb) entry into and completion of the training, or, if the training is not completed, withdrawal from the training,
8. bc) assessment and grading during the training,
9. bd) payment obligations related to the training and any training loan used.

Data transfer: the Data Controller transfers the data listed under point a) to the FAR system (Adult Education Data Reporting System) of the Pest County Government Office. The data may be used for statistical purposes and may be handed over for statistical use in a form that does not allow personal identification, and may also be handed over free of charge to the Hungarian Central Statistical Office for statistical purposes in a form allowing individual identification. The data must be transferred to the bodies auditing these funds for the purpose of verifying the use of state or European Union funds.

The Data Controller must, among other things, prepare, keep records of and retain the following documents, which may contain personal data, until the last day of the eighth year following their creation in order to enable the adult education administrative authority to exercise its supervisory powers:

1. a) attendance sheets kept for contact hours and signed by the person participating in the training, as well as documents certifying professional preparation and assessment conducted electronically with the participant,
2. b) the personal data of the person participating in the training processed pursuant to Section 21(1), as well as the original documents proving the conditions required to commence and participate in the education or training, or copies thereof certified by the adult education provider, and documents certifying the entry competence assessment and prior knowledge assessment.

Legal basis for data processing: Legitimate interest of the training provider

Purpose of data processing: Keeping in contact and issuing invoices while delivering training covered by the Adult Education Act

Duration of data processing: Until the last day of the eighth year from the conclusion of the adult education contract.

Categories of data: the address and telephone number of the person taking part in the training

 

Rights of Data Subjects:

Right to prior information

The Data Subject has the right to receive information about facts and information related to data processing before the processing begins. (Articles 13–14 of the Regulation)

Right of access by the Data Subject

The Data Subject has the right to obtain confirmation from the Data Controller as to whether personal data concerning them are being processed and, where that is the case, to access the personal data and the related information specified in the Regulation. (Article 15 of the Regulation).

Right to rectification

The Data Subject has the right to obtain from the Data Controller without undue delay the rectification of inaccurate personal data concerning them. Taking into account the purposes of the processing, the Data Subject has the right to have incomplete personal data completed, including by means of providing a supplementary statement. (Article 16 of the Regulation).

Right to erasure ('right to be forgotten')

The Data Subject has the right to obtain from the Data Controller the erasure of personal data concerning them without undue delay where one of the grounds specified in the Regulation applies. (Article 17 of the Regulation) The right to erasure may also be partial and may be requested separately in relation to individual processing operations. This provision does not apply to mandatory data processing.

Right to restriction of processing

The Data Subject has the right to obtain from the Data Controller restriction of processing where the conditions specified in the Regulation are met. (Article 18 of the Regulation) This provision does not apply to mandatory data processing.

Right to data portability

Under the conditions set out in the Regulation, the Data Subject has the right to receive the personal data concerning them which they have provided to the Data Controller in a structured, commonly used and machine-readable format, and has the right to transmit those data to another data controller. (Article 20 of the Regulation)

Right to object

The Data Subject has the right to object, on grounds relating to their particular situation, at any time to the processing of personal data concerning them based on point (e) of Article 6(1) of the Regulation (processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller) or point (f) thereof (processing is necessary for the purposes of the legitimate interests pursued by the Data Controller or by a third party), including profiling based on those provisions. This provision does not apply to mandatory data processing.

 

Restrictions

The Data Subject has the right to request that the Data Controller restrict processing where the conditions laid down by law are met. (Article 23 of the Regulation) This provision does not apply to mandatory data processing.

Right to lodge a complaint with a supervisory authority (right to administrative remedy)

The Data Subject has the right to lodge a complaint with the supervisory authority designated for this purpose by the legislature, in particular in the Member State of their habitual residence, place of work or place of the alleged infringement, if the Data Subject considers that the processing of personal data relating to them infringes the Regulation. (Article 77 of the Regulation)

 

Data Subjects may submit their requests

• in writing to the Data Controller's address,
• electronically by sending them to the email address above.

The Data Subject may submit a complaint concerning data processing to the authority appointed by the legislature or to the court having jurisdiction over their place of residence or stay. At the time this Privacy Notice is published, the authority appointed by the legislature for data protection matters and competent to handle administrative remedies is:

 

Hungarian National Authority for Data Protection and Freedom of Information

Postal address: 1530 Budapest, PO Box 5.

Registered office: 1125 Budapest, Szilágyi Erzsébet fasor 22/c

Telefon: +36 (1) 391-1400,  E-mail: ugyfelszolgalat@naih.hu

 

We hereby inform you that participation in the training is conditional on providing the personal data above, you are obliged to provide them to the Data Controller; failing that, you are not entitled to take part in the training.

Effective from: 1 January 2021 until revoked