Data protection

ZÁÉV ZRT.
INFORMATION ON GENERAL DATA PROTECTION 

1.    Name and contact details of the data manager 

Name:	ZÁÉV Construction Private Ltd. (hereinafter: Data manager)
Address mailing address:	8900 Zalaegerszeg, Millennium köz 1.
Telephone number of the registered office:	+36-92/504-100
Central email address:	info@zaev.hu
Website:	https://zaev.hu
Data protection contact:	adatvedelem@zaev.hu

    
    

    

2.    Purpose of information and general provisions

The Data Manager has reviewed its activities related to the management of personal data with a view to the mandatory and applicable rules in the General Data Protection Regulation of the European Union (General Data Protection Regulation, hereinafter referred to as GDPR) and is committed to perform them in accordance with the requirements set forth in that regulation and in the domestic legislation in force.

This Data Protection document contains all information on the handling of personal data used during the operation of the Data Manager.

In order to protect personal data, the Data Manager takes the necessary organizational and technical measures, for which it uses an external reliable service provider.

This data protection information is regularly reviewed and amended if the scope of data processing expands, or if a law or a mandatory legal act of the European Union makes this mandatory.
A change in data management must not mean that personal data is managed for a different purpose. The effective Data Protection information is always available on the website

3. Applicable legislation

The data manager undertakes to process personal data in accordance with the applicable legal regulations, in particular those listed below:
•    Regulation (EU) 2016/679 of the European Parliament and of the Council (April 27, 2016) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR) and on the repeal of the Regulation (EC) No. 95/46
•    Act CXII of 2011 (Info Act) on the right to informational self-determination and on freedom of information 
•    Act C of 2003 on Electronic Communications
•    Act V of 2013 on the Civil Code
•    Act LIV of 2018 on the protection of business secrets
•    Act XXXIV of 2004 on Small and Medium-sized Enterprises and the support on their development 
•    Act CLV of 1997 on consumer protection

4.    Data management principles followed

Personal data can be processed if 
a)    the data subject has given their consent to the processing of their personal data for one or more specific purposes;
b)    if the data processing is necessary for the performance of a contract to which the data subject is a party, or in order to take steps at the request of the data subject prior to entering into the contract;
c)    if the data processing is necessary to fulfil the legal obligation of the data manager;
d)    if data processing is necessary to protect the vital interests of the data subject or of another natural person;
e)    if the data processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller; 
f)    if the data processing is necessary to enforce the legitimate interests of the controller or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.
The purpose of processing must be satisfied in all stages of data processing operations; recording of personal data shall be done under the principle of lawfulness and fairness. Only such personal data can be processed which is essential for the realization of the purpose of data management suitable for achieving the purpose, and personal data can only be processed to the extent and for the time necessary to achieve that purpose.

During data management, the accuracy and completeness of the data must be ensured. The data subject is responsible for the correctness, completeness and authenticity of the data. Special (personal) data can only be processed with consent based on appropriate prior information, unless its processing is required by law.

Before the data is processed, the data subject shall be informed that the data is based on consent or is compulsory. Prior to the start of data management, data subject shall be clearly and elaborately informed of all aspects concerning the management of their personal data, such as the purpose for which the data are required and the legal grounds, the person entitled to carry out the processing, the duration of the proposed processing operation and the persons to whom his data may be disclosed. Information shall also be provided on the rights of the data subject with regard to the handling of data and the legal redress available.

The Data Manager ensures the security of the data, and also takes all the technical measures and develops the procedural rules that are necessary for the implementation of the data protection provisions, in accordance with the provisions of the legislation detailed in point 3.

5. Scope of the processed personal data

The range of personal data of external data subjects managed by the Data Manager is included in the scope of Managed data.

6. Surveillance cameras and access control system

Regarding personal data management concerning security and time-lapse cameras, as well as access to the construction area, data management related to cameras and access shall provide information. 

7. Rights of data subject and opportunities for legal redress

The data subject may object to the processing of their personal data:
a.) if the processing or transmission of personal data is necessary solely for the fulfilment of the legal obligations of the data manager, or for the enforcement of the legitimate interests of the data manager, data receiver or third person, except for compulsory data processing.
b.) if the personal data is used or transferred for direct marketing, public opinion research or scientific research purposes; as well as
c.) in any other cases specified by law.

In relation to data management, the data subject has the following rights and legal redress:

In relation to data management, the natural person concerned has the right to:
-    request information about data management,
-    access their personal data (request a copy of registered data),
-    request rectification,
-    have it deleted,
-    request restriction,
-    request the release and transfer of their data in portable form,
-    protest against the processing of their personal data if the legal basis of the data processing is the legitimate interest of the data manager or third party,
-    and they can also file a complaint regarding the processing of their personal data and the exercise of their rights according to GDPR regulation. 

The data subject may request information, submit a request or file a complaint regarding the management of their personal data, and may report an incident via the data protection contact email of the Data Manager.

The Data Manager shall, without undue delay, review the request of data subject and take a decision to inform the applicant in writing within one month of receipt of the application and, if necessary, take further actions (e.g. if, according to the findings of the data manager, the data subject’s objection is justified, the data manager shall terminate all processing operations, including further data collection and transmission, block the data involved, and notify the objection as well as the actions taken to all parties to whom the personal data concerned was previously transferred and who shall take the action necessary for enforcing the data subject’s right of objection.)

Should the data subject disagree with the Data Manager’s action or decision, they have the right to seek legal redress.
The data subject may contact the authority below with their complaint or request for legal redress.

National Data Protection and Freedom of Information Authority [abbreviated: NAIH]
-    address: 1055 Budapest, Falk Miksa utca 9-11.
-    postal address: 1363 Budapest Pf. 9.
-    telephone number: +36 (1) 391-1400
-    fax: +36 (1) 391-1410
-    email: ugyfelszolgalat@naih.hu
-    website: https://www.naih.hu].