Privacy Policy

Privacy Notice

This Privacy Policy is the privacy policy of IVSZ – Association of Digital Enterprises (hereinafter: IVSZ), given that the website www.ivsz.hu is operated by IVSZ and IVSZ processes the personal data provided on the website in compliance with the provisions of the GDPR and other data protection legislation.

1. Application of the Privacy Policy

The Privacy Policy contains the rules governing the processing of your personal data, which IVSZ processes because:

The organisation you represent is a member of IVSZ.
You are a visitor to or registered user of a website operated by IVSZ (e.g. ivsz.hu, hereinafter: the Website).
You are a participant in an event organised or co-organised by IVSZ in physical or digital form.
You have a contractual relationship of some kind with IVSZ (e.g. an employment relationship).
You have expressly consented to data processing online or in physical form (e.g. when completing a questionnaire, you subscribed to our electronic newsletter).
The Website also contains various links to other websites. Although these websites are selected with care, IVSZ is not responsible for the processing of your personal data on those websites. This Privacy Policy therefore does not apply to the use of websites other than ivsz.hu.

2. Identification of the Data Controller

IVSZ – Association of Digital Enterprises, as data controller (registered office: 1095 Budapest, Tinódi utca 1–3, Building C, Ground Floor 2; registration number: 3269; tax number: 19655275-2-42; the “Data Controller”), processes your personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (the “General Data Protection Regulation”).

3. Personal Data Processed by the Data Controller

IVSZ collects information about you, including personal data, because the organisation you represent is a member of IVSZ, or because you or the organisation you represent is a visitor to a Website operated by IVSZ.

Companies/organisations become members of IVSZ, but companies/organisations are represented by individuals, whose data qualifying as personal data are also processed in the course of communication.

The categories of data processed:

Information you provide to us – when you register for an event organised by IVSZ, we will require the following:
your full name,
the name of your company,
your position,
your telephone number,
your email address.
We may request personal data from you that may be necessary for entering into a contract, providing services offered by IVSZ and/or identifying you and/or communicating with you, including in particular your telephone number and your contact and communication preferences.
Information you provide to us when using an IVSZ service or visiting a website: information relating to your electronic device, IP addresses, log information, information relating to browser type and preferences, location information and online identifiers that enable the use of “cookies” and similar technologies.

4. Legal Basis for Data Processing

The personal data referred to in this Privacy Policy are processed solely on the following legal bases:

with your express consent (the user’s consent pursuant to Article 6(1)(a) of the GDPR); or
where a contractual relationship is established with you or the organisation you represent; or
where processing is necessary for the Data Controller to comply with its legal obligations.
[In the case of consent-based processing (Article 6(1)(a) or Article 9(1)(a) of the GDPR): You may withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.]

By using the appropriate unsubscribe links (available at the bottom of our emails and, for registered users, on their own profile page), you may decide at any time that you no longer wish to receive information from IVSZ through mass communication tools on certain topics, or on any topic at all.

In all cases, you may also submit a request to withdraw the processing of your data by sending an email to iroda@ivsz.hu.

The termination of IVSZ membership does not automatically terminate data processing; instead, its purpose is reclassified as “General communication”.

5. Purposes of Data Processing

We process your personal data for the following purposes:

Communication: maintaining and promoting communication with you and your company;
Marketing communications and sending electronic newsletters:
providing information about the most important developments in the industry and the digital economy, and the latest news concerning IVSZ’s activities;
sending marketing messages.
Providing information about and enabling participation in events organised by IVSZ;
Statistical processing;
Conducting and analysing market research and marketing strategies;
Based on the available data, we create a profile of visitors in order to assess their interest in IVSZ’s activities and their professional interests, so that we can communicate more accurately and in a more targeted manner.
(or for a secondary purpose closely related to the primary purpose, such as storing or deleting data or enabling convenience functions through the use of cookies).

Purpose of data processing related to IVSZ membership

Maintaining membership as a contractual relationship and providing the Association’s services. Communication may take place directly between employees of the IVSZ Office and employees of the member company, or through so-called mass communication tools (e.g. through these tools we distribute our newsletter, event invitations, profession-specific information, etc.). In the course of mass communication, individuals may set their preferences separately for each topic, which the system stores as profile data linked to their personal data.

By using the appropriate unsubscribe links, individuals may decide at any time that they no longer wish to receive information from IVSZ through mass communication tools on certain topics, or on any topic at all. This does not affect communications relating to the maintenance of the contractual relationship.

Data processing related to general (non-member) communication:

In order to achieve the Association’s objectives, it maintains contact with companies/organisations other than its members. Communication may take place directly between employees of the IVSZ Office and employees of your company/organisation, or through so-called mass communication tools (e.g. through these tools we distribute our newsletter, event invitations, profession-specific information, etc.).

In the course of mass communication, individuals may set their preferences separately for each topic, which the system stores as profile data linked to their personal data.

Communication and marketing

If you have consented to IVSZ contacting you with general marketing offers, newsletters and current information (hereinafter: Marketing Offers), IVSZ may send you General Marketing Offers or Personalised Marketing Offers. However, IVSZ is under no obligation to do so.

6. Data Transfers

We use your personal data solely for the purposes referred to above and share them with third parties only under strict conditions:

With competent authorities, governments, regulatory bodies or tax authorities where we are required to comply with legal or regulatory obligations applicable to IVSZ under the relevant laws;
When using the online payment service (SimplePay):
Users initiating payments through the Website acknowledge that the following personal data stored by the Data Controller in the IVSZ user database (such as name, email address, telephone number and billing address data) will be transferred to OTP Mobil Kft. (1143 Budapest, Hungária körút 17–19) as data processor. The nature and purpose of the data processing activities carried out by the data processor are described in the SimplePay Privacy Notice, available at the following link: http://simplepay.hu/vasarlo-aff
When issuing invoices (Billzone.eu):
After a service has been used through the Website, the invoice is issued through the Billzone.eu system; accordingly, the personal data required for issuing the invoice (name, email address and, in the case of a private purchase, the user’s residential address) will be transferred to Billzone.eu.
With other suppliers that assist in providing the Association’s services (e.g. in event organisation or research); these suppliers may use the transferred data solely for the purpose of providing services to IVSZ and must destroy them once the provision of the service has been completed.
Except as provided in this Privacy Policy, we will not disclose any personal data without your permission unless disclosure is required by law or is necessary to protect and/or safeguard our rights, property or personal safety and/or the interests of our users/clients or other persons. IVSZ transfers your personal data to supervisory bodies, tax authorities or investigative agencies only where required by law.

7. Duration of Data Processing

Personal data processed by IVSZ in accordance with this Privacy Policy are processed until consent is withdrawn.

At your express request, your personal data will be deleted or anonymised (so that you can no longer be identified) without undue delay, and no later than within 25 days.

In connection with financial transactions, your personal data will be stored for 10 years from the date of the transaction.

In all cases, data will be retained for longer where required for legal or regulatory reasons (in such cases, the data will be deleted once they are no longer required to comply with legal and regulatory requirements).

8. Use of Cookies

IVSZ uses cookies and similar technologies that collect and store information when you visit a website operated by IVSZ or use an IVSZ application. This allows IVSZ to identify your internet browser and collect data about your use of our website, the pages you visit and the duration of your visits, and to recognise this information when you return to our website in order to improve your experience when visiting the website. You can manage and configure the handling of cookies in your browser settings or by using the panel at the bottom of the Website.

9. If You Communicate with Us Through Social Media

Sharing our Website or its content through social media

If you choose to share our Website or content published on it through social media platforms such as LinkedIn, Facebook and/or Twitter, your personal data (such as your name and the fact that you are interested in IVSZ) will also be visible to visitors to your LinkedIn, Facebook and/or Twitter pages. The use of social media websites is governed solely by their own terms of use, including their privacy policies. IVSZ is not responsible for the processing of personal data shared on social media sites or for their privacy policies; therefore, the IVSZ Privacy Policy does not apply to them.

10. Security of Personal Data

To ensure the appropriate protection of your data and prevent unauthorised access and improper use, IVSZ has the necessary and appropriate technical infrastructure and policies in place. We have implemented technologies and policies designed to protect your data from unauthorised access and improper use. For certain services, we may also use encryption and authentication and verification processes for access to IVSZ services. In addition, we regularly test, assess and evaluate the effectiveness of our security measures.

11. Your Rights in Relation to Data Processing:

You may request from the Data Controller:

access to the personal data concerning you,
rectification of your personal data, and
erasure of your personal data or restriction of their processing, except in cases of mandatory processing.

Right of access

You have the right to obtain confirmation from the Data Controller as to whether or not personal data concerning you are being processed and, where such processing is taking place, to access the personal data. The Data Controller will provide you with a copy of the personal data undergoing processing. For any further copies requested by you, the Data Controller may charge a reasonable fee based on administrative costs. Where you have submitted the request electronically, the information must be provided in a commonly used electronic format unless you request otherwise.

Right to rectification

You have the right to have inaccurate personal data concerning you rectified by the Data Controller without undue delay upon your request.

Right to erasure

You have the right to have personal data concerning you erased by the Data Controller without undue delay upon your request, and the Data Controller is obliged to erase personal data concerning you without undue delay where one of the following grounds applies:

the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
you withdraw the consent on which the processing is based pursuant to Article 6(1)(a) or Article 9(2)(a) of the General Data Protection Regulation, and there is no other legal basis for the processing;
you object to the processing pursuant to Article 21(1) of the General Data Protection Regulation and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) of the General Data Protection Regulation;
the personal data have been unlawfully processed;
the personal data must be erased in order to comply with a legal obligation under Union or Member State law applicable to the Data Controller;
the personal data have been collected in relation to the offer of information society services referred to in Article 8(1) of the General Data Protection Regulation (conditions applicable to a child’s consent).

Right to restriction of processing

You have the right to request that the Data Controller restrict processing where one of the following applies:

you contest the accuracy of the personal data, in which case the restriction applies for a period enabling the Data Controller to verify the accuracy of the personal data;
the processing is unlawful and you oppose the erasure of the data and request the restriction of their use instead;
the Data Controller no longer needs the personal data for the purposes of processing, but you require them for the establishment, exercise or defence of legal claims; or
you have objected to processing pursuant to Article 21(1) of the General Data Protection Regulation; in this case, the restriction applies for the period during which it is determined whether the legitimate grounds of the Data Controller override your legitimate grounds.
Where processing has been restricted, such personal data may, with the exception of storage, be processed only with your consent, or for the establishment, exercise or defence of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or a Member State.

Right to data portability

You also have the right to receive the personal data concerning you that you have provided to the Data Controller in a structured, commonly used and machine-readable format, and to transmit those data to another controller without hindrance from the controller to which the personal data were provided, where: (i) the processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) of the General Data Protection Regulation, or on a contract pursuant to Article 6(1)(b) of the General Data Protection Regulation; and (ii) the processing is carried out by automated means.

Right to object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Article 6(1)(e) or (f), including profiling based on those provisions. In this case, the Data Controller may no longer process the personal data unless it demonstrates compelling legitimate grounds for the processing that override your interests, rights and freedoms, or grounds relating to the establishment, exercise or defence of legal claims.

Where personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such purposes, including profiling to the extent that it is related to such direct marketing. Where you object to the processing of personal data for direct marketing purposes, the personal data may no longer be processed for such purposes.

12. General Rules for Exercising Your Rights

The Data Controller will inform you of the action taken on your request without undue delay and in any event within one month of receiving the request. Where necessary, taking into account the complexity and number of requests, this period may be extended by a further two months. The Data Controller will inform you of any such extension within one month of receiving the request, together with the reasons for the delay. Where you submitted the request electronically, the information should, where possible, be provided electronically unless you request otherwise.

The Data Controller will provide information and take action free of charge. Where your request is manifestly unfounded or excessive, in particular because of its repetitive character, the Data Controller may, taking into account the administrative costs of providing the requested information or notification or taking the requested action:

charge a reasonable fee; or
refuse to act on the request.
The Data Controller bears the burden of demonstrating the manifestly unfounded or excessive character of the request. Where the Data Controller has reasonable doubts concerning the identity of the natural person making the request, it may request the provision of additional information necessary to confirm your identity.

13. Means of Legal Redress

You may contact the Data Controller at any time regarding the processing of your personal data (address: 1077 Budapest, Wesselényi utca 16/A; telephone: +36 1 266 6346; email: iroda@ivsz.hu).

If you have a complaint concerning the processing of your personal data, you may also contact the Hungarian National Authority for Data Protection and Freedom of Information (Dr Attila Péterfalvi, President of the Hungarian National Authority for Data Protection and Freedom of Information; postal address: 1530 Budapest, P.O. Box 5; address: 1125 Budapest, Szilágyi Erzsébet fasor 22/c; telephone: +36 (1) 391-1400; fax: +36 (1) 391-1410; email: ugyfelszolgalat@naih.hu; website: www.naih.hu).

14. Amendments to the Privacy Notice

The Data Controller reserves the right to amend this Privacy Notice unilaterally, subject to prior notice to you. By using the service after the amendment enters into force, you acknowledge the amended Privacy Notice.