PRIVACY NOTICE 

 

Data Controller: J&J (PSV) KFT.  

Website www.jandjpsv.eu   

Data Subjects: Website visitors  

Valid from May 17, 2023 

 

J&J (PSV) Kft. as Data Controller informs www.jandjpsv.eu the visitors of the website www.jandjpsv.eu as Data Subjects of the following. 

 

I. …Data Subject Consent Form: 

1. J&J (PSV) Kft. as Data Controller informs the Data Subjects that Annex 1 to this Privacy Notice is the Data Subject Consent Form,, which, when signed and returned to J&J (PSV) Kft. as Data Controller, represents the Data Subject’s voluntary, specific, informed and unambiguous consent to the processing of his/her personal data as set out in Section III.4 and Section III.5 of this Privacy Notice,taking note of the provisions laid down in Sections III.1 through III.2 of this Privacy Notice, including the fact that the provision of personal data will be: 

  1. in the case of personal data defined in Section III.4: a condition for making the callback,  

  1. in the case of personal data defined in Section III.5: a precondition for the conclusion of the contract, a condition for the continuation of the contractual relationship and thus a condition for the provision of the service, 

  1. J&J (PSV) Kft. as Data Controller informs the Data Subjects that said Data Subject Consent Form does not extend to the acceptance of cookie information, on which the Data Subjects are entitled to make separate declarations. 

  1. J&J (PSV) Kft. as Data Controller informs the Data Subjects that the signing of the Data Subject Consent Form is not a condition for the processing of the Data Subject’s personal data, given that the Data Subject’s consent is only one of the legal bases for the processing of the Data Subject’s personal data.  

 

II. Data Subject’s data:

 

1. Company name:  

 

J&J (PSV) Korlátolt Felelősségű Társaság 

 

2. Abbreviated company name:  

 

J&J (PSV) Kft.  

 

3. Registered office: 

 

H-2143 Kistarcsa, Rozmaring utca 9 

 

4.Company registration number: 

 

13-09-121272 

 

5. Tax number:  

 

14378892-2-13 

 

6. Statistical code:  

 

14378892-4531-113-13 

 

7. Bank account number:  

 

10700378-68378741-50000005 (CIB Bank) 

 

8. Managing Director:  

 

Csaba Juhász 

 

9. Electronic contact details 

 

info@jandjpsv.eu    

 

III. 

The scope of personal data processed by J&J (PSV) Kft. and the purpose,  

legal basis and duration of processing: 

  1. J&J (PSV) Kft. as Data Controller informs the Data Subjects that the provision of the data specified in Section III.4 of this Privacy Notice is a condition for making the callback. The Data Subject is obliged to provide these personal data as in the failure to provide said data, J&J (PSV) Kft. as Data Controller will not be able to give a callback to the Data Subject.

  1. J&J (PSV) Kft. as Data Controller informs the Data Subjects that the provision of the data specified in Section III.5 of this Privacy Notice is a precondition for the conclusion of the contract, a condition for the continuation of the contractual relationship and thus a condition for the provision of the service. The Data Subject is obliged to provide said personal data as in the failure to provide the data, the contractual relationship between J&J (PSV) Kft. as Data Controller and the Data Subject will not be established or the contractual relationship previously established will be terminated.

  1. J&J (PSV) Kft. as Data Controller informs the Data Subjects that the Data Subject is responsible for the accuracy of the data provided by them. J&J (PSV) Kft. as Data Controller will verify the accuracy of the data provided by the Data Subject only to the extent that it is able to do so on the basis of its right of access to authentic public records.

  1. J&J (PSV) Kft. as Data Controller processes the following personal data provided by the Data Subject for the purpose of requesting a callback:

  1. Data Subject’s name

  1. purpose of processing:

  1. Communication with Data Subject

  1. Conclusion of contract with Data Subject

  1. legal basis of processing:

  1. Formation of contract with Data Subject: Civil Code of Hungary, Section 6:63 (2)

  1. Data Subject’s consent, insofar the Consent Form has been signed and returned by the Data Subject to J&J (PSV) Kft. as Data Controller

  1. duration of processing: immediately after the end of the telephone conversation

  1. Phone number of Data Subject

  1. purpose of processing:

  1. Communication with Data Subject

  1. Conclusion of contract with Data Subject

  1. legal basis of processing:

  1. Formation of contract with Data Subject: Civil Code of Hungary, Section 6:63 (2)

  1. Data Subject’s consent, insofar the Consent Form has been signed and returned by the Data Subject to J&J (PSV) Kft. as Data Controller

  1. duration of processing: immediately after the end of the telephone conversation

  1. J&J (PSV) Kft. as Data Controller processes the following personal data of the Data Subject:

  1. Data Subject’s name

  1. purpose of processing:

- during contractual relationship:

  1. Data Subject’s identification

  1. Communication with Data Subject

  1. Conclusion of contract with Data Subject

  1. Issuing of invoice to Data Subject

  1. Retention of the invoice issued to Data Subject

- following the termination of contractual relationship:

  1. enforcement of any claims arising from contract

  1. Retention of the invoice issued to Data Subject

b) legal basis of processing:

- during contractual relationship:

  1. Formation of contract with Data Subject: Civil Code of Hungary, Section 6:63 (2)

  1. Performance of contract formed with Data Subject: Civil Code of Hungary, Section 6:123 (1)

  1. Compliance with the legal obligation applicable to J&J (PSV) Kft. as Data Controller under Article 159 (1) and Article 169 (e) of Act CXXVII of 2007 on Value Added Tax, pursuant to which the taxable person is obliged to issue an invoice, the mandatory content of which must include the name of the customer receiving the service

  1. The legal obligation applicable to J&J (PSV) Kft. as Data Controller under Article 169 (2) of Act C of 2000 on Accounting, pursuant to which the invoice must be kept for no less than 8 years

  1. Data Subject’s consent, insofar the Consent Form has been signed and returned by the Data Subject to J&J (PSV) Kft. as Data Controller

- following the termination of contractual relationship:

  1. exercise of rights and performance of obligations arising from contract under Section 6:22 of the Civil Code of Hungary, pursuant to which claims will lapse after 5 years

  1. The legal obligation applicable to J&J (PSV) Kft. as Data Controller under Article 169 (2) of Act C of 2000 on Accounting, pursuant to which the invoice must be kept for no less than 8 years

c) duration of processing: until the expiry of the 5-year limitation period after the termination of contractual relationship, provided that the invoice must be kept for no less than 8 years in order to comply with the legal obligation laid down in Article 169 (1) of Act C of 2000 on Accounting.

  1. Name of Data Subject’s legal representative:

  1. purpose of processing:

- during contractual relationship:

  1. Conclusion of contract with Data Subject

- following the termination of contractual relationship:

  1. enforcement of any claims arising from contract

  1. legal basis of processing:

- during contractual relationship:

  1. Formation of contract with Data Subject: Civil Code of Hungary, Section 6:63 (2)

  1. Data Subject’s consent, insofar as the Consent Form has been signed and returned by the Data Subject to J&J (PSV) Kft. as Data Controller

- following the termination of contractual relationship:

  1. exercise of rights and performance of obligations arising from contract under Section 6:22 of the Civil Code of Hungary, pursuant to which claims will lapse after 5 years

  1. duration of processing: until the expiry of the 5-year limitation period after the termination of contractual relationship

  1. Data Subject’s registered office/residence

  1. purpose of processing:

- during contractual relationship:

  1. Conclusion of contract with Data Subject

  1. Issuing of invoice to Data Subject (unless the Data Subject’s billing address is different from their registered office/residence)

  1. Retention of the invoice issued to Data Subject (unless the Data Subject’s

  2. billing address is different from their registered office/residence)

- following the termination of contractual relationship:

  1. enforcement of any claims arising from contract

  1. Retention of the invoice issued to Data Subject (unless the Data Subject’s billing address is different from their registered office/residence)

  1. legal basis of processing:

- during contractual relationship:

  1. Formation of contract with Data Subject: Civil Code of Hungary, Section 6:63 (2)

  1. Compliance with the legal obligation applicable to J&J (PSV) Kft. as Data Controller under Article 159 (1) and Article 169 (e) of Act CXXVII of 2007 on Value Added Tax, pursuant to which the taxable person is obliged to issue an invoice, the mandatory content of which must include the address of the customer receiving the service (unless the Data Subject’s billing address is different from their registered office/residence)

  1. The legal obligation applicable to J&J (PSV) Kft. as Data Controller under Article 169 (2) of Act C of 2000 on Accounting, pursuant to which the invoice must be kept for no less than 8 years (unless the Data Subject’s billing address is different from their registered office/residence)

  1. Data Subject’s consent, insofar the Consent Form has been signed and returned by the Data Subject to J&J (PSV) Kft. as Data Controller

- following the termination of contractual relationship:

  1. exercise of rights and performance of obligations arising from contract under Section 6:22 of the Civil Code of Hungary, pursuant to which claims will lapse after 5 years

  1. The legal obligation applicable to J&J (PSV) Kft. as Data Controller under Article 169 (2) of Act C of 2000 on Accounting, pursuant to which the invoice must be kept for no less than 8 years

  1. duration of processing: until the expiry of the 5-year limitation period after the termination of contractual relationship, provided that if the Data Subject’s billing address is the same as their registered office/residence, the invoice must be kept for no less than 8 years in order to comply with the legal obligation laid down in Article 169 (1) of Act C of 2000 on Accounting.

 

  1. Data Subject’s tax number/tax ID

  1. purpose of processing:

- during contractual relationship:

  1. Conclusion of contract with Data Subject

  1. Issuing of invoice to Data Subject

  1. Retention of the invoice issued to Data Subject

- following the termination of contractual relationship:

  1. enforcement of any claims arising from contract

  1. Retention of the invoice issued to Data Subject

  1. legal basis of processing:

- during contractual relationship:

  1. Formation of contract with Data Subject: Civil Code of Hungary, Section 6:63 (2)

  1. Compliance with the legal obligation applicable to J&J (PSV) Kft. as Data Controller under Article 159 (1) and Article 169 (d) of Act CXXVII of 2007 on Value Added Tax, pursuant to which the taxable person is obliged to issue an invoice, the mandatory content of which must include the tax number of the customer receiving the service

  1. The legal obligation applicable to J&J (PSV) Kft. as Data Controller under Article 169 (2) of Act C of 2000 on Accounting, pursuant to which the invoice must be kept for no less than 8 years

  1. Data Subject’s consent, insofar as the Consent Form has been signed and returned by the Data Subject to J&J (PSV) Kft. as Data Controller

- following the termination of contractual relationship:

  1. exercise of rights and performance of obligations arising from contract under Section 6:22 of the Civil Code of Hungary, pursuant to which claims will lapse after 5 years

  1. The legal obligation applicable to J&J (PSV) Kft. as Data Controller under Article 169 (2) of Act C of 2000 on Accounting, pursuant to which the invoice must be kept for no less than 8 years

  1. duration of processing: until the expiry of the 5-year limitation period after the termination of contractual relationship, provided that the invoice must be kept for no less than 8 years in order to comply with the legal obligation laid down in Article 169 (1) of Act C of 2000 on Accounting.

  1. Name of Data Subject’s contact person

  1. purpose of processing:

  • during contractual relationship:

  1. Communication with Data Subject

  1. Conclusion of contract with Data Subject

- following the termination of contractual relationship:

  1. enforcement of any claims arising from contract

  1. legal basis of processing:

  • during contractual relationship:

  1. Formation of contract with Data Subject: Civil Code of Hungary, Section 6:63 (2)

  1. Data Subject’s consent, insofar as the Consent Form has been signed and returned by the Data Subject to J&J (PSV) Kft. as Data Controller

  • following the termination of contractual relationship:

  1. exercise of rights and performance of obligations arising from contract under Section 6:22 of the Civil Code of Hungary, pursuant to which claims will lapse after 5 years

  1. duration of processing: until the expiry of the 5-year limitation period after the termination of contractual relationship.

  1. E-mail address of Data Subject’s contact person

  1. purpose of processing:

- during contractual relationship:

  1. Data Subject’s identification

  1. Communication with Data Subject

  1. Conclusion of contract with Data Subject

- following the termination of contractual relationship:

  1. enforcement of any claims arising from contract

  1. legal basis of processing:

- during contractual relationship:

  1. Formation of contract with Data Subject: Civil Code of Hungary, Section 6:63 (2)

  1. Data Subject’s consent, insofar as the Consent Form has been signed and returned by the Data Subject to J&J (PSV) Kft. as Data Controller

- following the termination of contractual relationship:

  1. exercise of rights and performance of obligations arising from contract under Section 6:22 of the Civil Code of Hungary, pursuant to which claims will lapse after 5 years

  1. duration of processing: until the expiry of the 5-year limitation period after the termination of contractual relationship.

  1. Phone number of Data Subject’s contact person

  1. purpose of processing:

  • during contractual relationship:

  1. Communication with Data Subject

  1. Conclusion of contract with Data Subject

- following the termination of contractual relationship:

  1. enforcement of any claims arising from contract

  1. legal basis of processing:

  • during contractual relationship:

  1. Formation of contract with Data Subject: Civil Code of Hungary, Section 6:63 (2)

  1. Data Subject’s consent, insofar as the Consent Form has been signed and returned by the Data Subject to J&J (PSV) Kft. as Data Controller

- following the termination of contractual relationship:

  1. exercise of rights and performance of obligations arising from contract under Section 6:22 of the Civil Code of Hungary, pursuant to which claims will lapse after 5 years

c) duration of processing: until the expiry of the 5-year limitation period after the termination of contractual relationship.

J&J (PSV) Kft. as Data Controller informs the Data Subjects that if the person designated as the Data Subject’s contact person is not the Data Subject as a private entrepreneur or the Data Subject as a person authorized to represent a company, the Data Subject must obtain the consent of the person acting as the Data Subject’s contact person to the processing of their name, e-mail address and phone number as personal data, unless they have any other legal basis for processing the personal data of the person designated as contact person. In this case the Data Subject will be considered the Data Controller and J&J (PSV) Kft. will be considered the Data Processor with regard to such personal data.

6. J&J (PSV) Kft. as Data Controller informs the Data Subjects that the personal data specified in Sections III.4 and III.5 is only processed electronically, not on paper.

 

IV. 

.The rights of Data Subjects:

  1. By publishing this Privacy Notice, J&J (PSV) Kft. as Data Controller ensure that providing any information concerning the processing of personal data and any communication regarding the rights of the Data Subject shall take place in a concise, transparent, intelligible and easily accessible form, using clear and plain language.

  1. J&J (PSV) Kft. as Data Controller undertakes to inform the Data Subject without undue delay of the measures taken in response to their request, as set out below.

  1. Insofar as J&J (PSV) Kft. as Data Controller does not take action on the Data Subject’s request, it must inform the Data Subject without delay of the reasons for not taking action and on the Data Subject’s possibility of lodging a complaint with a supervisory authority and seeking a judicial remedy.

  1. J&J (PSV) Kft. as Data Controller must provide the information and any communication and actions free of charge. However, where the Data Subject’s request is manifestly unfounded or excessive, in particular because of their repetitive character, J&J (PSV) Kft. as Data Controller may, taking into account the administrative costs of providing the information or communication or taking the action requested, may refuse to act on the request.

  1. J&J (PSV) Kft. as Data Controller informs the Data Subjects that in case it has reasonable doubts concerning the identity of the natural person making the request, it may request the provision of additional information necessary to confirm the Data Subject’s identity.

 

  1. The Data Subject will have the following rights:

  1. The Data Subject may request access to their personal data as follows:

Information covered by the Data Subject’s obligation to provide information:

The Data Subject will have the right to obtain from J&J (PSV) Kft. as Data Controller confirmation as to whether or not personal data concerning them are being processed, and, where that is the case, access to the personal data and the following information:

  • purposes of processing

  • categories of personal data concerned

  • recipients or categories of recipients to whom the personal data have been or will be disclosed

  • where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period

  • the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the Data Subject or to object to such processing

  • the right to lodge a complaint with a supervisory authority

  • where the personal data are not collected from the Data Subject, any available information as to their source

  • the existence of automated decision-making, including profiling, and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the Data Subject.

Process for assessing the request:

By publishing this Privacy Notice, J&J (PSV) Kft. as Data Controller will fulfill its obligation, as set out above, by providing the Data Subject, upon the request of the Data Subject, with a copy of the personal data undergoing processing no later than within 5 working days after the receipt of such request.

  1. The Data Subject will be entitled to rectify their personal data:

Parties entitled to rectify personal data:

The Data Subject will be entitled to rectify inaccurate personal data concerning them.

Informing the recipients of the rectification of personal data:

Where the Data Subject has informed the Data Controller of the rectification made by them, J&J (PSV) Kft. as Data Controller will, within 5 working days after the receipt of such information, communicate any rectification to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort.

Informing the Data Subject of the recipients:

Upon their request, the Data Subject will be informed by J&J (PSV) Kft. as Data Controller of the recipients on:

  • the same day on which the recipients are informed, insofar as the Data Subject makes such request together with the notification about data rectification or before informing the recipients;

  • the working day following the day of receipt of the request, if the Data Subject makes the request after the recipients have been informed.

3) The Data Subject may request the erasure of their personal data (“right to be forgotten”):

The Data Subject will have the right to obtain from J&J (PSV) Kft. as Data Controller the erasure of personal data concerning them without undue delay.

The Data Controller’s obligation to erase data will apply in the following cases:

J&J (PSV) Kft. as Data Controller informs the Data Subjects that J&J (PSV) Kft. as Data Controller is obliged to erase personal data concerning the Data Subject without undue delay if one of the following grounds applies:

(alternative conditions)

  • the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed  

  • the Data Subject withdraws consent on which the processing is based and there is no other legal grounds for the processing

  • the Data Subject objects to the processing and there are no overriding legitimate grounds for the processing

  • the personal data have been unlawfully processed

  • the personal data must be erased for compliance with a legal obligation in Union or Member State law to which J&J (PSV) Kft as Data Controller is subject

Exemptions from the obligation to erase data:

J&J (PSV) Kft. as Data Controller informs the Data Subjects that the above provision on erasure will not apply if the processing is necessary: (alternative conditions)

  • for compliance with a legal obligation which requires processing by Union or Member State law to which J&J (PSV) Kft. as Data Controller is subject

  • for statistical purposes insofar as the “right to be forgotten” is likely to render impossible or seriously impair the achievement of the objectives of that processing;

  • for the establishment, exercise or defense of legal claims.

Process for assessing the request:

J&J (PSV) Kft. as Data Controller informs the Data Subjects that it will examine the Data Subject’s request for erasure of personal data within 5 working days of receipt of the request and will decide on its merits in view of the above provisions.

J&J (PSV) Kft. as Data Controller will inform the Data Subject of its decision on the working day following the decision.

Procedure in case the request is justified

Insofar as J&J (PSV) Kft. as Data Controller finds the Data Subject’s request for erasure justified, it will erase the personal data on the same day as it informs the Data Subject and, in lack of a request to that effect by the Data Subject, it will call, in the notification of its decision, the Data Subject to state, no later than 3 working days after receipt of the notification, whether they request that the Data Controller inform them of the recipients to whom the erasure of the personal data has been disclosed by the Data Controller.

J&J (PSV) Kft. as Data Controller will, at the time of the erasure, inform each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort.

The Data Subjects who have made the relevant request as specified above will be informed by J&J (PSV) Kft. as Data Controller of the recipients on:

  • the same day on which the data are erased or the recipients are informed, if the Data Subject has made their request for receiving information on the recipients together with their request for the erasure of data or, at the latest, before the Data Controller’s decision;

  • the working day following the day of receipt of the request, if the Data Subject has made their request for receiving information on the recipients only after the relevant call on behalf of the Data Controller.

Procedure in case the request is unjustified:

Insofar as J&J (PSV) Kft. as Data Controller finds the Data Subject’s request unjustified, it will reject such request, while the Data Subject may lodge a complaint against the decision with a supervisory authority and seek judicial remedy.

4) The Data Subject may request a restriction of processing of their personal data:

Obligation to restrict the processing of data:

The Data Subject will have the right to obtain from the Data Controller restriction of processing where one of the following applies: (alternative conditions)

  • the accuracy of the personal data is contested by the Data Subject, for a period enabling the Data Controller to verify the accuracy of the personal data;

  • J&J (PSV) Kft. as Data Controller no longer requires the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defense of legal claims;

  • the Data Subject has objected to processing pending the verification whether the legitimate grounds of the Data Controller override those of the Data Subject.

J&J (PSV) Kft. as Data Controller will, at the time of the restriction of processing of personal data, inform each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort.

In lack of a request to that effect by the Data Subject, J&J (PSV) Kft. as Data Controller will call, on the working day following the restriction of processing of personal data, the Data Subject to state, no later than 3 working days after receipt of such call, whether they request that the Data Controller inform them of the recipients to whom the restriction of processing of personal data has been disclosed by the Data Controller.

The Data Subjects who have made the relevant request will be informed by J&J (PSV) Kft. as Data Controller of the recipients on:

  • the same day on which data processing is restricted or the recipients are informed, insofar as the Data Subject has made their request for receiving information on the recipients together with their request for the restriction of data processing;

  • the working day following the day of receipt of the request, if the Data Subject has made their request for receiving information on the recipients only after the relevant call on behalf of the Data Controller.

 

The Data Controller is entitled to exemptions, i.e. to process personal data subject to restrictions, in the following cases:

J&J (PSV) Kft. as Data Controller informs the Data Subjects that the personal data whose processing is subject to restriction (with the exception of storage) may only be processed in the following cases: (alternative conditions)

  • if the Data Subject has consented to it,

  • if it is necessary for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

5) The Data Subject may object to processing of their personal data:

The Data Subject may object to processing of their personal data in the following cases:

J&J (PSV) Kft. as Data Controller explicitly brings to the Data Subject’s attention that the Data Subject has the right to object, on grounds relating to their particular situation, to processing of their personal data, only if processing is necessary for the purposes of the legitimate interests pursued by J&J (PSV) Kft. as Data Controller or by a third party.

In the event of the Data Subject’s objection, J&J (PSV) Kft. as Data Controller may no longer process the personal data of the Data Subject.

In the event of the Data Subject’s objection, J&J (PSV) Kft. as Data Controller will be entitled to process the personal data in the following cases:

Despite the Data Subject’s objection, J&J (PSV) Kft. as Data Controller may process the Data Subject’s personal data if J&J (PSV) Kft. as Data Controller demonstrates compelling legitimate grounds for the processing which (alternative conditions)

- override the interests, rights and freedoms of the Data Subject or - for the establishment, exercise or defense of legal claims.

Process for assessing the request:

J&J (PSV) Kft. as Data Controller informs the Data Subjects that it will examine the Data Subject’s objection within 5 working days of receipt of the request and will decide on its merits in view of the above provisions.

J&J (PSV) Kft. as Data Controller will inform the Data Subject of its decision on the working day following the decision.

Procedure in case the request is justified:

Insofar as J&J (PSV) Kft. as Data Controller finds the Data Subject’s objection justified, it will erase the personal data on the same working day as it informs the Data Subject and, in lack of a request to that effect by the Data Subject, it will call, in the notification of its decision, the Data Subject to state, no later than 3 working days after receipt of the notification, whether they request that the Data Controller inform them of the recipients to whom the erasure of the personal data has been disclosed by the Data Controller.

J&J (PSV) Kft. as Data Controller will, at the time of the erasure, inform each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort.

The Data Subjects who have made the relevant request as specified above will be informed by J&J (PSV) Kft. as Data Controller of the recipients on:

  • the same day on which the data are erased or the recipients are informed, if the Data Subject has made their request for receiving information on the recipients together with their or, at the latest, before the Data Controller’s decision;

  • the working day following the day of receipt of the request, if the Data Subject has made their request for receiving information on the recipients only after the relevant call on behalf of the Data Controller.

  

Insofar as J&J (PSV) Kft. as Data Controller finds the Data Subject’s request unjustified, it will reject such request, while the Data Subject may lodge a complaint against the decision with a supervisory authority and seek judicial remedy.

6) The Data Subject is entitled to data portability:

The Data Subject is entitled to data portability in the following case:

The Data Subject will have the right to receive the personal data concerning them, which they have provided to J&J (PSV) Kft. as Data Controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another data controller, insofar as (joint condition) - the processing is based on consent or on a contract; and - the processing is carried out by automated means.

The Data Subject will have the right to request J&J (PSV) Kft. as Data Controller to transmit the personal data processed by it directly to another data controller, where technically feasible. However, this does not imply an obligation for J&J (PSV) Kft. as Data Controller and for other data controllers to implement or maintain technically compatible data processing systems.

J&J (PSV) Kft. as Data Controller undertakes that if the transmission of personal data fails to take place because communication is not possible between the two systems, J&J (PSV) Kft. as Data Controller will inform the Data Subject of this fact and the underlying reasons.

J&J (PSV) Kft. as Data Controller informs the Data Subjects that it is not in any way responsible for

  • whether the recipient data controller receives and processes the data transmitted to it,

  • whether the recipient data controller’s processing complies with the provisions of the applicable legislation.

Exemptions from data portability:

J&J (PSV) Kft. as Data Controller informs the Data Subjects that the right to data portability:

  • may not infringe on the right to be forgotten, and

  • may not adversely affect the rights and freedoms of others.

Process for assessing the request:

J&J (PSV) Kft. as Data Controller informs the Data Subjects that it will examine the Data Subject’s request within 5 working days of receipt of the request and will decide on its merits in view of the above provisions.

J&J (PSV) Kft. as Data Controller will inform the Data Subject of its decision on the working day following the decision.

Procedure in case the request is justified:

Insofar as J&J (PSV) Kft. as Data Controller finds the Data Subject’s request justified, it will comply with the Data Subject’s request within 10 working days after the decision.

Procedure in case the request is unjustified:

Insofar as J&J (PSV) Kft. as Data Controller finds the Data Subject’s request unjustified, it will reject such request, while the Data Subject may lodge a complaint against the decision with a supervisory authority and seek judicial remedy.

7) The Data Subject is entitled to withdraw consent to the processing of personal data at any time:

The Data Subject will have the right to withdraw their consent at any time.

J&J (PSV) Kft. as Data Controller informs the Data Subjects that the withdrawal of consent will not affect the lawfulness of processing based on consent prior to its withdrawal.

J&J (PSV) Kft. as Data Controller informs the Data Subjects that in case of withdrawal of consent, the Data Controller will be subject to the obligation to erase the personal data only if it is unable to process the personal data on another legal basis.

J&J (PSV) Kft. as Data Controller informs the Data Subjects that currently it does not carry out any processing for which the sole legal basis is the Data Subject’s consent as set out in Section III of this Privacy Notice.

8) The Data Subject will have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly affects them in a significant manner.

J&J (PSV) Kft. as Data Controller informs the Data Subjects that currently it does not make any decision based solely on automated processing, which produces legal effects concerning the Data Subject or similarly affects them in a significant manner.

However, if in the future J&J (PSV) Kft. as Data Controller intends to make any such decision based solely on automated processing, it will inform the Data Subjects in advance and undertakes to be bound by the following. J&J (PSV) Kft. as Data Controller informs the Data Subjects that the Data Subject will not have the right set out in this section insofar as the decision (alternative conditions)

  1. is necessary for entering into, or for the performance of, a contract between the Data Subject and J&J (PSV) Kft. as Data Controller;

  1. is based on the Data Subject’s explicit consent;

  1. is authorized by Union or Member State law to which J&J (PSV) Kft. as Data Controller is subject and which also lays down suitable measures to safeguard the Data Subject’s rights and freedoms and legitimate interests.

In the cases referred to in scenarios 1 and 2 above, J&J (PSV) Kft. as Data Controller undertakes to implement suitable measures to safeguard the Data Subject’s rights and freedoms and legitimate interests, at the very least the right to obtain human intervention on the part of J&J (PSV) Kft. as Data Controller, to express their point of view and to contest the decision.

9) The Data Subject will have the possibility of lodging a complaint with a supervisory authority and seeking judicial remedy:

J&J (PSV) Kft. as Data Controller informs the Data Subjects that if the Data Subject considers that its rights have been infringed as a result of the processing, they will have the right to

  1. lodge a complaint with the supervisory authority:

Name: National Authority for Data Protection and Freedom of Information, postal

address: H-1530 Budapest, P.O. Box 5.

Telephone: +36 (1) 391-1400 

Fax: +36 (1) 391-1410 

E-mail: ugyfelszolgalat@naih.hu  

URL http://naih.hu 

  1. seek judicial remedy:

In the event of a violation of their, the Data Subject may take legal action against J&J (PSV) Kft. as Data Controller. The case falls within the jurisdiction of the Regional Court of.

 

V. 

.Persons having access to the personal data of Data Subjects:

  1. The personal data of Data Subjects may be accessed by the employees of J&J (PSV) Kft. as Data Controller. Insofar as an employee of J&J (PSV) Kft. as Data Controller causes damage to a Data Subject in connection with their employment relationship, J&J (PSV) Kft. as Data Controller will be liable towards the Data Subject under Section 6:540 (1) of the Civil Code of Hungary.

  1. J&J (PSV) Kft. as Data Controller informs the Data Subjects that it employs the following Data Processors.

1) Ecovis Audit Könyvvizsgáló és Tanácsadó Korlátolt Felelősségű Társaság 

  • Company data:

  • Abbreviated name: Ecovis Audit Kft 

  • Company registration number: 01-09-875510 

  • Registered office: H-1036 Budapest, Üllői út 52, I/19

  • Tax number: 11878245-2-41 

  • Represented by: Judit Bakonyiné Orosz

  • Scope of personal data processed: Data Subject’s name, Data Subject’s registered office/residence, Data Subject’s tax number/tax ID

  • Purpose of processing: The Data Controller’s use of the accounting service provided by the Data Processor.

  • Categories of Data Subjects: Data Subjects

 

  1. J&J (PSV) Kft. as Data Controller informs the Data Subjects that if there has been a change in the identity of the Data Processors identified above or if the Data Controller engages additional Data Processors, it will inform the Data Subjects accordingly by amending this Privacy Notice on the same day as the conclusion of the Data Processor Contract.

  1. J&J (PSV) Kft. as Data Controller informs the Data Subjects that the Data Processors will process the personal data of Data Subjects only on the basis of written instructions from J&J (PSV) Kft. as Data Controller, unless processing is required by law applicable to the Data Processor.

  1. J&J (PSV) Kft. as Data Controller informs the Data Subjects that Data Processors may only use additional data processors on the basis of prior written authorization from J&J (PSV) Kft. as Data Controller.

 

VI. 

. on miscellaneous provisions:

  1. Amendments to the Privacy Notice:

J&J (PSV) Kft. as Data Controller reserves the right to amend this Privacy Notice, subject to its obligation to inform the Data Subjects 30 days prior to any such amendment, unless the amendment is based on a legal provision or a court/authority decision. In the event that the amendment is based on a legal provision or a court/authority decision, J&J (PSV) Kft. as Data Controller undertakes to inform the Data Subjects of the amendment without delay and within 15 days at the latest.

  1. Processing for purposes other than the original purpose:

  1. J&J (PSV) Kft. as Data Controller informs the Data Subjects that insofar as the Data Controller intends to process the Data Subjects’ personal data for a purpose other than the one for which they were originally collected, it will inform the Data Subject of this other purpose and any necessary information prior to further processing, with the understanding that the Data Controller will only provide general information if it is unable to provide the Data Subject with information about the origin of the personal data as they originate from different sources.

  1. Handling of e-mail messages:

a. J&J (PSV) Kft. as Data Controller informs the Data Subjects via e-mail about the following:

  • changes to standard contractual clauses, Privacy Notice and Cookie Policy

  • system errors, malfunctions, troubleshooting;

  • technical information regarding the use of the system.

b. J&J (PSV) Kft. as Data Controller informs the Data Subjects that e-mail messages exchanged with the Data Subject will be stored before deletion for a 5-year limitation period following the termination of the contractual relationship.

  1. Data Protection Officer:

J&J (PSV) Kft. as Data Controller informs the Data Subjects on the identity of the Data Controller:

Data Controller’s name: Orsolya Alföldy-Boruss

Electronic contact details: orsolya.alfoldy@jandjpsv.eu 

Mail address: H-1165 Budapest, Bökényföldi út 70.

 

Budapest, May 17, 2023

J&J (PSV) Kft.  

represented by: Csaba Juhász, Managing Director

 

 

 

 

 

 

 

 

 

 

 

 

 

 

ANNEX 1

DATA SUBJECT CONSENT FORM

TO PROCESSING OF PERSONAL DATA FOR THE PURPOSE OF REQUESTING A CALLBACK:

I, the undersigned ………………………………………… Data Subject, voluntarily give my informed and unambiguous consent, based on the specific and informed consent as set out in the Privacy Notice for Data Subjects, to the processing of my personal data as set out below, taking note of the provisions of Section III.1 of the Privacy Notice: (please underline the data whose processing you consent to)

 

  1. Data Subject’s name

  1. Name of Data Subject’s legal representative,

  1. Data Subject’s registered office/residence,

  1. Data Subject’s tax number/tax ID,

  1. Name of Data Subject’s contact person,

  1. E-mail address of Data Subject’s contact person,

  1. Phone number of Data Subject’s contact person.

Dated: …………………………………. 

Data Subject