Request a quote

Privacy Notice

1. Introduction

System-Plan Kft. (hereinafter: the Controller), as the operator of system-plan.hu (hereinafter: the Website), sets out in this Privacy Statement and Privacy Notice (hereinafter: the Privacy Statement) the principles governing its processing of personal data, which the Controller considers binding upon itself. The Controller takes all measures that can reasonably be expected of it to ensure the security of the personal data it processes.

Before using our Website, please read this Privacy Statement, which explains in plain language how we process your personal data. In this Privacy Statement the Controller informs data subjects clearly and in detail of all important facts relating to the processing of their data.

In operating the Website, the Controller processes the data of persons who fill in the contact form on the Website in order to provide them with an appropriate service. The Controller intends to comply fully with the legal requirements on the processing of personal data, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council.

This privacy notice has been prepared on the basis of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, taking into account Hungarian Act CXII of 2011 on the right of informational self-determination and on freedom of information.

Service provider and controller

Name: System-Plan Kft.
Registered office: 9200 Mosonmagyaróvár, Kossuth L. u. 14. 1. em. 27., Hungary
Website: system-plan.hu

Contact details of the controller

Name: System-Plan Kft.
Registered office: 9200 Mosonmagyaróvár, Kossuth L. u. 14. 1. em. 27., Hungary
Website: system-plan.hu
Email: info@system-plan.hu Phone: +36 96 224 558

2. Definitions

  • personal data: any information relating to an identified or identifiable natural person (data subject); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
  • data subject: any natural person who is identified, or who can be identified directly or indirectly, on the basis of specific personal data;
  • consent of the data subject: any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;
  • controller: the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;
  • processing: any operation or set of operations performed on data, regardless of the procedure applied, in particular collection, recording, organisation, storage, alteration, use, retrieval, transmission, disclosure, alignment or combination, blocking, erasure or destruction, as well as preventing the further use of the data, taking photographs, audio or video recordings, and recording physical features suitable for identifying a person (e.g. finger or palm prints, DNA samples, iris images);
  • erasure of data: making data unrecognisable in such a way that it can no longer be restored;
  • processor: a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;
  • data processing (technical): carrying out technical tasks related to processing operations, irrespective of the method and means used to perform the operations and the place of application, provided that the technical task is performed on the data;
  • data set: all the data processed in a single filing system;
  • personal data breach: a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed;
  • recipient: a natural or legal person, public authority, agency or another body to which the personal data are disclosed, whether a third party or not. Public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law are not regarded as recipients; the processing of those data by those public authorities must comply with the applicable data protection rules according to the purposes of the processing;
  • third party: a natural or legal person, public authority, agency or body other than the data subject, the controller, the processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data;
  • information society service: a service provided electronically, at a distance, normally for remuneration, which the recipient of the service accesses individually;
  • electronic commerce service: an information society service whose purpose is the commercial sale, purchase, exchange or other use of movable property that can be possessed and traded – including money, securities and natural forces that can be used as things –, services, real estate and rights of pecuniary value (hereinafter together: goods);
  • GDPR (General Data Protection Regulation): the European Union’s General Data Protection Regulation.

3. Users

A User is any natural person who uses the services of the Website and who is identified, or can be identified directly or indirectly, on the basis of specific personal data.

4. Principles of data processing

The Controller declares that it processes personal data in accordance with this privacy notice and complies with the requirements of the applicable legislation, with particular regard to the following:

  • personal data must be processed lawfully, fairly and in a transparent manner in relation to the data subject;
  • personal data may only be collected for specified, explicit and legitimate purposes;
  • the purpose of processing personal data must be adequate and relevant, and processing must be limited to what is necessary;
  • personal data must be accurate and kept up to date; inaccurate personal data must be erased without delay;
  • personal data must be stored in a form which permits identification of data subjects for no longer than is necessary; personal data may be stored for longer periods only insofar as they are processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes;
  • personal data must be processed in a manner that ensures appropriate security, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures;
  • the principles of data protection must be applied to any information concerning an identified or identifiable natural person.

5. Key information on data processing

  • Purpose of processing: keeping in contact, providing information and additional services.
  • Legal basis of processing: the consent of the data subject.
  • Data subjects concerned: users of the Website (persons making enquiries via the contact form).
  • Duration of processing and erasure of data: the duration of processing always depends on the specific purpose of the user, but the data must be erased without delay once the original purpose has been achieved. The data subject may withdraw consent to the processing at any time by sending a letter to the contact email address. If there is no legal obstacle to erasure, the data will then be erased.
  • Persons entitled to access the data: the Controller and its employees.
  • The data subject may request from the Controller access to, rectification or erasure of personal data concerning him or her, or restriction of their processing, and may object to the processing of such personal data; the data subject also has the right to data portability.
  • The data subject may withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
  • The data subject has the right to lodge a complaint with the supervisory authority.
  • If the data subject wishes to use the contact form, i.e. to use this service of the Website, providing the requested personal data is necessary. The data subject is not obliged to provide personal data, and failing to do so has no adverse consequences for him or her. However, this function of the Website cannot be used without providing the necessary contact details.
  • The data subject is entitled to have the Controller rectify or complete inaccurate personal data concerning him or her without undue delay upon request.
  • The data subject is entitled to have the Controller erase inaccurate personal data concerning him or her without undue delay upon request, and the Controller is obliged to erase personal data concerning the data subject without undue delay where there is no other legal basis for the processing.
  • Amendment or erasure of personal data may be requested by email, by telephone or by post using the contact details given above.

6. Completing the contact form on the Website

The Controller uses the data received through the contact form on the Website exclusively for the purposes of keeping in contact and providing information, and does not store the data in a database.

7. Person entitled to process the data

The person entitled to process personal data is System-Plan Kft. (registered office: 9200 Mosonmagyaróvár, Kossuth L. u. 14. 1. em. 27., hereinafter: the Processor), acting as Processor. The personal data to be processed may be accessed by the Processor’s legal representative(s), employees, agents and contributors. The Processor does not transfer personal data to third parties, except where the data subject has expressly consented to this.

Hosting provider

Name/company name: WebHostIcon Tárhely- és Domain Szolgáltató Kft. Registered office: 2097 Pilisborosjenő, Tulipán köz 2., Hungary. Phone: +36 30 598 7210 Email: ugyfelszolgalat@webhosticon.hu

The data you provide are stored on a server operated by the hosting provider. Only our staff and the staff operating the server have access to the data, and all of them are responsible for the secure handling of the data.

Activity: hosting and server services. Purpose of processing: ensuring the operation of the Website. Data processed: the personal data provided by the data subject.

Duration of processing and deadline for erasure: processing lasts until the Website ceases to operate, or in accordance with the contractual agreement between the operator of the Website and the hosting provider. If necessary, the data subject may also request the erasure of his or her data by contacting the hosting provider.

Legal basis of processing: the consent of the data subject and processing based on legal provisions.

8. Duration of data processing

The Controller processes personal data provided on the basis of the User’s consent until the purpose of the processing has been achieved or until the User withdraws consent.

Unless otherwise provided by law, the Controller may process the personal data collected without further separate consent, and even after the data subject has withdrawn consent, a) for the purpose of complying with a legal obligation to which it is subject, or b) for the purpose of pursuing the legitimate interests of the Controller or a third party, where the pursuit of such interest is proportionate to the restriction of the right to the protection of personal data. / Section 6(5) of Act CXII of 2011 /

In order to comply with its accounting obligations, the Controller retains and processes the personal data provided by the User for 8 years pursuant to Section 169 of Act C of 2000, or within the limitation period set out in Act XCII of 2003 on the Rules of Taxation.

9. Transfer and combination of data

The Controller does not sell, rent or in any way make available personal data or information relating to the User to any other company or private individual.

The Controller takes care of the appropriate security of the data to the extent that can be expected of it, and takes the technical and organisational measures that guarantee the enforcement of data protection rules and principles and promote the security of personal data.

We inform our Users that the Controller transfers personal data to third parties only with the consent of the data subject.

10. Cookies

Cookies are placed on the user’s computer by the websites visited and contain information such as page settings or login status.

Cookies are therefore small files created by the websites visited. By saving browsing data, they improve the user experience. Cookies help the website remember site settings and offer locally relevant content.

The service provider’s website sends a small file (cookie) to the computer of visitors in order to determine the fact and time of the visit. The service provider informs visitors of the Website about this.

Data subjects concerned: visitors to the Website. Purpose of processing: additional services, identification, tracking of visitors. Legal basis of processing: the user’s consent is not required where the use of cookies is strictly necessary for the service provider. Data processed: unique identification number, time, settings data. Users can delete cookies from their browser at any time in the Settings menu. Controllers entitled to access the data: the Controller does not process personal data through the use of cookies. Method of storage: electronic.

11. Rights related to data processing

Right to information

Using the contact details provided, you may request information from us about which of your data our company processes, on what legal basis, for what purpose, from what source and for how long. We will send the information to the email address you provide without delay, and within 30 days at the latest of your request.

Right to rectification

Using the contact details provided, you may ask us to amend any of your data. We will act on your request without delay, and within 30 days at the latest, and send information to the email address you provide.

Right to erasure

Using the contact details provided, you may request the erasure of your data. We will do so without delay, and within 30 days at the latest of your request, and send information to the email address you provide.

Right to blocking

Using the contact details provided, you may request that your data be blocked. Blocking lasts for as long as the reason you indicate makes the storage of the data necessary. We will do so without delay, and within 30 days at the latest of your request, and send information to the email address you provide.

Right to object

Using the contact details provided, you may object to the processing of your data. We will examine the objection as soon as possible, and within 15 days at the latest of its submission, decide whether it is well-founded and inform you of our decision by email.

12. Legal remedies related to data processing

If you experience unlawful processing of your data, please notify our company so that the lawful state can be restored as soon as possible. We will do everything in our power to resolve the problem.

If, in your opinion, the lawful state cannot be restored, please notify the authority using the following contact details:

Hungarian National Authority for Data Protection and Freedom of Information (Nemzeti Adatvédelmi és Információszabadság Hatóság, NAIH)
Postal address: 1530 Budapest, Pf.: 5., Hungary
Address: 1125 Budapest, Szilágyi Erzsébet fasor 22/c, Hungary
Phone: +36 (1) 391-1400 Fax: +36 (1) 391-1410
Email: ugyfelszolgalat@naih.hu
Website: https://naih.hu

13. Legislation underlying data processing

  • Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
  • Hungarian Act CXII of 2011 on the right of informational self-determination and on freedom of information.
  • Hungarian Act LXVI of 1995 on public records, public archives and the protection of private archival material.
  • Government Decree 335/2005 (XII. 29.) on the general requirements for the document management of bodies performing public tasks.
  • Hungarian Act CVIII of 2001 on certain issues of electronic commerce services and information society services.
  • Hungarian Act C of 2003 on electronic communications.

This Privacy Statement enters into force on 5 July 2021. The Controller reserves the right to amend it.

This English version is a translation provided for information purposes. In the event of any discrepancy, the Hungarian version shall prevail.