Data Controller:
-
Inductor Kft.
- 2049 Diósd, Kőbányai u. 1
- Phone: +36 23 370 281
- Email: inductor@inductor.hu
- Website: https://www.inductor.hu
- Company registration number: 13-09-069414
The purpose of this privacy notice is to present the data protection and data management policies applied by the Data Controller, and to ensure that suppliers, customers, other partners, visitors to our website, participants in various loyalty programs, and webshop customers are appropriately informed regarding the management and protection of their personal data. The data is protected against unauthorized access, alteration, transmission, disclosure, deletion, or destruction, as well as accidental loss or damage, and against inaccessibility due to changes in technology.
Definitions used in this notice
Data processing: performing technical tasks related to data management operations;
Data management: any operation or set of operations performed on data, regardless of the procedure used, including collection, recording, organization, storage, alteration, use, retrieval, transmission, disclosure, alignment or connection, restriction, deletion and destruction, as well as preventing further use of the data, and the creation of photo, audio, or video recordings;
Data controller: the natural or legal person, or organization with legal personality, who alone or jointly with others determines the purposes of data management, makes decisions regarding data management (including tools used), and executes them or has them executed by a commissioned data processor;
Restriction of data management: marking stored personal data for future restriction of processing;
Data transfer: making data accessible to a specific third party;
Data deletion: rendering data unrecognizable so that recovery is impossible;
Data breach: a security breach that leads to accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or unauthorized access to personal data;
Data subject: the natural person whose personal data is affected by data management;
Third party: any natural or legal person, or other body, not identical with the data subject, the data controller, the data processor, or any persons authorized under the direct control of the data controller or data processor to manage personal data;
Consent: the voluntary and explicit manifestation of the data subject’s will, based on appropriate information, by which they give unequivocal consent for the processing of their personal data – in full or for specific operations;
Joint data management: If two or more data controllers jointly determine the purposes and means of processing, they are considered joint data controllers.
Register system: any collection of personal data – centralized, decentralized, functional, or geographic – accessible according to defined criteria;
Personal data: information related to an identified or identifiable natural person, particularly name, identification number, or information reflecting one or more physical, physiological, mental, economic, cultural, or social identity traits, and inferences derived from the data concerning the data subject that are not considered public or publicly accessible data. Personal data includes, among others, name, address, and email;
Objection: the declaration by which the data subject opposes the processing of their personal data and requests cessation of processing or deletion of the processed data;
3. Principles of data management
Data processing by the Data Controller complies with the GDPR principles, which are as follows:
Lawfulness, fairness, and transparency: Personal data must be processed lawfully, fairly, and transparently for the data subject.
Purpose limitation: Personal data must be collected only for specified, explicit, and lawful purposes and not processed in ways incompatible with those purposes.
Data minimization: Personal data must be adequate, relevant, and limited to what is necessary for the purposes of processing.
Accuracy: Personal data must be accurate and, when necessary, kept up to date; reasonable steps must be taken to ensure inaccurate data is erased or rectified without delay.
Storage limitation: Personal data must be stored in a form that permits identification of data subjects only as long as necessary for the purposes of processing.
Integrity and confidentiality: Personal data must be processed securely, with appropriate technical and organizational measures to protect against unauthorized or unlawful processing, accidental loss, destruction, or damage.
Accountability: The data controller is responsible for compliance and must demonstrate this compliance.
4. Categories of personal data processed
4.1. Contact via the website
Data subjects can contact the Data Controller through the website https://www.inductor.hu
| Category of data processed | Name and email of the data subject |
| Purpose of processing | Communication between the data subject and the Data Controller |
| Legal basis of processing | Voluntary consent of the data subject (GDPR Article 6(1)(a)) |
| Duration of processing | Until the data subject requests deletion |
4.2. Cookies
A cookie is a small text file stored on the data subject’s computer or mobile device for the period set in the cookie. Its purpose is to record visit-related information and personal settings, which are not personally identifiable. It helps enhance the user-friendly design of the website and improve the online experience of the data subject. If the data subject does not consent to cookies, the website may not function fully.
| Category of data processed | All analytical information stored without name or other personal data |
| Purpose of processing | Storing the personal settings of the data subject |
| Legal basis of processing | Voluntary consent of the data subject (GDPR Article 6(1)(a)) |
| Duration of processing | The data subject can delete cookies at any time through their browser settings |
4.3. Facebook
The Data Controller manages the Inductor Kft. Facebook page. The data subject can subscribe to news feeds by clicking the "like" button or the direct "subscribe" button.
| Category of data processed | Name of the data subject |
| Purpose of processing | Information about current updates, news concerning the Data Controller, and communication between the data subject and the Data Controller |
| Legal basis of processing | Voluntary consent of the data subject (GDPR Article 6(1)(a)) |
| Duration of processing | The data subject can unsubscribe by clicking "dislike" or "unfollow" on the Facebook page, or adjust feed settings to remove unwanted news |
4.4. Job applications
The Data Controller does not post anonymous job advertisements, and unsolicited applications are deleted immediately unless further processing is justified. If the applicant is hired, consent for data management is requested.
| Category of data processed | Name, phone number, email, address, languages spoken, and voluntarily provided personal data in the CV |
| Purpose of processing | Communication between the data subject and the Data Controller, establishment of employment |
| Legal basis of processing | Voluntary consent of the data subject (GDPR Article 6(1)(a)) |
| Duration of processing | Deleted immediately if further processing is not justified |
4.5. Contracting with partners
When the Data Controller enters into a contract with a partner, the parties designate individual contacts and their details in the contract.
| Category of data processed | Name, phone number, position, and email of the data subject |
| Purpose of processing | Business communication and fulfillment of contractual obligations |
| Legal basis of processing | Processing necessary for contract performance or pre-contractual measures at the request of the data subject (GDPR Article 6(b)) |
| Duration of processing | Until termination of the contractual relationship, or for the legally required period |
5. Data processors
Some personal data categories may be accessed by the following data processors as necessary – in accordance with the relevant data management principles. During data processing, these processors comply with the principles set out in this notice and the applicable legal provisions.
| Data processor name | Contact | Tasks |
| Across Média Kft. | 2000 Szentendre, Vörösgyűrű sétány 12. | IT services |
6. Data transfer, data processing
The Data Controller does not transfer personal data to third parties without prior consent of the data subject, except when required by law.
7. Data security
The Data Controller stores personal data at its premises, or in case of joint data management, the joint data controller stores it. The Data Controller ensures compliance with GDPR security requirements. IT systems are managed to prevent unauthorized access, deletion, export, or modification. Data processors are also held to these data security requirements. Any data breaches are recorded and, if necessary, the data subject and the National Authority for Data Protection and Freedom of Information (NAIH) are informed. Access to personal data is limited to authorized personnel only.
The Data Controller ensures secure and safe processing of personal data, taking all necessary measures to prevent unauthorized access, disclosure, modification, deletion, or accidental damage. The Data Controller does not collect special categories of data related to race, ethnicity, political opinion, religion, membership in interest organizations, health, addictions, sexual life, or criminal record.
8. Data subject rights
Right to information
The Data Controller must provide simple, accessible, and clear information online or offline regarding data processing. The data subject can request information at any time. Requests are fulfilled within 30 days.
Right to erasure
The data subject can request deletion of personal data without undue delay. The Data Controller must inform third parties who received the data to also delete it. Exceptions exist if processing is necessary for freedom of expression, legal claims, legal obligations, or public interest research and statistics.
Right to rectification
The data subject can request correction of inaccurate data.
Right to restriction of processing
The data subject can request limitation of data processing in certain situations, e.g., disputes. Restricted data may only be used with consent, legal claims, or public interest reasons.
Right to data portability
The data subject can receive their data in a structured, commonly used, machine-readable format (e.g., .doc, .pdf) and transfer it to another data controller.
Right to object
The data subject can object to processing if they have not consented. Identification may be required. Complaints are addressed within 30 days. Rights can be exercised via inductor@inductor.hu or post.
9. Data Protection Officer
The Data Protection Officer advises on data protection, monitors activities, and liaises with authorities and data subjects.
Name: Breitner Róbert
Phone: +36 23 370 281
Email: inductor@inductor.hu
10. Legal remedies
The data subject may lodge complaints with the NAIH or request a summary of our GDPR policy from the Data Protection Officer.