Data processing in relation to the arts website
1. Main participants in the data processing
1.1. Contact details of the Data controller
Name: MNB-Ingatlan Kft. (Hereinafter: MNB-Ingatlan)
1.2. Data processors that support the operation of the website
MNB-Ingatlan does not transfer personal data to organisations or third parties other than the data processors and data controllers referred to in this notice.
2. Processing of personal data
2.1 Publishing content on the website and social media
If MNB-Ingatlan shares the content of the website on social media sites, the following data controllers may arise:
When using Meta (Facebook and Instagram):
When using LinkedIn:
2.2. User registration
2.3. Getting in touch and maintaining contact
When communicating by e-mail, MNB-Ingatlan uses the following data processor:
2.4. Sending newsletters
2.5. Personal data in relation to cookies
3. Data transfer to third countries
Az MNB-Ingatlan célja, hogy az Ön személyes adatait ne továbbítsa harmadik országba, azok Magyarországon kerüljenek tárolásra. Ennek ellenére egyes adatkezelők és adatfeldolgozók az Európai Unió területén kívülről látják el tevékenységüket, így esetükben nem zárható ki, hogy személyes adatok harmadik országba kerüljenek továbbításra.
3.1. Meta (Facebook, Instagram) and LinkedInn case of Meta Platforms Ireland Limited and LinkedIn Ireland Unlimited Company, when MNB-Ingatlan shares content on social media, transfers to third countries cannot be ruled out. If a transfer to a third country does take place, depending on the specific location, the transfer will be based on either an adequacy decision adopted by the European Commission or standard contractual clauses (Articles 45-46 GDPR), to ensure adequate and appropriate security of your personal data.
You can find more information about Facebook’s data processing here:
You can find more information about Instagram’s data processing here:
You can find more information about LinkedIn’s data processing here:
During the use of Microsoft Corporation as a data processor, in case of communication via e-mail, data transfers to third countries cannot be ruled out. If there is a transfer to a third country, depending on the specific location, the transfer will be based on an adequacy decision adopted by the European Commission or standard contractual clauses (Articles 45-46 GDPR), to ensure adequate and appropriate security of your personal data.
You can find more information about Microsoft’s data processing here:
During the use of Wix.com Ltd as a data processor, i.e. hosting of the website, data transfers to third countries cannot be ruled out. If there is a transfer to a third country, depending on the specific location, the transfer will be based on an adequacy decision adopted by the European Commission or standard contractual clauses (Articles 45-46 GDPR), to ensure adequate and appropriate security of your personal data.
You can find more information about Wix.com’s data processing here:
4. Your data protection rights
4.1. Right to information
You have the right to receive information whether MNB-Ingatlan processes your personal data and if it does, about the relevant circumstances of the processing (such as the purpose, legal basis, etc.).
4.2. Right of access
You have the right to access, obtain or request a copy of your personal data. Exercising this right cannot adversely affect the rights and freedoms of others.
4.3. Right to rectification
You are entitled to request:
- completion of incomplete data.
- correction of inaccurate data
4.4. Right to erasure
You have the right to obtain from MNB-Ingatlan the erasure of personal data concerning you if one of the following conditions apply:
- the data are no longer necessary in relation to the purposes for which they were collected or otherwise processed by MNB-Ingatlan
- you withdraw consent and there is no other legal ground for the processing
- you object to the processing and MNB- Ingatlan has no overriding legitimate grounds for the processing
- the data have been unlawfully processed,
- the data must be erased for compliance with a legal obligation.
In exceptional cases, your data cannot be deleted even if the conditions are met. For example, if it is necessary to retain for the establishment, exercise, or defence of legal claims.
4.5. Right to restriction of processing
If you dispute the accuracy of your personal data, you have the right to request MNB-Ingatlan to restrict the processing of your data until it has been verified.
If the data processing is unlawful or the storage period has expired, but you need it in order to enforce your legal rights, you may also request the restriction of processing instead of the deletion of the data.
Restriction of processing means that MNB-Ingatlan will only store your data. It will not change the data or perform any other operations on it.
MNB- Ingatlan can use your restricted data you give consent, or it is necessary:
- for the establishment, exercise, or defence of legal claims
- to protect the rights of another person.
4.6. Right to data portability
You have the right to receive the personal data concerning you that you have provided to the data controller in a structured, commonly used, machine-readable format and the right to transmit such data to another data controller without hindrance from the data controller to whom you have provided the personal data, if:
- the processing is based on your consent or on the performance of a contract (in which you are a party); and
- the processing is carried out by automated means.
When exercising your right to data portability, you have the right to request, where technically feasible, the direct transfer of personal data between controllers.
The right to data portability must be without prejudice to the provisions governing the right to erasure and must not adversely affect the rights and freedoms of others.
4.7. Right to object
You have the right to object to the processing of your personal data at any time on grounds relating to your particular situation.
MNB-Ingatlan may still process your personal data if:
- there is a compelling legitimate interest,
- it is necessary for the establishment, exercise, or defence of legal claims.
4.8. Right to withdraw consent
You are entitled to withdraw your consent at any time, without restriction and without giving any reason, free of charge. However, the withdrawal of your consent shall not affect the lawfulness of the processing carried out on the basis of your consent prior to its withdrawal.
4.9. Fulfilling the requests of data subjects
If you think that your personal data is not being processed in accordance with the applicable data protection requirements, you may request that this be rectified. MNB-Ingatlan will respond to your request within a maximum of one month after it was received. If MNB-Ingatlan is unable to comply with your request or needs more time because of its complexity or, in the case of multiple requests, its volume, you will be informed within the one-month period. In such cases, the deadline may be extended, up to two months.
4.10. How to exercise your rights
You have the right to lodge a complaint with the competent data protection supervisory authority (in Hungary the Nemzeti Adatvédelmi és Információszabadság Hatóság (National Authority for Data Protection and Freedom of Information) briefly ‘NAIH’) and seeking a judicial remedy. NAIH’s website:: https://naih.hu
In the event of any infringement of your rights you may file for court action. The action falls within the jurisdiction of the Törvényszék (General Court). Upon the data subject’s request, the action can be brought before the Court which is competent based on the domicile or the place of residence of the data subject. More information is available here: http://birosag.hu/torvenyszekek