Data protection information

INFORMATION ON DATA MANAGEMENT, DATA PROTECTION

for subcontractors and suppliers registering on the portal

In order to ensure the principle of transparency, F-ÉPÍTŐ GENERÁL Zrt. (hereinafter referred to as the Company or the Data Controller) wishes to inform the natural person concerned about the processing of his/her data in a comprehensible manner in accordance with the provisions of Regulation (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL 27

April 2016 on the protection of individuals with regard to the processing of personal data.

the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Regulation (EC) No 95/46/EC (General Data Protection Regulation) (hereinafter “GDPR“) and Act CXII of 2011 on the Right to Informational Self- Determination and Freedom of Information (the “Info. Act”).

1. Basic concepts:

Data subject: the contact person of the subcontractor or supplier registering on the Company’s
Processing: any operation or set of operations which is performed upon personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
personal data: any information relating to an identifiable or identified Data Subject; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

2. Data controller and contact details:

Data Controller: F-ÉPÍTŐ GENERÁL Zrt. (1203, Budapest, Emília st. 15. Tel: +36306505615, E-Mail: info@f-epito.hu)

3. The scope of the data processed, the purpose of the data processing, the legal basis, the recipients, the duration of the data storage:

as set out in Annex 1 to this information notice.

4. Source of personal data:

The personal data processed are provided to the Data Controller by the Data Subject himself/herself or by the Contracting by registering on the portal.

5. Rights of the Data Subject

The Data Subject has the following rights in relation to the processing carried out by the Data Controller:

5.1. The Data Subject’s right of access

By contacting us, you have the right at any time to be adequately whether your personal data is being processed by us and, if so, you have the right to access and request a copy of your personal data held by us and to be informed about how we process your personal data.

5.2. The right to rectification

The Data Subject is entitled to have inaccurate data corrected, rectified or incomplete data completed at the request of our Company without undue delay.

5.3. Right to erasure (“right to be forgotten”)

The Data Subject may request that we delete without undue delay certain personal data we hold about him or her where:

our Company no longer needs the data for the purposes for which it was collected or otherwise processed;
processing that was based on the data subject’s consent, but the data subject has withdrawn his or her consent and there is no other legal basis for the processing;
processing based on a legitimate interest of the Controller or a third party, but the Data Subject has objected to the processing and, except for objections to processing for direct marketing purposes, there is no overriding legitimate ground for the processing,
our Company has unlawfully processed the personal data; or
if the personal data must be erased in order to comply with a legal obligation under the

Our Company is not always obliged to delete data pursuant to Article 173) of the GDPR, in particular in cases where the processing is necessary for the establishment, exercise or defence of legal claims.

5.4. Right to restriction of processing

The Data Subject has the right to request the restriction of the processing of his or her personal data if:

-the Data Subject contests the accuracy of the processing of his or her personal data by our Company – in which case the restriction applies for the period of time that allows our Company to verify the accuracy of the personal data;

-the processing is unlawful, but the Data Subject opposes the erasure of the data and instead requests the restriction of their use;

-Our Company no longer needs your personal data, but the Data Subject requires it in order to establish, exercise or defend a legal claim;

-The Data Subject has objected to the processing – in which case the restriction applies for the period until it is established that our legitimate grounds prevail over the Data Subject’s legitimate grounds.

During the restriction period, processing operations, including storage, may not be carried out or may only be processed to the extent that the Data Subject has consented, or, in the absence of such consent, our Company may process data necessary for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or of an important public interest of the Union or of a Member State of the Union. Our Company will inform you in advance of the lifting of the restriction.

5.5. The right to data portability

The Data Subject may, at any time, request that his or her personal data processed by our Company automatically (e.g. in a computer system) on the basis of his or her consent or on a contractual basis be made available to the Data Subject in a structured, commonly used, machine- readable format, and, if otherwise technically feasible, our Company may, at the Data Subject’s request, transfer the personal data directly to another data controller. In cases where the exercise of the right to data portability would adversely affect the rights and freedoms of others, our Company is entitled to refuse the Data Subject’s request to the extent necessary.

5.6 Right to object

If the legal basis for the processing is the legitimate interest of our Company or a third party, the Data Subject has the right to object to the processing. In this case, we will no longer process the Data Subject’s personal data. However, our Company is not obliged to grant the objection if our Company proves that:

the processing is justified by compelling legitimate grounds which the interests, rights and freedoms of the Data Subject; or
the processing relates to the establishment, exercise or defence of legal claims by our

5.7. Right of redress

If the Data Subject considers that his or her rights under the applicable data protection legislation have been infringed, he or she has the right to lodge a complaint with the National Authority for Data Protection and Freedom of Information. Contact details of the National Authority for Data Protection and Freedom of Information: ugyfelszolgalat@naih.hu

The Data Subject also has the right to lodge a complaint with a supervisory authority established in another EU Member State, in particular the one where he or she has his or her habitual residence, place of work or place of the alleged infringement.

Irrespective of their right to lodge a complaint, Data Subjects may also take their rights under the GDPR to court if their rights under the GDPR have been infringed in the processing of their personal data. As a data controller with a domestic establishment, our company may be sued before a Hungarian court. The Data Subject may also bring the action before the court of his or her place of residence pursuant to the current Article 22 (1) of the Data Protection Act.

In Hungary, the courts can be found at the following link: http://birosag.hu/torvenyszekek.

Given that the Data Controller is not a public authority of a Member State acting in the exercise of its public powers, the Data Subject may bring the action before the courts of the Member State of habitual residence, provided that the Data Subject has his or her habitual residence in another Member State of the European Union.

In addition, the Data Subject has the right to take legal action against a legally binding decision of the supervisory authority concerning the Data Subject.

6. Profiling

No automated decision-making or profiling is carried out in the course of the processing of the Data Subject’s data by our Company.

7. Data security

The Data Controller undertakes to ensure the security of personal data and to take technical measures to ensure that the personal data processed are protected against unauthorised access, destruction, modification or use.

Contractual Partner’s Privacy Notice

Annex

Our Company processes the following personal data of the Data Subject for the purposes, on the legal basis and for the duration specified herein:

Scope of the data processed	Purpose of data processing	Legal basis for processing	Recipient of the transfer	Duration of data storage
	Facilitating conclusion of contracts, contacting, entering	Legitimate interest in the GDPR	– Data Controller’s back office organisation* – GENERAL CONSTRUCTI ON Ltd.
	data in an electronic database	Article 6(1)
Name, position, e-mail address of the contact person.	(the system for registering portal registrants) recording, storage, use, deletion.	f): the establishment and maintenance of the partnership, the possible		3 years from the date of registration on the portal.
		facilitate the conclusion
		of contracts.

*Back office organisation: data processing company providing finance and accounting (bookkeeping), IT services to the Data Controller:

Accounting and controlling: F-COMMERCIAL GENERAL
IT: F-BUILDER GENERÁL