Privacy Policy for Contact Persons
In its activities, BioTech USA Kft. (address: 1033 Budapest, Huszti út 60., Registration number: 01-09-352550) pays particular attention to process the personal data of the contact persons of its business partners in accordance with the REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as GDPR), the Act CXII of 2011 on the Right to Informational Self-determination and on Freedom of Information and other provisions of the applicable law.
1. Data Controller:
BioTech USA Kft. (Address: 1033 Budapest, Huszti út 60., Registration number: 01 09 352550, VAT number: 25114681-2-44, Phone number: +36 1 453 2716, E-mail: [email protected])
Data Protection Officer’s contact information: address for correspondence: 1277 Budapest, Pf. 83.; E-mail address: [email protected]
2. Scope of data processing:
Contact person(s) name, telephone number, email address, other data that may be processed in the agreement.
3. Purpose of data processing:
The provision and transfer of personal data are necessary for the performance of the Agreement. In the case of partners that are in a contractual relationship with the Data Controller, the purpose of data processing is to provide information and manage claims in relation to the Agreement. Data processing is carried out in order to conclude and perform the Agreement and fulfill the legal obligations of the data controller.
4. Duration of data processing:
The Data Controller deletes the personal data after the expiry of the general limitation period of the agreement between the Data Controller and its partner, and, as required by Act C of 2000 on Accounting, the Data Controller deletes the documents relating to accounting and invoicing and the personal data they contain 8 years after the termination of the contractual relationship.
5. Data Processors:
1. The Data Controller uses server services that are operated and – in case of any problems – maintained by an authorized company.
Data processing company: JLM PowerLine Korlátolt Felelősségű Társaság (Address: 2111 Szada, Ipari park út 12-14., Address for correspondence: 1033 Budapest, Huszti út 60., Registration number: 13 09 066529, VAT number: 10819768-2-13, Phone, Fax: +36 1 453 2716, e-mail: [email protected])
2. The servers of the Data Controller are operated and – in case of any problems – maintained by authorized companies.
Data processing company: Mongouse Kft. (Address: 1117 Budapest, Budafoki út 183., Registration number: 01 09 711243, VAT number: 12943762-2-43, Phone/ Fax: +361 464 5856, e-mail: [email protected])
Data processing company: Servergarden Kft. (Address: 1023 Budapest, Lajos utca 28-32., Registration number: 01 09 186097, VAT number: 24855608-2-42, e-mail: [email protected])
6. Legal Ground for Data Processing
Article 6(1)(f) of the GDPR is considered as the legal ground for the data processing related to the performance of the Agreement (data processing is the legitimate interest of both the Data Controller and its partner).
Indication of legitimate interest: the Data Controller and its partners have a legitimate interest in the processing of personal data of the contact persons, as it is necessary for the performance of agreements between the Data Controller and its partners and also necessary for the communication that is required for the performance of the agreement. Data Controller processes only the data of the contact person that are absolutely necessary for the performance of the agreement.
7. Data processing rights of the data subject:
The data subject may request from the controller access (provision of information) to and rectification or erasure of personal data or restriction of processing concerning the data subject or to object to processing. Requests may be submitted via the above contacts of the controller. The Data Controller shall inform the data subject of the measures taken in response to the request or of the reasons for not taking action without undue delay, but in any case within one month of receipt of the request. If necessary – considering the complexity of the request and the number of requests – this time limit may be extended by two further months. The Data Controller shall inform the data subject of the extension of the time limit within one month of the receipt of the request, indicating the reasons for the delay.
In the event of a request for deletion or objection by the data subject, the Data Controller shall draw the data subject’s attention to the fact that the Data Controller shall always examine whether the data subject’s personal data are properly processed under the law and examine the existence of the priority of a legitimate interest of the Data Controller and their contractual partner. In these cases, the Data Controller will continue the processing only if the legal conditions are met.
a) Right of access: the data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, request information on the details of the processing.
b) Right to rectification: the data subject shall have the right to obtain from the Data Controller without undue delay the rectification of inaccurate personal data concerning you or to have incomplete personal data completed.
c) Right to erasure (‘right to be forgotten’): The data subject may submit a written request for the termination of the data processing to the contact email address indicated above or by post. In this case, the Data Controller shall take all reasonable steps to inform the additional processors of the request for termination of the processing.
d) Right to object: the data subject shall have the right to object at any time to the processing of his or her personal data, which processing is based on the legitimate interest of the Data Controller.
e) Right to restriction of processing: the data subject shall have the right to obtain from the controller restriction of processing if the accuracy of the personal data is contested by the data subject; the processing is unlawful; the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defense of legal claims; the data subject has objected to processing.
8. Right to a judicial remedy
If the data subject considers that the processing of personal data relating to him or her violates the legal requirements on data protection, he or she shall have the right to seek judicial remedy against the data controller and to lodge a complaint with the supervisory authority, Nemzeti Adatvédelmi és Információszabadság Hatóság (national authority for data protection and freedom of information), head office: 1055 Budapest, Falk Miksa utca 9-11. address for correspondence: 1363 Budapest, Pf. 9.; e-mail: [email protected]., phone: +36 1 391-1400)
The data subject shall have the right to a judicial remedy to ensure the protection of his or her data. In this case, proceedings against the Data Controller shall be brought before the courts of the Member State where the Data Controller has its principle place of business. In addition, proceedings may be brought before the court of the place of residence or the place of stay of the data subject, at the choice of the data subject. In Hungary, it is the törvényszék (General Court) of the court of the place of residence or the place of stay of the data subject.
BioTech USA Ltd. handles the data of the contact person(s) in accordance with the parties’ legitimate interest in the performance of the contract. BioTech USA Kft’s Privacy Policy for Contact Persons is available at https://biotechusa.hu/adatvedelem/kapcsolattartoi-adatkezelesi-tajekoztato/. The contractual partner of BioTech USA Kft. agrees to inform the person designated as the contact person of the data processing.
Effective as of January 19, 2021
BioTech USA Kft.