By enlisting the services of the website www.experts7.com (hereinafter referred to as „Website”) the control of the personal data – provided by the User – by the Operator of the Website as data controller (hereinafter referred to as: „Operator”) based on the provisions of the Act CXII of 2011 on Informational Self-determination and Freedom of Information (hereinafter referred to as “Act”) as follows.

Operator retains its rights for the unilateral modification of the present Privacy Policy. The modifications will enter into force with their publication on the Website.

The data control defined by the present Privacy Policy is based on the consent of the User as well as on the provisions of section 13/A of Act. CVIII of 2001 on Electronic Commerce and Information Society Services.

The data control extends to the duration necessary to achieve its purpose. User is entitled to request the cancellation of the data provided (and as a result of it, the cessation of the data control) any time.

The present Privacy Policy and the General Terms of Conditions (GTC) of the Website contains all the necessary information with regard to the data control of the personal data of the User.

I. The Operator as data controller controls the following data of the User enlisting the services of the Website:

• First Name
• Last Name
• Company Name
• Contact details
• Other data

II. The purpose of data control:

Data control takes place based on the legal relationship between Operator and User as the client of Operator for the purpose of making use of the services of the Website – in case of the explicit consent of User in a separate online declaration – sending newsletters to User.

The operator is considered to be a data processor as well. The processing of data takes place using electronic devices.

III. Data transfer

Data transfer shall not take place to the subcontractors of Operator.

IV. The principles of data control:

1. Personal data may exclusively be controlled for a specific purpose to realize rights and fulfill obligations. Data control must at every stage comply with the objective of the data control; data must be recorded and controlled in a fair and legal manner.
2. Only personal data essentially needed to satisfy the aim of the control, appropriate for achieving the goal may be controlled. Personal data may only be controlled to the extent and for the time required to achieve the goal.
3. Throughout the data control process, personal data shall be classified as such until its connection with the data subject can be restored. The connection with the data subject can be restored if the data controller has the technical conditions required for restoration at his or her disposal.
4. It has to be ensured during the course of control that the data are accurate, complete and – if required for the data control – updated, and that the data subject is only identifiable for the time required for the data control

V. The requirement of data security:

1. The controller must plan and execute control operations in a way that these ensure the protection of the private sphere throughout the application of the present Act and other regulations applicable in connection with data control.
2. The controller, as well as the data processor within their respective scope of activities, is obliged to ensure data security, institute technical and organizational measures and develop procedural rules required to enforce the present Act, as well as other data protection and confidentiality rules.
3. Through the institution of the appropriate measures the data must be particularly protected from unauthorized access, modification, transfer, disclosure, deletion or destruction, accidental destruction and damage as well as disabled access occurring due to changes to the technology applied.
4. In order to protect data sets controlled electronically in various files it is necessary to ensure that – unless otherwise permitted by law – data stored in files cannot be directly connected and linked to the data subject by ensuring the appropriate technological solutions.
5. During the course of the automated processing of personal data, the controller and data processor ensures the following by taking additional measures:
   1. prevents unauthorized data entry;
   2. prevents the use of automatic data processing systems by unauthorized persons by using data transfer devices;
   3. ensures the ability to control and determine which bodies the personal data have or can be sent to by using a data transfer device;
   4. ensures the ability to control and determine which personal data has been registered in the automatic data processing systems, when this was done and who did it;
   5. ensures the ability to restore the systems installed in the event of malfunctions and;
   6. compiles a report on errors occurring during the course of automated processing.
   7. The controller and data processor must take account of the current level of development of the relevant technology when determining and applying measures taken to protect the data. The solution which ensures a higher level protection of the personal data must be selected from among several possible control solutions, unless this proves far too difficult for the controller.

VI. Rights of User as Data Subject and their Enforcement:

1. The User may request from the data controller

• information on the control of personal data,
• correction of personal data, and
• deletion, blocking of personal data, with the exception of mandatory control.

Such request may be sent to the Operator by e-mail to the e-mail address contact@experts7.com with regards to certain data.

2. Pursuant to the request of the data subject, the controller is entitled to provide information on the subject’s data they control, as well as the data processed by the data processor they contracted, their sources, the objective of the control, its legal grounds and duration, the name and address of the data processor and the activities they undertake in connection with control, in addition to the legal grounds and recipients should the personal data of the data subject not be transferred.

The controller keeps a record of data transferred to verify the legitimacy of the data transferal and informs the data subject which file details the date on which the personal data they controlled was sent, the legal grounds of this action and its recipients, the specific scope of the personal data sent, as well as other data specified in legislation prescribing control.

The Act prescribing control may restrict the duration of the obligation to safeguard data set out in subsection (2) in the data transfer file, and therefore, the information notification period. Within the scope of this restriction, a minimum period of five years applies in the case of personal data and a minimum of 20 years in the case of special data.

The controller shall provide clear information in writing within the shortest possible space of time following the submission of the request; however, no later than within 30 days.

Information specified in subsection (4) is provided free of charge, if the individual requesting the information has not yet submitted a request for information to the controller in connection with the same scope of data in the same year. The rate of reimbursement of costs may also be specified in the contract concluded by the parties. Reimbursed costs that have already been paid must be reimbursed in the event that the data was illegitimately controlled, or the request for information leads to correction.

3. Should a request for information be denied, the controller must notify the data subject of this in writing by referring to the relevant section of the Act.

Should a request for information be denied, the controller must notify the data subject of this in writing by referring to the relevant section of the present Act on what grounds the request for information was denied. Should a request for information be denied, the controller must inform the data subject of the means available to facilitate legal redress in court and contact the National Authority for Data Protection and Freedom of Information (hereinafter Authority) to seek help.

The controller keeps the Authority informed about rejected requests each year up to 31 January following the year under review.

VII. Definitions of the Act:

1. Data subject: any natural person identified or directly or indirectly identifiable on the basis of personal data.
2. Personal data: data relating to the data subject, in particular the name and identification number of the data subject, as well as one or more factors specific to his physical, physiological, mental, economic, cultural or social identity as well as conclusions drawn from the data in regard to the data subject.
3. Special data:
4. a) personal data concerning racial or national origin, political opinion or party membership, religious or other philosophical belief, membership in an interest representation organisation, sex life;
5. b) personal data concerning health, addiction, as well as criminal personal data.
6. Criminal personal data: personal data relating to the data subject or a criminal record, generated in the course of or prior to the criminal proceedings, in connection with the offence or criminal proceedings, at the bodies authorised to carry out criminal proceedings or to detect offences, as well as at penal institutions.
7. Data of public interest: information or data other then personal data registered in any mode or form concerning activities undertaken and controlled by the body or individual carrying out state or local government responsibilities, as well as other public duties defined in relevant legislation, regardless of their mode of control, independent or collective nature; therefore, with special regard to data concerning the scope of authority, competence, organisational structure, professional activity and evaluation equally encompassing its effectiveness, the type of data held and legislation regulating operation, as well as data concerning financial management and concluded contracts.
8. Data public on grounds of public interest: data other then data of public interest, the disclosure of or the access to which is provided for by the law, in the public interest.
9. Consent: any freely given specific and informed indication of the will of the data subject, by which he signifies his agreement to personal data relating to him being controlled fully or to the extent of specific operations.
10. Objection: declaration made by the data subject objecting to the control of his personal data to request the termination of data control, as well as the deletion of the data controlled.
11. Controller: natural or legal person, or organisation without legal personality which alone or jointly with others determines the purposes and means of the control of the data; makes and executes decisions concerning data control (including the means used) or contracts a data processor to execute it.
12. Data control: any operation or the totality of operations performed on the data, regardless of the procedure applied; in particular, data collecting, recording, registrating, classifying, storing, modifying, using, querying, transferring, disclosing, synchronising or connecting, blocking, deleting and destructing, as well as preventing the further use of the data, taking photos, making audio or visual recordings, as well as registrating physical characteristics suitable for personal identification (such as, fingerprints or palm prints, DNA samples, iris scans).
13. Data transfer: ensuring access to the data for a third party.
14. Disclosure: ensuring open access to the data.
15. Data deletion: making data unrecognisable in a way that it can never again be restored.
16. Tagging data: marking data with a special ID tag to differentiate such data.
17. Blocking data: marking data with a special ID tag to indefinitely or definitely restrict its further control.
18. Data destruction: complete physical destruction of the data carrier recording the data.
19. Data processing: undertaking technical tasks in connection with data control operations, regardless of the method and means used for executing the operations, as well as the place of use, provided that the technical task is performed on the data.
20. Data processor: natural or legal person or organisation without legal personality processing the data on the grounds of a contract concluded with the controller, including contracts conducted upon legislative provisions.
21. Data officer: the body responsible for undertaking the public responsibility which generated the data of public interest that must be disclosed through electronic means, or during the course of operation in which this data was generated.
22. Data publisher: the body responsible for undertaking the public responsibility which uploads the data sent by the data control officer, if this officer has not published the data.
23. Data set: total data controlled in a single file.
24. Third party: any natural or legal person, or organisation without legal personality other than the data subject, the data controller or the data processor.
25. EEA State: any Member State of the European Union and any State which is party to the Agreement on the European Economic Area, as well as any State the nationals of which enjoy the same legal status as nationals of States which are parties to the Agreement on the European Economic Area, based on an international treaty concluded between the European Union and its Member States on the one hand and the State which is not party to the Agreement on the European Economic Area on the other hand.
26. Third country: any State that is not an EEA State.

VIII. Use of Cookies

The present paragraph provides information with regards to the use of the cookies on the Website.

General rules:

The Operator of the Website shall use cookies only in the case, if the User gives consent to their use by taking notice of the present document.

The Operator of the Website and its contractual partners use cookies to collect information and store your online preferences.

About Cookies:

1. Cookies are browser files containing small amounts of information which are set on your device when a website is visited. Cookies are then sent back to the originating website on each subsequent visit, or to another website that recognizes that cookie. You can find more information about cookies, including how to see what cookies have been set and how to manage and delete them, by visiting the all about cookies website and your online choice website.
2. Cookies are considered to be useful for different reasons, such as: enabling the navigation between pages efficiently, tracking information about the User’s visit, remembering the User’s preferences, and generally improving the user experience. They can also help to ensure that adverts you see online are more relevant to you and your interests.
3. The information provided by the cookies are not able to identify the User. The gathered information helps us improve the User’s online experience.

Use of the Cookies on the Website:

The cookies are used only for the purpose of the display of statistics as well as the offers being relevant for the Users. These cookies only store the fact that a visit on the Website did take place and its time, no other data is stored by them.

1. The above mentioned cookies will be used as follows: Third party service providers such as Google store, if the User did previously visit the Website of the advertising company, and based on that advertisements may appear on the Website of the partners of third party service providers, such as Google. Our company shall not to be held liable for cookies and used by websites operated by third parties.
2. User is entitled to disable the use of the Google cookies using the following Website: http://www.google.hu/policies/technologies/ads/
3. User is able to disable the cookies of other third party service providers on the following link: http://www.networkadvertising.org/choices/

The definitions not being in the present Privacy Policy bear the meaning defined by the General Terms and Conditions (GTC) of the Website.

IX. The issues not regulated in the present Privacy Policy are governed by the Act as well as other Hungarian laws being in force.