The purpose of this document is to provide information regarding the data processing related to registration for the Information Afternoon organized by the British-Hungarian English- Hungarian Bilingual Primary School (hereinafter referred to as the „School” or „Data Controller”) on the website britmagyariskola.hu. This document includes the purpose and methods of data processing, as well as the rights of the data subject related to the data processing.
The operator of the website (britmagyariskola.hu) / the data controller:
British-Hungarian English-Hungarian Bilingual Primary School
Representative: the principal of the School, currently Katalin Székelyné Czirják
Headquarters: 1021 Budapest, Tárogató utca 2-4., 2nd floor
OM identification number: 203474
Tax number: 19273204-1-41
Email: admissions@britmagyariskola.hu
The main regulations serving as the basis for data processing:
- Regulation (EU) 2016/679 of the European Parliament and of the Council(April 27, 2016) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC – GENERAL DATA PROTECTION REGULATION / GDPR
- Act CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information– INFOTV.
The data processing related to the registration for the Information Afternoon
| List of processed data | Full name of the child, full name of the parent, email address, name of the child’s current kindergarten/school, phone number. |
| Purpose of data processing | The data is essential for the identification of the parent and the child, furthermore, it serves the purpose of communication between the data controller and the parent. |
| The legal basis for data processing | The data subject’s consent (GDPR Article 6(1)a)). |
| Duration of data processing | The data will be processed by the data controller until the information afternoon, but no longer than 6 months after the application. |
| Method of data processing | The data processing will be carried out electronically. |
The data controller draws attention to the fact that providing the above data is mandatory for contact, identification, and participation in the Information Afternoon.
Consent can be withdrawn by sending an email to the electronic address provided above. The withdrawal of consent does not affect the legality of data processing carried out based on consent before the withdrawal.
Rights of the Data Subject, Enforcement of Rights, and Complaint Handling
The data subject may request in writing (including by email) information from the data controller about what personal data it processes, on what legal basis, for what purpose, and for how long. Additionally, the data subject may request information on to whom, when, on what legal basis, and which personal data has been made accessible or forwarded. The data controller shall fulfill the request within one month at the latest.
If personal data is inaccurate, the data subject may request its correction. If personal data that reflects the truth is available, the data controller shall make the necessary correction. The data controller shall fulfill the request within one month at the latest.
The data subject may request the deletion of their data from the data controller by submitting a written request. The data controller may refuse the request if a legal obligation requires the data controller to continue processing the personal data. However, if there is no such obligation for further processing of the data, the data controller will fulfill the request within one month at the latest.
The data subject may submit a written detailed request, for the data controller to restrict the processing of their personal data. The restriction will remain in place as long as the reason provided by the data subject justifies it. For example, the data subject may request the restriction if they believe their submission was processed unlawfully by the data controller, but it is necessary for the data controller to retain the submission for an authority or court procedure initiated by the data subject. In such cases, the data controller will continue to store the personal data (e.g., the specific submission) until the authority or court inquiry is concluded, after which the data will be deleted.
The data subject may object in writing to the processing of their personal data if the data controller intends to transfer or use the personal data, for example, for purposes such as public surveys or scientific research. Upon receive of the request, the data controller will examine it as quickly as possible, but no later than within one month, and will decide on its legitimacy.
The data controller will inform the requester (the data subject) in writing, as soon as possible but no later than one month from the submission of the request, about the fulfillment of the request or the reasons for its refusal. In the case of refusal, the data controller will also provide the reasons for the rejection, along with information about the available legal remedies. For this process, it is essential that the data subject is identifiable. If the data controller does not have sufficient information to identify the data subject, they may request additional information from the data subject for this purpose.
Anyone who believes that their rights have been violated due to the data controller’s data processing may file a complaint with the court or the Authority (National Authority for Data Protection and Freedom of Information, Headquarters: 1055 Budapest, Falk Miksa Street 9-11; Phone: +36 (1) 391-1400; Fax: +36 (1) 391-1410; Email: ugyfelszolgalat@naih.hu).
The court will handle the case as a priority. The competent court for judicial proceedings is the Fővárosi Törvényszék but the lawsuit can also be initiated at the court that is competent based on the residence of the person initiating the procedure.
Please be informed that the Authority will only investigate complaints if the data subject has first contacted the Data Controller regarding their complaint, and the issue was not resolved.