DATA MANAGEMENT NOTICE
mandatory data management pursuant to the Adult Education Act
In compliance with the General Data Protection Regulation (GDPR) No. 2016/679 of the European Parliament and of the Council (EU), we hereby inform you, as the Data Subject, about the handling of your personal data. This data management information sheet is a supplement to the data management information sheet applicable to the basic activities of the data controller regarding its adult training activities!
Data controller details:
Company name: Mynds.ai Informatikai Szolgáltató Kft.
Headquarters: 5820 Mezőhegyes, Kozma utca 7.
Mailing address: Kozma utca 7, 5820 Mezőhegyes.
Email address: miklos.radvanyi@mynds.ai
Institution registration number: B/2024/000202
Institution license number: E/2024/………(application in progress)
Representative: Miklós RadványiSzékhely: 5820 Mezőhegyes, Kozma utca 7.
1. DATA CIRCLE:
Legal basis for data management: GDPR Article 6 (1) point c) (with attention to the provisions of Act LXXVII of 2013 on adult education (hereinafter Fktv.) §§ 16 and 21), i.e. data management is a legal obligation for the data controller necessary for its fulfillment.
Purpose of data management: To conduct training under the scope of the Adult Education Act, to fulfill the data management and data provision obligations prescribed by law.
Duration of data management: The data controller manages the data until the last day of the eighth year from the conclusion of the Adult Education contract. The State Administration of Adult Education (Pest County Government Office) manages the data in its records until the last day of the fiftieth year from the date of their creation, after which they are handed over to the relevant archives and the transferred data is deleted.
Scope of data:
a) the person participating in the training
aa) natural personal identification data (name, birth name, mother’s name, place and time of birth),
ab) your electronic correspondence address (email address)
ac) highest educational qualification
b) data related to the training, which is the person participating in the training
ba) with his highest educational qualification, professional qualification, professional qualification and knowledge of a foreign language,
bb) entering the training and completing the training, or leaving the training in the absence of the completion of the training,
bc) with evaluation and qualification during the training,
bd) are related to his training-related payment obligations and the used training loan.
c) your education ID
Data processors:
1. Pest County Government Office: Budapest, Városház u. 7, 1052, felnottkepzes@pest.gov.hu, (+36-1) 485-6900
In the case of supported training, the supporter can also access the data in the event of an inspection.
Data transmission: the Data Controller transmits the data specified in point a) to the Pest County Government Office’s FAR system (Adult Education Data Service System). The data can be used for statistical purposes and can be transferred for statistical use in a way that is not suitable for personal identification, and can also be transferred and used for statistical purposes in a way that is suitable for individual identification to the Central Statistical Office free of charge. The data must be forwarded to the bodies that control these subsidies for the purpose of monitoring the use and use of public finance or European Union funds.
The data controller must, among other things, keep the following documents, register them and – in order to ensure the exercise of the control authority of the state administrative body for adult education – keep them until the last day of the eighth year from their creation, which may contain personal data:
a) the attendance sheets signed by the person taking part in the training during the contact classes, as well as the documents certifying the professional preparation and control carried out electronically with the training participant,
b) the personal data of the person participating in the training, managed on the basis of § 21, paragraph (1), as well as the original documents certifying the conditions necessary for starting the education and training and participating in it, or their copies certified by the adult trainer, as well as the input competence measurement and the preliminary documents certifying knowledge measurement.
2. DATA CIRCLE:
Legal basis for data management: Teacher’s legitimate interest
Purpose of data management: Contact during training under the scope of the Adult Education Act
Duration of data management: From the conclusion of the adult education contract until the last day of the eighth year.
Scope of data: telephone number of the person participating in the training
Data processor: none
Data transmission: none
3. DATA CIRCLE:
Legal basis for data management: Fulfillment of a legal obligation
Purpose of data management: Issuing an invoice during training under the scope of the Adult Education Act
Duration of data management: From the conclusion of the adult education contract until the last day of the eighth year.
Scope of data: billing address of the person participating in the training
Data processor: Ró Könyvelőiroda Kft. (6800 Hódmezővásárhely Kossuth tér 7., rokft@roiroda.hu, +36 30/539-6789)
Data transmission: none
Rights of data subjects:
Right to prior information
The Data Subject has the right to receive information about the facts and information related to data management before the start of data management. (Articles 13-14 of the Regulation)
The Data Subject’s right of access
The Data Subject has the right to receive feedback from the Data Controller as to whether his personal data is being processed, and if such data processing is underway, he is entitled to access the personal data and related information specified in the Regulation. (Regulation Article 15).
Right to rectification
The Data Subject has the right to have inaccurate personal data corrected without undue delay upon request by the Data Controller. Taking into account the purpose of the data management, the Data Subject is entitled to request the completion of incomplete personal data, including by means of a supplementary statement. (Regulation Article 16).
The right to erasure (“the right to be forgotten”)
The Data Subject has the right to request that the Data Controller delete his personal data without undue delay if one of the reasons specified in the Regulation exists. (Article 17 of the Regulation) The right to deletion can be partial and can be requested separately in relation to some data management). This provision does not apply in case of mandatory data management.
The right to restrict data processing
The Data Subject is entitled to request that the Data Controller restricts data processing if the conditions specified in the regulation are met. (Regulation Article 18) This provision is not applicable in case of mandatory data management.
The right to data portability
Under the conditions set out in the Regulation, the Data Subject is entitled to receive the personal data concerning him/her provided to the Data Controller in a segmented, widely used, machine-readable format, and is also entitled to forward this data to another data controller. (Regulation Article 20)
The right to protest
The Data Subject has the right to object to his personal data at any time for reasons related to his own situation under point e) of Article 6 (1) of the Regulation (data processing is in the public interest or necessary for the performance of a task performed in the framework of the exercise of public authority conferred on the Data Controller) or point f) (the data processing against processing based on the Data Controller or necessary to assert the legitimate interests of a third party), including profiling based on the aforementioned provisions. This provision does not apply in case of mandatory data management.
Restrictions
The Data Subject has the right to request that the Data Controller restricts data processing if the conditions defined by law are met. (Regulation, Article 23) This provision is not applicable in case of mandatory data management.
The right to lodge a complaint with the supervisory authority (right to an official remedy)
The Data Subject has the right to file a complaint with the supervisory authority designated by the legislator for this purpose – in particular in the Member State of his or her usual place of residence, workplace or the place of the suspected infringement – if, in the opinion of the Data Subject, the processing of personal data relating to him/her violates the Regulation. (Regulation Article 77)
The Data Subjects can submit their request in writing to the Data Controller’s address or electronically to the above e-mail address. The Data Subject may file a complaint regarding data management with the authority appointed by the legislator or the court of his place of residence or stay. At the time of publication of this Data Management Information, the authority appointed by the legislator in connection with data protection matters and acting in the matter of official legal remedies:
National Data Protection and Freedom of Information Authority, 1363 Budapest, Pf.: 9.., 1055 Budapest, Falk Miksa utca 9-11, (+36-1) 391-1400, ugyfelszolgalat@naih.hu
We inform you that the condition for participation in the training is the provision of the above personal data, you are obliged to provide them to the Data Controller, failing which you are not entitled to participate in the training.
