Privacy

1. Introduction

MPI Systems Kft. (hereinafter MPI Systems Kft., the provider, the controller, the Company), as data controller, considers the contents of this legal notice binding upon itself.
The Company undertakes that every processing of personal data related to its activity complies with this policy and with applicable law.
MPI Systems Kft. operates the website mpisystems.neosite.hu.

MPI Systems Kft. reserves the right to amend this notice at any time. It will inform the public of any changes in due time.

MPI Systems Kft. is committed to protecting the personal data of its clients and partners and considers respect for the right to informational self-determination to be of particular importance. The controller treats personal data as confidential and takes all security, technical and organisational measures that guarantee the security of the data.

MPI Systems Kft. sets out below its data-processing principles and the requirements it has formulated for itself as controller. These principles are in line with the applicable data-protection laws, in particular:

  • Act CXII of 2011 on the Right of Informational Self-Determination and on Freedom of Information;
  • Act V of 2013 on the Civil Code;
  • Act XLVIII of 2008 on the Basic Requirements and Certain Restrictions of Commercial Advertising Activities;
  • Act CVIII of 2001 on certain issues of electronic commerce services and information society services;
  • Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).

2. Definitions

  • data subject: any identified or — directly or indirectly — identifiable natural person;
  • personal data: any information relating to the data subject;
  • consent: a freely given, specific, informed and unambiguous indication of the data subject's wishes;
  • controller: the natural or legal person that determines the purposes and means of processing;
  • processing: any operation performed on personal data;
  • transfer: making data available to a specified third party;
  • disclosure: making data available to anyone;
  • erasure: making data unrecognisable in such a way that they can no longer be restored;
  • processor: a natural or legal person that processes personal data on behalf of the controller.

3. Company details

Our company details and contact data are as follows:

  • Name: MPI Systems Számítástechnikai Korlátolt Felelősségű Társaság
  • Short name: MPI Systems Kft.
  • Registered office / mailing address: 1047 Budapest, Baross utca 79-89. I. ép. 2. em. 227., Hungary
  • Company registration number: 01-09-208088
  • Tax number: 25317815-2-41
  • Phone: +36 30 630 9108
  • E-mail: mpisystemskft@gmail.com
  • Website: mpisystems.neosite.hu
  • Representative of the controller: Pappné Király Mariann, Managing Director

The company details above match the public entry in the Hungarian company register (registration number 01-09-208088).

4. Scope of personal data, purposes, legal bases and retention

If you provide personal data of another person to MPI Systems Kft., it is your duty to obtain that person's consent. The controller is not obliged to verify this. If you fail to do so and the data subject brings a claim against the controller, the controller may pass the claim and related damage on to you.

4.1. Enquiries by e-mail or telephone

  • Purpose: communication and cooperation between the data subject and the Company.
  • Legal basis: legitimate interest — GDPR Article 6(1)(f).
  • Data: name of the enquirer/contact person; e-mail address, phone number and other information provided by the data subject.
  • Retention: 3 years after the offer expires, or until the data subject objects.
  • Recipients: not transferred to third parties except the processors listed in section 7.
  • Legitimate interest: establishing business relationships / direct marketing.
  • Data subjects: partners who enquire about the Company's services by e-mail or phone.

4.2. Enquiries via the website (mpisystems.neosite.hu)

  • Purpose: communication and cooperation between the data subject and the Company.
  • Legal basis: the data subject's consent — GDPR Article 6(1)(a).
  • Data: name; e-mail address, phone number, company name, subject, message and other information provided.
  • Retention: 3 years after the offer expires, or until consent is withdrawn.
  • Recipients: not transferred to third parties except the processors listed in section 7.
  • Data subjects: partners who enquire via the website.

4.3. Follow-up after an offer

  • Purpose: keeping the data subject's details after the offer validity period for direct marketing.
  • Legal basis: legitimate interest, GDPR Article 6(1)(f).
  • Data: contact person's name; phone number; e-mail address.
  • Retention: until the data subject objects.
  • Data subjects: addressees of earlier offers and the contact persons named therein.

4.4. Newsletter

The Company does not currently operate a public newsletter signup on the website. If it launches one later, it will inform subscribers at signup and will process the name and e-mail address until consent is withdrawn. Unsubscribe: mpisystemskft@gmail.com.

4.5. CCTV

The Company does not operate its own CCTV system at the registered office. No camera recordings are made of website visitors.

4.6. Cookies and website operation

  • Purpose: the website of MPI Systems Kft. may use cookies that support the operation of the site and remember user settings. Users may disable cookies in the browser; this may limit some features. Cookie preferences can also be managed via Cookie settings on the site.
  • Legal basis: legitimate interest for strictly necessary cookies, and — where the law requires consent — the data subject's consent, GDPR Article 6(1)(a) or (f).
  • Data: data needed for cookies and for log files used by the web host.
  • Retention: until the end of the session for session cookies, and for the period indicated in the cookie settings otherwise.
  • Data subjects: every visitor of the website.

5. Other processing

We provide information about processing not listed here at the time of collection. Public authorities, bodies performing public tasks and courts may request personal data. We disclose only as much as is indispensable for the purpose of the request and only where the law requires us to comply.

6. Transfers to third countries or international organisations

The Company does not transfer the personal data described above to a third country or to an international organisation.

7. Processors

In the course of processing, the controller may transfer data to contracted processors.
Categories of recipients: website operator, web hosting and server hosting provider, e-mail provider.

8. Children

Our services are not intended for persons under 16, and we ask that persons under 16 do not provide personal data to the controller.
If we become aware that we have collected personal data from a child under 16 — except where processing is required by law — we will take the steps necessary to erase the data as soon as possible.

9. Automated decision-making

The Company does not use automated decision-making in its processing.

10. Storage and security

The Company's IT systems and other storage locations are at the registered office and on servers provided by processors. We select and operate IT tools so that the data processed are:

  1. accessible to those authorised (availability);
  2. authentic (authenticity of processing);
  3. unchanged in a verifiable way (integrity);
  4. protected against unauthorised access (confidentiality).

We take the technical and organisational measures needed to give effect to the GDPR safeguards, in particular against unauthorised access, alteration, transfer, disclosure, erasure or destruction, and against accidental loss or damage.

11. Rights of data subjects and remedies

The data subject may request information about the processing of their personal data, and may request rectification, erasure or withdrawal — except for mandatory processing — and may exercise the rights of data portability and objection at the controller's contact details above.

Rights under Act CXII of 2011 and Regulation (EU) 2016/679 include in particular: access (Article 15), rectification, erasure (“right to be forgotten”), restriction of processing, data portability, and objection to processing based on legitimate interest or direct marketing. We assess requests without undue delay and within 30 days at the latest.

Given the processing carried out by the controller, the conditions for data portability typically do not apply (there is no automated profiling).

If the data subject's rights are infringed, they may turn to a court. They may also lodge a complaint with:

Hungarian National Authority for Data Protection and Freedom of Information (NAIH)
Address: 1125 Budapest, Szilágyi Erzsébet fasor 22/c, Hungary
Phone: +36 (1) 391-1400
www: http://www.naih.hu
e-mail: ugyfelszolgalat@naih.hu