Privacy Policy
PRIVACY POLICY
Gastland Flight Catering Kft.
Privacy Policy
INTRODUCTION
Gastland Flight Catering Ltd. (2724 Újlen, Temető utca 36.) (hereafter referred to as “Provider” and “Data controller”) agrees to the content of this legal notice. It is responsible for ensuring that all data management related to your activity meets the requirements set out in this regulation and the current legislation. The privacy policies relating to the data management of Gastland Flight Catering Ltd. are continuously available at www.lepenyes.hu
Gastland Flight Catering Ltd. reserves the right to change this information at any time. The public will be notified in due time about any changes.
Gastland Flight Catering Ltd. is committed to protecting the privacy of its clients' and partner’s personal information and it attaches particular importance to respecting its clients' rights of informational self-determination. Gastland Flight Catering Ltd. treats personal information confidentially and will take any security, technical and organizational measures that guarantee the security of the data. Gastland Flight Catering Ltd. describes its data management practice below:
2. THE RANGE OF PERSONAL DATA, THE PURPOSE, TITLE AND DURATION OF DATA MANAGEMENT
The data management of Gastland Flight Catering Ltd. is based on a voluntary contribution. However, in some cases, the management, storage, and transmission of a particular set of data is mandatory by law of which we will notify our Partners separately.
We call the attention of those who provide data for Gastland Flight Catering Ltd. that if they do not provide their personal data, the data supplier is obliged to obtain the consent of the person concerned.
The data management principles of Gastland Flight Catering Ltd. are consistent with current legislation on data protection, in particular:
- Regulation (EU) No 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and the repealing of Regulation (EC) No 95/46 (general data protection regulation, GDPR);
- Act CXII. of 2011 - Law on Information Self-Determination and Freedom of Information (Infotv.)
- Act V of 2013 - Civil Code (Civil Code)
- Act CLV. of 1997 - on Consumer Protection (Fgytv.)
- Act C of 2000 - on Accounting (Accounting)
- Act CVIII. Of 2001- on Electronic Commerce Services and certain issues relating to Information Society Services (Eker.tv.)
- Act C of 2003 - on Electronic Communications (Eht.)
- Act XLVIII of 2008 - on certain limitations of economic advertising activity (Grt.)
- Act CXXXIII of 2005 - on the rules of personal and property protection and private detective activity (SCM);
2.1. Partner, contact information
The purpose of data management: contact, purchasing on the website of Gastland Flight Catering Ltd., invoicing, registering the partners, distinguishing between them, documenting the purchase and payment, fulfillment of accounting obligations, customer relations, analysis of customer habits and more targeted service.
Legal basis for data management: data processing required for the performance of the contract [Article 6 (1) GDPR. (b)], the Accounting Act.169. Section (2).
Type of data being managed: identification number, date, time, company name, delivery address, name, quantity, price of the purchased products, payment method.
Duration of data management: according to the Accounting Act. 169 Section (2), eight years.
Possible consequences of failure to provide data: the Partner can not place an order.
Data Processors:
Name Headquarters Data processing task
Across Média Ltd. Budapest, Városligeti fasor 47, 1071 Carrying out site-related tasks
Central Computer Ltd. Budapest, Szent Imre tér 19, 1211 Doing system administrator tasks for
Gastland Flight Catering Ltd.
2.2 Handling quality objections, reversal
The aim of data management: to handle the quality objections raised by the products offered by Gastland Flight Catering Kft. and the services it provides.
Legal basis for data management: data processing required for performance of the contract [Article 6 (1) GDPR. (b)] and the Act. 17 / A. § (7).
Type of personal data being handled: unique identifier number of the complaint, name of the partner, delivery address, location, date of the complaint notification, complaint submission, list of documents and other evidence submitted by the Partner, description of the complaint, the place and time of recording of the report, the name and signature of the record holder, or the details of the product in case of return.
Duration of data management: five years, regarding the records of complaints and copies of replies to written complaints, based on the the Consumer Protection Act 17 / A. § (7)
Possible consequences of failure to provide data: the affected can not exercise his consumer rights.
Legal basis for data management: data processing required for performance of the contract [Article 6 (1) GDPR. (b)].
2.3. Marketing database
Gastland Flight Catering Ltd. manages the data of those contributing to the direct marketing request.
The aim of data management: building a business database, sending e-mail newsletters containing economic advertisement to those concerned, to make personal offers using online analytical data and to forward the data of the controllers and their partners.
Legal basis for data management: the voluntary contribution of the affected person, Article 6 (5)
Range of data being handled: name, address, e-mail address, phone number, the contribution for direct marketing purposes, and the system stores the subscription and unsubscribing.
Duration of data management: until the affected contributor withdraws his/her statement.
Possible consequences of failure to provide data: the affected party is not aware of the offers of the data controllers and their partners.
You can ask for the withdrawal of the consent for the transmission of direct marketing messages and the cancellation or modification of your personal data at the following addresses:
by e-mail at info@gastlandcatering.hu or at the bottom of the newsletter with the unsubscribe button
or by mail: Gastland Flight Catering Ltd. 2367 Újhartyán, Industrial Park 3.
2.4. Customer correspondence of Gastland Flight Catering Ltd.
If you would like to contact our company you can contact the data administrator on the contact details provided in this brochure or on the website. Gastland Flight Catering Ltd. will delete all emails received with the sender's name, email address, date, time, and other personal data provided in the message no later than five years from the date of disclosure.
2.5. Apply for job advertisements
You can apply for a job on www.lepenyes.hu or at pool@gastlandcatering.hu. The employer as a data controller manages your personal data during the selection process and for one year after for the purposes of labor selection.
Gastland Flight Catering Ltd. stores the applications received.
The aim of data management: to apply for a job at Gastland Flight Catering Ltd., participation in the selection process.
Legal basis for data management: the volunteer's contribution
Type of personal data being managed: name, permanent address, place of residence, phone number, e-mail address, place and time of birth and the uploaded or sent photos, cover letters, curricula vitae, tenders and other personal data provided in these.
Deadline for the deletion of the data: one year from the submission of the application.
Possible consequences of failure to submit data: the person affected can not apply for vacancies published by Gastland Flight Catering Ltd.
2.6. Logging on www.lepenyes.hu server
When visiting www.lepenyes.hu , the web server does not record user data.
2.7. Cookies
For a customized service the service provider places a small package of data, a so called “cookie” on the user’s computer and reads it during a later visit. If the browser sends back a previously saved cookie, the cookie operator can link the user's current visit with the previous ones, but only regarding their own content.
The aim of data management: to identify and distinguish between users, identify user’s current session, store data during these sessions, prevent data loss, identify and track users and web analytics.
The legal basis for data management: the data controller has a legitimate interest in identifying and customizing the service for the users [Article 6 (1) of GDPR). (f)].
Range of data being managed: identification number, date, time, and previously visited page.
Duration of data management: thirty minutes.
Cookies can be deleted from your computer or disabled in your browser. To manage cookies, use the Privacy / History / Custom Settings menu under the name of cookies or tracing in the Tools / Preferences menu of browsers.
For more information on http://www.google.com/analytics data management, visit http://www.google.com/intl/en/policies.
2.8. Security, Electronic monitoring system
In the office building of Gastland Flight Catering Ltd. there is a camera monitoring and recording system as part of which cameras have been placed in the interior and exterior of the building. The exact location of the cameras and the names of the observed areas are listed in the Electronic Observation System.
The aim of data management: the prevention and detection of law violations in order to protect human life, physical safety and the property, the persecution of the perpetrator, proof of the law violations, identification of entrants in the factory/office without authorization, recording of entry, documentation of the activities of unauthorized persons, examination of the circumstances of work and other accidents that may occur.
Legal basis for data management: for guests: the consent of the person concerned to enter the factory/office, for employees: Section 11 of Act I of 2012 on the Labor Code of Work (Mt.), and Article 6 (1) of the GDPR (f), since Gastland Flight Catering Kft. has a legitimate interest in property protection.
Types of personal data being managed: the faces of people entering the factory/office area and other personal information recorded by the monitoring system on the recordings.
Duration of data management: thirty days in the absence of use [VMT. Article 31 (3) (c)).
Use of recordings
People who are entitled to view the current footage of the cameras: the authorized employees of Gastland Flight Catering Ltd.
People who are entitled to view the recording of cameras: the authorized employees of Gastland Flight Catering Ltd.
People who are entitled to save the recording of cameras on a recording medium: the authorized employees of Gastland Flight Catering Ltd.
The recordings of the monitoring and recording system operated by Gastland Flight Catering Ltd. shall only be seen by authorized persons for the purpose of proving violations of human life, physical safety, property and identifying the perpetrator.
Anyone whose right or legitimate interest is affected by the recording of an image can justify his or her right or legitimate interest for the recording not to be canceled by the controller until the court or the authority is requested, but for a maximum of 30 days. The person on the record may ask for information about the recording of the electronic monitoring system, request a copy, or if there is another person in the recording, can gain insight into the recording. The person concerned may request the deletion of the recording,, modification of the recording data or refusal of data management.
The data controller records the insights into the recordings, the name of the person performing it, the reason and the time of getting the data in the report.
Data transmission: in the case of an offense or prosecution, to the authorities, courts and tribunals.
Range of data transferred: the recordings of the camera system with relevant information.
Legal basis for the transfer of data is Be. Section 71 (1), Section 151 (2) a) and Section 171 (2) and Section 75 para. § 1 (a) and 78 (3) of the Act.
2.9. Other data management
Data management not listed in this information is provided when recording the data. We inform our partners that they may contact the data controller for information, communication and transfer of data, or filing of documents on the basis of the court, the prosecutor, the investigating authority, the offender authority, the administrative authority, the National Privacy and Data Protection Authority.
Gastland Flight Catering Ltd. issues personal data for the authorities -in case the authority indicates the exact purpose and range of the data - only and to the extent necessary for the purpose of the request.
3. STORAGE OF PERSONAL DATA, DATA MANAGEMENT
Gastland Flight Catering Ltd. and its data processors take appropriate technical and organizational measures taking the state of technology and the costs of implementation, the nature, scope, circumstances and objectives of data management and the risk of varying probabilities and seriousness of natural persons' rights and freedom into consideration, in order to guarantee an adequate level of data security to the degree of risk.
Gastland Flight Catering Ltd. selects and operates the IT tools used to manage personal data so that the data treated:
- is available to those entitled to it (availability);
- Its credibility and authentication is assured (credibility of data management);
- its integrity can be verified (data integrity);
- is protected against unauthorized access (confidentiality of data).
Gastland Flight Catering Ltd. protects the data by appropriate measures, in particular against unauthorized access, alteration, transmission, disclosure, deletion or destruction, as well as unintentional destruction, damage or inavailability resulting from the technique used.
Gastland Flight Catering Ltd. ensures, by means of an appropriate technical solution, that data stored in its various registers cannot be directly linked and assigned to the data subject, unless permitted by law.
Gastland Flight Catering Ltd. provides technical, organizational and institutional measures to protect the security of data management in view of the state of the art at all times, providing a level of protection appropriate to the data handling risks.
During data management Gastland Flight Catering Ltd. retains its
- secrecy: it protects the information so that it can only be accessed by those who are entitled to it;
- integrity: it protects the accuracy and completeness of the information and processing method;
- availability: it ensures that when the entitled user needs it, he/she could have access to the information needed and have the tools available for it.
- Gastland Flight Catering Ltd. and the IT system and network of its partners in data management are protected against computer-aided fraud, espionage, sabotage, vandalism, fire and flood, as well as computer viruses, computer burglaries, and attacks leading to service denial. The operator provides security through server-level and application-level security procedures. We inform the users that electronic mails, protocols (email, web, ftp, etc.) transmitted over the Internet are vulnerable to network threats that lead to dishonest activity, controversy or disclosure or modification of information. To protect such threats, the data controller will take all the precautionary measures he or she may have to take. Systems are monitored to capture all security dangers and provide evidence of any security incident. System monitoring also allows checking the effectiveness of the precautions used.
Gastland Flight Catering Ltd. as a data controller records any possible privacy incidents, indicating the facts related to the privacy incident, its effects and remedies. Gastland Flight Catering Ltd. reports any possible privacy incident to the National Data Protection and Information Authority without delay and, if possible, at the latest 72 hours after the privacy incident has become known, unless the privacy incident is unlikely to pose a risk to natural persons' rights and freedom.
4. DATABASE DATA, AVAILABILITY
Name: Gastland Flight Catering Ltd.
Headquarters: 2724 Újlengyel, Temető utca 36.
Location: 2220 Vecsés New Ecseri út 3.
Company Registration Number: 13 09 171777
Name of Registry: Court of Registration of the Municipal Court of Budapest
Tax number: 25021381213
Phone number: +36 29 200 140
E-mail: info@lepenyes.hu
5. REMEDY OPTIONS
The person concerned may request information about the management of his/her personal data and may request the rectification of his/her personal data or, with the exception of mandatory data, cancellation, revocation, limitation of data processing and the right to file and protest, as indicated by the data entry or by the data controller's customer service.
5.1 Right to information:
At the request of the person concerned, Gastland Flight Catering Ltd. shall take appropriate measures to ensure that all information relating to the processing of personal data referred to in Articles 13 and 14 of the GDPR, and Article 34, is provided in a concise, clear, comprehensible and easily accessible form, in a clear and unambiguous manner.
5.2 Right to access the data subject:
The data subject is entitled to receive feedback from the data controller as to whether his or her personal data is being processed and, if such data is being processed, has access to personal data and the following information: the purpose of data management; the categories of personal data concerned; the categories of recipients or recipients with whom or which personal data will be communicated or disclosed, in particular including third-country addressees or international organizations; the intended duration of the storage of personal data; the right of rectification, deletion or restriction of data handling and the right of protest; the right to file a complaint addressed to the supervisory authority; information of data sources; the fact of automated decision making, including profiling, as well as the logic used and the understandable information about the nature of such data management and the likely consequences for the data subject. In the event of the transfer of personal data to a third country or to an international organization, the data subject shall have the right to be informed about the appropriate guarantees of transmission. Gastland Flight Catering Ltd. will provide the data subject a copy of the personal data as the object of data management. For additional copies requested by the data subject, the data controller may charge a reasonable fee based on administrative costs.
At the request of the person concerned the information is provided in electronic form by Gastland Flight Catering Ltd. The right to information can be exercised in writing through the Introduction or through the contact points indicated in point 4.
At the request of the person concerned, information may be given orally, following the credible identification and identification of his/her identity.
5.3 Right of rectification:
Gastland Flight Catering Ltd. will correct your personal data if it does not comply with reality and has the correct persoenal information.
5.4 Right of cancellation:
In the event of one of the following reasons the person concerned has the right to request Gastland Flight Catering Ltd. to delete any personal data relating to him/her without undue delay:
- personal data is no longer needed for the purpose for which they have been collected or otherwise handled;
- the person concerned withdraws the consent that is the base of the data management, so there is no longer a legal basis for data management;
- the person concerned objects to data management and there is no prior legitimate reason for data handling;
- the personal data was illegally handled;
- the personal data should be deleted for the legal obligation provided by the law applicable to the data controller in the Union or the Member States;
- the collection of personal data was made in relation with the provision of information society services.
Deletion of data can not be initiated if data management is required: to exercise the right to freedom of expression and the right of access; the fulfillment of an obligation under EU or Member State law applicable to the data controller for the processing of personal data, or for the public interest or the purpose of carrying out a task in the exercise of public authority by the data controller; in the field of public health or for archival, scientific and historical research purposes or for statistical purposes in the public interest; or for the submission, validation or protection of legal claims.
5.5 Right to restrict data management:
At the request of the person concerned, Gastland Flight Catering Ltd. limits the data management if one of the following conditions is met:
- the person concerned disputes the accuracy of the personal data; in this case the restriction applies to the period of time that allows the accuracy of personal data to be verified;
- data management is illegal and the data subject is opposed to the deletion of the data and instead asks to limit their use;
- the data controller no longer needs personal data for data management purposes but the data subject requires them to submit, enforce, or protect legal claims; or
- the person concerned objected to data management; in this case the restriction applies to the duration of determining whether the data controller's legitimate reasons prevail over the legitimate grounds of the party concerned.
If data processing is restricted, personal data may be handled only with the consent of the person concerned or with the submission, validation or protection of legal claims or the protection of the rights of a natural or legal person, or in the public interest of the Union or of a Member State.
Gastland Flight Catering Ltd. informs the data subject in advance of the discontinuation of the restriction of data handling.
5.6 Right to data recording:
The data subject shall have the right to receive the personal data that he or she has provided to the data controller in a fragmented, widely used machine-readable format and transmit such data to another data controller.
5.7 Right to protest:
The person concerned is entitled to protest at any time to the processing of data necessary for the execution of a task performed in the public interest or in the exercise of a public authority license conferred on the data controller for the purposes of his or her own personal situation, or against the treatment needed for the validation of the legitimate interests of the data controller or a third party, including profiling based on these provisions.
In the event of a protest, the data controller may not manage personal data unless it is justified by compelling legal reasons that prevail over the interests, rights and freedom of the person concerned, or which are related to the submission, enforcement or defense of legal claims.
If the management of personal data is for direct business, the data subject is entitled to protest at any time against the handling of personal data relating to that purpose, including profiling, if it is related to direct business purposes. In the event of a protest against the management of personal data for direct business purposes, the data are not handled by Gastland Flight Catering Ltd.
5.8 Automated decision-making in individual cases, including profiling:
The data subject shall be entitled to exclude the scope of a decision based solely on automated data management, including profiling, which would have a legal or significant effect on him/her. The above entitlement shall not apply if data processing is necessary for the signing or performance of the contract between the data subject and the data controller; is made available to the data controller by Union or national law which also lays down appropriate measures to protect the rights and freedoms and legitimate interests of the data subject; or the explicit consent of the person concerned.
5.9 Right of withdrawal:
The person concerned has the right to withdraw his consent at any time. Withdrawal of the consent does not affect the legality of the consent based data management prior to the withdrawal.
5.10 Procedural rules:
The data controller shall inform the person concerned without undue delay, but definitely within one month from the receipt of the request, about measures taken based on the Article GDPR 15–22 . If necessary, taking into account the complexity of the application and the number of applications, this deadline may be extended by two additional months.
The controller shall inform the person concerned of the extension of the time limit by indicating the reasons for the delay within one month of the receipt of the application. If the concerned party has filed an electronic application the information will be provided electronically, unless otherwise requested by the person concerned.
If the data controller fails to take measures in response to the concerned party’s request, he/she shall inform the data subject without delay and within one month of the receipt of the request about the reasons of failure of taking measures and that the data subject may file a complaint with a supervisory authority and exercise his/her right of judicial redress.
Gastland Flight Catering Ltd. provides the requested information and other information free of charge. Where an application for a claim is clearly unfounded or, in particular because of its repeated nature, exaggerated the data controller shall - subject to the provision of requested information or the administrative costs of the requested measure - charge a reasonable fee or refuse to take action in the requested case.
The data controller informs all raddressees of any rectification, deletion or data limitation that he or she has been communicating with, unless this proves impossible or requires disproportionate effort. At the request of the data subject, the data controller shall inform the addressees thereof.
The data controller shall provide the data subject with a copy of the personal data subject to data processing. For additional copies requested by the data subject, the data controller may charge a reasonable fee based on administrative costs. If the concerned person has submitted the application electronically, the information will be provided in electronic format, unless otherwise requested by him/her.
5.11 Compensation and grievance fee:
Any person who has suffered material or non-material damage as a result of a violation of the Data Protection Regulation is entitled to compensation for the damage sustained by the data controller or the data processor. The data processor shall only be held liable for damage caused by data processing if he or she has not complied with the statutory obligations specifically imposed on the data processor or if the data controller's legitimate instructions have been disregarded or contravened. If several data controllers or multiple data processors or both the data controller and the data processor are involved in the same data management and are responsible for the damage caused by the data handling, each data controller or data processor is jointly and severally liable for the total damage. The data controller or the data processor shall be exempt from liability if he or she proves that he or she is in no way responsible for the event giving rise to the damage.
5.12 Right to a court:
In the event of violation of his or her rights, the data subject may turn to the court (according to the choice of the defendant's domicile or domicile). The court proceeds out of court. The charge pertaining to the protection of personal data is tax-free.
5.13 Data protection authority procedures:
You can turn to National Data Protection and Information Authority with a complaint:
National Privacy and Freedom Authority
Headquarters: 1125 Budapest, Szilágyi Erzsébet fasor 22 / C.
Email: ugyfelszolgalat@naih.hu
