Welcome to the general website ("HCLU Site") for the Hungarian Civil Liberties Union ("HCLU"). The HCLU Site is the website whose home page is located at www.hclu.hu and includes all web pages whose domain name contains the following: www.hclu.hu. The HCLU also operates other websites that don't contain these domain names. This User Agreement does not apply to those websites (unless those websites specifically link to this User Agreement) and the terms of the user agreements for those other HCLU websites may differ from the terms of this User Agreement. Additionally, this is not the user agreement for any blogs, forums, or social networking sites where HCLU has a presence that are on websites other than the HCLU Site. Please read this User Agreement carefully, including the HCLU Online Privacy Statement. By using the HCLU Site, you agree to follow the rules set forth on these web pages. From time to time we may revise this User Agreement, including its Online Privacy Statement, so be sure to check these web pages occasionally. If we do make material changes, we will post a notice on our homepage that the User Agreement has been modified and provide a link to the revised User Agreement. When you continue to use the HCLU Site after we post a change, it means you agree to the new rules.
1. Data controller
Hungarian Civil Liberties Union ("HCLU") (address: H-1136 Budapest, Tátra utca 15/b; court registration number: 11316 / 1994; E-mail: tasz@tasz.hu; Phone: 0036-1209-0046; Fax: 0036-1279-0755)
2. Our collection and use of your personal data
Like most websites, we may automatically receive and record information in our server logs from your browser when you visit hclu.hu. The information that we collect with these automated methods may include your visit’s starting and ending date, your IP address, cookie information, browser type, system type, and the referring URL. From these data the system generates statistics automatically.
We use this type of information to measure and improve the performance of our site. On occasion we also access this type of information to investigate or maintain the stability and security of our site, but never connect them with other Personal Data. The hclu.hu website sends cookie information to the visitor’s computer. HCLU does not use your cookie information for commercial purposes but in order to promote donation through remarketing tools, such as Google tracking code or Facebook Pixel.
Certain pages on the HCLU site may invite you to share personally identifying information, such as your name, address, email address, or telephone number. Sharing that information will allow you to make a donation, or participate in other similar online activities.
We will not share your data with other visitors or third parties unless you have indicated that you permit us to do so.
If you are donating HCLU through PayPal or other payment processors, other data (such as your name, your bank account number, the amount and date of transfer) could be controlled by HCLU. Read our detailed contract conditions and support policy.
3. Legal basis of data processing
The legal basis of controlling the personal data mentioned in preceding section (paragraph 2) is that the user provides voluntary consent.
4. Aims of data processing
- Automatically submitted data - The information that we collect with these automated methods may include your visit’s starting and ending date, your IP address, cookie information, browser type, system type, and the referring URL. From this data the system generates statistics automatically. Control of the data is indispensable.
- Voluntarily submitted data during donation- The aim of controlling personal data handed over HCLU is to ensure smooth and uninterrupted use of service between the user and the service provider (PayPal, SimplePay or CIB eCommerce). Your personal data will not be used for other purposes and will be kept confidential.
5. Duration of data control
Session IDs will be automatically deleted as your browser is closed. You can delete your cookies manually anytime, and they will be deleted automatically based on your browser’s settings. If you provided voluntary consent to control your personal data for donor communication purposes, this will be stored unless you decide otherwise or revoke your consent.
6. Parties with access to your data, data processors
Personal data provided by users and the data collected with automated methods will be available only to the employees of the data controller. Data generated automatically will be available also to Linode as the data processor. Linode operates its server in Frankfurt, Germany.
The data controller will not transfer any personal data to third parties, except when users provide their personal data with this objective. When a user makes a donation, contracting banks will thus access the information and personal data sent by the user. In the case of mandatory data transfer required by law, HCLU will verify the legal basis for the data transfer with regard to each and every piece of information before complying with the official request for information. If necessary, HCLU will consult the data protection authorities.
The user may modify the data provided at any time. The e-mail address provided by the data subject is not public and not available to third parties.
7. Data subjects’ rights in regard to their personal data
Access
Data subjects may request information regarding the processing of their personal data. Upon request, the data controller will supply information to the data subject concerning the data processed, the objective, legal basis and duration of the data processing, the name and address (seat) of the controller, its activity with regard to the data processing, whether the subject’s personal information has been transferred to third parties and if so, for what purpose. The controller will supply the requested information in writing, within 30 days from receiving the request. Requests may be sent to the controller’s mailing address (1136 Budapest, Tátra utca 15/B) or e-mail address (tasz@tasz.hu) and they must include the requesting party’s mailing address.
Correction and deletion
Data subjects may request in writing the correction or deletion of their personal data (or parts of it). The controller will react to such a request within the shortest possible time but no more than 3 weeks. Deletion is possible when the data subject withdraws his/her consent which forms the basis of data processing and there is no other legal basis for the data processing. Requests concerning data deletion sent by e-mail will be answered within the shortest possible time but no more than 3 weeks from the date of receiving the e-mail. In the period between 1-20 August and 24 December-2 January this timeframe is 1 week.
Objection
Data subjects may object to the processing of their personal data, in the context of which they may request the correction or deletion of their data by writing to the data controller’s mailing address (1136 Budapest, Tátra utca 15/B) or e-mail address (tasz@tasz.hu).
Data transmission
Data subjects may request in writing that the personal data they had provided to the controller be made available to them in a widely-used, computer-readable format. The controller will make the requested data available to the data subject within 30 days from the date of the request.
8. Security measures
The personal data we collect are stored on our own dedicated server with 24-hour protection, located in the Linode internet service provider’s server room in Frankfurt, Germany. By storing the data on the server, HCLU does not transfer the data specified in paragraph (2) to a third country.
9. Possible remedies
We kindly ask the Data Subjects that in the case of their allegation of an infringement of their rights relating to their personal data to contact us in order that we may provide a remedy. We inform the Data Subjects that they can turn to the civil court or they can ask for the help of the data protection authority. Detailed legal provisions on the procedural conditions of such redress mechanisms and the obligations of the Data Controller are laid down in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), Hungarian Act CXII. of 2011 on the right of informational self-determination and on freedom of information, and in article 13/A of Hungarian Act CVIII of 2001 on certain issues of electronic commerce services and information society.
In case you have further questions related to data protection, send it to tasz@tasz.hu.
The Hungarian Civil Liberties Union processes your personal data only in line with the provisions of the present document and the laws in force. However if you feel it is necessary to file a complaint related to the processing of your personal data, or you are otherwise unsatisfied with the way how your personal data are processed, you may make a complaint to the data protection authority:
National Data Protection and Freedom of Information Authority (address: 1125 Budapest, Szilágyi Erzsébet fasor 22/c; telephone: +36-1-391-1400; e-mail: ugyfelszolgalat@naih.hu)
In case you wish to pursue court action, Budapest-Capital Regional Court is the competent tribunal in data protection cases against the HCLU. . If so requested by the data subject, the action may be brought before the tribunal in whose jurisdiction the data subject’s home address or temporary residence is located.
10. Conditions
The data controller reserves the right to change the privacy statement. This may be necessary if the scope of services is expanded or if it is required by law. Changes in the data processing cannot mean handling personal data differently. The data controller will publish relevant information on its website 15 days before the changes take effect.