Privacy notice for participants of the Beregovo Charity Half-marathon
1.Contact details of data controller
Name: Hungarian Interchurch Aid
Seat: 1221 Budapest, Kossuth Lajos u. 64.
Registration number: 01-02-0003466
Tax number: 19662927-1-43
Phone: (+36-1) 382-0700
E-mail address: firstname.lastname@example.org
2.Scope of data processing
HIA processes the following personal data of those participating in the running race:
- personal identification data (name, date of birth, gender)
- contact details (place of residence, e-mail address)
- data linked to the race (T-shirt size, distance selected, time result)
3.Method of data acquisition
Personal data according to section 2 is acquired from data subject upon registration for the race.
Data subjects give their data included in section 2 in order we can implement the running race properly, notify them of relevant information on the race and we can distribute prizes among data subjects in accordance with the competition announcement. In the absence of these data we would not be able to implement the running race and inform and reward participants.
4.Legislation on data processing, legal basis of data processing
- Regulation EU 2016/679 (General Data Protection Regulation GDPR)
- Act CXII of 2011 on the right of informational self-determination and on freedom of information
- Act V of 2013 on the Civil Code
Legal basis of data processing: consent of data subject [point a) of Article 6 (1)]
5.Purposes of data processing
5.1 Purpose of data processing is to ensure appropriate standard of the running race, provide information and awards for participants.
5.2 We do not process special categories of personal data in accordance with Article 9 of GDPR 9.
5.3 For the purpose of making decisions, we do not process personal data by automated means and do not take unique measures for the purpose of profiling.
In case of data processing different than described above, the data subject is preliminary notified by us, and his or her consent for data processing is acquired if necessary.
6.Period of retention of personal data
The processed personal data are immediately erased if the data subject initiates erasure of his/her personal data in accordance with article 17 of GDPR.
7.Location of the retention of data, safety measures
We retain the data of electronic form in the server and computers located at the seat of Hungarian Interchurch Aid, data of paper form are retained in the archives located at the seat.
Our company selects the IT systems used for processing personal data in a manner which allows access to the authorized persons, ensures their authenticity, able to confirm that the processed personal data was not modified, and the systems shall be protected against unauthorized access.
Documents in paper format are retained in cabinets/premises to be locked with a key.
8.Circle of parties knowing the data, data procession, data transfer
8.1 The personal data of the natural person considered as data subject may only be accessed by persons who are responsible for the implementation of the running race as a result of their positions and for the promotion of meeting the related legal obligations, and who undertake an obligation of confidentiality and were properly informed on the provisions of GDPR.
8.2 We transfer the name and start number of the personal data of the data subject to Frölich Tamás sole proprietorship, which company shall also have an obligation for confidentiality, and for full compliance with the provisions of GDPR.
8.3 Apart from the European Economic Area, we transfer personal data to Ukraine, for Representation of Hungarian Interchurch Aid, which takes part in implementation of the running race.
9.Rights of the Data Subjects
Right of access and information (Article 15 of GDPR)
In addition to this document, the data subject shall be entitled to receive information on the data processed by Hungarian Interchurch Aid.
Right to rectification (Article 16 of GDPR)
The data subject shall have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning him or her.
Right of erasure, right to be forgotten (Article 17 of GDPR)
The data subject shall have the right to obtain the erasure of personal data concerning him or her if the personal data are no longer necessary in relation to the purposes for which they were processed, the data subject withdraws consent on which the processing is based, or if the personal data have been unlawfully processed.
Right to restriction of processing (Article 18 of GDPR)
The data subject shall have the right to obtain the restriction of processing in case of inaccurate personal data for the period before rectification, or if the data is processed unlawfully, if the data subject opposes the erasure of the personal data, or if the purpose of data processing no longer exists, but the data is required by us for the purpose of any claim, or for the period before the assessment of the objection.
Right to data portability (Article 20 of GDPR)
The data subject shall have the right to receive the personal data concerning him or her in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller.
Right to object (Article 21 of GDPR)
The data subject shall have the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on point (e) or (f) of Article 6(1). In this case we shall no longer process the personal data unless we demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.
The natural persons considered as data subjects may lodge a complaint at the president-director of Hungarian Interchurch Aid and at the data protection supervisory body (Hungarian National Authority for Data Protection and Freedom of Information, naih.hu) or at a court.
Place and date: Budapest, 2019. 07.10.
Hungarian Interchurch Aid