Preamble

MasterPrint Coding and Marking Limited Liability Company (the Company’s abbreviated name is MasterPrint Ltd., corp. reg. no.: Cg.07-09-024755, VAT number: 13885120-2-07; statistical code: 13885120-7112-113-07, registered office: 2454 Iváncsa, Kilencedi út 6.) observes the Hungarian and European laws governing personal data processing, with special regard to the provisions of Act CXII of 2011 on Informational Self-Determination and Freedom of Information („Info Act”) and Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (general data protection regulation – GDPR).

I. Definitions

1. “data subject”: any natural person identified or – directly or indirectly – identifiable by reference to specific personal data;
2. “personal data”: any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
3. “data processing”: any operation or set of operations which is/are performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
4. “restriction of processing”: the marking of stored personal data with the aim of restricting their processing in the future;
5. “controller”: the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of personal data processing; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;
6. “data processor”: a natural or legal person, public authority, agency or any other body which processes personal data on behalf of the controller;
7. “consent by the data subject”: any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which s/he, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him/her.

II. The controller’s:

Name: MasterPrint Coding and Marking Limited Liability Company
Abbreviated name: MasterPrint Ltd.
Corporate registration number: Cg.07-09-024755
VAT number: 13885120-2-07
Statistical identification no.: 13885120-7112-113-07
Registered office: 2454 Iváncsa, Kilencedi út 6.
Data protection registration number: 02549/0001
Contact telephone: +36 1 203-8599.
E-mail: [email protected]
Facsimile: +36 1 204-8626
Website: www.masterprint.eu

The controller employs no data protection officer. The data are accessed by the persons employed, selected and trained by the controller, and the data are exclusively processed by them.

III. Data subjects

The controller exclusively processes the data of persons – apart from its employees and persons working for the controller in form a relationship other than employment – who provided their data to the controller voluntarily under any circumstances (specifically including business negotiations, business transactions, contracts, voluntary subscription to newsletters).

IV. Data

The controller exclusively processes data that were voluntarily disclosed to it by the data subjects. These data are mainly as follows: name, e-mail address, mail address, telephone number, job position.

V. Scope and purpose of data processing

The controller primarily stores the data of data subjects (after collection and recording) and uses them for sending notifications or news to the data subjects. The controller shall not disclose or make the data of the data subjects accessible to third persons (including controllers), and it shall establish its technical and working conditions in a manner that data processing does not exceed the minimum framework required for the intended purpose.

VI. Limits of data processing

The controller processes exclusively the minimum data required for achieving the intended purpose, it shall not record other data (unless the contrary is expressly requested by the data subject) and it shall not carry out any other data processing in connection with them.

VII. Period of data processing

The controller processes the data of the data subjects for an indefinite period of time or until the purpose intended to be achieved through data processing has been achieved, afterwards the data shall be irreversibly erased, or if it is requested by the data subject earlier, the data shall be erased when it is requested by the data subject.

VIII. Legal basis of data processing

The controller processes the data of the data subjects exclusively on the basis of the data subject’s consent. The data subject may withdraw his/her consent at any time, without giving reasons. The data subjects may give their consent through their statement sent in e-mail to the [email protected] address or by clicking here and by indicating the data intended to be withdrawn from data processing.

IX. Rights of the data subjects

The data subjects may request from the controller access to, and rectification or erasure of their personal data or the restriction of processing and they may object to processing such personal data at the contacts of the controller specified in paragraph II (primarily via e-mail).

X. Legal remedy

1. The data subjects may protest against processing their personal data
   • a) if the personal data are processed or transferred exclusively for fulfilling the controller’s legal obligation or enforcing the legitimate interest of the controller, the data recipient or a third person, except for obligatory data processing;
   • b) if the personal data are used or transferred for the purpose of direct marketing, public opinion research or scientific research; as well as
   • c) in other cases stipulated by law.

   The controller shall consider the protest as soon as possible after submitting the request, but at most within 15 days, it shall pass a resolution on its cogency, and shall notify the requestor about its resolution in writing.

   In the event where the controller finds that the protest of the data subject is justified, it shall discontinue the data processing, also including further data collection and data transfer, it shall block the data, and shall inform about the objection and about the actions taken on the basis thereof all parties to whom the personal data subject to the objection were previously transferred and who are obliged to take actions in order to enforce the right to protest.

2. If the data subject disagrees with the controller’s decision made on the basis of the data subject’s protest or if the controller fails the deadline, the data subject may turn to court within 30 days from communicating the decision or from the last day of the deadline.