CO-VERSATILE
Website Data Protection Notice
Last revised 25 June 2021

We, the Institute for Computer Science and Control (registered seat: H-1111 Budapest, Kende utca 13-17., Hungary; registration number: 300399000; e-mail: ugyeletes@sztaki.hu, hereinafter referred to as “SZTAKI”) and EIT Manufacturing Central gGmbH (registered seat: Hilpertstraße 31, 64295, Darmstadt, Germany, hereinafter referred to as “EIT Manufacturing”), (SZTAKI and EIT Manufacturing hereinafter jointly referred to as “we” or “us”) take data privacy seriously. This Website Data Protection Notice ("Notice") informs the users of http://co-versatile.eu on which this Notice is displayed (the "Website") how we, as joint controllers within the meaning of the General Data Protection Regulation ("GDPR"), collect and process the personal data and other information of such users in connection with their usage of the Website.

The essence of the joint controller arrangement: SZTAKI and EIT Manufacturing agree that SZTAKI is responsible for taking care of your privacy related questions, queries or complaints. You can also contact the SZTAKI directly, if you wish. Irrespective of the terms of the arrangement between SZTAKI and EIT Manufacturing, data subjects may exercise their rights in respect of and against each of the joint data controllers. SZTAKI is also responsible for providing you with information in relation to processing of your personal data and notifying the Hungarian Data Protection and Freedom of Information Authority in the event of a data breach. If you need more details regarding the joint controller arrangement, please contact us at ugyeletes@sztaki.hu

Content Overview

 

1. Categories of Personal Data and Processing Purposes

2. Processing Basis and Consequences

3. Categories of Recipients and International Transfers

4. Retention Periods

5. Your Rights

6. Cookies and other tracking technologies

7. Questions and Contact Information

8. Changes to this Notice

 

1.         Categories of Personal Data and Processing Purposes - What personal data do we process about you and why?

 

  • Metadata: You may use the Website without providing any personal data about you. In this case, we will collect only the following metadata that result from your usage of the Website: browser type and version, operating system and interface, website from which you are visiting us (referrer URL), webpage(s) you are visiting on our Website, date and time of accessing our Website, and internet protocol (IP) address. 

    Your IP address will be used to enable your access to our Website. Once the IP address is no longer necessary for this purpose, we will shorten your IP address by removing the last octet of your IP address. The metadata, including the shortened IP address, will be used to improve the quality and services of our Website and services by analyzing the usage behavior of our users in anonymized form and to prevent fraud, misuse of our IT systems, as well as to ensure physical, IT and network security.
  • Newsletter Data: If you request to receive our newsletter, we collect and process the following personal data about you: first and last name, email address, manufacturing setting interest and request to receive marketing emails (voluntary). We process such personal data for purposes of providing the newsletter and other marketing materials to the extent permitted by applicable law and analyzing your interests for marketing purposes.

 

2.Processing Basis and Consequences - What is the legal justification for processing your personal data and what happens if you choose not to provide it?

We rely on the following legal grounds for the collection, processing, and use of your personal data to the extent data processing is necessary to provide the Website and its services to you:

  • your consent to the processing of your data for one or more specific purposes;
  • the processing is necessary for the purposes of the legitimate interests pursued by us or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of you which require protection of personal data; such legitimate interests are the fulfilment of the processing purposes set out above in Section 1, in particular.

The provision of your personal data is necessary to receive our newsletter services as requested by you. The provision of your personal data is voluntary for you. Not providing your personal data may result in disadvantages for you--for example, you may not be able to receive certain services. However, unless otherwise specified, not providing your personal data will not result in legal consequences for you.

 

3.         Categories of Recipients and International Transfers - Who do we transfer your personal data to and where are they located?


You should expect that we will transfer your personal data to third parties for the processing purposes described above as follows:

  • Within SZTAKI: Depending on the categories of personal data and the purposes for which the personal data has been collected, different departments within SZTAKI may receive your personal data. For example, our IT department has access to your account data, and our office departments have access to your data relating to an inquiry to respond to it. Moreover, other departments within SZTAKI have access to certain personal data about you on a need-to-know basis, such as the legal department and the finance department.
  • Other recipients: We may transfer - in compliance with applicable data protection law - personal data to law enforcement agencies, governmental authorities, judicial authorities, legal counsel, external consultants, or business partners each located within Hungary / the European Union. We will not disclose your personal data to third parties for advertising or marketing purposes or for any other purposes without permission.

International transfers. In connection with the operation of this Website, we will not transfer your personal data outside the European Economic Area ("EEA").

 

4.         Retention Periods - How long do we keep your personal data?

Your personal data will be retained as long as necessary to provide you with the services requested. Once you have ended your relationship with us, we will remove your personal data from our systems and records and/or take steps to properly anonymize it so that you can no longer be identified from it (unless we need to keep your information to comply with legal or regulatory obligations to which we are subject--e.g., taxation purposes).

Personal data will in principle be deleted 6 months after the last interaction and contact between you and us.

We may also retain your personal data for 5 years (pursuant to the limitation period under Hungarian civil laws) after the last interaction and contact between you and us if your personal data are necessary to comply with other applicable laws or if we need your personal data to establish, exercise or defend a legal claim, on a need-to-know basis only. To the extent possible, we will restrict the processing of your personal data for such limited purposes after the termination of the contractual relationship.

 

5.         Your Rights - What rights do you have and how can you assert your rights?

Right to withdraw your consent: If you have declared your consent regarding certain collecting, processing and use of your personal data, you can withdraw this consent at any time with future effect. Such a withdrawal will not affect the lawfulness of the processing prior to the consent withdrawal. In relation to our newsletter service, you can withdraw your consent by inserting your e-mail address under the unsubscribe field.

Additional data privacy rights: Pursuant to applicable data protection law, you may have the right to: (i) request access to your personal data; (ii) request rectification of your personal data; (iii) request erasure of your personal data; (iv) request restriction of processing of your personal data; (v) request data portability; and/or (vi) object to the processing of your personal data (including objection to profiling). Below please find further information on your rights to the extent that the GDPR applies. Please note that these rights might be limited under the applicable local data protection law.

 

  • Right to request access to your personal data: As provided by applicable data protection law, you have the right to obtain from us confirmation as to whether or not personal data concerning you is being processed, and, where that is the case, to request access to the personal data. This access information includes – inter alia – the purposes of the processing, the categories of personal data concerned, and the recipients or categories of recipient to whom the personal data have been or will be disclosed. However, this is not an absolute right and the interests of other individuals may restrict your right of access.

You may have the right to obtain a copy of the personal data undergoing processing free of charge. For further copies requested by you, we may charge a reasonable fee based on administrative costs.

  • Right to request rectification: As provided by applicable data protection law, you have the right to obtain from us the rectification of inaccurate personal data concerning you. Depending on the purposes of the processing, you may have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
  • Right to request erasure (right to be forgotten): As provided by applicable data protection law, you have the right to obtain from us the erasure of personal data concerning you and we may be obliged to erase such personal data.
  • Right to request restriction of processing: As provided by applicable data protection law, you have the right to obtain from us that we restrict the processing of your personal data. In such case, the respective data will be marked and may only be processed by us for certain purposes.
  • Right to request data portability: As provided by applicable data protection law, you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and you may have the right to transmit those data to another entity without hindrance from us.
  • Right to object:

Under certain circumstances, you have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data by us and we are required to no longer process your personal data. Such right to object especially applies if we collect and process your personal data for profiling purposes in order to better understand your interests in our products and services.

If you have a right to object and if you exercise this right, your personal data will no longer be processed for such purposes by us. You may exercise this right by contacting us as stated in Section 7 below.

Such a right to object may, in particular, not exist if the processing of your personal data is necessary to take steps prior to entering into a contract or to perform a contract already concluded.

If you have given your consent to receive direct marketing, you need to withdraw your consent as explained above.

To exercise your rights, please contact us as stated under Section 7 below. You also have the right to lodge a complaint with the competent data protection supervisory authority in the relevant Member State (e.g., the place where you reside, work, or of an alleged infringement of the GDPR).

6.         Cookies and other tracking technologies

This Website uses cookies and other tracking technologies. If you provide your consent, this Website uses Google Analytics, a web analytics service provided Google Ireland Ltd (Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, “Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the Website analyze how users use the Website. Google is considered as a joint controller of your metadata. Further information concerning Google’s terms of use and privacy statement can be found at https://www.google.com/analytics/terms/gb.html or at https://policies.google.com/?hl=en&gl=uk.

For further information, please visit our Cookie Policy.

7.         Questions and Contact Information

If you have any questions about this Notice or if you want to exercise your rights as stated above in Section 5, please contact us at:

SZTAKI
Hungary, H-1111 Budapest,
Kende u. 13-17.
+36 1 279 6000
ugyeletes@sztaki.hu

SZTAKI has a Data Protection Officer: The Data Protection Officer can be contacted at: andras.gyorgy@sbgk.hu, 1062 Budapest Andrássy út 113.

8.         Changes to this Notice

We may update this Notice from time to time in response to changing legal, regulatory or operational requirements. We will notify you of any such changes, including when they will take effect, by updating the "Last revised" date above or as otherwise required by applicable law. Your continued use of our Website after any such updates take effect will constitute acceptance of those changes. If you do not accept updates to this Notice, you should stop using our Website.