Privacy Statement

Thank you for visiting the website of IFUA Nonprofit Partner Public Benefit Nonprofit Private Ltd.. (hereinafter referred to as “IFUA Nonprofit Partner” or “We”). We take the protection of personal data very seriously during data processing, in accordance with applicable regulations. The following information provides you (hereinafter referred to as “client,” “data subject,” or “user”) with an overview of how we ensure data protection, the types of data we process, and the purposes for which we process them.

This privacy notice has been prepared in accordance with the provisions of Regulation (EU) 2016/679 (hereinafter referred to as the “Regulation”).

Data controller and contact information:

Name: IFUA Nonprofit Partner Public Benefit Non-profit Private Limited-liability Company

Headquarters: Budapest, Buda-part tér 2. 1117

Phone: 06-1-382-8888

Email: kapcsolat@nonprofitpartner.hu

1. Types of Processed Data, Legal Basis, Purpose, and Duration of Data Processing

As a result of IFUA Nonprofit Partner’s operations, we may collect certain personal data about you. We only process personal data if the data subject has given their voluntary consent (consent-based legal basis) to use their data for the specified purpose. However, in certain cases, the processing, storage, and transfer of a certain set of data may be required by law (legal obligation).

We use the personal data we collect solely to provide the services you have requested, for communication, and support. We do not share your data with third parties unless we have received your prior consent or are legally obligated to do so.

Scope of Processed Data

The scope of data processed includes the data of contacts of contractual partners and/or individuals involved in the performance or monitoring of performance.

Personal data	Purpose	Legal basis	Duration of data processing
Name	Communication, relationship building, information, maintaining business relations, joint work	Legal Basis: GDPR Article 6 (1) (f) (The processing is necessary for the purposes of the legitimate interests pursued by the company.) Legitimate interest: The legitimate interest pursued is the fulfilment of contractual obligations between the company and the contracting business, exercising rights, and fostering economic cooperation between the parties.	5 years after the termination of the contract
E-mail address
Address
Company name, headquarters
Phone number
Notes

Scope of Processed Personal Data Concerning Volunteers

Personal data	Purpose	Legal basis	Duration of data processing
Name	Identification, communication, enrolment and record-keeping for volunteer programs	GDPR Article 6(1)(b) (Contract performance – Volunteer contract)	5 years after the termination of the contract
Email address
Address
Phone number
Notes
Duration of volunteering
Information about volunteer activities

Scope of processed personal data for form completion (e.g., voluntarily provided data by participants related to programs)

Personal data	Purpose	Legal basis	Duration of data processing
Individual data (e.g., name, contact details)	Identification, communication	GDPR Article 6(1)(a) (voluntary consent)	Until consent is withdrawn

Scope of processed personal data for business card handling

Personal data	Purpose	Legal basis	Duration of data processing
Business card data (Name, phone number, email, address, position)	Communication, relationship building	GDPR Article 6(1)(a) (voluntary consent)	Until consent is withdrawn

2. Rights of the Data Subject Regarding Data Processing

During the duration of data processing, the Data Subject is entitled to the following rights under the Regulation:

Right to access personal data and request information about data processing
Right to rectification
Right to restriction of processing
Right to erasure
Right to object

If the Data Subject wishes to exercise their rights, they must provide personal data for identification purposes, and necessary communication will be required. Therefore, personal data must be provided for identification (but identification can only be based on data that IFUA Nonprofit Partner otherwise processes).

IFUA Nonprofit Partner will respond to complaints related to data processing within 30 days at the latest.

Access to personal data and information

The Data Subject has the right to receive feedback on whether their personal data is being processed and, if so, to access:

The purposes of the data processing
The categories of personal data concerning the Data Subject
Information about the recipients or categories of recipients to whom IFUA Nonprofit Partner has disclosed or will disclose personal data
The planned duration of the storage of personal data, or, if that is not possible, the criteria for determining that duration
The right of the Data Subject to request rectification, erasure, or restriction of processing of personal data, and the right to object to processing based on legitimate interests
The right to lodge a complaint with a supervisory authority
If the data was not collected from the Data Subject, any available information about its source
Information regarding the existence of automated decision-making (if such a procedure is applied), including profiling, as well as information about the logic involved and the significance of such data processing and its expected consequences for the Data Subject

The exercise of rights may aim to establish and verify the lawfulness of data processing; therefore, IFUA Nonprofit Partner may charge a reasonable fee for fulfilling multiple information requests.

IFUA Nonprofit Partner ensures access to personal data by providing the processed personal data and information to the Data Subject via email after their identification.

The Data Subject must specify in their request whether they are requesting access to personal data or information related to data processing.

Right to rectification

The Data Subject has the right to request the rectification of inaccurate personal data without undue delay.

Right to restrict processing

The Data Subject has the right to request that IFUA Nonprofit Partner restrict processing if any of the following conditions are met:

The Data Subject disputes the accuracy of personal data, in which case the restriction applies for the duration necessary to verify the accuracy of the personal data; if verification is unnecessary, IFUA Nonprofit Partner will not apply restriction
The processing is unlawful and the Data Subject opposes the erasure of the data and requests restriction of its use instead
The personal data is no longer needed for the purposes of the processing, but the Data Subject requires it for the establishment, exercise, or defense of legal claims
The Data Subject has objected to the processing, but IFUA Nonprofit Partner’s legitimate interests may justify the processing; in this case, processing must be restricted until it is determined whether IFUA Nonprofit Partner’s legitimate interests outweigh the Data Subject’s rights

If processing is restricted, such personal data may only be processed, except for storage, with the Data Subject’s consent or for the establishment, exercise, or defense of legal claims, or for the protection of rights of another natural or legal person, or for important public interest reasons of the Union or a Member State.

IFUA Nonprofit Partner will notify the Data Subject at least 3 working days in advance of the lifting of the restriction.

Right to erasure (Right to be forgotten):

The Data Subject has the right to request the erasure of personal data concerning them without undue delay if any of the following grounds apply:

The personal data is no longer necessary for the purposes for which IFUA Nonprofit Partner collected or processed it
The Data Subject withdraws consent and there is no other legal basis for processing
The Data Subject objects to processing based on legitimate interests and there are no overriding legitimate grounds for the processing
The personal data has been unlawfully processed
The personal data must be erased for compliance with a legal obligation under EU or Member State law applicable to IFUA Nonprofit Partner

If IFUA Nonprofit Partner has made the Data Subject’s personal data public and is obliged to erase it for any of the aforementioned reasons, it will take reasonable steps—taking into account available technology and implementation costs—to inform other data controllers processing the data that the Data Subject has requested the deletion of links to or copies of such personal data. As a general rule, IFUA Nonprofit Partner does not make the Data Subject’s personal data public.

Erasure does not apply if processing is necessary:
For the exercise of freedom of expression and information
For compliance with a legal obligation under EU or Member State law applicable to IFUA Nonprofit Partner
For the establishment, exercise, or defense of legal claims

Right to object

The Data Subject has the right to object at any time to the processing of their personal data based on legitimate interests for reasons relating to their particular situation. In this case, IFUA Nonprofit Partner may not further process the personal data unless it demonstrates compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the Data Subject or that relate to the establishment, exercise, or defense of legal claims.

Remedies

If the Data Subject believes that IFUA Nonprofit Partner has violated any statutory provision related to data processing or has not fulfilled any of their requests, they may initiate an investigation by the National Authority for Data Protection and Freedom of Information (mailing address: 1530 Budapest, Pf.: 5., email: ugyfelszolgalat@naih.hu) for presumed unlawful data processing.

IFUA Nonprofit Partner also informs the Data Subject that they may file a civil lawsuit before a court.

3. Data security

Through necessary rights management, internal organization, and security measures, IFUA Nonprofit Partner ensures the security of personal data.

We have taken measures to protect your personal data against unauthorized access, unlawful processing, and accidental loss, destruction, or damage.

4. Final provisions

IFUA Nonprofit Partner reserves the right to modify this privacy statement at any time, without prior notice. The current version of the privacy statement will be made available on our website.

This privacy statement is effective from [02.01.2024].