Data processing information
The purpose of this information is to provide you with appropriate information about the scope, method and purpose of data management, data processing, data transfer and other activities related to personal data carried out by the data controller, as well as your rights related to these in general.
Ildikó Csóka Egyéni Vállalkozo, as a data controller, processes the personal data of the clients who have commissioned her. The purpose of the data processing is the fulfillment of the accounting and tax advisory assignment, the legal basis for the data processing is Article 6 (1) (b) of the GDPR.
In certain cases (data processing required by law), the legal basis for data processing is Article 6(1)(c) of the GDPR, with which the data controller complies with its legal obligations (e.g. taxation, customer due diligence). Based on Article 6(1)(f) of the GDPR (legitimate interest), the data controller processes third party data to the extent and for the period necessary to fulfill the order.
The data controller provides information to the clients about the scope of the data processed and the information related to the data processing upon the establishment of the legal relationship of assignment. The data controller is committed to handling the personal data it has come to know with the utmost care and confidentiality in accordance with the provisions of this information, the General Data Protection Regulation and other relevant laws. The data controller ensures that unauthorized persons cannot access personal data, and that the personal data is protected against unauthorized access, alteration, transmission, disclosure, deletion or destruction, as well as accidental destruction and damage, and becoming inaccessible due to changes in the technology used.
The legal framework for data processing is as follows: – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC – GENERAL DATA PROTECTION REGULATION / GDPR – Act CXII of 2011 on the right to informational self-determination and freedom of information – INFOTV.
Data processing related to the use of the website
There is no specific option to provide personal data when visiting or using the website, so no data processing activity in this form arises when using the website.
Cookies on the website
However, the Data Controller uses cookies on the website in order to collect data related to the visit to the website. A cookie is a variable content, alphanumeric information package sent by the web server, which is recorded on the visitor's computer and stored for a predetermined validity period.
The data controller uses only necessary, session cookies on the website , which are a condition for the operation of the website. Necessary cookies are crucial for the basic functions of the website, and the website will not function properly without them. These cookies do not store personally identifiable information.
Cookie name: XSRF-TOKEN
Duration: session
a token consisting of random characters and numbers , which is present in each request to the server and has a different value each time. This is necessary so that in the event of a possible external attack (directly launched from the website), the system can "catch" suspicious requests. If the token value does not match, the server stops the request.
Cookie : mysellvio_session
Duration: session
Description: Stores and identifies the user's unique session ID to manage user sessions on the website. The cookie is a session cookie and is deleted when all browser windows are closed.
Cookie : cssloaded
Duration: session
Description: Its purpose is to monitor whether the page has already loaded in the given browser or not, thus preventing the page from "jumping" on the first load.
Cookie : cookie_consentdone and allowedcookies
Duration: session
Description: The " cookie_consent_done " cookie can have values of "1" and "0", indicating whether the user has accepted any cookies on the site. " allowed_cookies " stores which cookies the site visitor has accepted.
the above cookies , due to the basic settings (basic functions) of the website, cookies that could be suitable for storing and managing personal data may in principle arise, however, since it is not possible to use these functions (login, cart content, etc. ) on the website, these cookies cannot be created, so actual personal data management does not arise when visiting the website.
Data subject rights, enforcement and complaint handling:
The data subject may request information in writing from the Data Controller about what personal data, on what legal basis, for what data processing purpose, from what source, for how long the Data Controller processes, to whom, when, on what legal basis, access to which personal data the Data Controller has provided, or to whom the Data Controller has forwarded the personal data. The Data Controller shall comply with the data subject's request within one month at the latest.
If the personal data is inaccurate, it can be requested to be corrected. If accurate personal data is available, the data controller will correct the personal data. The data controller will mark the personal data whose accuracy or correctness is contested by the data subject, if the incorrectness or inaccuracy of the data cannot be clearly established.
The data controller will fulfill the request within one month at most.
The data subject may initiate the deletion by submitting a written request to the data controller.
The Data Controller will reject the request for erasure if the Data Controller is obliged to continue storing the personal data. Such a case is, for example, if the deadline prescribed by accounting legislation has not expired. However, if there is no such obligation, the Data Controller will comply with the request within a maximum of one month.
The data subject may request in writing that the Data Controller block his/her personal data (with a clear indication of the limited nature of the data processing and ensuring separate processing from other data). The blocking shall last as long as the reason indicated by the data subject requires the storage of the data. The data subject may request the blocking of the data, for example, if he/she believes that the Data Controller has unlawfully processed his/her submission, but for the sake of the authority or court proceedings initiated by him/her, it is necessary for the Data Controller not to delete the submission. In this case, the Data Controller shall continue to store the personal data (for example, the submission in question) until the authority or court requests it, after which the data shall be deleted.
The data subject may object in writing to data processing if the Data Controller would forward or use the personal data for the purpose of, for example, public opinion polling or scientific research.
The data controller will examine the request as soon as possible after receiving the objection, but no later than one month, and will make a decision on its merits, of which the applicant will be notified in writing.
The data controller shall notify the applicant in writing – electronically with the consent of the applicant – of the fulfillment or the obstacle to the exercise of the data subject's rights as soon as possible after the submission of the request, but no later than one month, and in the event of rejection of the request, of the factual and legal reasons for the rejection, as well as information on the possibilities of legal redress.
Anyone who believes that their rights have been violated as a result of the data controller's data processing may turn to court or file a complaint with the Authority (National Data Protection and Freedom of Information Authority - registered office: 1055 Budapest, Falk Miksa u. 9-11; E-mail: ugyfelszolgalat@naih.hu).
The court shall proceed with the case out of turn. The Metropolitan Court shall have jurisdiction over the case, but the person initiating the case may also, at his or her choice, file a lawsuit before the court competent for his or her place of residence or stay.
We also draw your attention to the fact that the Authority will only investigate complaints if the data subject has already contacted the Data Controller regarding their complaint prior to reporting it to the Authority and this has not led to any results, or if the Data Controller has not responded to the request within the deadline set by law.