PRIVACY POLICY - Regarding the T2M2026 Conference
We inform you that Széchenyi István University attaches great importance to the protection of personal data and wishes to ensure the right of individuals to self-determination in all circumstances.
Széchenyi István University manages any data – that came to our attention in the context of the Alumni Portrait programme and the International Alumni of the Year Award – in accordance with the provisions of Act CXII of 2011 on Informational Self-Determination and Freedom of Information (Privacy Act), Regulation (EU) 2016/679 of the European Parliament and the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
- Name of the Data Controller
Széchenyi István University (hereinafter: the University)
address: 9026 Győr, Egyetem square 1.
email: sze@sze.hu
phone number: +36(96) 503-400
website: uni.sze.hu
- Adatkezelésre vonatkozó jogszabályok:
- Regulation (EU) 2016/679 of the European Parliament and the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation);
- Act CXII of 2011 on Informational Self-Determination and Freedom of Information (Privacy Act);
- Subject Matter and Data Subjects of the Data Processing:
- Subject matter of the data processing: Organisation of the T2M2026 Conference
- Data Subjects of the data processing: Participants in the T2M2026 Conference
- The scope of the processed data, the purpose, duration, legal basis and source of the data processing
4.1 Data processing
|
Scope of the processed data |
Purpose of the data processing |
Legal basis of the data processing |
Duration of the data processing |
Source of the processed data |
|
Identifying information (name, address) |
Identification and registration of the data subject |
Article 6(1)(b) of the GDPR – performance of a contract |
1 year after the Conference |
Data voluntarily provided by the data subject |
|
Contact details (phone number, e-mail) |
Contact with the data subject |
Article 6(1)(a) of the GDPR – consent |
Until the consent is withdrawn, or at the latest until the end of the project |
Data voluntarily provided by the data subject |
|
Billing information (first name, last name, country, address 1, address 2, city, zip code)
|
Issuing invoices, fulfilling billing and accounting obligations |
Article 6(1)(c) of the GDPR—compliance with a legal obligation, Sections 159. § and 169. § of Act CXXVII of 2007. |
8 years after the invoice was issued |
Data voluntarily provided by the data subject |
|
Information related to conference participation (type of participation, presentation title) |
Organisation of the conference |
Article 6(1)(a) of the GDPR – consent |
Until the consent is withdrawn, or at the latest 1 year after the conference |
Data voluntarily provided by the data subject |
|
Belonging to the Global South region, T2M membership, and information regarding PhD students |
Taking Advantage of Discounts, Applying for Travel Subsidies |
Article 6(1)(a) of the GDPR – consent |
Until the consent is withdrawn, or at the latest 1 year after the conference |
Data voluntarily provided by the data subject |
|
taken at the event |
Documentation and promotion of the event |
Article 6(1)(f) of the GDPR – legitimate interest related to documenting and promoting the event |
As long as the legitimate interest exists |
Photos and video footage taken by the organizers |
|
Individual photos and video recordings taken at the event |
Documentation and promotion of the event |
Article 6(1)(a) of the GDPR – consent |
Until the withdrawal of consent or, at the latest, until the deletion of the article in which the photograph or recording is used. |
Photos and video footage taken by the organizers |
|
Personal data contained in the speakers’ CVs and their photographs |
Introducing the speakers and promoting the event |
Article 6(1)(a) of the GDPR –consent |
Until the withdrawal of consent or, at the latest 1 year after the Conference |
Data voluntarily provided by the data subject |
4.1.1 Data Processing Procedure: During the admission process, visitors are identified using the data provided during registration, by means of an attendance sheet or an individual QR code. Image and audio recordings are made at the event.
The recordings made at the event are used for documenting and promoting the event and may also be published on the Data Controller’s websites and social media platforms.
- Data Transfers and Data Processing
The University transfers personal data to third parties only in exceptional cases, where permitted by law or based on the consent of the data subject. For the purposes of this data processing, the University uses the following data processor:
SimplePay Zrt. (registered office: 1138 Budapest, Váci út 135–139., Building B, 5th floor)
Purpose of data processing: processing payment transactions related to the online payment of the conference registration fee by bank card.
- Data Security Measures:
The University ensures the appropriate security of personal data by implementing appropriate technical and organisational measures, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage.
- Your rights regarding data management:
Your data protection rights and remedies, and their limitations are set out in detail in the GDPR (In particular Articles 15, 16, 17, 18, 19, 21, 22, 77, 78, 79 and 82). At any time, you may request information about your data, request the rectification, erasure or restriction of your personal data, or object to the processing of data based on a legitimate interest.
You may exercise your rights through the following contact details:
in person: 9026 Győr, Egyetem square 1.
by phone: +3696 503 400
on e-mail: adatvedelem@sze.hu
DPO: dr. Pőcze Péter
phone number: +3696/503-400/3173
Right to request information:
You may request information about the processing of your personal information at any time in written form, such as:
-what personal information is being processed
-the legal basis on which we process your personal data
-the purpose for which we process your personal data
-the source from which we process your personal data
-how long we process your personal data
-what data management rights apply to you
-whether we will pass on your personal data and to whom
Right to rectification:
You have the right to have inaccurate personal data about you rectified by the University upon request.
Right to erasure:
You may request the University in writing to erase your personal data. This provision shall not apply to the extent that the data processing is necessary: for compliance with a legal obligation which requires processing of personal data by Union or Member State law to which the University is subject, or for the establishment, exercise, or defense of legal claims.
Right to restriction of processing:
At the written request of the data subject, the data controller shall restrict data processing where one of the following applies:
a) the accuracy of the personal data is contested by the data subject, in which case the restriction applies for a period enabling the data controller to verify the accuracy of the personal data;
b) the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
c) the data controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise, or defense of legal claims.
In the request for the restriction of data processing, the specific reason for requesting the restriction must also be indicated.
Right to object:
You shall have the right to object, on grounds relating to your particular situation, to the processing of your personal data based on the balancing of legitimate interests. In this case, the University shall review the processing of your data carried out under the legal basis of legitimate interest, and if your request is found to be justified, your personal data will be erased. You will be informed of the outcome of the review in all cases.
Right to withdraw voluntary consent:
Consent given for data processing may be withdrawn at any time. In the event of the withdrawal of your consent, you may also request the erasure of your uploaded data. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
Common rules of practice:
The University shall, without undie delay, provide information in written form, in an accessible format, within one month of the reception of the application, on the measure taken in response to the application, or on its rejection and reason.If necessary, taking into account the complexity of the application and the number of applications, this period may be enxtended by a further two months.
- Your law enforcement options:
If you consider that the data processing is unlawful, you can apply to the Hungarian National Authority for Data Protection and Freedom of Information (NAIH) or a court as follows:
Notification of the competent authority
If you consider that the processing of your personal data – or the exercise of your rights to access public data or data of public interest – has been infringed or is in danger, you may initiate an investigation with the supervisory authority:
Contact information of NAIH:
|
address: |
1055 Budapest, Falk Miksa street 9-11 |
|
phone number: |
+36 (1) 391-1400 |
|
fax: |
+36 (1) 391-1400 |
-Initiation of an official procedure
If you find the processing of your personal data illegal, you can initiate a civil lawsuit against the Data Controller. In Hungary, such a lawsuit falls within the the jurisdiction of the regional courts. You can find out about the jurisdiction and contact information of the courts on the following website: www.birosag.hu