Privacy policy - for the Széchenyi ODA Scholarship

We inform you that Széchenyi István University attaches great importance to the protection of personal data and wishes to ensure the right of individuals to self-determination in all circumstances.

Széchenyi István University manages any data – that came to our attention in the context of the Alumni Portrait programme and the International Alumni of the Year Award – in accordance with the provisions of Act CXII of 2011 on Informational Self-Determination and Freedom of Information (Privacy Act), Regulation (EU) 2016/679 of the European Parliament and the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

1. Name of the Data Controller

Széchenyi István University (hereinafter: the University)

address: 9026 Győr, Egyetem square 1.

email: sze@sze.hu

phone number: +36(96) 503-400

website: uni.sze.hu

2. Applicable legislation of data processing

- Regulation (EU) 2016/679 of the European Parliament and the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation);

- Act CXII of 2011 on Informational Self-Determination and Freedom of Information (Privacy Act);

- Act CCIV. of 2011 on National Higher Education (Nftv.)

3. Subjects of data management

- Subject of the data processing: Processing data regarding the Széchenyi ODA (hereinafter referred to as SODA) Scholarship agreements

- The Data subjects: applicants and recipients of the SODA scholarship

4. The scope of the processed data, the purpose, duration, legal basis and source of the data processing:

4.1 Data processing

4.1.1 Process of data processing: The data provided by applicants during the application process will be processed for the purpose of checking eligibility for participation and evaluating applications. If the decision is positive, the university will enter into a scholarship contract with the successful applicants and fulfil the terms of the contract. Data will only be processed by University employees involved in application-related work.

5. Data transfer, data processing

The university will only transfer personal data to third parties if permitted by law or with the consent of the data subject, in exceptional cases. The university does not use a data processor for this purpose.

6. Data security measures

The University will ensure adequate security of personal data, including protection against unauthorized or unlawful processing, accidental loss, destruction or damage, by implementing appropriate technical or organizational measures.

7. Your rights regarding data management

Your data protection rights and remedies, and their limitations are set out in detail in the GDPR (In particular Articles 15, 16, 17, 18, 19, 21, 22, 77, 78, 79 and 82). At any time, you may request information about your data, request the rectification, erasure or restriction of your personal data, or object to the processing of data based on a legitimate interest.

You may exercise your rights through the following contact details:

in person: 9026 Győr, Egyetem square 1.

by phone: +3696 503 400

on e-mail: adatvedelem@sze.hu

DPO: dr. Pőcze Péter

Right to request information:

You may request information about the processing of your personal information at any time in written form, such as:

-what personal information is being processed

-the legal basis on which we process your personal data

-the purpose for which we process your personal data

-the source from which we process your personal data

-how long we process your personal data

-what data management rights apply to you

-whether we will pass on your personal data and to whom

Right to rectification:

You have the right to have inaccurate personal data about you rectified by the University upon request.

The right to have information deleted

You may request in writing that the University delete your personal data. This provision shall not apply to the extent that the processing is necessary for: compliance with an obligation under EU or Member State law to which the University is subject to and to whichthe processing of personal data is subject; or the establishment, exercise or defence of legal claims.

Right to restriction

At the written request of the Data Subject

1. a) the Data Subject debates the accuracy of the personal data, in which case the restriction shall apply for a period which allows the Data Controller to verify the accuracy of the personal data;
2. b) the processing is unlawful and the Data Subject opposes the deletion of the data and instead requests that their use be restricted;
3. c) the data controller no longer needs the personal data for thepurpose of data processing, but the Data Subject requests them in order to submit, enforce or protect legal claims

Your request for a restriction on data processing must lso indicate the reason for requesting the restriction.

Right to protest

You have the right to object to data processing based on a legitimate interest for reasons related to your own situation. In this case, the University will investigate your personal data processing on the basis of a balance of interests and, if your request is found to be well-founded, we will delete your personal data. We will inform you of the result of the investigation in every case.

Common rules for the exercising of rights

The University shall, without undie delay, provide information in written form, in an accessible format, within one month of the reception of the application, on the measure taken in response to the application, or on its rejection and reason.If necessary, taking into account the complexity of the application and the number of applications, this period may be extended by a further two months.

8. Your law enforcement options

If you consider that the data processing is unlawful, you can apply to the Hungarian National Authority for Data Protection and Freedom of Information (NAIH) or a court as follows:

-Notification of the competent authority

If you consider that the processing of your personal data – or the exercise of your rights to access public data or data of public interest – has been infringed or is in danger, you may initiate an investigation with the supervisory authority:

Contact information of NAIH:

Initiation of an official procedure

If you find the processing of your personal data illegal, you can initiate a civil lawsuit against the Data Controller. In Hungary, such a lawsuit falls within the the jurisdiction of the regional courts. You can find out about the jurisdiction and contact information of the courts on the following website: www.birosag.hu