Privacy Policy - Regarding the processing of applicants/enrollees/students data

We would like to inform you that Széchenyi István University attaches great importancet o the protection of personal data and wishes to ensure the right of individuals to self-determination under all circumstances.

1. Name of the Data Controller

Széchenyi István University (hereinafter: the University)

address: 9026 Győr, Egyetem square 1.

email: sze@sze.hu

phone number: +36(96) 503-400

website: uni.sze.hu

2. Applicable legislation of data processing:

- Regulation (EU) 2016/679 of the European Parliament and the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation);

- Act CXII of 2011 on Informational Self-Determination and Freedom of Information (Privacy Act);

- Act CCIV of 2011 on National Higher Education (Nftv.)

1. Processing of data related to student status

I.1. Data subjects:

- Persons applying to/enrolling at/establishing student status at Széchenyi István University.

I.2. Scope of processed data, purpose, duration and legal basis of data processing, data transfer

I.3. Data transfer and processing

Conditions for data transfer:

Data may be transferred:

1. a) to the operator for tasks related to their control;

(b) to the court, police, public prosecutor's office, court bailiff and state administrative body for data necessary to decide a specific case;

(c) to the national security service for all data necessary for performing the tasks specified in the Nbtv;

(d) to the body responsible for operating the higher education information system;

(e) data relating to training and student status for the body responsible for recording compliance with the conditions for Hungarian state scholarships; (Nbtv. Annex 3, Point I/B 4).

The university uses the following data processors for this data processing:

- NEPTUN operator

- hosting provider

- e-learning system operator (e.g. Impera, Moodle)

- for international students, the operator of the online application platform (DreamApply OÜ Pärnu mnt 102b 11312, Tallinn, Estonia)

1. Processing of data related to distance learning and remote examinations

Lectures broadcast online by the university, including those in small group or individual formats, consultations, and other teaching aids, as well as image and sound recordings made available, are the property of the university and may only be reproduced (recorded, saved, copied or shared) with the university's express permission. These materials are intended solely for students' own preparation and must not be used for any other purpose or in any other way. Violation of these rules will result in personal, copyright and legal consequences, as well as university ethical and disciplinary consequences.

II.1. Data subjects:

-Persons who have established student status at Széchenyi István University.

II.2. Scope of processed data, purpose, duration and legal basis of data processing, data transfer

II.3. Data transfer, data processing

-No data transfer takes place

-E-learning system operator (e.g. Impera, Moodle)

• Data processing related to the DreamApply interface

III.3. Data transfer, data processing

-No data transfer takes place

-Data processor: DreamApply OÜ Pärnu mnt 102b 11312, Tallinn, Estonia) (operator of the interface)

The names and contact details of international students applying through agents are also available to agents on the DreamApply platform.

3. Data security measures

The University shall ensure the adequate security of personal data by implementing appropriate technical or organizational measures, including protection against unauthorized or unlawful processing, accidental loss, destruction, or damage.

4. Your rights regarding data management:

Your data protection rights and remedies, and their limitations are set out in detail in the GDPR (In particular Articles 15, 16, 17, 18, 19, 21, 22, 77, 78, 79 and 82). At any time, you may request information about your data, request the rectification, erasure or restriction of your personal data, or object to the processing of data based on a legitimate interest.

You may exercise your rights through the following contact details:

in person: 9026 Győr, Egyetem square 1.

by phone: +3696 503 400

on e-mail: adatvedelem@sze.hu

by phone: +3696/503-400, extension: 3173

-Right to request information:

You may request information about the processing of your personal information at any time in written form, such as:

-what personal information is being processed

-the legal basis on which we process your personal data

-the purpose for which we process your personal data

-the source from which we process your personal data

-how long we process your personal data

-what data management rights apply to you

-whether we will pass on your personal data and to whom

-Right to rectification:

You have the right to have inaccurate personal data about you rectified by the University upon request.

-Right to erasure

You have the right to request that the University erases your personal data. This right does not apply if the processing of personal data is necessary for compliance with a legal obligation under EU or Member State law, or for the establishment, exercise or defence of legal claims.

-Right to restriction:

At the written request of the Data Subject

1. a) the Data Subject debates the accuracy of the personal data, in which case the restriction shall apply for a period which allows the Data Controller to verify the accuracy of the personal data;
2. b) the processing is unlawful and the Data Subject opposes the deletion of the data and instead requests that their use be restricted;
3. c) the data controller no longer needs the personal data for thepurpose of data processing, but the Data Subject requests them in order to submit, enforce or protect legal claims

Your request for a restriction on data processing must lso indicate the reason for requesting the restriction.

-Right to protest:

You have the right to object to data processing based on a legitimate interest for reasons related to your own situation. In this case, the University will investigate your personal data processing on the basis of a balance of interests and, if your request is found to be well-founded, we will delete your personal data. We will inform you of the result of the investigation in every case.

-Common rules for exercising rights:

The university must provide written information in a publicly accessible form within one month of receiving the request. This information must detail the action taken on the request or its rejection, along with the reasons for it, and must be provided without undue delay. If necessary, taking into account the complexity of the request and the number of requests received, this deadline may be extended by a further two months.

5. Your law enforcement options:

If you consider that the data processing is unlawful, you can apply to the Hungarian National Authority for Data Protection and Freedom of Information (NAIH) or a court as follows:

-Notification of the competent authority

If you consider that the processing of your personal data – or the exercise of your rights to access public data or data of public interest – has been infringed or is in danger, you may initiate an investigation with the supervisory authority:

Contact information of NAIH:

-Initiation of an official procedure

If you find the processing of your personal data illegal, you can initiate a civil lawsuit against the Data Controller. In Hungary, such a lawsuit falls within the the jurisdiction of the regional courts. You can find out about the jurisdiction and contact information of the courts on the following website: www.birosag.hu

Nftv. Annex 3 I/B. Student data

1. Data recorded under this Act:
2. a) data related to admission:
3. aa) the applicant's first and last name, gender, photograph, first and last name at birth, mother's birth surname and first name, place and date of birth, nationality, place of residence, place of stay, notification address, e-mail address and other contact details, telephone number, education identification number, type and number of identity document, its validity, tax identification number, social security identification number, digital citizen identification number, in the case of non-Hungarian citizens, the legal basis for their stay in Hungary and the document authorizing their stay – in accordance with a separate law, in the case of persons with the right of free movement and residence, the document certifying their right of residence – the Hungarian identity card, Hungarian relative's card, international insurance document details,
4. ab) data relating to the secondary school leaving examination,
5. ac) data relating to secondary school,
6. ad) data necessary for the assessment of the application for admission,
7. ae) data relating to the admission procedure, admission ID,
8. af) the identification number of the declaration referred to in Section 48/D(2);
9. b) data related to student status:
10. ba) the student's name, gender, birth name, mother's name, place and date of birth, nationality, place of residence, place of stay, contact address and telephone number, e-mail address, in the case of non-Hungarian citizens, the legal basis for their stay in Hungary and the name and number of the document authorizing their stay – in accordance with a separate law, in the case of persons enjoying the right of free movement and residence, the document certifying their right of residence,
11. bb) the type of student (visiting student) status, date and manner of commencement and termination, name of the course of study pursued by the student, state support and work schedule, expected date of completion of the course, evaluation of the student's studies, examination data, semesters commenced, period of support received, suspension of student status,
12. bc) the place and time of foreign higher education studies,
13. bd) credits earned and recognized during the training, studies taken into account,
14. be) data on student allowances, data necessary for assessing eligibility for allowances (social situation, parents' data, maintenance data),
15. bf) data on student work,
16. bg) data related to student disciplinary and compensation matters,
17. bh) data necessary for assessing special treatment for persons with disabilities,
18. bi) data on student accidents,
19. bj) the serial number of the student's student ID card, the identification number of the master data sheet,
20. bk) * the student's educational identification number, personal identification document number, photograph, social security identification number,
21. bl) * electronic copies of the thesis (diploma thesis) and diploma supplement, data relating to the completion of practical training, the absolutorium, the final examination (doctoral defense), the language examination, as well as the diploma, diploma supplement, and micro-certificate,
22. bm) data necessary for the fulfillment of the rights and obligations arising from the student's legal status;
23. c) data related to student career tracking;
24. d) the student's tax identification number;
25. e) data used to identify documents certifying the data;
26. f) data on fees and reimbursements paid by the student – installment payment discounts, deferrals, exemptions related to the obligation;
27. g) in the case of student or housing support, if the student is eligible for infant care allowance, child care allowance, child-rearing support, child care allowance, regular child protection support, or due to their disadvantaged situation, data on these fees and support;
28. h) data on scholarships paid to support the student's studies, taking into account the student's legal status, as established by the Government by decree in accordance with Subsection (1) and (2) of Section 85;
29. j) data concerning the existence and type of the loan granted by the Student Loan Center, and in the case of a fixed-purpose loan, the amount of the student loan requested by the student, the number of the loan agreement, the amount transferred to the higher education institution, and the date of the transfer.
30. k) the date and reason for removal from the personal data and address register.
31. Purpose of data processing: in accordance with Section 18(1). The higher education institution may process personal and special data only in connection with the legal relationship, the determination and fulfillment of benefits, discounts, and obligations, for reasons of national security, for the purpose of managing the records specified in this Act, to the extent appropriate for the purpose, and for the purpose specified.
32. Duration of data processing: eighty years from the date of notification of termination of student status.
33. Conditions for data transfer: data may be transferred:
34. a) to the maintainer, all data necessary for the performance of tasks related to the maintainer's control;
35. b) to the court, the police, the public prosecutor's office, the court bailiff, and the state administrative body, for data necessary to decide on a specific case;
36. c) to the national security service, for all data necessary to perform the tasks specified in the Nbtv.
37. d) all data to the body responsible for the operation of the higher education information system;

e)

1. f) to the body responsible for recording compliance with the conditions for Hungarian state scholarships in relation to training and student status.
2. The higher education institution shall keep records of data relating to the student's marital status and status as a student with children for a period of ten years from the date of notification of the termination of the student's legal status for the purpose of determining the period of support for Hungarian state scholarships.