Please read through the following information carefully.
DATA PROTECTION INFORMATION SHEET
The purpose of the procession of personal data: Participation in Freshhh programme, keeping contact between MOL Plc. and the programme applicants and inform them about future opportunities/programmes at MOL Group.
The legal basis of the procession of personal data: data subject’s consent
The name of the data controller: MOL Plc.
The name of the data processor: InterSim Kft.
Duration of data processing: 1 year
Data protection registration number:
- Database building, registration: NAIH-74132/2014
- Sending promotions/ads: NAIH-74133/2014
THE FRAMEWORK OF DATA PROCESSING:
MOL Plc. controls your personal data only for the purposes mentioned above. They provide the security of your personal data and take the suitable measures against unauthorised access, alteration, transmission, public disclosure, deletion or destruction, as well as damage and accidental loss, and to ensure that stored data cannot be corrupted and rendered inaccessible due to any changes in or modification of the applied technique. MOL Plc. assures that your personal data will not be used for any other purpose and hereby inform you about your right to ask for information on your personal data processed by MOL Plc. The duration of data processing is 1 year. Your personal data is processed in line with Act CXII of 2011 on the Right of Informational Self-Determination and on Freedom of Information (hereinafter referred to as: Freedom of Information Act). Your personal data will be erased after the period mentioned above.
MOL Plc. informs you that your consent means a freely and expressly given specific and informed indication of your wishes by which you signify your agreement to personal data relating to you being processed without limitation or with regard to specific operations.
Personal data may be processed also if the processing of personal data is necessary:
- for compliance with a legal obligation pertaining to the data controller, or
- for the purposes of the legitimate interests pursued by the controller or by a third party, and enforcing these interests is considered proportionate to the limitation of the right for the protection of personal data.
Where personal data is recorded under the data subject’s consent, the controller shall - unless otherwise provided for by law - be able to process the data recorded where this is necessary:
- for compliance with a legal obligation pertaining to the controller, or
- ffor the purposes of legitimate interests pursued by the controller or by a third party, if enforcing these interests is considered proportionate to the limitation of the right for the protection of personal data, without the data subject’s further consent, or after the data subject having withdrawn his consent.
YOUR DATA PROTECTION RIGHTS:
You may request from the data controller:
- information when his personal data is being processed,
- the rectification of his personal data, and
- the erasure or blocking of his personal data, save where processing is rendered mandatory.
Upon your request the data controller shall provide you with information concerning the data relating to you , including those processed by a data processor hired by MOL Plc. as data controller or by others based on its instructions, the sources from where they were obtained, the purpose, grounds and duration of processing, the name and address of the data processor and on its activities relating to data processing, and – if your personal data is made available to others - the legal basis and the recipients.
MOL Plc. must comply with requests for information without any delay, and provide the information requested in an intelligible form, in writing at your request, within not more than thirty days.
MOL Plc. may refuse to provide information to you in the cases defined under the Freedom of Information Act.
Where information is refused, MOL Plc. shall inform you in writing as to the provision of this Act serving grounds for refusal. Where information is refused, MOL Plc. shall inform you of the possibilities for seeking judicial remedy or lodging a complaint with the Nemzeti Adatvédelmi és Információszabadság Hatóság (National Authority for Data Protection and Freedom of Information) (hereinafter referred to as “Authority”).
In the event of any infringement of his rights, the data subject may file for court action against the controller.
When the court’s decision is in favour of the plaintiff, the court shall order MOL Plc. to provide the information, to rectify, block or erase the data in question, to annul the decision adopted by means of automated data-processing systems, to honour the data subject’s objection.
The court may order publication of its decision, indicating the identification data of MOL Plc. as well, where this is deemed necessary for reasons of data protection or in connection with the rights of large numbers of data subjects under protection by this Act.
MOL Plc. shall be liable for any damage caused to a data subject as a result of unlawful processing or by any breach of data security requirements.
Where MOL Plc. violates the rights of the data subject relating to personality as a result of unlawful processing or by any breach of data security requirements, the data subject shall be entitled to demand restitution from the data controller.
MOL Plc. shall also be liable for any damage caused by a data processor acting on its behalf, as well as for any restitution payable to the data subject for any violation by the data processor of his rights relating to personality. MOL Plc. may be exempted from liability for damages or for payment of restitution if he proves that the damage was caused by or the violation of the rights of the data subject relating to personality is attributable to reasons beyond his control.
No compensation shall be paid and no restitution may be demanded where the damage was caused by or the violation of rights relating to personality is attributable to intentional or negligent conduct on the part of the data subject.
MOL Plc. will provisionally use the following automatically generated information – not containing personal data – for the purposes of technical operation of the website:
- internet protocol address of the computer (IP-address),
- domain-name (URL),
- access data,
- inquiry of client file (file name and URL),
- HTTP reply code,
- data of website from where inquiry is made,
- quantity of bytes used during the visit,
- date of the visit,
- data of pages visited, or
- name of the used browser.
USE AND TRANSMISSION OF DATA
In case MOL Plc. intends to use the data provided by you for purposes other than the purpose of original data recording, MOL Group shall notify the data subject thereof, and obtain his/her prior consent thereto, and afford an opportunity for him/her to cancel such consent at any time thereafter.
MOL Plc. will not transmit any personal data treated to any third person, unless such transmission is provided for by legislative provisions, without the prior consent of the data subject thereto.
MOL Plc. shall be entitled to use data and information provided by you for purposes including but not limited to purposes listed below:
- market research, market analysis,
- analysis of customers’ habits,
- compilation of statistics of visitors,
- organisation of free prize draws and other gambling,
- provision of information about new products and services,
- provision of information about actions,
- management of customers’ complaints,
- management of orders.
MOL Plc. shall treat any information about the person, personal data and business relations with the MOL Plc. of its customers, partners and other clients as confidential information. No release can be given from the obligation of management of confidential information other than by the data subject.
SECURITY OF DATA PROCESSING
In order to avoid unauthorized use of personal data managed by MOL Plc. and to avoid misuse of such data, MOL Plc. has taken comprehensive technical and operational safety measures. Our safety procedures have regularly been controlled and improved in harmony with technological development.
You are warned that you may have access to the websites of other companies and organisations from the website of MOL Group. MOL Group will not be liable either for the content and accuracy of the data at such websites, or for the security of your data. It is recommended for you, in case you use such websites, to be persuaded of the data protection policy of the organisation publishing such websites.