Privacy Policy

PRIVACY NOTICE AND INFORMATION ON THE PROCESSING OF PERSONAL DATA

 

CONFERENCE REGISTRATION

 

The protection of personal data is the utmost importance to us, and this Privacy Notice explains what personal data we process about you, for what purposes and on what legal basis. The Privacy Notice also contains your rights.

 

Data of the Data Controller

Data Controller: Cereal Research Non-profit Ltd.
Headquarters: 6726 Szeged, Alsó-kikötő sor 9.
Company registration number: 06-09-013499
Tax number: 18460777-2-06
Website: www.cerealszeged2023.eu
Phone: +3662435235
Contact details of the Data Protection Officer:

 

Laws on which the processing is based

  • Regulation (EU) 2016/679 of the European Parliament and of the Council (27 April 2016) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR)
  • Act CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information (Infotv.)
  • Act V of 2013 on the Civil Code (Civil Code Act)
  • Act CLV of 1997 on Consumer Protection
  • Act C of 2000 on Accounting

 

Data management activities

 

Registration for the https://www.cerealszeged2023.eu conference

 

Purpose of data processing

Registration ensures participation in THE EUCARPIA CEREALS SECTION conference available on the website

Legal basis for data processing

Article 6(1)(b) GDPR, fulfillment of the contract

Categories of persons concerned

Any natural person who registers for the conference.

Scope of personal data

Title, first and last name, e-mail address, telephone number, address, conference registration fee payment details (credit card details, bank transfer details), billing type (company, individual), company name, billing address, e-mail address for electronic invoice.

Data retention time

Until the end of the 5th year following the conference.

Data transfer

According to Article 44-49. GDPR data transfer does not happens.does not take place.

Recipients

The staff of the Cereal Research Non-profit Ltd. participating in the organisation of the conference.

Source of data

The source of the personal data is the data subject.

How to provide data, consequences

The provision of data is voluntary. If you do not provide the required information, you will not be able to use the registration service.

 

 

Taking photos and video footage at the event

 

Purpose of data processing

Taking and using photos and videos during the event and documenting the event.

Legal basis for data processing

Article 6(1)(a) GDPR, consent of the data subject.

Categories of persons concerned

Any natural person attending the event

Scope of personal data

Photo and video recordings of the natural person.

Data retention time

Until the consent is withdrawn, but not later than the end of the 5th year following the event.

Data transfer

According to Article 44-49. GDPR data transfer does not happens does not take place.

Recipients

The staff of the Cereal Research Non-profit Ltd. participating in the organisation of the conference.

Source of data

The source of the personal data is the data subject.

How to provide data, consequences

The provision of data is voluntary. If you do not give your contribution, you will not be included in photos of the event.

 

 

 

Signing the participation/attendance sheet

 

Purpose of data processing

Maintaining an attendance sheet for conference participants, which forms the basis for invoicing and other claims.

Legal basis for data processing

Article 6(1)(b) GDPR, fulfillment of the contract

Categories of persons concerned

Any natural person who has registered for the conference.

Scope of personal data

Title, first and last name, company name, signature, conference/event name, time, place.

Data retention time   

Until the end of the 5th year following the conference.

Data transmission

According to Article 44-49. GDPR data transfer does not happens.does not take place.

Recipients

The staff of the Cereal Research Non-profit Ltd. participating in the organisation of the conference.

Source of data

The source of the personal data is the data subject.

How to provide data, consequences

The provision of data is voluntary. If you do not provide the required information, we will not be able to prove that you attended the event in the event of a complaint.

 

 

Management of conference/event speaker’s data

 

Purpose of data processing

Processing of the data of the person participating as a speaker in the organisation and management of the conference.

Legal basis for data processing

Article 6(1)(b) GDPR, fulfillment of the contract.

Categories of persons concerned

Natural person participating as a speaker at the conference.

Scope of personal data

Title, first and last name, email address, phone number, company name, job title, photo and video.

Data retention time   

Until the end of the 5th year following the conference.

Data transmission

According to Article 44-49. GDPR data transfer does not happens.does not take place.

Recipients

The staff of the Cereal Research Non-profit Ltd. participating in the organisation of the conference.

Source of data

The source of personal data is the speaker.

How to provide data, consequences

The provision of data is voluntary. If you do not provide the required information, you will not be able to participate as a speaker.

 

 

 

Complaints handling

 

Purpose of data processing

Handling any complaints about the conference.

Legal basis for data processing

Article 6(1)(c) of the GDPR, performance of a legal obligation pursuant to Article 17/A(6) of Act CLV of 1997 on Consumer Protection.

Categories of persons concerned

Any natural person attending the conference.

Scope of personal data

Name, e-mail address, telephone number, user name, text of the complaint, the record of the complaint if the complaint was made by telephone, other personal data provided in the complaint.

Data retention time

By the end of the 5th year following the investigation and final closure of the complaint.

Data transmission

According to Article 44-49. GDPR data transfer does not happens

Recipients

Data Protection Officer

Source of data

The source of the personal data is the complainant.

How to provide data, consequences

The provision of data is voluntary. If you do not provide the required information, we may not be able to investigate your complaint.

 

 


Billing

 

Purpose of data processing

Issue an invoice for the cost of the conference.

Legal basis for data processing

Article 6 (1) (c) GDPR, fulfilment of a legal obligation under the Act on Accounting of 2000. C. Act 2000, § 169 (1).

Categories of persons concerned

Natural person requesting a service
person.

Scope of personal data

Name, address, service ordered, fee, invoice date, payment deadline.

Data retention time

Until the end of the 8th year after the invoice is issued.

Data transmission

According to Article 44-49. GDPR data transfer does not happens does not take place.

Recipients

The financial and invoicing staff of the Cereal Research Non-profit Ltd .

Source of data

The source of personal data is the person attending the event.

How to provide data, consequences

Providing the data is mandatory. If you do not provide the required information, we will not be able to issue the invoice.

 

 

Data security measures

The Data Controller shall take appropriate IT, technical and personnel measures to protect the personal data it processes against, inter alia, unauthorised access or unauthorised alteration.

 

Rights of the data subject in relation to data processing
The Authority shall comply with a request to exercise the rights of the data subject within a maximum of one month from the date of receipt of the request. The date of receipt of the request shall not count towards the time limit. The Authority may, where necessary, taking into account the complexity of the request and the number of requests, extend this time limit by a further two months. The Authority shall inform the person concerned of the extension, stating the reasons for the delay, within one month of receipt of the request.
The right of access
The data subject shall have the right to obtain from the Authority, through the contact details provided in point 1, information as to whether or not personal data concerning him or her are being processed and, if such processing is taking place, the right to be informed that

  • which personal data are processed by the Authority; on what legal basis; for what purpose; for how long; and
  • to whom, when, under what law, to which personal data the Authority has given access or to whom it has transmitted personal data;
  • the source of your personal data;
  • whether the Authority uses automated decision-making and its logic, including profiling.

The Authority shall provide a copy of the personal data which are the subject of the processing free of charge for the first time upon request by the data subject, and may charge a reasonable fee based on administrative costs thereafter.
In order to ensure data security and to protect the rights of the data subject, the Authority shall verify the identity of the data subject and of the person who wishes to exercise the right of access, and to this end, the provision of information, access to or copying of data shall be subject to the identification of the data subject.
The right to rectification
Given the nature of the processing, the exercise of this right by the data subject is logically excluded.

 

Right to blocking (restriction of processing)
The data subject is entitled to the right to may request, through the contact details provided in point 1, that the processing of his or her personal data be restricted by the Authority (by clearly indicating the limited nature of the processing and ensuring that it is kept separate from other data) if he or she contests the accuracy of his or her personal data (in which case the Authority will restrict the processing for the period of time necessary to verify the accuracy of the personal data); the processing is unlawful and the data subject opposes the erasure of the data and requests instead that its use be restricted; the controller no longer needs the personal data for the purposes of the processing, but the data subject requires them for the establishment, exercise or defence of legal claims; or the data subject has objected to the processing (in which case the restriction applies for a period of time until it is established whether the legitimate grounds of the controller override the legitimate grounds of the data subject).
The right to protest
The data subject may object to the processing of his or her personal data if he or she considers that the Authority is processing his or her personal data in a way that is incompatible with the purposes of this privacy notice, by using the contact details provided in point 1. In such a case, the Authority must demonstrate compelling legitimate grounds for the processing of the personal data which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.

The right to erasure
The data subject may exercise the right to erasure in relation to the processing described in this notice only if the data are no longer necessary for the performance of a task carried out in the exercise of official authority vested in the Authority.

Right to legal redress
If the data subject considers that the Authority has infringed the applicable data protection requirements in the processing of his or her personal data, he or she may lodge a complaint with the Authority (National Authority for Data Protection and Freedom of Information, address: 1055 Budapest, Falk Miksa utca 9-11., postal address: 1363 Budapest, Pf. 9. E-mail: ugvfelszolgalat@naih.hu, website: www.naih.hu) or may take the matter to court, which will rule on the matter out of turn, in order to protect his or her data. In this case, you are free to choose whether to bring your action before the courts having jurisdiction for the place of residence (permanent address) or the place of stay (temporary address) or the place where the Authority is established. You can find the court of the place of residence or domicile at http://birosag.hu/ugvfelkapcsolati-portal/birosag-kereso. The competent court for the place where the Authority is located is the Metropolitan Court of Budapest.
The data subject may exercise the right to erasure in relation to the processing described in this notice only if the data are no longer necessary for the performance of a task carried out in the exercise of official authority vested in the Authority.

 

 

Data processing information on data transmission related to the use of online payment services

 

Who handles your personal data?
The data controller is Cereal Research Non-profit Ltd. (6726 Szeged, Alsó-kikötő sor 9, Telephone: +36 62/435-235 Fax:

What part of your personal data is processed, for what purpose, on what legal basis and for how long?
The purpose of processing personal data, the legal basis thereof and the duration of the processing, as well as the scope of the processed data are summarized in the table below:

 

Range of processed data

I. Your
- name
- billing address,
- e-mail address
- telephone

Purpose of the data processing

more secure customer authentication performed by the issuing bank

Legal basis of the data processing

your consent

Duration of the data processing

In the case of personal data, for the duration of 3DS authentication, following which the data will be deleted.

 

What rights do you have?

Pursuant to Regulation 2016/679/EU of the European Parliament and the Council on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, you
(i) may withdraw your consent to the data processing at any time, but the withdrawal of the consent shall not affect the lawfulness of the consent-based processing prior to the withdrawal. Cereal Research Non-profit Ltd. may process personal data for the purpose of fulfilling their legal obligations or legitimate interests even after the withdrawal of consent, provided that the enforcement of the interest is proportionate to the restriction of the right to the protection of personal data,
(ii) may request access to personal data relating to you by soliciting information concerning the data processed by Cereal Research Non-profit Ltd. Information and copies of processed data are provided free of charge. Additional copies requested by you may be charged a reasonable fee based on administrative costs,
(ii) may request the rectification or erasure of personal data concerning you or the restriction of the processing of personal data concerning you,
(iii) may request Cereal Research Non-profit Ltd. (gk) to indicate the addressees who have been informed of the rectification or erasure of data or the restriction of data processing,

Who are the recipients of your personal data?

Cereal Research Non-profit Ltd.

What happens if you do not consent to the processing of your personal data listed in Section II?

If you do not consent to the transfer of data, the payment process will takes place as follows: The merchant will redirect you to the CIB Bank website, where you will have to enter your card details (card number, expiration date, validation code). CIB Bank will then redirect you to the website of the bank that issued your card, where you will have to complete an identification process (e.g. by entering a code sent to your mobile phone). If the identification is successful, the payment will be completed and you will receive a notification of the transaction. You will then be automatically redirected to the merchant’s interface.

What remedies are available to you?

In connection with the lawfulness of data processing, you may request that the National Authority for Data Protection and Freedom of (1055 Budapest, Falk Miksa utca 9-11., Postal address: 1363 Budapest, Pf.: 9., website: www.naih.hu, phone: +36 (1) 391-1400, fax: +36 (1) 391-1410, central e-mail address: ugyfelszolgalat@naih.hu) initiate a proceeding or you may turn to the court. We recommend that you contact our Data Protection Officer before turning to the National Authority for Data Protection and Freedom of Information or to the court.

How to contact the Data Protection Officer?

 

 

Declaration

I declare that I have understood and acknowledged the information related to data processing. I hereby voluntarily and in possession of appropriate information give my consent to Cereal Research Non-profit Ltd. to transfer my freely given personal data
to CIB Bank Zrt. for the purposes specified in the above prospectus.

 

Data processing information on data transmission related to the use of online payment services

Back