Confidentiality and data protection

Cookie Policy

On data processing related to the use of „cookies” on the websites of the University of Pécs

KTK.PTE.HU/EN

The University of Pécs (hereinafter: University) is committed to the fair and lawful processing of personal data in order to ensure that its data processing activities are in compliance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as: GDPR), with Act CXII of 2011 on Informational Self Determination and the Freedom of Information (hereinafter: Privacy Act), to Act CVIII of 2001 on certain issues of electronic commerce activities and information society services, and other legislation, and to the good practices developed by the Hungarian National Authority for Data Protection and Freedom of Information (hereinafter referred to as: NAIH). Precise details are set out below.

Please note that the website of the University uses cookies to facilitate the operation and use of the website, to track activity on the website, and to display relevant offers.

A "cookie" is a small text file that is stored by the visited website on the computer or other device used to browse the internet, which, among other things, collects information, remembers the visitor's preferences, and generally makes it easier for users to use the website. Cookies alone do not collect any data stored on the computer; their role is to make browsing more convenient for users.

1. The data controller

Name: University of Pécs

Registered office and contact address: 7622 Pécs, Vasvári Pál str. 4.

Represented by: Dr. Miseta Attila rector és Decsi István chancellor

Name of data protection officer: Dr. Szőke Gergely László, PhD

Contact information: adatvedelem [at] pte.hu; +36 (30) 179 5672

2. The scope of the processed data and the purpose and legal ground of the data processing

The University uses "cookies" that are strictly necessary for the proper functioning of the website and for the performance of its task carried out in the public interest (Article 6(1)(e) of the GDPR), as well as other "cookies" with the explicit and voluntary consent of the data subject (Article 6(1)(a) of the GDPR) to facilitate the use of the website. A list of the "cookies" used, their purpose, and the duration of their processing is summarised in the table in section 3.

The website uses session cookies which are strictly necessary and indispensable for the use of the website, to enable visitors to browse the website and its sub-sites and use its functions and services fully and smoothly. These cookies are stored until the end of the session (browsing), or for the time specified in the table and are automatically deleted from the computer or other device used to browse the site when the browser is closed. For all data subjects who visit the website and its sub-sites, the web server logs the hostname (IP address) and referring IP address of the device used in order to improve and make the website more user-friendly and to find and correct errors occurring during the use of the pages more quickly.

3. Cookies used

„Cookies” that are essential for the functioning of the website

Performance „Cookies”

Targeting „Cookies”

Additional „Cookies”

4. The scope of personnel who can access the personal data, data processing, data transfer

The data can only be accessed by the employees of the organizational unit of the University which organizational unit needs the data to perform its tasks. Employees are bound by the obligation of confidentiality regarding the personal data they learn.

The University shall not use a data processor for data processing.

Cookies from an external Partner are recognised by the relevant service provider, whose information is available at:

https://policies.google.com/technologies/cookies?hl=hu

https://privacy.microsoft.com/en-us/privacystatement

https://www.hotjar.com/legal/policies/privacy/

The University uses Marble Digital Ltd. as its data processor for the development and smooth operation of the Faculty's website.

Name: Marble Digital Kft.

Registered office and contact address: 1132 Budapest, Visegrádi str. 15. V/2.

Contact information: hello [at] marbledigital.eu

The University also transfers personal data to the operator of the MailerLite service for the purpose of sending newsletters. The data is transferred to a third country, for which the service provider provides appropriate safeguards in accordance with its policies to protect the data transferred. Detailed information.

Name: MailerLite

Registered office and contact address: Ground Floor, 71 Lower Baggott Street, Dublin 2, D02 P593, Ireland

Contact information: academy [at] mailerlite.com

5. Data Security

The University shall process the personal data in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction, or damage, using appropriate technical or organisational measures. More information can be found in Articles 20-22. of the University’s Data Protection Regulation and in the University’s IT Policy.

6. Rights of data subjects and how to exercise them

6.1. The Participant has the right to access the information in relation with the data processing related to him/her defined in Article 15 of the GDPR (right of access), including in particular, information by the University about

• the types of personal data,
• the purpose and legal ground,
• the source,
• the duration of the processing or the criteria for determining the duration,
• who, when, on what legal basis, to which personal data was granted access to by the University or to whom did it transfer the data,
• the rights and possible legal remedies of the data subject during the data processing.

6.2. The Participant shall have the right to rectification of inaccurate (false or incomplete) personal data concerning him or her pursuant to Article 16 of the GDPR. (right to rectification)

6.3. According to Article 17 of the GDPR, the data subject have the right to erasure (’right to be forgotten’), if

• the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
• the data subject withdraws consent on which the data processing is based and there is no other legal ground for the data processing;
• the data subject successfully objected against the processing of the data pursuant to point 6.7;
• the personal data have been unlawfully processed;
• the personal data have to be erased for compliance with a legal obligation;

The data will not be erased if the data processing is necessary:

• for compliance with a legal obligation which requires the data processing or to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
• for the establishment, exercise or defence of legal claims;
• for exercising the right of freedom of expression and information
• for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in so far as practicing the right to erasure is likely to render impossible or seriously impair the achievement of the objectives of that data processing

6.4. According to Article 18 of the GDPR, the data subject has the right to restriction of processing (right to restriction), if

• the accuracy of the personal data is contested by the data subject, for a period enabling the University to verify the accuracy of the personal data;
• the data subject has objected to the processing pursuant to point 6.7; in this case, the restriction shall apply for the period until it is established whether the University upholds the objection.
• the processing is unlawful, and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
• the University no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims;

Where processing has been restricted, such personal data shall, with the exception of storage, only be processed with the data subject's consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

6.5. According to GDPR Article 7 (3), the data subject shall have the right to withdraw his or her consent at any time (right to withdraw the consent). The withdrawal must be made in writing or in the form in which the consent was given.The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

6.6. In the case of automated (electronic) processing based on consent or for the performance of a contract, the data subject has the right to receive personal data relating to him or her, provided by him or her in a commonly used electronic format or to request the University to transfer the data to another controller, as provided for in Article 20 of the General Data Protection Regulation (right to data portability).

6.7. The data subject shall have the right to object (right to object), on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on balance of interest, or necessary for a task carried out in the public interest or in the exercise of official authority (the right to object). According to Article 21 of the GDPR, the University shall no longer process the personal data unless it demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.

6.8. The data subject can exercise his or her rights free of charge via the contact person or the data protection officer listed in point 1. The exercise of the data subject's rights may in most cases require the identification of the data subject, while in some cases (e.g. the exercise of the right to rectification) additional information may be required. The application for the exercise of the rights of the data subject shall be assessed by the University within one month at the latest. If necessary, taking into account the complexity of the application and the number of applications, this period may be extended by a further two months, the extension being notified to the person concerned within 1 month.

7. Deleting cookies and withdrawing consent

All browsers allow you to change your cookie settings; however, because cookies are intended to facilitate the usability and processes of our website, if you prevent or delete cookies, users may not be able to use the full functionality of our website or the website may not function as intended in their browser. You can find the settings for cookies in the "Settings" menu of your browsers, and you can find more information about setting cookies in the "Help" menu of each browser, or you can set them individually in the cookie information window that pops up.

With consent, the browser will store cookies on the data subject's computer or other devices during use to recognise the data subject's preferences. If the data subject wishes to withdraw their consent, they can do so at any time in their browser's cookie settings, depending on the browser type.

8. Complaints and remedies

You can make any complaints about data processing at the contact details of the contact person indicated in point 1, or you can contact the University's data protection officer (adatvedelem [at] pte.hu). If you wish to make a complaint by post, you can send a mail to 7622 Pécs Vasvári Pál u. 4. addressed to the contact person indicated in point 1 or to the data protection officer.

You may seek remedy at the Hungarian National Authority for Data Protection and Freedom of Information (contact address: H-1363 Budapest Pf.:9, Tel.: +36-1-391-1400, e-mail: ugyfelszolgalat [at] naih.hu, website: https://naih.hu), if you deem it necessary due to a supposed legal violation or in direct hazard of it.

In the event of unlawful processing, you may submit a civil action to the Regional Court of your place of residence or domicile (of your choice).