This General Privacy Policy (hereinafter referred to as the "Policy") sets out the rights and obligations of YCO digital Ltd. (hereinafter referred to as the "Service Provider") and the Client (hereinafter referred to as the "Client") using the electronic information platform provided by the Service Provider through the website https://yco.hu (hereinafter referred to as the "Website") (Service Provider and Client together hereinafter referred to as the "Parties"). The Policy applies to all legal transactions and services that take place through the Website https://yco.hu.
YCO digital Kft. (hereinafter referred to as the "Data Controller") pays special attention to the protection of personal data, compliance with mandatory legal provisions, and safe and fair data processing.
Data of the Data Controller:
COMPANY NAME: YCO digital Korlátolt Felelősségű Társaság
Registered office: 7622 Pécs, Siklósi út 3.
Representative: Gergely Fincza
Tax number: 23826836-2-02
Company registration number: 02-09-078609
Phone number: +36 30 480 0513
Website: https://yco.hu
E-mail: fincza.gergely@yco.hu
The Data Controller shall in all cases process the personal data provided to it in compliance with the applicable Hungarian and European legislation and ethical requirements, and shall in all cases take the technical and organisational measures necessary for the proper and secure processing of the data.
These rules are based on the following legislation in force:
on certain aspects of related services
The Data Controller undertakes to unilaterally comply with this Policy and requests that its customers also accept its provisions. The Data Controller reserves the right to change the Privacy Policy, in which case the amended Privacy Policy will be published publicly.
IN OUR POLICY, DATA PROTECTION TERMS HAVE THE FOLLOWING MEANINGS:
Personal data: any data that can be associated with a specific natural person (identified or identifiable) (hereinafter referred to as "data subject"), the inference that can be drawn from the data concerning the data subject. The personal data shall retain this quality during processing for as long as the link with the data subject can be established. In particular, a person shall be regarded as identifiable where he or she can be identified, directly or indirectly, by reference to a name, an identification mark or to one or more factors specific to his or her physical, physiological, mental, economic, cultural or social identity.
Contribution: a voluntary and explicit indication of the data subject's wishes, based on appropriate information, by which he or she gives his or her unambiguous consent to the processing of personal data concerning him or her, whether in full or in part.
Protest: a statement by the data subject objecting to the processing of his or her personal data and requesting the cessation of the processing or the erasure of the processed data.
Data Controller: a natural or legal person or unincorporated body which, alone or jointly with others, determines the purposes for which the data are to be processed, takes and implements decisions regarding the processing (including the means used) or has the Processor implement them.
Data management: whatever the procedure used, any operation or set of operations which is performed upon the data, in particular any collection, recording, recording, organisation, storage, alteration, use, retrieval, disclosure, transmission, alignment or combination, blocking, erasure or destruction of data, prevention of their further use, taking of photographs, sound recordings or images and the recording of physical characteristics which permit identification of a person.
Data transmission: making the data available to a specified third party.
Disclosure: making the data available to anyone.
Data deletion: rendering the data unrecognisable in such a way that it is no longer possible to recover it.
Data marking: the marking of data with an identification mark to distinguish it.
Data storage: to identify the data for the purpose of limiting its further processing permanently or for a limited period of time.
Data destruction: the complete physical destruction of the medium containing the data.
Data processing: the performance of technical tasks related to processing operations, irrespective of the method and means used to carry out the operations and the place of application, provided that the technical task is performed on the data.
Data processor: a natural or legal person or an unincorporated body which processes data on the basis of a contract, including a contract concluded pursuant to a legal provision.
Data file: the set of data managed in one register.
Third person: a natural or legal person or unincorporated body other than the data subject, the controller or the processor.
EEA country: a Member State of the European Union and another State party to the Agreement on the European Economic Area and a State whose nationals enjoy the same status as nationals of a State party to the Agreement on the European Economic Area under an international treaty concluded between the European Union and its Member States and a State not party to the Agreement on the European Economic Area.
Third country: any state that is not an EEA state.
Data protection incident: unlawful processing or processing of personal data, in particular unauthorised access, alteration, disclosure, transmission, disclosure, erasure or destruction, accidental destruction or accidental damage.
YCO digital Ltd. selects and operates the IT tools used to process personal data in the course of providing the service in such a way that the data processed:
YCO digital Ltd. takes appropriate measures to protect the data against unauthorized access, alteration, disclosure, disclosure, deletion or destruction and against accidental destruction.
YCO digital Ltd. ensures the security of data processing by technical, organisational and organisational measures that provide a level of protection appropriate to the risks associated with data processing.
YCO digital Kft. maintains the confidentiality of the data processing:
Personal data may only be processed if the data subject consents or if it is required by law or - on the basis of a law and within the scope specified therein - by a decree of a local government.
Personal data may be processed only for specified purposes, for the exercise of rights and the performance of obligations. The processing must comply with this purpose at all stages.
Only personal data which is necessary for the purpose of the processing, is adequate for the purpose, and is processed only to the extent and for the duration necessary for the purpose.
Personal data may be transferred and the different processing operations may be combined if the data subject has given his or her consent or if the law permits it and if the conditions for processing are met for each individual personal data item.
Personal data may be transferred from the country to a controller or processor in a third country, irrespective of the data medium or the means of data transfer, if the data subject has given his or her explicit consent or if the law allows it and the third country ensures an adequate level of protection for the processing of the personal data transferred.
In the case of mandatory data processing, the purpose and conditions of data processing, the scope and accessibility of the data to be processed, the duration of data processing and the identity of the controller are determined by the law or municipal decree ordering data processing.
The law may order the disclosure of personal data in the public interest, by expressly indicating the scope of the data. In all other cases, disclosure requires the consent of the data subject, or in the case of sensitive data, written consent. In case of doubt, it shall be presumed that the data subject has not given his or her consent.
The consent of the data subject shall be deemed to be given in respect of the data communicated by him or her in the course of his or her public activities or transmitted by him or her for the purpose of disclosure.
In a procedure initiated at the request of the data subject, his or her consent to the processing of the data should be presumed. This fact shall be brought to the attention of the data subject.
The data subject may also give his or her consent in the context of a written contract with the Data Controller for the performance of the contract. In this case, the contract must contain all the information that the data subject needs to know in relation to the processing of personal data, in particular the definition of the data to be processed, the duration of the processing, the purposes of the processing, the transfer of the data, the use of a processor. The contract must unambiguously state that the data subject, by signing it, consents to the processing of his or her data as provided for in the contract.
The right to the protection of personal data and the privacy rights of the data subject must not, unless an exception is provided for by law, be prejudiced by other interests in the processing, including the disclosure of data of public interest.
The processing of personal data by the Data Controller in the course of its activities is always based on law or voluntary consent. In some cases, in the absence of consent, processing is based on another legal basis or on Article 6 of the Regulation.
The Data Controller uses the assistance and services of the following Data Processors for its activities:
HOSTING PROVIDER DETAILS:
Company name: YCO digital Korlátolt Felelősségű Társaság
Head office: 7622 Pécs, Siklósi út 3.
Address for correspondence: 7622 Pécs, Siklósi út 3.
Company registration number: 02 09 078609
Tax number: 23826836-2-02
DATA ON VISITORS TO THE WEBSITE
The Data Controller does not record the user's IP address or any other personal data when visiting the websites operated by the Data Controller.
The html code of the websites operated by the Data Controller may contain independent links from and to external servers for web analytics purposes. The measurement also includes tracking of conversions. The web analytics provider does not process personal data, only browsing-related data that cannot be used to identify individuals. Currently, the web analytics services are provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, as part of the Google Analytics service.
The Data Controller may run remarketing ads through the Facebook and Google AdWords advertising systems. These providers may collect or receive data from the Controller's website and other internet sites through the use of cookies, web beacons and similar technologies. They use this data to provide measurement services or to target advertisements. Such targeted ads may appear on additional websites in the Facebook and Google partner network. Remarketing lists do not contain any personal data of the visitor and are not personally identifiable.
The user can delete the use of cookies from his/her own computer or prohibit their use in his/her browser. These options depend on the browser, but are typically available in the Settings / Privacy menu.
For more information about Google's and Facebook's privacy policies, please see the contact details below:
http://www.google.com/privacy.html and https://www.facebook.com/about/privacy/
Newsletters
If we contact you via HTML-formatted email messages, these may contain web beacons or similar technologies, such as clear GIFs or pixel tags. These are also known as clear GIF files. They provide feedback on whether the message has been received or opened and, if so, whether a link or other content has been clicked. These technologies usually place an image on a Web page or e-mail that is not visible to the naked eye and provide information such as the IP address of the computer used to view it, the URL or other identifier of the Web page or e-mail, the time of the view, the type of browser used to view it, and the identifier of any cookies previously placed on that device.
By visiting the Websites, you may consent to the use of cookies to improve your browsing experience and to provide you with personalised offers that are relevant to your interests. This page contains all information about the use of cookies that we use on the Website.
What are cookies?
Cookies, also known as "cookies", are small packets of data that your browser saves on your device when you request a Website (web server). Websites store temporary but important information in these cookies to provide services through the Websites, to identify users in this context, to improve the browsing experience, to display personalised offers tailored to users' interests and to analyse the traffic data of our Websites.
Consent to the use of cookies
When you load the Website, a pop-up window will ask you for your consent to the installation of cookies. If you do not give your consent, we will only install cookies on your device that are strictly necessary for the Website to function properly.
How can you control the use of cookies?
On the one hand, you can control how cookies are used on the yco.hu Privacy Center.
[gdpr_preferences class=”btn btn-primary” text=”Privacy preferences”]
Cookie settings
In addition to the above, you can also control the use of cookies through your browser settings.
Most browsers are set to allow cookies by default. For the most commonly used browsers, see the following websites for information on how to set cookies:
Apple Safari: LINK
Google Chrome: LINK
Opera: LINK
Mozilla Firefox: LINK
If you disable the use of cookies through your browser settings, the Websites or certain features of the Websites will be inaccessible or unusable until you re-enable the use of cookies, i.e. unblock them. At any time, you will have the opportunity to change your preferences, and thus the use of cookies.
You can also view and delete cookies that have been previously stored on your computer in your browser.
The website uses the following types of cookies, the scope and function of which are explained below:
STRICTLY NECESSARY COOKIES
The necessary cookies are absolutely necessary for the operation of the system, without them the website cannot be used as intended, and the use of cookies is necessary to enforce the legitimate interests of Y-collective Kft. These cookies can be used without the user's consent and cannot be switched off.
Legal basis: article 6(1)(b) GDPR.
FUNCTION AND PERFORMANCE COOKIES
Functionality and performance cookies are not strictly necessary for the use of the website, but their use will help us to provide you with a better user experience. These cookies usually provide settings and convenience features to help you personalise the website (for example, the language you choose or the type of page you visit). Functionality cookies are only used with your consent and you can withdraw your consent at any time by turning off the functionality cookies in the Privacy Centre. These cookies do not store any personal data.
Legal basis: article 6(1)(f) GDPR.
COOKIES BASED ON CONSENT
Cookies that are not strictly necessary and are not function or performance cookies, such as advertising/marketing cookies, are only used by the Data Controller with your explicit consent.
The Data Controller also reserves the right to use the data obtained from the anonymous analysis of the website visitor's habits through cookies in order to display certain advertisements for its products on the website. This will benefit the Data Subject by enabling the Data Controller to display advertising or content that it believes will be of interest to the Data Subject based on its browsing habits, thereby reducing the number of random advertisements or content that are less likely to be in line with the Data Subject's needs.
Marketing cookies come from external advertising companies (Third Party Cookies) and collect information from websites visited by the Data Subject in order to target advertising to the Data Subject.
Legal basis: article 6(1)(a) GDPR.
Managed Cookies (Cookies)
GOOGLE ANALYTICS
The website uses Google Analytics, a web analytics service provided by Google Inc. („Google”). Google Analytics uses a specific form of cookie, stored on your computer, to analyse your use of the website. The information generated by the cookie about your use of the website is usually transmitted to and stored by Google on servers in the United States.
You can prevent the storage of cookies by using the appropriate settings in your browser software. You can also prevent Google from collecting and processing data (including your IP address) generated by the cookie about your use of the website by downloading and installing the browser plug-in available at https://tools.google.com/dlpage/gaoptout?hl=en.
The website also uses Google Analytics to analyse the flow of visitors through the user ID in a device-independent way. You can turn off the tracking of your usage across different devices by going to „My information”, „Personal information” in your Google account.
Legal basis: article 6(1)(f) GDPR.
CONTACT FORM
The data controller operates a contact form on the operated websites, which helps visitors to establish contact and request information more easily.
By completing the form and ticking the checkbox below, you agree to our Privacy Policy, the current version of which can be found on the Privacy Policy page.
You can check and request changes to your settings and the data stored about you. If you wish to do so, please contact us at hello@yco.hu
Company name: Magyar Telekom Távközlési Nyilvánosan Működő Részvénytársaság
Company registration number: 01-10-041928
Head office: 1097 Budapest, Könyves Kálmán körút 36.
Transmission method: internet
Company name: YCO digital Korlátolt Felelősségű Társaság
Head office: 7622 Pécs, Siklósi út 3.
Address for correspondence: 7622 Pécs, Siklósi út 3.
Company registration number: 02 09 078609
Tax number: 23826836-2-02
In particular, the Data Controller shall protect the data against unauthorised access, alteration, disclosure, disclosure, deletion or destruction and against accidental destruction or accidental damage. The Data Controller, together with the server operators, shall ensure the security of the data by technical, organisational and organisational measures that provide a level of protection appropriate to the risks associated with the processing.
The data subject may request information about the processing of his or her personal data, as well as the rectification or - with the exception of data processing required by law - the erasure of his or her personal data, by following the link in the footer of the newsletter or by contacting the Data Controller.
At the request of the data subject, the Data Controller shall provide information on the data processed by it, the purpose, legal basis and duration of the processing, the name, address (registered office) and activity of the data processor, as well as the persons who receive or have received the data and the purposes for which the data are received or have been received. The Data Controller shall provide the information in writing, in an intelligible form, free of charge, within the shortest possible time from the date of the request, but not later than 25 days.
The Controller shall erase personal data if its processing is unlawful, if the data subject requests it, if it is incomplete or inaccurate - and this situation cannot be lawfully rectified - provided that erasure is not excluded by law, if the purpose of the processing has ceased, if the statutory period for storing the data has expired or if it has been ordered by a court or the Data Protection Commissioner.
It shall notify the data subject of the rectification and erasure and all those to whom it has previously disclosed the data for processing purposes. Notification may be omitted if this does not harm the legitimate interests of the data subject having regard to the purposes of the processing.
The data subject may object to the processing of his or her personal data if the processing (transfer) of the personal data is necessary solely for the purposes of the exercise of a right or legitimate interest pursued by the controller or the recipient of the data, unless the processing is required by law, the use or transfer of the personal data is for direct marketing, public opinion polling or scientific research purposes, or the exercise of the right to object is otherwise permitted by law.
The Data Controller shall examine the objection within the shortest possible time from the date of the request, but not later than 15 days, and inform the applicant in writing of the outcome of the examination, with the simultaneous suspension of the processing. Where the objection is justified, the controller shall be obliged to terminate the processing, including further recording and transmission, and to block the data, and to notify the objection and the action taken on the basis of the objection to all those to whom the personal data concerned by the objection have been previously disclosed and who are obliged to take measures to enforce the right to object.
The data subject may take the controller to court or to the data protection authority if his or her rights are infringed. You can lodge a complaint or a legal remedy at the following contact details:
Name: National Authority for Data Protection and Freedom of Information
Address: 1055 Budapest, Falk Miksa utca 9-11. Phone: 06- 1-391-1400
Fax: 06-1-391-1410
E-mail: ugyfelszolgalat@naih.hu
Website: naih.hu
You can check and request changes to your settings and the data stored about you.
If you wish to do so, please contact us at hello@yco.hu.
Updated:
2023.09.26.