PRIVACY POLICY

on personal data processing in connection with the registration  process of World Fair Play Committee Awards Gala via website of the Hungarian Institute for Sports

1. Name and contact details of the controller

2. The Data Protection Officer

The Data Protection Officer is the contact person for data subjects (natural persons) who contact the Data Protection Officer in relation to the processing of their personal data by NSMI as Data Controller and the exercise of their rights in this regard. Data subjects may contact the DPO in all matters relating to the processing of their personal data and the exercise of their rights under the General Data Protection Regulation.

Contact information of the data protection officer: dpo@nsmi.hu          

3. Key legislation on data processing

Regulation (EU) 2016/679 of the European Parliament and of the Council (the General Data Protection Regulation or GDPR) – on the protection of natural persons regarding the processing of personal data and on the free movement of such data

Act CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information;

Act I of 2004 on Sport

Government Decree 428/2024 (23.XII.) on the Hungarian Institute for Sports and amending certain related government decrees on sports

4. Categories of personal data processed, purpose, legal basis and duration of processing

The data subject shall have the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on point (e) of Article 6(1) of the GDPR. The controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.

The data subject can exercise his/her right to object most simply by sending a statement to the Data Controller’s contact information specified in point 1.

5. Access to data processed

The data may only be accessed by the Controller’s employees who perform tasks related to the organization of the World Fair Play Committee Awards Gala

6. Recipients, data transfer

Server operator of the Controller :

Company name:                        NETCLASS Ltd.

Company registration number: 03-09-121367

e-mail:                                      info@netclass.eu

Administration:

Company name:                        Digicorp Ltd.

Company registration number: 13-09-16170

e-mail:                                      support@digicorp.hu

7. Protection of personal data processed

When developing the technical and procedural rules for data processing operations, the Data Controller implement appropriate technical and organisational measures to  ensure the physical and IT protection of your data. The purpose of the measures used is primarily to avoid and prevent the possibility of unauthorized access to the processed data, the unauthorized change, transmission, disclosure, deletion or damage of the data.

The Data Controller chooses the tools and measures used during data processing accordingly. The Data Controller also ensures that only the authorized persons have access to the processed data and that the authenticity and integrity of the processed data are ensured.

8. The data subject’s rights in connection with data processing

The data subject is entitled to:

• get appropriate and transparent information, in connection of the data processing, to receive feedback from the Data Controller on whether your personal data is being processed;

• know the scope of personal data processed and to receive a copy of it;
• request the correction of inaccurate personal data;
• request the deletion of personal data, if the data processing is based solely on the consent of the data subject, or if the data are no longer needed for the purpose for which they were collected, or if the data processing is illegal;
• exercise the right to portability of personal data processed, i.e. you are entitled to receive your personal data in a widely used, machine-readable form, to transmit it to another data controller, or to request this, provided that the data processing is automated and based on a contract or consent, and that the exercise of the said right does not infringe the legitimate interests or freedom of others;
• request the restriction of the processing of the personal data (for example, if the accuracy of the processed data is disputed or the illegality of data processing has arisen until these circumstances are clarified);
• object to the processing of the personal data (for example, if the legal basis of the data processing is to assert the legitimate interests of the data controller or a third party), or to withdraw the previously given consent at any time,
• contact a supervisory authority or a court in the event of data processing deemed to be harmful.

9. Remedial rights

If, in your opinion, you have suffered a violation of your rights in connection with the processing of your personal data by the Data Controller, and in your opinion, we did not respond to your requests or comments in this regard, or did not respond in an appropriate time or manner, you have the right to file a complaint with the competent supervisory authority.

The competent supervisory authority:

Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH)

address:            1055 Budapest, Falk Miksa utca 9-11

e-mail address: ugyfelszolgalat@naih.hu

phone number: (1) 391 1400

You are also entitled to apply to the competent court according to your place of residence if, in your opinion, the Data Controller is processing your personal data in violation of the provisions of the law or the mandatory legal act of the European Union.

We recommend that if you plan to apply to the supervisory authority or court, you should inquire with the Data Controller in advance, as the necessary informations regarding your questions and requests requiring remedial action are available from the Data Controller.

The Data Controller is committed to implementing the principles of legal, transparent and fair data processing. In situations deemed to be harmful, we take extraordinary measures to clarify the issues that have arisen, and to remedy the identified harm. We will inform you about the findings and the measures we have taken within a maximum of 1 month.  If you have questions about data processing the Data Controller will inform you within 1 month from you contact us.

Budapest, 2025. march 31.