Privacy statement

PREAMBULUM

NERDMATION is committed to protecting the privaacy of all its customers and visitors. Accordingly, we will ensure that it is handled securely and that NERDMATION processes personal data in accordance with the applicable legal requirements. By drafting and publishing this notice, we wish to fulfil our obligation to provide the information required by Articles 13-14 of the GDPR.

NERDMATION, as data controller, acknowledges that it is bound by the contents of this notice. It also reserves the right to change the content of this notice, which will be communicated to the data subjects in due time.

1. THE IDENTITY OF THE DATA CONTROLLER

The controller of your personal data:
Nerdmation International Ltd (NERDMATION or the Data Controller)
5100 Jászberény, Áldomás utca 10.
company registration number:
e-mail: info@nerdmation.com

NERDMATION is not required to appoint a Data Protection Officer under Article 37(1) GDPR and does not have a Data Protection Officer.

2. SCOPE OF THE PRIVACY STATEMENT

Personal scope: this information notice covers

to all visitors to the website www.nerdmation.com (hereinafter referred to as the Website);
all of NERDMATION’s contractors, customers, suppliers, principals and subcontractors (i.e. all persons who may be associated with NERDMATION’s business); and
all persons applying for jobs advertised by NERDMATION.

Material scope: this notice covers all personal data processing as described above, which

through or in connection with the operation of the Website;
in any way connected with the business of NERDMATION; and
whether in response to a call for applications from NERDMATION or in the course of the assessment of applications received spontaneously.

Period of validity: the standard text of this notice entered into force on 01.10.2023 and is valid from its publication until its withdrawal, but the Data Controller reserves the right to unilaterally modify this notice, after having informed the data subjects.

3. GOVERNING LEGISLATION

NERDMATION’s data management policies and procedures are in compliance with the applicable data protection legislation in force, in particular, but not limited to:

Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Regulation (EC) No 95/46/EC (“GDPR“);
Directive 2002/58/EC of the European Parliament and of the Council of 12 July 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector (“e-Privacy Directive“);
Act CXII of 2011 on the Right of Informational Self-Determination and Freedom of Information (“Infotv.”);
Act CVIII of 2001 on certain aspects of electronic commerce services and information society services (“Act on electronic commerce services and information society services“);
Act V of 2013 on the Civil Code (“Civil Code”);
Act C of 2000 on Accounting (“Accounting Act“).

4. POSSIBLE LEGAL GROUNDS FOR DATA PROCESSING

In accordance with EU data protection legislation, a legal basis is required for the processing of personal data. The applicable legal basis depends on the purposes for which the data are processed.

Please note that NERDMATION currently processes your personal data on one of the following legal bases:

(i) the processing is based on your consent [Article 6(1)(a) GDPR],
(ii) processing is necessary for compliance with a legal obligation to which the Controller is subject [Article 6(1)(c) GDPR];
(iii) processing is necessary for the purposes of the legitimate interests pursued by NERDMATION as controller or by a third party [Article 6(1)(f) GDPR].

In some cases, your consent is therefore also required for the processing of data. Please note that if you have given your consent, you may withdraw it at any time, but please ensure that the withdrawal of consent does not affect the lawfulness of the processing based on consent prior to its withdrawal.

In other cases, the processing of personal data is necessary for us to comply with our legal obligations, in which case the applicable legal provision is specified in Chapter 10 of this notice.

It may also be the case that the processing of your personal data is based on the legitimate interests of NERDMATION or a third party, in which case we will indicate the identified legitimate interests in Chapter 10 of this notice.

5. LEGITIMATE INTEREST AS A LEGAL BASIS

According to Article 6(1)(f) of the GDPR, a legal basis exists where processing is necessary for the purposes of the legitimate interests pursued by the controller or a third party, except where those interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data.

This means that NERDMATION is only entitled to process your personal data on the basis of a legitimate interest if it first carries out an interest test to determine whether the legal basis is justified.

In doing so, NERDMATION
(i) identify its own or a third party’s legitimate interest in the processing of the personal data;
(ii) identify your interests and fundamental rights as a data subject;
(iii) weigh the fundamental rights and interests, thus carrying out a necessity-proportionality test.

6. SOURCE OF DATA

As a rule, we collect personal data about you from you, i.e. directly from the data subject. In cases where we may also process personal data from other sources, we will indicate this separately in point 10 of this notice in the description of the relevant data processing operation; where there is no such description, the source of the data will be you.

7. THE TRANSFER AND THE RECIPIENTS OF THE DATA

There may be cases where NERDMATION transfers your personal data to a third party, with appropriate information and data transfer guarantees.

The person to whom the data is disclosed is the recipient of the transfer and may fall into one of the following categories based on his or her relationship with NERDMATION as data controller:

(i) The recipient of the transfer is a data processor, since he or she carries out the processing exclusively on behalf of NERDMATION as data controller. They are typically external service providers who perform technical operations on the basis of instructions from the controller (e.g. accountant, payroll or system administrator);

(ii) The recipient of the transfer is an independent controller, since it determines the purposes and means of the personal data processing independently of the Controller and is in many cases subject to specific legal requirements. These are typically lawyers, doctors, but also public authorities and courts;

(iii) The recipient of the transfer is a joint controller with the Employer, as they jointly determine why and how personal data should be processed; often this is the case for affiliated companies.

1. Our Data Subjects as Data Controllers

In the performance of our obligations under the law and in the course of any dispute we may have with you, we may transfer data about you to the competent authorities, courts or our respective legal representatives who, as explained above

Joint Controller: Mentors & Partners Group Kft. (hereinafter referred to as “Mentors & Partners“)
Joint Controller.
Website: www.mentorsandpartners.com
Contact: info@mentorsandpartners.com

Please be informed that under the terms of the joint data management agreement between NERDMATION and Mentors & Partners, NERDMATION is obliged to provide you with information if you are an employee or other contributor (principal, contractor) of NERDMATION. NERDMATION will fulfil its obligation to inform you within the framework of this notice, as follows:

(i) NERDMATION’s contact details are set out in section 1 above, and Mentors & Partners’ contact details are set out in this section above; you are also advised that neither Mentors & Partners has a Data Protection Officer;
ii) For information on exactly which of our data processing processes Mentors & Partners is involved in and thus whether your personal data are processed, please see chapter 10; in the relevant section you will find information on the scope of the data processed, the purposes of the processing, the legal basis, the duration of the processing and the fact of the transfer to a third country;
iii) You will find all relevant information on the exercise of your rights and the possibility to lodge a complaint in points 13 to 14.

Mentors & Partners Privacy policy is available on this link.

2. Our data processing recipients

a) NERDMATION uses the services of an accountancy firm to fulfil its obligations (bookkeeping, invoicing) under the legislation in force. Within the framework of this contract, NERDMATION enters the personal data of its natural persons and clients into the invoicing software for the purpose of issuing invoices and then forwards the finished invoices to the accounting firm used. Both service providers process the personal data on the basis of the mandate and instructions received from NERDMATION, for the sole purpose of carrying out operations of a technical nature, and are therefore considered as data processors in accordance with the provisions of the GDPR.

b) Bookkeeper

Data processor name: Colling Könyvelő és Tanácsadó Kft.
1041 Budapest, István út 16. 12.
Website: https://colling.hu
Contact: +36 (1) 452-6900 office@colling.hu

c) Billing software provider
Data processor name: KBOSS.hu Kft.
Data Processor’s registered office.
Website: https://www.szamlazz.hu/
Contact: https://www.szamlazz.hu/

In Chapter 10, in the details of each processing operation, we will inform you whether NERDMATION transfers your data to third party recipient(s) in the course of that processing operation and, if so, the relationship of that person(s) with us for data protection purposes.

8. TRANSFERS TO THIRD COUNTRIES

Please note that in certain cases, as set out in point 10, your personal data will be transferred to a third country outside the EU, so we will provide specific information on this fact in the description of the relevant process and indicate the safeguards under Articles 46-49 of the GDPR in relation to which the transfer to the third country may take place.

9. AUTOMATED DECISION-MAKING, PROFILING

Automated decision making is the ability to make decisions using technology without human intervention, with or without profiling. Profiling is the collection of information about an individual (or group of individuals) and the assessment of their characteristics or behaviour with a view to classifying them into a category or group.

Article 22 of the GDPR prohibits, as a general rule, automated decision-making in individual cases, including profiling; this can only be done by the controller, subject to the safeguards set out in the GDPR, and with the data subject being informed.

Please be informed that NERDMATION does not currently use automated decision-making or automated profiling when processing your personal data. If we intend to change this in the future, we will inform you in advance and we will also inform you of the legal basis under Article 22(2) GDPR before we start processing and provide you with a duly conducted data protection impact assessment.

10. OUR DATA MANAGEMENT PROCESSES, BY PROCESSING PURPOSES

The data management processes for each of NERDMATION’s activities are as follows:

4.1. Customer data management

NERDMATION will process personal data only to the extent and for the purposes necessary for the fulfilment of its business purposes, contractual obligations and legal compliance related to its business activities, as follows:

a) Providing information to interested parties

NERDMATION will provide information and advice (services, prices, deadlines, etc.) to those interested in the NERDMATION business by telephone or e-mail. All e-mail enquiries are sent to the e-mail address info@nerdmation.com and the data controller will reply to the data subjects from the same e-mail address.

purpose of processing: providing information (on services, prices, deadlines, etc.)
scope of data processed: name, position, contact details (typically telephone number or e-mail address) or any personal data voluntarily provided by the interested party
legal basis for processing: consent of the data subject pursuant to Article 6(1)(a) of the GDPR
duration of storage: until the purpose of the processing is fulfilled, i.e. until the full information is provided (unless otherwise requested by the data subject or a contract is concluded thereafter)
recipient(s) of the transfer: – –
transfers to third countries: – –

b) Contact data management

In the course of its business, NERDMATION works with a large number of contractual partners (typically legal entity customers and contractors), and processes personal data of the natural person contacts of these partners to enable fast and efficient communication.

The legal basis for the processing is based on the legitimate interest of the business partners contracting with NERDMATION as third parties (in this case, the business partner’s interest in the conclusion and performance of the contract), and NERDMATION will therefore apply an interest balancing test to determine whether the legal basis is justified.

purpose of processing: to conclude commercial contracts and to maintain contact with the business partner during the performance of the contracts
scope of the data processed: name, position, contact details (typically telephone number and e-mail address) and any other data necessary for the performance of the contract by the contact person
legal basis for processing: the legitimate interest of the business partner in the conclusion and performance of the contract pursuant to Article 6(1)(f) of the GDPR
duration of data storage: until the termination of the contract with the business partner or the termination of the employment relationship between the contact person and the contractual partner
recipient(s) of the transfer: –
transfer to a third country: –

c) Billing-related data processing

Pursuant to paragraph 165 (1) of the Accounting Act, documents must be issued (prepared) for each economic operation or event that changes the stock or composition of assets or the sources of assets, and all documents reflecting the process of economic operations (events) must be recorded in the accounting records. In addition, Article 169(2) of the Accounting Act requires that accounting documents directly and indirectly supporting the accounting records must be kept for at least 8 years in a legible form, retrievable by reference to the accounting records.

In accordance with the above, NERDMATION issues an invoice to the recipient of the service with the data content specified in Section 169 of the VAT Act and Section 167 (1) of the Invoice Act, and keeps the accounting documents directly and indirectly supporting the accounting for 8 years, as specified in Section 169 (2) of the Invoice Act.

NERDMATION issues its invoices by means of an invoicing program, the respective service provider of which is considered to be a data processor of NERDMATION. NERDMATION forwards the invoices issued to its respective accountant for the purpose of carrying out the accounting tasks, who acts as a data processor of NERDMATION.

purpose of processing: issuing and storing invoices in the course of commercial activities
scope of data processed: data content defined in Section 169 of the VAT Act and Section 167 (1) of the Invoice Act; of which personal data: name and address of the service recipient and, in the case of sole traders, the tax number
legal basis for processing: the fulfilment of a legal obligation on the employer pursuant to Article 6(1)(c) of the GDPR in accordance with Articles 165(1), 167(1) and 169(1) of the Invoice Act
data storage period: 8 years from the date of issue of the invoice
recipient(s) of the data transfer: the operator of the invoicing software, KBOSS.hu Kft, and Colling Könyvelő és Tanácsadó Kft., the accounting service provider of the data controller, as data processors
data transfers to third countries: – – Collaboration & Accounting Services, as the data controller and the data controller

d) Data processing in relation to travel

NERDMATION will assist natural person subcontractors or natural person agents of its legal person subcontractors on a case-by-case basis in the preparation of the necessary visa application documents (e.g. invitation letter) and the procedure for natural person travel abroad, in case the travel abroad is for the purpose of performing a contract between NERDMATION and the subcontractor, by travelling to and performing the contractual obligations of the subcontractor to the NERDMATION’s agent in a third country.

NERDMATION does not submit the visa application to the competent authorities, but only assists in its preparation.

the purpose of the processing: to assist in the preparation of visa application documents (e.g. invitation letter) and the management of the procedure for business partners travelling abroad
scope of the data processed: data that must be provided for the purpose of submitting the visa application (typically: name, e-mail address, telephone number, address, ID card, address card and passport number, mother’s name, date and place of birth, duration and purpose of entry)
legal basis for processing: the legal basis for processing is the performance of a contract between the parties, as provided for in Article 6(1)(b) of the GDPR
duration of storage: period of validity of the visa

e) Enforcement, claims management

NERDMATION will process the data of any natural person concerned by a dispute or claim against it, as well as in the course of enforcing its claims against others, in order to bring the dispute or claim to a successful conclusion.

Since the legal basis for the processing is based on the legitimate interest of NERDMATION as data controller (in this case, the personal and pecuniary interest in the resolution of the dispute and the successful assertion of claims), NERDMATION will apply a balancing of interests test to determine whether the legal basis is justified.

Purpose of processing: management of claims, settlement and resolution of disputes with others, effective assertion of claims
scope of data processed: any data relevant to the resolution of the dispute and the enforcement of claims
legal basis for processing: legitimate interest of NERDMATION as data controller (personal and pecuniary interest in the resolution of disputes and the effective exercise of claims) as referred to in Article 6(1)(f) of the GDPR
duration of storage: until the dispute is settled or the claim is enforced
the recipient(s) of the transfer: competent authorities, courts and the legal representative of NERDMATION in each case

4.2. Processing of job applicants’ data

NERDMATION uses the assistance of an external contractor, MENTORS & PARTNERS Ltd., to carry out complex recruitment tasks (recruitment, selection, evaluation, recommendation) and profiling in order to conduct and evaluate the job application efficiently and quickly, and NERDMATION is considered as joint data controller by agreement between the parties (for more information, please see section 7.2).

NERDMATION and MENTORS & PARTNERS jointly profile candidates and in some cases NERDMATION will carry out personality tests on the candidate to assess their competences and qualities – this is carried out by MENTORS & PARTNERS.
In the absence of explicit consent to the further storage of the CV, NERDMATION will immediately cease to store the CV of the unsuccessful candidate after the evaluation of the application and will destroy the personal data it has stored. In order for further storage to take place, NERDMATION must obtain the express consent of the data subject, which, if granted, will allow the continued storage of the CVs of unsuccessful candidates for a maximum period of 1 year from the date of receipt.

Since the legal basis for the processing of data in the case of profiling or personality testing is the legitimate interest of NERDMATION, NERDMATION will conduct an interest balancing test to determine whether the legal basis is justified. In these data processing operations, the source of the data may be not only the data subject, but also MENTORS & PARTNERS, in respect of the data collected and analysed for the purpose of profiling.

In any case, the profile set up and the personality test carried out will be immediately and irretrievably destroyed by NERDMATION at the same time as the job application is closed, so that in no case will it be possible to store it again.

purpose of processing: selection of employees and ad hoc or permanent collaborators (contractors, agents) to fill vacancies or to carry out projects
the scope of the data processed: 1) all personal data contained in the CV; typically: name, date of birth, mother’s name, address, training data, previous jobs, photograph, salary requirements and other data voluntarily provided by the data subject; 2) in the case of profiling and personality tests, the personality profile established during the pre-screening process
data source: in principle, the data subject; in the case of profiling or personality tests, MENTORS & PARTNERS Kft.
legal basis for processing: in the assessment of job applications, the legal basis for processing is basically the data subject’s consent pursuant to Article 6(1)(a) of the GDPR; however, in the case of profiling and personality testing, the legal basis for processing in this context is the legitimate interest of the Data Controller pursuant to Article 6(1)(f) of the GDPR (in this case, the interest of the Data Controller in selecting employees and other collaborators as quickly and efficiently as possible, and in learning about and evaluating their personality and competences)
storage period: 1) in the case of CVs, only until the application has been assessed or, in the case of consent to further storage, for a maximum of 1 year; 2) in the case of profiling, personality tests, only until the end of the job application
Recipient of the transfer: MENTORS & PARTNERS Kft. as joint controller

4.3. Data processing of visitors to the Website

a) Contact

Through the Website, visitors can contact the Data Controller under the “Contact” menu by providing the data necessary for contacting the Data Controller. This message will be sent to the e-mail address info@nerdmation.com and NERDMATION will either reply to the data subject from the same e-mail address or, if the data subject voluntarily provides a telephone number when contacting them, will contact them by telephone.

purpose of processing: to reply to requests from data subjects, to contact them at their request
scope of the data processed: mandatory data: name and e-mail address; optional data: telephone and company name; and any personal data voluntarily provided in the message
legal basis for processing: consent of the data subject pursuant to Article 6(1)(a) of the GDPR
duration of storage: until the data subject has replied to the request or until the purpose of the contact has been achieved

b) Google Analytics

Our website uses “Google Analytics”, a website traffic analysis service provided by Google LLC (1600 Amphitheatre Parkway Mountain View, CA 94043, USA). Google Analytics uses “cookies”, which are small pieces of data that are stored on your device. The information collected by the “cookies” is transferred to a Google server in the United States and stored there. Google, as data processor, will use the information stored by the cookies to analyse your use of the website, to compile an analysis of your use of the website and to provide NERDMATION, as the website operator, with additional services relating to website and internet usage.

NERDMATION explicitly draws the attention of the data subjects to the fact that, when using the Google Analytics service, their personal data will be transferred to a third country (USA) within the meaning of the GDPR. Google LLC participates in the EU-US Privacy Sharing Framework, the framework governing the transatlantic exchange of personal data for commercial purposes, and has completed its compliance with the Framework (certification date: 14 September 2023). Accordingly, NERDMATION declares that Google LLC, as a data processor, has the appropriate safeguards (adequacy decision) under Article 45 of the GDPR for the transfer of your personal data to the United States.

You have the possibility to prevent the storage of “cookies” on your device by setting your browser accordingly. However, we cannot guarantee that you will have unrestricted access to all the functions of our website if you do not allow the use of “cookies” in your browser. Furthermore, you can use the browser plugin to prevent the information collected by the “cookies” (including your IP address) from being sent to Google LLC and processed by Google LLC.

For more information about the types and functions of cookies we use and how to set your browser, please see our Cookie Notice, which you can access here.

purpose of processing: to measure the performance of the Website, to compile statistics on its use
scope of data processed: IP address, website visiting habits
legal basis for processing: consent of the data subject pursuant to Article 6(1)(a) of the GDPR
Data storage period: 399 days
recipient(s) of the transfer: Google LLC as data processor
Data transfer to third countries: yes, to servers of Google LLC in the United States
data transfer guarantee: on the basis of an adequacy decision pursuant to Article 45 of the GDPR (in this case the EU-US Privacy Shield Framework)

11. CONFIDENTIALITY

NERDMATION’s employees and contractors are bound by confidentiality obligations and receive regular training on the handling of personal data and other critical information.

12. DATA SECURITY

NERDMATION will make every reasonable effort to maintain physical, technical and regulatory security measures. These security measures are designed to protect against loss, unauthorized access, copying, modification or disclosure, as described below:

a) Restricted access

Personal information provided by you or generated during the course of your relationship with NERMATION is only accessible within NERDMATION to those persons within NERDMATION who need to know it in order to perform their job duties.

NERDMATION processes and stores your personal data on paper at its headquarters, using physical protection systems, electronically on its own server or on a server provided by a server provider, with strictly limited and protected access.

b) Savings

Whenever data is electronically processed, viewed or accessed, NERDMATION will ensure that data is backed up on a regular basis to ensure that your personal data is not irretrievably damaged or lost.

c) Program protection, virus protection

During the electronic storage and handling of data, NERDMATION takes care to prevent unauthorised access and attempts to access the data, including by using firewalls and anti-virus software. It will ensure that the risk of data theft, misuse of personal data and loss of data is minimised by involving an IT expert and by regular monitoring.

d) Password protection

In order to protect personal data, all employees and contributors of NERDMATION protect their work equipment with an individual password, which they are obliged to change regularly at specified intervals.

13. RIGHTS OF DATA SUBJECTS

You have the right under Articles 13-21 of the GDPR to

a) request information from the Data Controller about the processing of your personal data within the duration of the processing (“right to information“). NERDMATION will inform you in writing, in an intelligible form, within the shortest possible period of time from the date of the request, but not later than 1 month, about the data processed, the purposes, legal basis and duration of the processing, and, if the data have been transferred, who is or are receiving the data and for what purposes;

b) receive feedback from the Controller as to whether or not his or her personal data are being processed and, if such processing is taking place, have the right to access the personal data and basic information relating to them (purposes of the processing; categories of personal data concerned; recipients to whom or with which the personal data have been or will be disclosed; envisaged duration of the storage of the personal data); your right to request the employer to rectify, erase or restrict the processing of personal data concerning you and to object to the processing of such personal data; your right to lodge a complaint with a supervisory authority; if the data have not been collected from the data subject, any available information on their source) (“right of access“). NERDMATION will provide you with a copy of the personal data that is the subject of the processing. The right to obtain a copy must not adversely affect the rights and freedoms of others;

c) upon your request, NERDMATION to correct inaccurate personal data concerning you without undue delay (“right to rectification“). Taking into account the purpose of the processing, you have the right to request the completion of incomplete personal data, including by means of a supplementary declaration;

d) (d) upon your request, NERDMATION will delete personal data concerning you without undue delay (“right to erasure“) where.

the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
you have withdrawn your consent to the processing and there is no other legal basis for the processing;
you object to the processing and there is no overriding legitimate ground for the processing;
the personal data have been unlawfully processed;
the personal data must be erased in order to comply with a legal obligation under Union or Member State law applicable to the controller.

The right of erasure does not extend to data processed by NERDMATION in the performance of a contract or legal obligation or on the basis of a legitimate interest;

e) upon your request, NERDMATION restricts the processing (“right to restriction“) where.

You contest the accuracy of the personal data (for a period of time until the accuracy of the data is established);
the processing is unlawful and you object to the erasure of the data and instead request the restriction of its use;
the Controller no longer needs the personal data for the purposes of processing, but you require them for the establishment, exercise or defence of legal claims;
you have objected to the processing (pending the completion of the consideration of the objection).

f) If the processing is restricted, such personal data may be processed, except for storage, only with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for important public interests of the European Union or of a Member State.

g) receive personal data concerning you provided to NERDMATION in a structured, commonly used, machine-readable format and have the right to transmit such data to another controller without hindrance from the Employer (“right to data portability“);

h) object at any time, on grounds relating to his/her particular situation, to the processing of his/her personal data on the basis of the Employer’s legitimate interest (“right to object“). In this case, NERDMATION may no longer process the personal data unless he/she can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims;

i) withdraw your consent to the processing at any time, but please ensure that the withdrawal of your consent does not affect the lawfulness of the processing based on your consent prior to its withdrawal.

Please send your request to exercise these rights to NERDMATION at one of the contact details set out in Chapter 1, either by electronic mail or by registered post.

NERDMATION will inform you without undue delay, but in any event within 1 month of receipt of your request, of the action taken on it (in the form in which you have addressed your request to us, in the event of a request to the contrary). If necessary, taking into account the complexity of the request and the number of requests, this time limit may be extended by a further two months. NERDMATION will inform you of the extension, stating the reasons for the delay, within 1 month of receipt of the request.

14. LEGAL REMEDY

a) What can you do if your request is rejected?

If NERDMATION refuses your request, we will inform you in writing within one month of receipt of your request why we have been unable to comply with your request, inform you of your legal remedies and inform you that you can lodge a complaint with the National Authority for Data Protection and Freedom of Information.

b) What are your rights if you consider that the processing is unlawful?

If you believe that the processing of your personal data is unlawful, you may request the Infotv. You may also initiate an investigation procedure pursuant to Article 52 (1) at the National Authority for Data Protection and Freedom of Information (registered office: 1055 Budapest, Falk Miksa utca 9-11; postal address: 1363 Budapest, Pf. 9., e-mail: ugyfelszolgalat@naih.hu; telephone: +36 (1) 391-1400).

15. CONTINUOUS MONITORING AND IMPROVEMENT

Quality and continuous process improvement are very important within NERDMATION. There are specific processes in place to constantly improve quality, and this has been backed up by our ISO 9001 quality assurance for many years. These processes are used to measure and improve our compliance with data protection legislation and the effectiveness of our data protection and data security measures in order to ensure an optimal flow of data protection measures.

Finally, we inform you that if NERDMATION wishes to carry out further processing of your personal data for purposes other than those for which they were collected, you will be informed again of the different purposes and any other information relating to the processing prior to the further processing.