Privacy Statement
The “BOM for Hungarian Sport” Public Benefit Foundation (BOM Foundation), as the operator of www.bomalapitvany.hu\en is committed to protecting the personal data of its members and places particular importance on respecting their right to informational self-determination. The BOM Foundation handles personal data confidentially and implements all necessary security, technical and organizational measures to ensure the safety of the data. Below, the BOM Foundation outlines its data processing practices:
Data Controller
Name: BOM for Hungarian Sport Public Benefit Foundation
Address: 1125 Budapest, Béla király út 29/a
Contact person: Szilvia Szabó Várnainé (BOM Secretary General)
Phone number: +36 30 279 2390
The period of data processing: until the termination of membership or withdrawal of consent.
For newsletters, the authorized data processor is Across Media Ltd. (1071 Budapest, Városligeti fasor 47.)
The period of data processing for newsletters: until consent to data processing is withdrawn.
For newsletters the Foundation only requests the user’s email address which is strictly necessary for providing the service.
The Foundation reserves the right to modify this notice at any time and will inform its audience of any changes in a timely manner.
1. Scope of Personal Data, Purpose, Legal Basis and Duration of Processing
Data processing by the BOM Foundation is based on voluntary consent.
Data providers must ensure that when providing data of another person, they have obtained the consent of that person.
The Foundation’s principles comply with applicable data protection laws, in particular:
- Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation, GDPR)
- Act CXII of 2011 on the Right of Informational Self-Determination and Freedom of Information
- Act V of 2013 on the Civil Code (Ptk.)
- Act CVIII of 2001 on electronic commerce, and certain issues related to services in the information society (Ektv.)
- Act C of 2003 on electronic communications (Eht.)
2. Cookie Management
Pursuant to § 20 (1) of Act CXII of 2011, the following must be defined in relation to cookie data processing:
a) the fact of data collection,
b) the category of persons affected,
c) the purpose of data collection,
d) the duration of data processing,
e) the parties authorized to access the data,
f) the rights of the persons concerned with regard to data processing.
- The data collected: unique identifiers, dates, timestamps.
- Persons concerned: all users of the website.
- Purpose of data collection: user identification and visitor tracking.
- Duration of data processing: for session cookies until the end of the website visit.
- Those authorized to access the data: the Foundation’s staff members under compliance with the principles above.
The persons concerned have the right to delete cookies via their browser settings, usually under the “Privacy” settings.
The legal basis: consent is not required if cookies are strictly necessary for the transmission of communication over an electronic network or for providing a service explicitly requested by the user.
3. Method of Storage and Data Processing
The BOM Foundation and its data processors select and operate IT tools in a manner that ensures:
- Accessibility for authorized persons (availability)
- Authenticity and verification (data validity)
- Integrity (data unaltered unless by authorized processes)
- Confidentiality (protection against unauthorized access)
The Foundation protects personal data against unauthorized access, alteration, transfer, public disclosure, deletion, destruction and accidental loss and ensures that stored data—unless permitted by law—cannot be directly linked to an identified person.
The Foundation and its data processor (Across Media Ltd.) use protective measures against hacking, misuse, sabotage, fire, flood, viruses, denial-of-service attacks, etc.
The Foundation maintains a record of data protection incidents, including details, impact and corrective actions. If possible, it reports them to the National Authority for Data Protection and Freedom of Information within 72 hours, unless the incident is unlikely to pose a risk to individuals’ rights and freedoms.
4. Other Data Processing
If data processing is not covered by this notice, the Foundation will provide information at the time of data collection.
The Foundation may be required by law to disclose data to courts, prosecutors, investigation authorities, law enforcement, administrative authorities, the Data Protection Authority or other bodies authorized by law, but then only to the extent strictly necessary.
5. Remedies and Rights
Those concerned may request information on their personal data processing, correction, deletion (excluding mandatory processing), withdrawal of consent, restriction of processing, data portability and objection to processing — in the manner provided when the data was collected.
Contact options:
- Email: info@bomalapitvany.hu
5.1 Right of Rectification
If personal data is inaccurate the Foundation shall correct it upon availability of accurate data.
5.2 Right to Deletion
A person may request deletion if:
- The consent is withdrawn and there is no other legal basis,
- The person objects and there is no prevailing legal basis,
- The data was unlawfully processed,
- The data must be deleted to comply with a legal obligation,
- Data was collected in the context of information society services without consent.
Deletion is not possible if data processing is necessary for exercising freedom of expression, complying with legal obligations, public interest tasks, health or archival, scientific or statistical research or for legal claims.
5.3 Right to Withdraw Consent
The data subject may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
5.4 Data Protection Authority Complaint
Complaints may be submitted to the National Authority for Data Protection and Freedom of Information (address: 1125 Budapest, Szilágyi Erzsébet fasor 22/C).
Budapest, 24 July 2019