{"id":3,"date":"2026-04-28T14:25:30","date_gmt":"2026-04-28T12:25:30","guid":{"rendered":"https:\/\/teszt.kdriu.hu\/?page_id=3"},"modified":"2026-08-28T14:38:06","modified_gmt":"2026-08-28T12:38:06","slug":"adatkezelesi-tajekoztato","status":"publish","type":"page","link":"https:\/\/kdriu.hu\/en\/adatkezelesi-tajekoztato\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"<div data-elementor-type=\"wp-page\" data-elementor-id=\"3\" class=\"elementor elementor-3\" data-elementor-post-type=\"page\">\n\t\t\t\t<div class=\"elementor-element elementor-element-1eb25c8a e-flex e-con-boxed tt-sticky-element-no tt-sticker-scroller-no e-con e-parent\" data-id=\"1eb25c8a\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-3a637790 tt-sticky-element-no tt-sticker-scroller-no elementor-widget elementor-widget-text-editor\" data-id=\"3a637790\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t\n<h1 class=\"wp-block-heading\">Privacy Policy<\/h1>\n<p><strong>Effective from: 1 September 2026<\/strong><\/p>\n<h5>1. Purpose and scope of the information sheet<\/h5>\n<p>This data protection information sheet sets out how KDRI\u00dc Central Transdanubian Regional Innovation Agency Nonprofit Ltd. handles the <a href=\"https:\/\/kdriu.hu\/en\/\">https:\/\/www.kdriu.hu<\/a> personal data of website visitors and persons contacting the organisation.<\/p>\n<p>During data processing, the following shall apply in particular:<\/p>\n<ul>\n<li>\n<p>Regulation (EU) 2016\/679 of the European Parliament and of the Council, namely the General Data Protection Regulation (GDPR \u2013 General Data Protection Regulation of the European Union);<\/p>\n<\/li>\n<li>\n<p>Act CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information.<\/p>\n<\/li>\n<\/ul>\n<p>The Data Controller processes personal data lawfully, fairly, transparently, for specified purposes, limited to what is necessary, and with due regard for security requirements.<\/p>\n<h5>2. Details of the Data Controller<\/h5>\n<p><strong>Data controller's name:<\/strong> KDRI\u00dc Central Transdanubian Regional Innovation Agency Nonprofit Ltd.<br \/><strong>Registered office:<\/strong> Sereg\u00e9lyesi \u00fat 113., 8000 Sz\u00e9kesfeh\u00e9rv\u00e1r, Hungary<br \/><strong>Company registration number:<\/strong> 07-09-014082<br \/><strong>VAT number:<\/strong> 14198418-2-07<br \/><strong>MP:<\/strong> Dr \u00c1kos Sz\u00e9pv\u00f6lgyi Managing Director<br \/><strong>Email address:<\/strong> <a href=\"mailto:kdriu@kdriu.hu\">kdriu@kdriu.hu<\/a><br \/><strong>Telephone number:<\/strong> +36 22 514 111<br \/><strong>Website:<\/strong> <a href=\"https:\/\/kdriu.hu\/en\/\">https:\/\/www.kdriu.hu<\/a><\/p>\n<p>Questions, requests or complaints relating to data management may be submitted using the contact details above.<\/p>\n<h5>3. Data management of the contact form<\/h5>\n<h5>3.1. The purpose of data processing<\/h5>\n<p>The purpose of the contact form on the website is for interested parties to:<\/p>\n<ul>\n<li>\n<p>they can ask questions;<\/p>\n<\/li>\n<li>\n<p>they may contact the Data Controller regarding development, innovation or grant opportunities;<\/p>\n<\/li>\n<li>\n<p>they can initiate domestic or international project partnerships;<\/p>\n<\/li>\n<li>\n<p>be able to request information related to any project, event or professional achievement;<\/p>\n<\/li>\n<li>\n<p>to send press or communication enquiries.<\/p>\n<\/li>\n<\/ul>\n<p>The Data Controller processes the provided data for the purpose of receiving, answering and forwarding the enquiry to the appropriate member of staff, and documenting the related communication.<\/p>\n<h5>3.2. Scope of processed data<\/h5>\n<p>The following data can be processed via the form:<\/p>\n<ul>\n<li>\n<p>Name;<\/p>\n<\/li>\n<li>\n<p>e-mail address;<\/p>\n<\/li>\n<li>\n<p>name of the organisation, if provided by the data subject;<\/p>\n<\/li>\n<li>\n<p>the selected topic of the enquiry;<\/p>\n<\/li>\n<li>\n<p>the content of the message;<\/p>\n<\/li>\n<li>\n<p>the fact of making the declaration concerning the acknowledgement of the privacy policy;<\/p>\n<\/li>\n<li>\n<p>date and time of submission;<\/p>\n<\/li>\n<li>\n<p>technical data relating to the submission, in particular the internet protocol address, browser and referring page data, where these are recorded by the website system.<\/p>\n<\/li>\n<\/ul>\n<p>Providing the organisation's name is optional. Providing the name, e-mail address, subject of the enquiry and the message is necessary for processing the enquiry. In the absence of these data, the Data Controller will not be able to respond, or will only be able to do so to a limited extent.<\/p>\n<p>Where possible, the data subject should not provide special category personal data, such as health, political, religious or other sensitive information, if it is not strictly necessary for handling the enquiry.<\/p>\n<h5>3.3. The legal basis for data processing<\/h5>\n<p>If the inquiry relates to steps prior to concluding a contract or to the performance of an existing contract, the legal basis for processing is point (b) of Article 6(1) of the General Data Protection Regulation.<\/p>\n<p>In the case of other enquiries, the legal basis for data processing is the legitimate interest pursuant to Article 6(1)(f) of the General Data Protection Regulation. The Controller's legitimate interest is to receive and respond to enquiries received, maintain professional relations, and organise its activities and cooperation.<\/p>\n<p>The checkbox for acknowledging the privacy policy is not a data processing consent, but serves to prove that the data subject has received the information regarding data processing.<\/p>\n<h5>3.4. Duration of data processing<\/h5>\n<p>The Data Controller will retain the data submitted via the form for a maximum of one year following the closing of the enquiry or the last substantive communication.<\/p>\n<p>If the inquiry results in a contractual, project or other legal relationship, the data may be further processed in accordance with the specific data protection regulations applicable to that legal relationship, as well as accounting, tender and legal retention obligations.<\/p>\n<p>In the event of the submission, enforcement or defence of a legal claim, the data concerned may be retained until the legal claim is no longer enforceable.<\/p>\n<h5>3.5. Persons with access to the data<\/h5>\n<p>For enquiries exclusively:<\/p>\n<ul>\n<li>\n<p>the Controller's members of staff who are competent according to their duties;<\/p>\n<\/li>\n<li>\n<p>the data processor ensuring the technical operation of the website and hosting<\/p>\n<\/li>\n<\/ul>\n<p>can access.<\/p>\n<p>The Data Controller shall transmit the data to other recipients only on the basis of a statutory obligation or in cases necessary for handling the request of the data subject.<\/p>\n<h5>4. Contact by email, phone or letter<\/h5>\n<p>The data subject may also contact the Data Controller directly by email, telephone or post.<\/p>\n<p>The purpose of data processing is to receive and respond to the enquiry, take the necessary measures and document the communication.<\/p>\n<p>Depending on the method and content of the contact, the scope of the data processed includes, in particular:<\/p>\n<ul>\n<li>\n<p>Name;<\/p>\n<\/li>\n<li>\n<p>contact details;<\/p>\n<\/li>\n<li>\n<p>organisation and position;<\/p>\n<\/li>\n<li>\n<p>the content of the inquiry;<\/p>\n<\/li>\n<li>\n<p>further information provided voluntarily by the data subject;<\/p>\n<\/li>\n<li>\n<p>the time of communication.<\/p>\n<\/li>\n<\/ul>\n<p>The legal basis for data processing in the case of a contract or a request prior to concluding a contract is point (b) of Article 6(1) of the General Data Protection Regulation, and in other cases, the legitimate interest of the Data Controller in answering enquiries and maintaining professional relations pursuant to point (f) of Article 6(1) of the General Data Protection Regulation.<\/p>\n<p>As a general rule, the Data Controller shall retain the data for a maximum of one year following the closure of the enquiry or the last substantive communication, unless further retention is justified by contractual, accounting, tender or other legal obligations.<\/p>\n<h5>5. Technical operation of the website and server logs<\/h5>\n<p>When visiting the website, the hosting IT system may automatically record technical data.<\/p>\n<p>These are notably:<\/p>\n<ul>\n<li>\n<p>the visitor's internet protocol address;<\/p>\n<\/li>\n<li>\n<p>date and time of access;<\/p>\n<\/li>\n<li>\n<p>the title of the visited page or requested file;<\/p>\n<\/li>\n<li>\n<p>the type of browser and operating system;<\/p>\n<\/li>\n<li>\n<p>referring website address;<\/p>\n<\/li>\n<li>\n<p>the server response code and the amount of data transferred.<\/p>\n<\/li>\n<\/ul>\n<p>Purpose of data processing:<\/p>\n<ul>\n<li>\n<p>ensuring the secure and stable operation of the website;<\/p>\n<\/li>\n<li>\n<p>identifying IT errors;<\/p>\n<\/li>\n<li>\n<p>detecting and mitigating malicious or unauthorised access attempts;<\/p>\n<\/li>\n<li>\n<p>the protection of the IT system and data.<\/p>\n<\/li>\n<\/ul>\n<p>The legal basis for the data processing is the legitimate interest of the Data Controller in operating the website securely and protecting its IT systems, pursuant to Article 6(1)(f) of the General Data Protection Regulation.<\/p>\n<p>The technical log data is retained by the Data Controller and the hosting provider for a maximum of 30 days from the time of recording, unless the investigation of a security incident or the enforcement of legal claims necessitates a longer retention period.<\/p>\n<h5>6. Google reCAPTCHA spam protection<\/h5>\n<p class=\"isSelectedEnd\">To protect the contact form, the website uses Google reCAPTCHA. The purpose of the service is to determine whether the form is being used by a human, and to detect and prevent automated, malicious or spam submissions.<\/p>\n<p class=\"isSelectedEnd\">During the operation of reCAPTCHA, the data transmitted to Google may particularly include the following:<\/p>\n<ul data-spread=\"false\">\n<li>the visitor's internet protocol address;<\/li>\n<li>technical details of the browser, operating system and device;<\/li>\n<li>the time of use of the website and reCAPTCHA;<\/li>\n<li>referring website address;<\/li>\n<li>language and browser settings;<\/li>\n<li>technical signals relating to the visitor's interactions with the website and the form;<\/li>\n<li>data from cookies and other identifiers placed or previously placed by Google.<\/li>\n<\/ul>\n<p class=\"isSelectedEnd\">The purpose of the data processing is to protect the website, the contact form and the IT systems of the Data Controller, as well as to prevent spam, abuse and automated attacks.<\/p>\n<p class=\"isSelectedEnd\">The legal basis for the data processing is the legitimate interest of the Data Controller in the secure operation of the website and the form, as well as the prevention of abuse, pursuant to Article 6(1)(f) of the General Data Protection Regulation.<\/p>\n<p class=\"isSelectedEnd\">If the operation of reCAPTCHA involves the use of a cookie or local browser storage element that is not considered strictly necessary for the secure operation of the website, it shall only be placed following the visitor's prior consent. Consent may be withdrawn at any time in the website's cookie settings.<\/p>\n<p class=\"isSelectedEnd\">The service provider:<\/p>\n<p class=\"isSelectedEnd\"><strong>Google Ireland Limited<\/strong><br \/>Gordon House, Barrow Street<br \/>Dublin 4, Ireland<\/p>\n<p class=\"isSelectedEnd\">Other companies within the Google group, including Google LLC based in the United States of America, as well as other data processors of Google, may be involved in the operation of the service. In the event of data transfer outside the European Economic Area, Google may apply safeguards complying with the applicable data protection rules, in particular an adequacy decision or standard contractual clauses adopted by the European Commission.<\/p>\n<p class=\"isSelectedEnd\">The detailed terms regarding the handling and retention of data by Google are determined by Google's own privacy policy. The Data Controller has no direct influence over the exact duration of data processing carried out by Google.<\/p>\n<p class=\"isSelectedEnd\">Further information:<\/p>\n<ul data-spread=\"false\">\n<li>Google Privacy Policy: <a href=\"https:\/\/policies.google.com\/privacy\" data-rich-text-autolink=\"\">https:\/\/policies.google.com\/privacy<\/a><\/li>\n<li>Google Terms of Service: <a href=\"https:\/\/policies.google.com\/terms\" data-rich-text-autolink=\"\">https:\/\/policies.google.com\/terms<\/a><\/li>\n<li>reCAPTCHA notice: <a href=\"https:\/\/cloud.google.com\/recaptcha\" data-rich-text-autolink=\"\">https:\/\/cloud.google.com\/recaptcha<\/a><\/li>\n<\/ul>\n<h5>7. Cookies and local browser storage<\/h5>\n<p>A cookie is a small data file that a website can place on the visitor's device via the browser.<\/p>\n<p>The website may use only technical cookies or local browser storage elements that are strictly necessary for secure and proper operation. Their purpose may include, in particular:<\/p>\n<ul>\n<li>\n<p>checking that the WordPress system is functioning properly;<\/p>\n<\/li>\n<li>\n<p>management of the website administrator login and session;<\/p>\n<\/li>\n<li>\n<p>maintaining security settings;<\/p>\n<\/li>\n<li>\n<p>remembering the visitor's data protection or language settings, where such a function is operational.<\/p>\n<\/li>\n<\/ul>\n<p>No user account or login is required for public use of the website. Administrative and login cookies solely concern authorised operators of the website.<\/p>\n<p>The website currently does not use traffic-measuring, profiling or marketing cookies. If the Data Controller introduces such technology in the future, it may only be activated following the visitor's prior consent, and the Data Controller will amend this notice and the cookie information accordingly.<\/p>\n<p>Visitors can delete or block cookies in their browser at any time. Disabling strictly necessary cookies may result in certain features of the website malfunctioning.<\/p>\n<h5>8. Links to external websites<\/h5>\n<p>The website may contain links to the websites of other organisations, projects, social media platforms, documents or mapping services.<\/p>\n<p>Technical data is only transmitted to the external service provider when the visitor opens the link. Data processing following the opening is subject to the external service provider's own privacy policy.<\/p>\n<p>To protect the contact form, the website may automatically load the technical elements necessary for Google reCAPTCHA to function. The website does not currently load any other external analytical, marketing, video or map content automatically.<\/p>\n<h5>9. Data processor<\/h5>\n<p>To provide website hosting, the Data Controller uses the following data processor:<\/p>\n<p><strong>Data processor's name:<\/strong> Zsolt Tam\u00e1s Karcsai sole trader<br \/><strong>Registered office:<\/strong> 3rd Floor, Flat 1, 1 Bats\u00e1nyi Street, Duna\u00fajv\u00e1ros, 2400.<br \/><strong>VAT number:<\/strong> 63173510-2-27<br \/><strong>Registration number:<\/strong> 5141672<br \/><strong>Telephone number:<\/strong> +36 30 263 4505<br \/><strong>Email address:<\/strong> <a href=\"mailto:karcsai@interkreativ.hu\">karcsai@interkreativ.hu<\/a><br \/><strong>Website:<\/strong> <a href=\"http:\/\/www.interkreativ.hu\/\">http:\/\/www.interkreativ.hu<\/a><\/p>\n<p>The duties of the data processor are in particular:<\/p>\n<ul>\n<li>\n<p>the technical provision of the web hosting and the database;<\/p>\n<\/li>\n<li>\n<p>storage of website data;<\/p>\n<\/li>\n<li>\n<p>the operation and technical protection of the server;<\/p>\n<\/li>\n<li>\n<p>management of backups and server logs;<\/p>\n<\/li>\n<li>\n<p>troubleshooting technical faults.<\/p>\n<\/li>\n<\/ul>\n<p>The data processor may process the personal data solely in accordance with the data controller's instructions and to the extent necessary for the provision of the service.<\/p>\n<h5>10. Data transfer to a third country<\/h5>\n<p>In connection with the use of Google reCAPTCHA, personal data may be transferred to a country outside the European Economic Area, in particular to the United States of America. The data transfer may take place on the basis of the relevant adequacy decision, or standard contractual clauses adopted by the European Commission and, where necessary, additional data security measures. The Data Controller does not carry out any other data transfers outside the European Economic Area during the data processing operations described in this information notice.<\/p>\n<h5>11. Automated decision-making and profiling<\/h5>\n<p>Based on the personal data collected through the website, the Data Controller does not carry out automated decision-making or profiling.<\/p>\n<h5>12. Data security<\/h5>\n<p>The Data Controller and the data processor shall implement appropriate technical and organisational measures to protect personal data, in particular against:<\/p>\n<ul>\n<li>\n<p>from unauthorised access;<\/p>\n<\/li>\n<li>\n<p>from unauthorised modification or transmission;<\/p>\n<\/li>\n<li>\n<p>accidental or unlawful deletion, loss and destruction;<\/p>\n<\/li>\n<li>\n<p>from unauthorised interference affecting IT systems.<\/p>\n<\/li>\n<\/ul>\n<p>The Data Controller restricts access rights to the extent necessary for the job responsibilities.<\/p>\n<h5>13. Rights of the data subjects<\/h5>\n<p>The data subject has the right to:<\/p>\n<ul>\n<li>\n<p>request information about the processing of their personal data;<\/p>\n<\/li>\n<li>\n<p>to request access to personal data held about oneself;<\/p>\n<\/li>\n<li>\n<p>to request the rectification of inaccurate data or the completion of incomplete data;<\/p>\n<\/li>\n<li>\n<p>request the erasure of your personal data if the legal conditions are met;<\/p>\n<\/li>\n<li>\n<p>to request restriction of processing;<\/p>\n<\/li>\n<li>\n<p>exercise the right to data portability in the cases specified by law;<\/p>\n<\/li>\n<li>\n<p>object to data processing based on legitimate interest;<\/p>\n<\/li>\n<li>\n<p>in the case of data processing based on consent, to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal;<\/p>\n<\/li>\n<li>\n<p>to lodge a complaint with a supervisory authority;<\/p>\n<\/li>\n<li>\n<p>to apply to the court in the event of a breach of their rights.<\/p>\n<\/li>\n<\/ul>\n<p>In the event of an objection to data processing based on legitimate interests, the Data Controller shall no longer process the personal data unless it demonstrates compelling legitimate grounds for the processing which override the rights and freedoms of the data subject, or for the establishment, exercise or defence of legal claims.<\/p>\n<h5>14. Processing of applications<\/h5>\n<p>The data subject may submit their request regarding the exercise of their rights through one of the contact details below:<\/p>\n<p><strong>Email:<\/strong> <a href=\"mailto:kdriu@kdriu.hu\">kdriu@kdriu.hu<\/a><br \/><strong>Postal address:<\/strong> KDRI\u00dc Nonprofit Kft., 8000 Sz\u00e9kesfeh\u00e9rv\u00e1r, Sereg\u00e9lyesi \u00fat 113.<\/p>\n<p>The Controller shall respond to the request without undue delay and in any event within one month of its receipt. That period may be extended by a further two months where necessary, taking into account the complexity and number of the requests. The Controller shall inform the data subject of any such extension within one month of receipt of the request, together with the reasons for the delay.<\/p>\n<p>If the Data Controller has reasonable doubts concerning the identity of the natural person making the request, they may request the provision of additional information necessary to confirm the identity of the data subject.<\/p>\n<p>As a general rule, the exercise of rights is free of charge. In the case of clearly unfounded or repetitive requests, the Data Controller may, under the conditions laid down by law, charge a reasonable fee or refuse to act on the request.<\/p>\n<h5>15. Complaints and redress<\/h5>\n<p>If the data subject considers that the processing of their personal data infringes applicable legislation, they may lodge a complaint with the National Authority for Data Protection and Freedom of Information (NAIH).<\/p>\n<p><strong>Registered office:<\/strong> 9-11 Falk Miksa utca, Budapest, 1055.<br \/><strong>Postal address:<\/strong> 1363 Budapest, Pf. 9.<br \/><strong>Email address:<\/strong> <a href=\"mailto:ugyfelszolgalat@naih.hu\">ugyfelszolgalat@naih.hu<\/a><br \/><strong>Telephone number:<\/strong> +36 1 391 1400<br \/><strong>Website:<\/strong> <a href=\"https:\/\/www.naih.hu\/\">https:\/\/www.naih.hu<\/a><\/p>\n<p>In the event of a breach of their rights, the data subject may also apply to a court. The lawsuit may be brought, at the option of the data subject, before the tribunal of their place of residence or stay.<\/p>\n<p>The Controller suggests that, where possible, the data subject should first contact the Controller directly before initiating official or judicial proceedings.<\/p>\n<h5>16. Amendment of the notice<\/h5>\n<p>The Controller is entitled to modify this information, in particular if there is a change in:<\/p>\n<ul>\n<li>\n<p>how the website works;<\/p>\n<\/li>\n<li>\n<p>the purpose or method of data processing;<\/p>\n<\/li>\n<li>\n<p>the applied technology or provider;<\/p>\n<\/li>\n<li>\n<p>the relevant regulatory framework.<\/p>\n<\/li>\n<\/ul>\n<p>The Data Controller shall publish the version in force at the given time on the website. In the event of a material change, the Data Controller shall also inform the data subjects separately in a manner adapted to the circumstances.<\/p>\n<p><strong>The information version:<\/strong> 1.0<br \/><strong>Effective date:<\/strong> 1 September 2026.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"<p>Adatkezel\u00e9si t\u00e1j\u00e9koztat\u00f3 Hat\u00e1lyos: 2026. szeptember 1. napj\u00e1t\u00f3l 1. A t\u00e1j\u00e9koztat\u00f3 c\u00e9lja \u00e9s hat\u00e1lya A jelen&#8230;<\/p>","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"elementor_header_footer","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-3","page","type-page","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/kdriu.hu\/en\/wp-json\/wp\/v2\/pages\/3","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kdriu.hu\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/kdriu.hu\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/kdriu.hu\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/kdriu.hu\/en\/wp-json\/wp\/v2\/comments?post=3"}],"version-history":[{"count":23,"href":"https:\/\/kdriu.hu\/en\/wp-json\/wp\/v2\/pages\/3\/revisions"}],"predecessor-version":[{"id":12652,"href":"https:\/\/kdriu.hu\/en\/wp-json\/wp\/v2\/pages\/3\/revisions\/12652"}],"wp:attachment":[{"href":"https:\/\/kdriu.hu\/en\/wp-json\/wp\/v2\/media?parent=3"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}