Privacy Policy

This Privacy Policy contains the information about the handling of personal data by WebEye Magyarország Kft.  (registered seat: 1043 Budapest, Dugonics utca 11.; company registration number: 01-09-860532) under the subiscription agreement legal relationship established for the provision of the WebEye Service.
Our contact details:

  • Address: 2151 Fót, Akácos, East Gate Business Park D2 ép. (Mailing address: 1061 Budapest, Pf. 99/1) 
  • Email: info@hu.webeye.eu
  • Phone number: +36 20 340 3010

1.    The scope of the processed data, legal basis for data processing, its purpose and duration

1.1.    Data processing for the purpose of business 
Communication Description of the data processing case, purpose of data processing
WebEye Magyarország Kft. communicates with its prospective customers to build a business relationship and with its contracted partners to maintain the existing business relationship.
As part of the business communication, the name, email, job title and phone number of the contracted partner’s contact person is processed.


Legal basis for data processing
The legal basis for data processing is the WebEye Magyarország Kft.’s legitimate interest under paragraph 1 (f) of Article 6 of Regulation (EU) 2016/679 of the European Parliament and of the Council (hereinafter the “Regulation”, or “GDPR”) to communicate with its customers in the interest of and during the performance of the contract, inform them about relevant contractual information and business offers, and to build the business relationship in case of new customers.

Another legal basis for processing or eventually also transmitting your personal data to third party recipients, for the purpose of sending to you (including via e-mail) commercial offers of third parties, might be your freely given consent to this processing. You will always be able to see the list of recipients of personal data before giving your consent. You may revoke your consent at any time in accordance with the rules set out below.


Data transfer
On a legal basis of the legitimate interest of the controller and for the purpose of analysis of our services and customers´ satisfaction with these services your identification personal data may be transmitted to the specific processors indicated below, such as our providers of technical infrastructure and IT services, including tools for data analysis. This processing shall not include special categories of data:

  • SAP ČR, spol. s r.o (seat: Vyskočilova 1481/4 Michle, 140 00 Praha 4; IČ.: 49713361; DIČ: CZ49713361; registered with the Commercial register administered by the Municipal Court in Prague, Section C, Insert No.: 23228)
  • Qualtrics, LLC, a Delaware limited liability company (principal place of business: 333 W River Park Dr., Provo, UT 84604)


Duration of data processing
Data processing ends when the contact person status ceases or after five years as of the termination of the contract.


1.2.    Transfer of telematics data
Communication Description of the data processing case, purpose of data processing


Based on the agreement it entered into with its Customers, WebEye Magyarország Kft. provides telematics data concerning the object specified by the Customer.

Within the frames of the telematics data service, the  general vehicle identifier, time period, mileage of the vehicle, consumed fuel, the weight of the vehicle during the journey data are processed, and after the identification of telematics data, the following data are transferred:

  • E-Toll Services Hungary Kft. (seat: 2151 Fót, East Gate Business Park, D2 épület (Akácos 0221/12 hrsz.)
  • W.A.G. payment solutions a.s. (seat: Na Vítězné pláni 1719/4 Praha 4 - Nusle, 140 00 Czech Republic, Commercial Register identification: No. 26415623, Tax number: CZ26415623, delivery address: https://www.eurowag.com)


Legal basis for data processing
On a legal basis of the legitimate interest of the controller, your telematic data may be anonymized and further transmitted to another controller within the Group for the purpose of ESG (Environment, Social and Governance) analysis and assessment


Duration of data processing
Data processing ends when the contact person status ceases or after five years as of the termination of the contract.

2.    Rights of the Data Subject related to data processing

According to the provisions of the Regulation, you have the following rights during the term of data processing:

  • right to access the personal data and the information related to the data processing,
  • right to rectification,
  • right to restriction of the data processing,
  • right to erasure.

If you wish to exercise your rights, it requires your identification and that we communicate with you. Therefore, you will need to provide personal data for the sake of identification (however, identification may be based only on data already stored about you), and your complaints concerning data processing will be available in our email account in the time period specified for complaints under this policy. 

We respond to complaints concerning data processing within maximum 30 days.

Access to the personal data and information.

You have the right to obtain confirmation as to whether or not your personal data are being processed, and, where that is the case, you have the right to:

  • obtain access to the personal data and 
  • the following information:
    • the purposes of the processing;
    • the categories of personal data processed about you;
    • the recipients or categories of recipients to whom the personal data have been or will be disclosed;
    • the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
    • the existence of your right to request the rectification or erasure of personal data or restriction of processing of personal data concerning you or to object to such processing in case of data processing based on legitimate interest;
    • the right to lodge a complaint with a supervisory authority;
    • where the personal data are not collected from you, any available information as to their source;
    • the existence of automated decision-making (if such procedure is applied), including profiling, and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you.
       

The purpose of exercising the right may be aimed at stating and reviewing the lawfulness of data processing, therefore, in case of repetitive requests for information, we may charge a reasonable fee for fulfilling the request for information.

We provide access to the personal data by sending you the processed personal data and the information in an email following your identification.

Please specify in your request whether you request access to the personal data or the information concerning data processing.

Right to rectification.

You have the right to obtain without undue delay the rectification of inaccurate personal data concerning you.

Right to restriction of data processing.

You have the right to obtain restriction of data processing where one of the following applies:

  • you contest the accuracy of the personal data, for a period enabling us to verify the accuracy of the personal data; if verification is unnecessary, we do not apply the restriction;
  • the data processing is unlawful and you oppose the erasure of the personal data and requests the restriction of their use instead;
  • we no longer need the personal data for the purposes of the data processing, but you require the data for the establishment, exercise or defense of legal claims; or
  • you have objected to data processing but our legitimate interest may also serve as grounds for data processing; in such case, pending the verification whether the legitimate grounds of the controller override yours, data processing shall be restricted.

Where processing has been restricted, such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

We will inform you priorly (minimum 3 working days in advance) before the restriction of processing is lifted.

Right to erasure - right to be forgotten.

You have the right to obtain the erasure of personal data concerning you without undue delay where one of the following grounds applies:

  • the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
  • you withdraw consent and there is no other legal ground for the processing;
  • you object to the processing based on legitimate interest and there are no overriding legitimate grounds (i.e. legitimate interest) for the processing,
  • the personal data have been unlawfully processed and this has been confirmed based on the complaint,
  • the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which we are subject.

Where we have made the personal data processed about you public on any legitimate grounds and are obliged to erase the personal data for any of the above reasons, taking account of available technology and the cost of implementation, we shall take reasonable steps, including technical measures, to inform other controllers which are processing the personal data that you have requested the erasure of any links to, or copy or replication of, those personal data. As a rule, we do not make your personal data public.

Erasure is not to be applied where data processing is necessary:

  • for exercising the right of freedom of expression and information;
  • for compliance with a legal obligation which requires processing by Union or Member State law to which we are subject (such as data processing for invoicing, since the retention of invoices is regulated by law), or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
  • for the establishment, exercise or defense of legal claims (e.g. if we have a pending claim towards you, or a customer or data processing complaint is being processed).

Right to object

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you based on legitimate interest. In such cases, we shall no longer process the personal data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.
 

Legal remedy

If you think we failed to comply with a provision under data processing law or to fulfil one of your requests, you may initiate the investigation proceeding by the Hungarian National Authority for Data Protection and Freedom of Information (Nemzeti Adatvédelmi és Információszabadság Hatóság, mailing address: 1530 Budapest, Pf.: 5., e-mail: ugyfelszolgalat@naih.hu) in order to stop the perceived unlawful data processing.

We also inform you that you may file a civil lawsuit in court. 

3.    Data security

In the course of operating the IT systems, we ensure it through the necessary authorization management, internal organization and technical solutions that your data does not get into the possession of unauthorized persons, or deleted, saved from the system or altered by unauthorized persons. We enforce the privacy and data security requirements on our data processors as well.
We document personal data breaches, and if necessary, inform you of breaches if such obligation applies under the Regulation.

4.    Miscellaneous provisions

We reserve the right to amend this privacy policy in a manner not affecting the purpose of and legal grounds for data processing.

However, if we wish to carry out further data processing of the collected data for a purpose other than the purpose of data collection, before further data processing, we shall inform you of the purpose of data processing and the following:

  • the period for which the personal data will be stored, or, if specification is not possible, the criteria used to determine that period;
  • the existence of your right to request access to, the rectification or erasure of personal data or restriction of processing of personal data concerning you or to object to such processing in case of data processing based on legitimate interest, and to request to exercise the right to data portability where a contractual relationship is the grounds for data processing;
  • in case of processing based on consent, the existence of your right to withdraw your consent at any time,
  • the right to lodge a complaint with a supervisory authority;
  • whether the provision of personal data is a statutory or contractual requirement, or a requirement necessary to enter into a contract, as well as whether you are obliged to provide the personal data and of the possible consequences of failure to provide such data;
  • the existence of automated decision-making (if such procedure is applied), including profiling, and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you.

Data processing may be carried out only afterwards, and where consent is the legal ground for data processing, your consent is required for data processing, in addition to the notification.

This Privacy Policy is valid from the April 15, 2023.