This Privacy Policy contains the information about the handling of personal data by WebEye Magyarország Kft. (registered seat: 1043 Budapest, Dugonics utca 11.; company registration number: 01-09-860532) under the subiscription agreement legal relationship established for the provision of the WebEye Service.
Our contact details:
1. The scope of the processed data, legal basis for data processing, its purpose and duration
1.1. Data processing for the purpose of business
Communication Description of the data processing case, purpose of data processing
WebEye Magyarország Kft. communicates with its prospective customers to build a business relationship and with its contracted partners to maintain the existing business relationship.
As part of the business communication, the name, email, job title and phone number of the contracted partner’s contact person is processed.
Legal basis for data processing
The legal basis for data processing is the WebEye Magyarország Kft.’s legitimate interest under paragraph 1 (f) of Article 6 of Regulation (EU) 2016/679 of the European Parliament and of the Council (hereinafter the “Regulation”, or “GDPR”) to communicate with its customers in the interest of and during the performance of the contract, inform them about relevant contractual information and business offers, and to build the business relationship in case of new customers.
Another legal basis for processing or eventually also transmitting your personal data to third party recipients, for the purpose of sending to you (including via e-mail) commercial offers of third parties, might be your freely given consent to this processing. You will always be able to see the list of recipients of personal data before giving your consent. You may revoke your consent at any time in accordance with the rules set out below.
Data transfer
On a legal basis of the legitimate interest of the controller and for the purpose of analysis of our services and customers´ satisfaction with these services your identification personal data may be transmitted to the specific processors indicated below, such as our providers of technical infrastructure and IT services, including tools for data analysis. This processing shall not include special categories of data:
Duration of data processing
Data processing ends when the contact person status ceases or after five years as of the termination of the contract.
1.2. Transfer of telematics data
Communication Description of the data processing case, purpose of data processing
Based on the agreement it entered into with its Customers, WebEye Magyarország Kft. provides telematics data concerning the object specified by the Customer.
Within the frames of the telematics data service, the general vehicle identifier, time period, mileage of the vehicle, consumed fuel, the weight of the vehicle during the journey data are processed, and after the identification of telematics data, the following data are transferred:
Legal basis for data processing
On a legal basis of the legitimate interest of the controller, your telematic data may be anonymized and further transmitted to another controller within the Group for the purpose of ESG (Environment, Social and Governance) analysis and assessment
Duration of data processing
Data processing ends when the contact person status ceases or after five years as of the termination of the contract.
2. Rights of the Data Subject related to data processing
According to the provisions of the Regulation, you have the following rights during the term of data processing:
If you wish to exercise your rights, it requires your identification and that we communicate with you. Therefore, you will need to provide personal data for the sake of identification (however, identification may be based only on data already stored about you), and your complaints concerning data processing will be available in our email account in the time period specified for complaints under this policy.
We respond to complaints concerning data processing within maximum 30 days.
Access to the personal data and information.
You have the right to obtain confirmation as to whether or not your personal data are being processed, and, where that is the case, you have the right to:
The purpose of exercising the right may be aimed at stating and reviewing the lawfulness of data processing, therefore, in case of repetitive requests for information, we may charge a reasonable fee for fulfilling the request for information.
We provide access to the personal data by sending you the processed personal data and the information in an email following your identification.
Please specify in your request whether you request access to the personal data or the information concerning data processing.
Right to rectification.
You have the right to obtain without undue delay the rectification of inaccurate personal data concerning you.
Right to restriction of data processing.
You have the right to obtain restriction of data processing where one of the following applies:
Where processing has been restricted, such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
We will inform you priorly (minimum 3 working days in advance) before the restriction of processing is lifted.
Right to erasure - right to be forgotten.
You have the right to obtain the erasure of personal data concerning you without undue delay where one of the following grounds applies:
Where we have made the personal data processed about you public on any legitimate grounds and are obliged to erase the personal data for any of the above reasons, taking account of available technology and the cost of implementation, we shall take reasonable steps, including technical measures, to inform other controllers which are processing the personal data that you have requested the erasure of any links to, or copy or replication of, those personal data. As a rule, we do not make your personal data public.
Erasure is not to be applied where data processing is necessary:
Right to object
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you based on legitimate interest. In such cases, we shall no longer process the personal data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.
Legal remedy
If you think we failed to comply with a provision under data processing law or to fulfil one of your requests, you may initiate the investigation proceeding by the Hungarian National Authority for Data Protection and Freedom of Information (Nemzeti Adatvédelmi és Információszabadság Hatóság, mailing address: 1530 Budapest, Pf.: 5., e-mail: ugyfelszolgalat@naih.hu) in order to stop the perceived unlawful data processing.
We also inform you that you may file a civil lawsuit in court.
3. Data security
In the course of operating the IT systems, we ensure it through the necessary authorization management, internal organization and technical solutions that your data does not get into the possession of unauthorized persons, or deleted, saved from the system or altered by unauthorized persons. We enforce the privacy and data security requirements on our data processors as well.
We document personal data breaches, and if necessary, inform you of breaches if such obligation applies under the Regulation.
4. Miscellaneous provisions
We reserve the right to amend this privacy policy in a manner not affecting the purpose of and legal grounds for data processing.
However, if we wish to carry out further data processing of the collected data for a purpose other than the purpose of data collection, before further data processing, we shall inform you of the purpose of data processing and the following:
Data processing may be carried out only afterwards, and where consent is the legal ground for data processing, your consent is required for data processing, in addition to the notification.
This Privacy Policy is valid from the April 15, 2023.