THE MACHINERY AGENCY LTD.
PRIVACY POLICY
Data Controller: Gépközvetítő Korlátolt Felelősségű Társaság
head office: 7400 Kaposvár, Dombóvári út 18.
Branch office: HU-9123 Kajárpéc, Újtelep utca 1.
Tax number: 23907788-2-14 (HU23907788)
Company registration number: Kaposvár General Court, 14-09-312545
Account holding financial institution: Budapest Bank Zrt. Kaposvár Branch (7400 Kaposvár, Fő utca 3.)
payment reference number: 10103214-10148200-01003004
website: https://www.gepkozvetito.hu (hereinafter referred to as: website)
e-mail info@gepkozvetito.hu
- Regulation
Pursuant to Regulation 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, Gépközvetítő Kft.
This data protection policy is binding on Gépközvetítő Kft.
Information Security Policy and the Privacy Policy of Gépközközvetítő Kft.
It should be read in accordance with the Electronic Surveillance System Policy of the Gpovertransfer Company.
- Scope of the Privacy Policy
Personal scope: the personal scope of this Policy applies to the Data Controller and to all natural persons employed by the Data Controller, natural and legal persons having a contractual relationship with the Data Controller, as well as to data processors having a contract with the Data Controller.
and the processor.
- Concepts
The following terms are defined in the EU regulation already referred to.
The Gépközvetítő Kft.
acts as a data controller with regard to the processing of personal data both within its own organisation and for the processing necessary for the performance of its activities.
These areas are.
Gépközvetítő Kft.
uses an external data processor for the processing of personal data, the legal basis for which is the contractual relationship between the parties.
Affected: a natural person identified or identifiable on the basis of any information
Identifiable natural person: a natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of the natural person
Personal data: any information relating to the data subject
Contribution: a clear, freely given, explicit and informed indication of the data subject’s wishes by which he or she signifies, by a statement or by other means which unambiguously express his or her wishes, his or her consent to the processing of personal data relating to him or her.
Protest: A statement by the data subject objecting to the processing of his or her personal data and requesting the cessation of the processing or the erasure of the processed data.
Data Controller: a natural or legal person, public authority, agency or any other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of the processing are determined by Union or Member State law, the controller or the specific criteria for the designation of the controller may also be determined by Union or Member State law.
Data management: any operation or set of operations which is performed upon personal data or on a set of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction
Data processor: a natural or legal person, public authority, agency or any other body which processes personal data on behalf of the controller
Data processing: the set of processing operations carried out by a processor acting on behalf of or under the authority of the controller.
Addressee: the natural or legal person, public authority, agency or any other body, whether or not a third party, with whom or to which personal data are disclosed.
Public authorities that may have access to personal data in the context of an individual investigation in accordance with Union or Member State law are not recipients, and any nonprocessing of such data by those public authorities must comply with the applicable data protection rules in accordance with the purposes of the processing.
Third party: A natural or legal person, public authority, agency or any other body other than the data subject, the controller, the processor or the persons who, under the direct authority of the controller or processor, are authorised to process personal data.
Data transmission: The making available of data to a specified third party.
Registration: Making the data available to anyone.
Data deletion: Making data unrecognisable in such a way that it is no longer possible to recover it.
Data marking: The marking of data with an identifier to distinguish it.
Data storage: The marking of data with an identifier to limit its further processing permanently or for a limited period of time.
Data destruction: The complete physical destruction of a medium containing data.
Data protection incident: A breach of security that results in the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data transmitted, stored or otherwise processed.
Profiling: Any processing of personal data by automated means intended to evaluate, analyse or predict personal aspects relating to the data subject, in particular his or her performance at work, economic situation, state of health, personal preferences or interests, reliability, behaviour, location or movements.
Renaming: The processing of personal data in a way that makes it impossible to determine, without further information, to which data subject the personal data relate, stored separately from the personal data, and ensures, by technical and organisational measures, that the personal data cannot be linked to an identified or identifiable natural person.
Website: the controller, in this case Gépközvetítő Kft.
the website operated by the data controller.
Newsletter: a free service provided by the Data Controller, which can be ordered through the Website, in the framework of which the Data Controller sends to the persons who have consented to it, a message on a specific subject of the Website, which is also considered as electronic direct marketing and advertising, to the e-mail address of the person subscribed to the newsletter, provided at the time of subscription.
- Principles for the processing of personal data
The minimum standards for the processing of personal data are set out in the data protection principles, which are the responsibility of the controller and must be enforced in all processing.
4.1 Lawfulness, fairness and transparency The processing of personal data must be carried out lawfully and fairly and in a transparent manner for the data subject.
4.2 Purpose limitation Personal data should be collected only for specified, explicit and legitimate purposes and not processed in a way incompatible with those purposes.
4.3 Data minimisation Personal data must be adequate, relevant and limited to what is necessary for the purposes for which it is processed.
4.4 Accuracy Personal data must be accurate and, where necessary, kept up to date and all reasonable steps must be taken to ensure that personal data which are inaccurate for the purposes of the processing are promptly deleted or rectified.
4.5 Storage for a limited period Personal data must be stored in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed, and personal data may be stored for longer periods only if the personal data are processed for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes.
4.6 Integrity and confidentiality Personal data must be processed in a manner that ensures adequate security of personal data, including protection against unauthorised or unlawful processing, accidental loss, destruction or damage, by using appropriate technical or organisational measures.
4.7 Accountability The data controller must be responsible for compliance with the lawfulness, fairness and transparency of the processing of personal data and must also be able to demonstrate such compliance.
- Legal basis for processing
Personal data can be processed if:
– it is ordered by law or, on the basis of the authorisation granted by law, within the scope specified therein, in the case of data that are not special categories of data or personal data in the criminal field, by an ordinance of a local authority for a purpose in the public interest,
– it is strictly necessary for the performance of the controller’s lawful tasks and the data subject has given his or her explicit consent to the processing of the personal data,
– necessary and proportionate for the protection of the vital interests of the data subject or of another person or for the prevention or elimination of an imminent threat to the life, limb or property of a person
– the personal data have been explicitly disclosed by the data subject and are necessary and proportionate for the purposes for which they are processed.
In addition to the above, mandatory data processing will also take place if:
– the processing of the personal data is ordered by law or, on the basis of a law, by an ordinance of a local authority for a purpose in the public interest, within the scope specified in the law, in the case of data that are not special categories of data or personal data concerning criminal matters,
– processing is necessary for compliance with a legal obligation to which the controller is subject
– processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
In the case of mandatory data processing, the types of data to be processed, the purposes and conditions of processing, the availability of the data, the identity of the controller and the duration of processing or the periodic review of the necessity of processing are determined by the law or municipal decree imposing the processing.
- Rights of the data subject
The following provisions apply to all areas of processing of the personal data of the data subject.
The data subject shall have the right to obtain, in respect of personal data processed by the controller and by a processor acting on his or her behalf or under his or her instructions, under the conditions set out in the Data Protection Regulation:
To be informed of the facts relating to the processing before the processing starts (right to prior information).
Upon request, the controller shall provide the data subject with his or her personal data and information relating to the processing thereof (right of access).
At the request of the data subject and in additional cases as defined in the Data Protection Regulation, the controller shall correct or supplement the personal data (right of rectification).
At your request, and in further cases specified in the Data Protection Regulation, the controller will restrict the processing of your personal data (right to restriction of processing).
At your request, and in further cases specified in the Data Protection Regulation, the controller shall delete your personal data (right to erasure).
- Ensuring the rights of the data subject
The data controller shall take appropriate technical and organisational measures to facilitate the exercise of the rights of the data subject, in particular by providing any notifications and information to be given to the data subject under the provisions of the Data Protection Regulation in an easily accessible and legible form, in a clear and plain language and in a concise manner, and by considering the request for the exercise of the rights to which the data subject is entitled, submitted by the data subject, within the shortest possible time from the date of its submission, but not later than twenty-five days, and by notifying the data subject of its decision in writing or, if the data subject has submitted the request by electronic means, by electronic means.
Pursuant to its right to prior information, the controller shall provide the data subject, prior to the start of processing operations carried out by the controller or by a processor acting on its behalf or at its instructions, or at the latest immediately after the start of the first processing operation, with the following information
– the name and contact details of the controller and, where a processing operation is carried out by a processor, the processor
– the purposes of the proposed processing; and
– information on the rights of the data subject under this Act and on how to exercise them.At the same time as the above activities, or in the same way or addressed to the data subject, the controller shall provide the data subject with information on.
– the legal basis for processing
– the duration of the retention of the personal data processed and the criteria for determining that duration
– the recipients of the transfers of personal data processed or intended to be transferred
– the source of the personal data collected, and
– any other material facts relating to the circumstances of the processing
In order to exercise his or her right of access, the data subject shall, upon request, be informed by the controller whether his or her personal data are processed by the controller or by a processor acting on his or her behalf or at his or her instructions.
Where the personal data of the data subject are processed by the controller or by a processor acting on his or her behalf or at his or her instructions, the controller shall make available to the data subject the personal data of the data subject processed by him or her and by the processor acting on his or her behalf or at his or her instructions and shall communicate them to the data subject,
– the source of the personal data processed,
– the purpose and legal basis of the processing,
– the scope of the personal data processed,
– the recipients of the transfers of personal data processed,
– the duration of the retention of the personal data processed and the criteria for determining that duration,
– the rights of the data subject under the Regulation and how to exercise them,
– where profiling is used, the fact and
– the circumstances in which the personal data breaches occurred in relation to the processing of the data subject’s personal data, their effects and the measures taken to deal with them.
In order to exercise its right of rectification, the controller shall, where personal data processed by it or by a processor acting on its behalf or at its instructions are inaccurate, incorrect or incomplete, without undue delay, in particular at the request of the data subject, rectify or correct them or, where compatible with the purposes of the processing, supplement them with additional personal data provided by the data subject or with a declaration relating to the personal data processed by the data subject (hereinafter together referred to as rectification).
The controller is exempted from the above obligation if.
– the accurate, correct or complete personal data are not available and are not provided by the data subject, or
– the authenticity of the personal data provided by the data subject cannot be established beyond reasonable doubt.
Where the controller rectifies personal data processed by it or by a processor acting on its behalf or at its instructions, it shall inform the controller to which it transmitted the personal data concerned by the rectification of the personal data of the fact of the rectification and of the rectified personal data.
In order to enforce its right to restrictprocessing, the controller shall restrict processing to the processing operations specified above where the data subject contests the accuracy, correctness or completeness of personal data processed by the controller or by a processor acting on its behalf or at its instructions and the accuracy, correctness or completeness of the personal data processed cannot be established beyond reasonable doubt, for the duration of the resolution of the doubt.
To enforce the right to restriction of processing, the controller restricts processing to certain processing operations,
– where the data subject contests the accuracy, correctness or completeness of personal data processed by the controller or by a processor acting on his or her behalf or at his or her instructions and the accuracy, correctness or completeness of the personal data processed cannot be established beyond reasonable doubt, for the period necessary to resolve the doubt,
– where the data should be erased but there are reasonable grounds to consider, on the basis of a written declaration by the data subject or on the basis of information available to the controller, that the erasure would harm the data subject’s legitimate interests, for the duration of the legitimate interest not to erase the data,
– if the data should be erased in the event of unlawful processing, but the data must be kept as evidence in the course of investigations or proceedings, in particular criminal proceedings, carried out by or with the participation of the controller or another public authority, as provided for by law, pending the final or conclusive outcome of such investigations or proceedings,
During the period of restriction of processing, the controller or a processor acting on its behalf or under its instructions may carry out processing operations other than storage of the personal data subject to the restriction solely for the purposes of pursuing the legitimate interests of the data subject or as provided for by law, international treaties or European Union acts.
In order to enforce its right to erasure, the controller shall promptly erase the personal data of the data subject where:
– the processing is unlawful, in particular where the processing is
– contrary to the established data protection principles
– the purpose of the processing has ceased or the further processing of the data is no longer necessary for the purpose of the processing,
– the period laid down by law, an international treaty or a legally binding act of the European Union has expired, or
– the legal basis for processing the data has ceased and there is no other legal basis for processing the data,
– the data subject withdraws his or her consent to the processing or requests the erasure of his or her personal data, unless the processing of the personal data is required by law or by an order of a local authority for reasons of public interest or the processing of the personal data is necessary for the protection of the vital interests of the data subject or of another person or for the prevention or elimination of an imminent danger to life, limb or property of a person
– the deletion of the data has been ordered by law, an EU act, the Authority or a court; or
– 10 years have elapsed since the deletion of the data recorded in the controller’s and processor’s records and in the electronic logbook.
If the data subject’s request for rectification, erasure or restriction of the processing of personal data processed by the controller or by a processor acting on his or her behalf or at his or her instructions is rejected by the controller, the controller shall inform the data subject in writing without delay.
– the fact of the refusal and the legal and factual grounds for it,
– the rights of the data subject under this Act and the means of exercising them, in particular the right to rectification, erasure or restriction of the processing of personal data processed by the controller or by a processor acting on his or her behalf or under his or her instructions, with the assistance of the Authority.
- General tasks of the controller
In order to ensure the lawfulness of processing, the controller shall take technical and organisational measures appropriate to all the circumstances of processing, in particular its purposes and the risks to the fundamental rights of data subjects posed by processing.
These measures shall be regularly reviewed and, where necessary, amended accordingly.
Technical and organisational measures must be designed to:
– are reasonably achievable, taking into account the state of the art and the cost of implementing the measures, to ensure the effective exercise of the requirements for the processing of personal data, in particular the principles of data management and the rights of data subjects; and
– are suitable and adequate to ensure that, by default, personal data are processed only to the extent and for the duration necessary for the purposes for which they are processed and that personal data processed by the controller are not disclosed to the public unless the data subject explicitly requests it.
Any person who has lawful access to personal data processed in the course of the controller’s activities, as a processor or otherwise under the controller’s authority, unless otherwise provided by law, international treaty or binding European Union act, shall have the right to perform operations with the personal data concerned only as instructed by the controller.
The data controller and the data processor shall facilitate the activities of the bodies and persons entitled to conduct proceedings concerning the lawfulness of the processing operations carried out by them, and shall provide them with the information necessary for the conduct of their proceedings.
- General tasks of a data processor
Only a person or entity that provides adequate guarantees to implement technical and organisational measures suitable to ensure the lawfulness of processing and the protection of the rights of data subjects may act as a processor.
Those guarantees shall be certified by the processor to the controller before the processing starts.
The processor may only use an additional processor if this is not excluded by law and if the controller has given prior authorisation to use an additional processor in a public or private document with full probative value, on a case-by-case or general basis.
Where the processor uses the additional processor on the basis of a general authorisation from the controller, the processor shall inform the controller of the identity of the additional processor and the tasks envisaged to be carried out by the additional processor before using the additional processor.
If, on the basis of that information, the controller objects to the use of the additional processor, the additional processor shall be entitled to use the additional processor only if the conditions specified in the objection are met.
The detailed content of the legal relationship between the controller and the processor is defined by law or by a written contract, including a contract established by electronic means, between the controller and the processor within the limits set by the Data Protection Regulation and the EU legal act.
The controller shall be responsible for the lawfulness of the instructions given by the controller to the processor.
- The register of controllers and processors and the electronic logbook
The controller shall keep a record of its processing of personal data, data protection incidents and measures relating to the data subject’s right of access (hereinafter together referred to as the “controller’s records”).
The controller shall record in the register:
– the name and contact details of the controller and of each joint controller,
– the purpose or purposes of the processing,
– in the case of a transfer or intended transfer of personal data, the recipients of the transfer
– the data subjects and the data processed
– in the case of international transfers, the scope of the data transferred,
– the legal basis for processing operations, including transfers,
– if known, the date of erasure of the personal data processed,
– a general description of the technical and organisational security measures implemented under the Data Protection Regulation,
– the circumstances in which data breaches have occurred in relation to the data it processes, their effects and the measures taken to address them,
– the legal and factual grounds for the measures restricting or refusing to exercise the data subject’s right of access under the Data Protection Regulation.
The processor shall keep a record of the processing it carries out on behalf of or under the authority of each controller (processor register).
It is recorded in the data processor’s records by the data processor:
– the name and contact details of the controller, the processor and any additional processors
– the types of processing carried out on behalf of or under the authority of the controller,
– a general description of the technical and organisational security measures implemented in accordance with the Data Protection Regulation.
Records of the controller and processor shall be kept in written or electronic form and shall be made available to the Authority upon request.
For the purpose of verifying the lawfulness of processing operations carried out by electronic means with personal data, the controller and processor shall record them in an automated data management system (electronic log):
– the scope of the personal data concerned by the processing operation,
– the purposes and the grounds for the processing operations,
– the date on which the processing operation was carried out,
– the identity of the person who is carrying out the processing operation,
– in the case of transfer of personal data, the recipient of the transfer.
The data recorded in the electronic logbook may be accessed and used only for the purposes of verifying the lawfulness of data processing, enforcing data security requirements and conducting criminal proceedings.
The data controller and the data processor shall provide access to the electronic logbook to the Authority and to persons and organisations carrying out activities defined by law for the purposes specified above, and shall transmit data from it to them upon their request.
The data recorded in the controller’s and processor’s register and in the electronic logbook shall be kept for ten years after the deletion of the data processed.
- Data management processes
11.1 Personal data management:
Data management of applicants:
Purpose of data processing: processing the data of applicants for recruitment, later on concluding employment contracts with the successful applicants Legal basis for data processing: consent of the data subject Data processed: name of the applicant/date of birth/name of mother/address/ training data/photo Data processing duration: in case of successful applicants, the duration of the contract is limited to the period specified in the Labour Code of 2012.
In the case of an unsuccessful worker: with the consent of the person concerned, for 2 years from the date of giving consent. (Annex 1.)
The company’s policy on the processing of employees’ personal data is as follows:
Purpose of data processing: establishment, performance or termination of employment relationship Legal basis for data processing: the data subject’s consent, the Labour Code of 2012.
I of 2012 Act I of 2012, § 10 (1) and (3) and § 11.
§ (Annex 2) Deadline for data storage: the deadline prescribed by the relevant legislation Data processors, data transfers.
Service provider: the company Adol 2011.2011.
23782217-1-14
11.2.
Papír alapú adatkezelések:
Purpose of data processing: fulfilment of labour and social security obligations Legal basis for data processing.
LXVI.
Act on the protection of personal data, the protection of archives, the protection of the right to privacy, and the Act on the social security pension scheme 1997.
LXXXI.
The personal data of employees are filed in the designated archives.
Duration of data processing: statutory obligation
11.3 Electronic monitoring system
Purpose of data processing: protection of persons and property Legal basis for data processing: the Hungarian Act of 2005 on the rules of protection of persons and property and private investigation.
CXXXIII.
Act No 31 of the Personal Protection and Private Security Act of 2005 on the protection of privacy and personal data.
§ Article 31 (1) of the Code of Conduct on the Protection of Personal Data, Article 31 (1) of the Code of Conduct on the Protection of Personal Data, Article 31 (1) of the Code of Conduct on the Protection of Personal Data, Article 31 (1) of the CGIIII.
CXXXIII.
31.§ (2) of Act No. CXXXIII of 2005, paragraph (2) Further rules on the processing of data by electronic surveillance systems are set out in the Act on the processing of data by Gépközvetítő Kft.
The rules on the processing of data from the electronic surveillance system are set out in the GVVV’s Code of Conduct on the processing of data from the electronic surveillance system.
11.4.
Honlapon keresztüli kommunikáció során begyűjtött adatok
Purpose of processing: to provide the customer with the information requested by the customer by means of the requested data. Requesting a callback, “Looking for another machine?” and the contact details submitted when filling in the request for quote form are used to provide the customer with the requested information. Data processed (call-back request): name, telephone number Data processed (“Looking for another machine?”): name, telephone number, e-mail address, address Data processed (request for quote): name, telephone number, e-mail address, address Duration of processing.
11.5.
Hírlevél küldő rendszer használata
Purpose of data processing: sending electronic newsletters, advertising, direct marketing or other marketing content to persons subscribed to the newsletter, provided that the person has consented to this when subscribing to the newsletter.Data processed: surname, first name, e-mail address Duration of data processing: Data processing for the purpose of sending an electronic newsletter, advertising, publicity, direct marketing or other marketing content to a person who has subscribed to a newsletter lasts until consent is withdrawn, unless the Data Controller is entitled to process the data on a legal basis other than the person’s consent.
11.6 Data protection incident
The controller shall notify the data protection incident to the National Authority for Data Protection and Freedom of Information without undue delay and, where possible, no later than 72 hours after becoming aware of the data protection incident, unless the data protection incident is unlikely to pose a risk to the rights and freedoms of natural persons.
If the notification is not made within 72 hours, it shall be accompanied by the reasons justifying the delay.
The processor shall notify the controller of the personal data breach without undue delay after becoming aware of it.
The controller is obliged to inform the Authority in the notification of:
– describe the nature of the personal data breach, including, where possible, the categories and approximate number of data subjects and the categories and approximate number of data subjects affected by the breach,
– the name and contact details of the Data Protection Officer or other contact person who can provide further information,
– explain the likely consequences of the data breach,
– describe the measures taken or envisaged by the controller to remedy the personal data breach, including, where appropriate, measures to mitigate any adverse consequences of the personal data breach.
If and to the extent that it is not possible to provide the information at the same time, it may be provided in instalments at a later date without further undue delay.
The data controller shall keep a record of the data breaches, indicating the facts relating to the data breach, its effects and the measures taken to remedy it.
- Newsletter subscription rules
The person subscribing to the sending of electronic advertising, advertisements, newsletters, marketing material pursuant to clause 11.5 may subscribe to the newsletter on the website separately from the acceptance of the GTC, i.e. may expressly authorise the sending of such content to the e-mail address provided on the website and the processing of his/her e-mail address for this purpose.
A person may freely unsubscribe from the newsletter at any time by clicking on the unsubscribe button in the newsletter.
- Google Analytics service
Independent measurement and auditing of website traffic and other web analytics data is carried out by Google Analytics.
Detailed information on this data management by the data controller is available at the following link: www.google.com/analytics.
- Facebook Remarketing
The visitor to the website acknowledges that, if logged into Facebook while viewing the website, Facebook may track which pages are viewed, including, where applicable, the viewing of the website.
The person acknowledges that the Data Controller will not be informed of the fact of the visit and that the data of the person will not be in the possession of the Data Controller via Facebook.
- Remedies
A request for the initiation of a data protection procedure may be made if the data subject considers that the processing of personal data relating to him or her infringes the provisions of the Data Protection Regulation.
In order to enforce the right to the protection of personal data, the National Authority for Data Protection and Freedom of Information (1024 Budapest, Szilágyi Erzsébet fasor 22/C) (hereinafter referred to as the Authority) shall, upon request of the data subject, initiate a data protection authority procedure and may initiate a data protection authority procedure ex officio.
National Authority for Data Protection and Freedom of Information (Postal address: 1530 Budapest, Pf.. 5., e-mail address : ugyfelszolgalat@naih.hu) and Gépközvetítő Kft.
The data subject has the right to take legal action against the data processing of the Giving and Processing Service Provider, GTPV and the Giving and Processing Agency.
He/she may also, at his/her option, bring the action before the competent court of his/her place of residence or domicile.
- Cookie policy
The Gépközvetítő Kft.
uses cookies on the websites (hereinafter referred to as “websites”) accessible through its gepkozvetito.hu domain and subdomains to operate the websites, to facilitate their use and to ensure their security, to monitor the activity on the websites, to display relevant content offers and targeted advertisements.
17.1 What is a cookie?
Cookies are short data files placed on the user’s computer by the website visited.
The purpose of the cookie is to make the given infocommunication or internet service easier and more convenient.
There are several types, but they generally fall into two broad categories.
One is the temporary cookie, which is placed on the user’s device by the website only during a particular session, and the other is the persistent cookie (e.g. a website’s language setting), which remains on the computer until the user deletes it.
According to the European Commission’s guidelines, cookies [unless strictly necessary for the use of the service] can only be placed on the user’s device with the user’s permission.
For more information on cookies, please visit the following website: allaboutcookies.org
17.2 What types of cookies does Gépközvetítő Kft use?
17.2.1 Necessary (or required) cookies are those that are necessary for the use of the basic functions of the website, such as navigation between pages or access to secure areas of the site. Some cookies are deleted as soon as the visitor closes the browser (session cookies), while others are saved by the visitor’s computer or browser until they expire or are deleted by the visitor (persistent cookies). It is possible to delete them afterwards in the browser settings.
17.2.2 Cookies for statistical purposes, which are related to the performance, development and improvement of the user experience of the Websites and allow the Website operator to collect data related to how users use the Website.
These cookies also do not identify visitors, the information they collect relates to, for example, which part of the site the visitor clicked on, how many pages or sites the visitor visited, the length of time spent on each session, any error messages received, etc.
We also distinguish between permanent and session cookies for statistical purposes, depending on how long they are stored on the visitor’s browser or device.
The use of cookies for statistical purposes is based on the consent of the data subject.
You can set the placement of these cookies on the user’s device or delete them afterwards in the browser settings.
17.2.3 Social media cookies, the purpose of which is to provide the visitor with the social media services used on the Websites, e.g. when the visitor shares content from the Website on Facebook, Twitter or other social media service interfaces, or links his or her account to social media content, or when content stored by the social media service provider appears on our Sites through plug-ins (add-ons) provided by the social media service provider.
Social media service providers may collect information through cookies about how a visitor uses the services provided by the social media service provider, what content is shared, in order to display content of interest to the visitor.
The purpose of these cookies is to display ads on the Websites that are relevant to the visitor.
These cookies are also not personally identifiable, they collect information such as which pages the visitor has visited, which parts of the website they have clicked on, how many pages they have visited, all in order to display content of interest to the visitor.
The cookies are embedded on the basis of the data subject’s consent, which is given by the data subject using the settings interface.
The setting of cookies for social media purposes can be prevented or subsequently deleted by the user by means of the appropriate settings on his/her browser.
17.2.4 Third-party cookies Our Website may also use some popular third-party web services (e.g. Google Analytics), which may result in the storage of cookies that are not under our control.
These services have their own privacy and cookie policies.
17.3 The Gépközvetítő Kft.
(www.gepkozvetito.hu) description of cookies used by its contracted partners
Other service providers may also place cookies on the Sites.
These service providers may have a contract with Gépközvetítő Kft., but they place cookies independently of Gépközvetítő Kft. for their own operations.
Users can find information about the cookies used by the contracted partners of Gépközvetítő Kft on the websites of these service providers.
Google Analytics Information about this service is available at the following link: Google Analytics information. Google Adwords Information about the service is available at the following link. Facebook The information about the service is available at the following link.
17.4 Handling of cookies:
Most browsers accept cookies by default.
You can set your browser to alert you every time a cookie arrives, or to block all cookies.
Please note that if you delete cookies or disable the use of cookies, you may not be able to use the full functionality of our website or the website may not function as intended in your browser.