12-15 April 2023, Budapest
entered into force on the 1st February 2023.
1. INTRODUCTION
This Privacy Policy shall describe how we collect and process your personal data. It shall provide information on the purposes and the legal basis of the processing, the scope of the data to be processed, the identity of the data controllers and data processors, the duration of said processing, and your rights and remedies regarding data processing.
This Privacy Policy is designed to comply with the General Data Protection Regulation of the European Union, the GDPR (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Regulation (EC) No 95/46/EC) and Act CXII of 2011 on Freedom of Information, the Information Act.
We reserve the right to unilaterally amend this Policy at any time. Naturally, we will notify data subjects of any changes by publishing the amended Privacy Policy on hangveto.hu. By using the service after the amendment has come into force, the user accepts the amended Privacy Policy. The data will be treated confidentially and all security, technical and organisational measures will be taken to ensure the security of the data.
2. THE DATA CONTROLLER
Name of the data controller: Hangvető Zenei Terjesztő Társulás Kft.
Location: 1054 Budapest, Hercegprímás utca 11. III. 1.
Company number: 01-09-719984
Telephone: +36 1 209 8828
Website: www.hangveto.hu
E-mail: hangveto@hangveto.hu
We organise world and folk music festivals, produce films, retrieve talented world music musicians, we builds cultural strategies and give advises. We have a great international network and create training programmes for musicians and music industry professionals. In the course of our activity we regularly contact the artists and their managers, co-organisers and music industry professionals.
There is a serious need to make world and folk music industry professionals (hereinafter: delegates) able to communicate with each other, and for this purpose find each other and reach the communication data of each other. We have decided to create a database which contains the contact data of these music industry professionals for helping them find each other (hereinafter: Delegate Database).
3. DATA PROCESSING
Processing of data related to the Delegate Database
3.1. The scope of the data processed:
Delegate’s
3.2. Source of the data processed:
Prior authorisation of the delegate is the precondition of the login into the Delegate Database. Authorisation may happen as follows:
We send a form called Deal Sheet to those delegates with whom we intend to conclude a contract for the purpose to be present on our event. Deal Sheet contains the particular contract terms related to the certain delegate, and together with the General Terms and Conditions they create the whole contract to be concluded between us. Deal Sheet contains the above written idividual data.
3.3. Purpose of the data processing:
The purpose of the data processing is to help delegates to contact each other by giving them the access to other delegates’s contact data and other data which may help them in their activity in the music industry, in organizing and in contacting, so they may communicate and cooperate with each other, with the possibility to filter data and search in data.
3.4. Legal basis for processing:
The legal basis for processing in every case is the consent of the delegates. In the case of those delegates with whom we conclude a contract, the consent is included in the Deal Sheet, in every other case an individual consent form shall be accepted.
Data processing is based on the Article 6, paragraph 1, point a) of the Regulation (EU) 2016/679 of the European Parliament and of the Council (hereinafter referred to as GDPR).
3.5. Transfer of data:
Delegates registrated in the Database get access to the Database as well as the partecipants of music events and other folklor or world music programs organised by us.
We transfer the data of delegates to those partners of us who cooperate with us in the creation and processing of the Database. These partners shall assume to comply with the GDPR rules and to make technical and organisational arrangements to ensure the protection of the rights of data owners.
3.6. Deadline for deletion of data:
We process the data of a delegate registrated in the Delegate Database as long as the delegate asks for the cancellation of his/her data from the Database. Data will be deleted within ten working days from the receipt of the request.
4. DATA STORAGE, DATA SECURITY
Our computer systems and other data storage facilities are located at our headquarters, at our IT service providers and our data processors.
4.1. Technical conditions
The IT tools used to process personal data in the provision of the service are selected and operated in such a way that the data processed:
a) is accessible to those authorised to access it (availability);
b) has its authenticity and authentication is ensured (authenticity of processing);
c) its integrity is verified (data integrity);
d) is protected against unauthorised access (data confidentiality).
Appropriate measures will be taken to protect the data especially against unauthorised access, alteration, forward, disclosure, erasure or destruction, accidental destruction, damage or loss, and inaccessibility resulting from changes in the technology used.
4.2. Processing of the Database
The Databases shall be stored in the storage space of Websupport Magyarország Kft. (1132 Budapest, Victor Hugo utca 18-22.; www.websupport.hu).
We use Google Drive for the processing of the Database. Our documents are protected by Google’s system, including GDPR-compliant data protection. Access to Google Drive is granted via a dedicated account to which individual access rights can be assigned.
Our aim is to make the Database widely and freely accessible, and all those delegates who have been registrated in the Database as well as the partecipants of music events and other folklor or world music programs organised by us, shell be able to access the Database.
If we realise that the data of a person who is not a delegate are registered in the Database, we cancel his/her data from the Database.
5. THE RIGHTS OF DATA SUBJECTS
Data subjects have the right to access their personal data processed by us, i.e. they can request information, in particular, about the scope, purpose, duration, source and sharing of data and their data protection rights. The request for information is free of charge, but we are entitled to charge a fee for any further requests for information concerning the same data.
If the data we process is not accurate, the data subject may request its correction. The data subject may also request the erasure of personal data we process or the restriction of our processing, provided that this right is not restricted by law.
Where the processing is based on consent, the data subject may withdraw his/her consent at any time in the future.
As part of their right to data portability, data subjects may request that we provide them a copy (a machine-readable and a conventional format) of their personal data provided to us on the basis of their consent or processed for the performance of a contract, or that we transfer it to another controller upon their request.
The data subject has the right to object to the processing and use of his/her personal data in our legitimate interests.
The data subject has the right to file a complaint about our data processing. Complaints shall be sent to hangveto@hangveto.hu e-mail address. We shall respond to a complaint received as soon as possible but, in any event, within 30 days. Complaints may also be filed with the competent authority (National Authority for Data Protection and Freedom of Information, NAIH, address: 1125 Budapest, Szilágyi Erzsébet fasor 22/c.; phone: +36-1-391-1400; e-mail: ugyfelszolgalat@naih.hu) or with the competent court in the place of residence or domicile of the data subject.
The data protection policy of Hangvető Ltd. complies with the requirements of the GDPR.