Ker-Soft Számítástechnikai Ltd. Privacy Policy
For Ker-Soft Ltd., the protection of data privacy rights is a fundamental value. Accordingly, we make every effort to carry out our activities in compliance with the most appropriate and current Hungarian and international laws and legislations, with a strong focus on safeguarding your personal data.
Ker-Soft Számítástechnikai Ltd. (head office: 1119 Budapest, Szombathelyi tér 14.; company registration number: 01-09-565807; tax number: 12212174-2-43; hereinafter referred to as the „Company”) aims to ensure compliance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: „GDPR”), as well as Act CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information (hereinafter: „Infotv.”).
By preparing and publishing this Privacy Notice (hereinafter: „Notice”), the Company seeks to guarantee the effective exercise of the data subjects’ right to information as defined under the GDPR and Infotv.
The Company is a Hungarian partner of Adobe, Alaska, Flexera, Prezi, ESET, Embarcadero, CA, IBM, Microsoft, Jetbrains, Quest, VMware, Arcserve, Idera, WinRAR and Unity software manufacturers, and the owner of the www.kersoft.hu and youtrack.hu websites. The Company acts as the data controller for the data generated during the operation of the websites and provision of services.
The scope of this Notice covers all processes in which personal data is processed by all departments of the Company. The validity of the Notice is in effect until it is revoked. The Company reserves the right to modify this Notice and will notify users accordingly by publishing the updated version of the Notice on its website.
As both data controller and data processor, our Company has taken a number of technical and organizational measures to ensure the fullest possible protection of the personal data we process However, especially when data is transmitted over the internet, there may be inherent security vulnerabilities, and therefore absolute protection cannot be guaranteed, but we will do our utmost to ensure that your data does not fall into unauthorized hands or is not used for unlawful purposes. To support this, we strive to adhere to the principle of data minimization, requesting only the minimum amount of personal data necessary from our clients.
Definitions
Ker-Soft Ltd.’s Privacy Notice is based on the definitions used in the General Data Protection Regulation (GDPR). Our privacy statement should be easy to read and understand for the public as well as for our customers and business partners. To ensure this, we would like to clarify the terms used in the following:
a) Personal data: personal data as defined by the GDPR, means any information relating to an identified or identifiable natural person (hereinafter referred to as the „data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
b) Data subject: a data subject is any identified or identifiable natural person whose personal data is processed by the controller.
c) Processing: processing means any operation or set of operations which is performed on personal data, whether by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
d) Restriction of processing: restriction of processing means the marking of stored personal data with the aim of limiting their processing in the future.
e) Pseudonymization: pseudonymization means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.
f) Controller: a controller means the natural or legal person, public authority, institution or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Member State law, the controller or certain criteria specified by the controller may be designed in accordance with Union or Member State law.
g) Processor: a processor is a natural or legal person, public authority, institution or other body which processes personal data on behalf of the controller.
h) Recipient: a recipient is a natural or legal person, public authority, institution or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients.
i) Third party: a third party is a natural or legal person, public authority, institution or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorized to process personal data.
j) Consent: consent is any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
Name, address and other contact details of the controller:
Ker-Soft Számítástechnikai Ltd., e-mail: This email address is being protected from spambots. You need JavaScript enabled to view it. www.kersoft.hu Tel: +36 1 206 2146
Any data subject may contact us at any time with any questions or suggestions concerning data protection using the contact details set out above.
We collect the following information when you visit our website:
In an automated way (cookies):
When you visit one of our websites, we may place information on your computer in the form of cookies. Cookies are small files that are sent to your browser by a web server and stored on your computer's hard drive. Meanwhile, no personal information about the user other than the Internet Protocol address is stored. This information is used to automatically recognize you the next time you visit our website and to help you find your way around. Cookies allow us, for example, to tailor a website to your interests or to save your password so that you do not have to re-enter it each time.
We only use Google Analytics cookies (in addition to the cookies necessary for the basic functioning of the website). Within Google Analytics cookies, we also use Google Ads, which records your activity on our website.
For more information and to view Google's current privacy policy, please visit Privacy Policy – Privacy & Terms – Google.
Each time you visit our website, for technical reasons, information that your browser transmits to us is automatically saved in the server log files. These are:
· type/version of used browses
· the operating system used by the system with access
· the web page from which an accessing system reaches our website, a so-called redirect URL
· subpages that are controlled by a system with access to our website
· Date and time of access to the website
· an Internet Protocol (IP) address
· the ISP of the system with access
· other similar data and information that is used to counter a threat if our information technology system is attacked.
These data cannot be associated with a specific person. This information is often needed to:
· properly publish the content of our website,
· optimize the content of our website and its advertising,
· ensure the continued functionality of our IT systems and websites, and
· provide the necessary data to law enforcement authorities in the event of a cyber-attack.
These data and information, collected anonymously, are evaluated by Ker-Soft Ltd. partly for statistical purposes and partly to enhance our company’s data protection and data security, to ensure the highest possible level of protection for the personal data we process. The anonymous data from the server log files are stored separately from the personal data provided by the data subject.
External links
If you use external links offered on our website, this privacy statement does not cover those links. Where we offer links, we ensure that we have not found any content on the linked website that is contrary with the applicable law. However, we have no control over whether other providers comply with the privacy and security standards. Therefore, please refer to the privacy policy provided on the other service provider's website for more information.
Our website hosting provider
Our company websites are available via a cloud service. The cloud provider complies with the requirements of the GDPR.
Non-automated data collection on our website:
Registration is not possible on our website, so it is not necessary (and not possible) to register to request information and quotes.
The necessary data collection will only take place based on your explicit and unambiguous consent:
· By sending an e-mail to our contact details on the website.
You provide us with the following personal information through the website:
· Name (first name and last name)
· Address (address or head office if assigned to a company)
· E-mail address
· Phone number
· Any text message you have written
We collect this information for the following purposes:
· Send a quote to you
· Contacts for the purpose of obtaining business or fulfilling a contract
· Sending newsletters, advertising e-mails
Contacting our company by e-mail
Our company collects, stores and uses the following personal data for the purposes of business acquisition, the fulfillment of any potential contracts, based on legitimate interest, as well as for the fulfillment of existing contracts, maintaining contact, fulfilling accounting obligations, and for marketing purposes, from a natural person or representatives of legal entities who contact us via the electronic contact details provided on our website:
· Name (first name and last name)
· Address (address or head office if assigned to a company)
· E-mail address
· Phone number
· Any text message you have written
Data management of contracts
The Company is entitled to process the personal data of its customers, resellers and suppliers which are related to the offer and contract between the customer, reseller or supplier and the Company, including its creation, registration and fulfillment, as well as the fulfillment of warranty claims and obligations related to the contract.
Scope of the processed data: data provided in the request for quotation, order, contract, contact information, as well as the data required for issuing invoices.
Purpose of processing: the purpose of data processing is exclusively related to the conclusion, fulfillment, modification, or termination of the contract.
Legal basis for processing: the legal basis for processing is the consent of the data subject [GDPR Article 6(1)(a)] and the conclusion of a contract between the data subject and the Company [GDPR Article 6(1)(b)].
Duration of processing: the duration of processing is 8 (eight) years following the fulfillment of the contract, in accordance with the legal provisions on the retention of documents under the Accounting Act.
Newsletter
Our Company only lawfully sends promotional emails and newsletters to specific customers who have consented to receive them. We provide a simple way to withdraw consent and unsubscribe from the newsletter.
Purpose of processing: the purpose of the processing is direct marketing by the Company through the activity of sending newsletters and advertising, in the context of informing the data subject about the Company's products and services, but primarily about manufacturer promotions relevant to the data subjects.
Legal basis for processing: the legal basis of data processing is the data subject’s voluntary consent [Article 6(1)(a) of the GDPR], the legitimate interest of the Company [Article 6(1)(f) of the GDPR], and Section 6 (5) of the Hungarian Act on Electronic Commerce and Information Society Services (Grt.)
Duration of processing: the data will be processed until the data subject requests its deletion or withdraws their consent.
Processing of job applicants' data
The Company processes the personal data contained in the résumés and other attached documents submitted directly or through a recruitment agency.
Scope of the processed data: the personal data provided by the data subject and included in the résumés and other attached documents.
Purpose of processing: the purpose of the processing is to inform the data subject of job vacancies that are most suitable to their qualifications and interests, to arrange an appointment with the data subject and to carry out the selection procedure.
Legal basis for processing: the legal basis for processing is the data subject's voluntary consent [Article 6(1)(a) GDPR], which is given by sending their résumés and related documents.
Duration of processing: the duration of processing is the duration of the employment relationship in case of a successful application, in case of an unsuccessful application, the application file of unsuccessful applicants will be deleted after the selection.
General information about the processing of your data
We do not sell or transfer the collected data to third parties unless the latter is necessary for the fulfillment of a contract or a service. Disclosure to authorities or public bodies entitled to receive information will only be made if required by law or by a court order. In such cases, we will only pass on the minimum amount of data required and will inform you in the manner required by law.
After the purpose of data processing has ceased (and after the expiration of any relevant tax and commercial legal retention periods), we will fully delete all your personal data, unless you have explicitly authorized us to retain your data beyond this point.
You may withdraw your consent to the collection, storage and use of your data at any time without giving any reason. For data protection requests, general suggestions or complaints, please contact us at the contact details set out above.
The lawful processing of your data is ensured by all our employees and external service providers through training, active communication, adherence to data protection confidentiality obligations, and compliance with data protection documentation.
All technical, organizational, and physical measures and tools in the fields of data protection, IT, and information security - including logical systems - are designed to protect against damage, loss, and unauthorized access to stored data. These measures serve to ensure security, confidentiality, availability, and integrity.
Your data is stored locally by our Company or in a secure environment provided by GDPR -compliant service providers.
Rights relating to processing and how to exercise them
Right to request information and right of access
The data subject may request the Company in writing to inform him or her: - which personal data are processed, - on what legal basis, - for what purpose, - from what source, - for how long, - to whom, when, under what law, to which personal data the Company has granted access or to whom the personal data have been disclosed.
The Company will fulfill the data subject’s request within a maximum of 30 (thirty) days, by sending a response via electronic or postal mail to the contact details provided by the data subject. Prior to fulfilling the request, the Company may ask the data subject to clarify the content of the request and specify the information or data processing activities concerned.
If the data subject’s right of access under this section adversely affects the rights and freedoms of others, particularly the business secrets or intellectual property of others, the Company is entitled to refuse to fulfill the data subject’s request to the extent necessary and proportionate.
If the data subject requests multiple copies of the above information, the data controller is entitled to charge a fee that is reasonable and proportionate to the administrative costs of preparing the additional copies. If the Company does not process the personal data specified by the data subject, it is also obliged to inform the data subject of this in writing.
The right to rectification
The data subject may request in writing that the Company amends personal data that is inaccurate, incorrect or incomplete. In such cases, the Company will correct or rectify the specified personal data without delay, but no later than within 5 (five) days, if compatible with the purposes of the processing, the Company may also supplement the data with additional personal information provided by the data subject or with a statement made by the data subject regarding the processed personal data. The Company shall notify the data subject of this via electronic or postal mail sent to the contact details provided by the data subject
The Company is exempt from the obligation to rectify personal data if - accurate, correct, or complete personal data are not available and are not provided by the data subject, or - the authenticity of the personal data provided by the data subject cannot be established beyond doubt.
The right to erasure
The data subject may request in writing that the Company delete their personal data. The data subject must submit the deletion request in writing and must specify which personal data should be deleted and for what reason.
The Company will reject the deletion request if any legal regulation requires the Company to retain the personal data. If no such obligation exists, the Company will fulfill the data subject’s request within a maximum of 30 (thirty) days and will notify the data subject via electronic or postal mail sent to the contact details provided.
The right to block
The data subject may request in writing that their personal data be blocked by the Company. The blocking shall last for as long as the storage of the data is necessary for the reason indicated by the data subject. For example, the data subject may request the blocking of data if they believe that their personal data have been unlawfully processed by the Company, but it is necessary to retain the data for the purposes of legal or administrative proceedings initiated by the data subject. In such a case, the Company will continue to store the personal data until it receives notice from the authority or court, after which it will delete the data and notify the data subject via electronic or postal mail sent to the contact details provided.
The right to restriction of processing
The data subject may request in writing that the Company restricts the processing of their personal data. During the period of restriction, the personal data concerned may only be processed - beyond storage - by the Company or by a data processor acting on its behalf or under its instructions for the purpose of enforcing the data subject’s legitimate interests or as required by law.
The data subject may request the restriction of processing under the following circumstances and for as long as any of the following conditions apply:
· if the data subject disputes the accuracy, correctness, or completeness of the personal data processed by the Company or the data processor and the accuracy, correctness, or completeness of the personal data processed cannot be unquestionably established (for the period of clarification of the existing doubt),
· if the data should be deleted, but based on the data subject’s written statement or the information available to the Company, it can be reasonably assumed that deletion would harm the data subject’s legitimate interests (for the duration of the existence of the legitimate interest justifying the non-deletion)
· if the data should be deleted, but during procedures conducted by or with the participation of a public authority, the preservation of the data as evidence is necessary (until the conclusion of the investigation or procedure).
In the case of restriction, personal data may only be processed, except from storage, with the data subject’s consent, or for the establishment, exercise, or defense of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or of a Member State of the European Union. The Company shall inform the data subject in advance about the lifting of the restriction on data processing.
Following the fulfillment of the data subject’s request to exercise their right to restriction, the Company shall, without delay, inform all recipients to whom the personal data has been disclosed, if this is not impossible or does not require disproportionate effort from the Company. At the data subject’s request, the Company shall inform them about these recipients.
Right to Legal Redress
You are entitled to seek legal remedy through the following options:
· Dispute resolution with the Company: you may submit any objection or request to us, either verbally or in writing, in person, electronically, or by post, using the contact details provided above.
· Right to lodge a complaint: If you are unable to resolve your dispute with our Company, or you believe that a violation of your rights has occurred (or there is an imminent risk of such a violation) concerning your personal data, you are entitled to lodge a complaint with the National Authority for Data Protection and Freedom of Information.
Contact details of the National Authority for Data Protection and Freedom of Information Headquarters: 1125 Budapest, Szilágyi Erzsébet fasor 22/c. Postal address: 1530 Budapest, Pf. 5 Phone: +36(1)3911400 Fax: +36(1)3911410 E-mail: This email address is being protected from spambots. You need JavaScript enabled to view it. Web: naih.hu
Right to Judicial Remedy (Right to File a Lawsuit): You are entitled - regardless of your right to lodge a complaint - to bring an action before a court if your rights under the GDPR or the Hungarian Information Act (Infotv.) have been violated in the course of the processing of your personal data. The Company, as a data controller established in Hungary, may be subject to legal proceedings before a Hungarian court.
Changes to the Privacy Policy
We reserve the right to modify our privacy practices and this Policy as necessary to comply with relevant laws and regulations, or to better meet your needs. Any changes to our privacy practices will be made public here.
Last updated: 04 November 2019