The Museum operates a newsletter in order to ensure that those interested stay continuously informed about its latest news. This requires registration on our website providing personal data (full name, email address), which are handled as per the preliminary written consent of the newsletter’s recipient. The Museum’s newsletters are distributed through the "Mailchimp" international newsletter automation platform, from abroad, therefore in addition to registration, you are required to specifically consent to the forwarding of your personal data to a cross-border third party data processing platform. The Mailchimp platform is operated by The Rocket Science Group, LLC (675 Ponce de Leon Avenue, Suite 5000, Atlanta, GA 30308 USA). Data processing conforming to European Union regulations is ensured by the foreign operator on the basis of the provisions of the "EU-U.S. Privacy Shield Framework" data exchange agreement. You can unsubscribe from the newsletter any time by clicking on the “unsubscribe” link in the newsletter’s footer. This automatically deletes your data stored in the system, but if you write an email to email@example.com with your specific request to have your data deleted, the Museum deletes your data immediately, but not later than within 15 days.
The museum also provides a press service on its website, accessible without registration. However, in order to download high resolution press photos, user registration and certain personal data are required. To facilitate regular use, these personal data are stored indefinitely, until the website is in operation. Registered users can request the deletion of their data by sending an email to firstname.lastname@example.org or email@example.com.
Beyond data processing based on the subject’s consent, the Museum processes and forwards personal data only in cases when it is obliged by law to do so. The museum only forwards the personal data provided at its disposal to third parties – with the exception of data managers/data processors contractually entitled by the Museum to do so – with the preliminary and explicit written consent of the subject.
The Museum ensures the lawful processing of personal data by employing appropriate technical devices, organisational measures and internal regulations. The museum exercises special caution in the course of processing and protecting personal data. The Museum only processes accurate and if necessary, up-to-date data, and only for the duration required to fulfil the purpose of data processing. In case the purpose of data processing has ceased, the Museum deletes the personal data of the subject immediately, but not later than 15 days.
The subject is entitled to request the correction, modification and deletion of all or part of their personal data and is also entitled to revoke their consent to processing their personal data, without justification, in writing. The Museum immediately, but not later than within 15 days of receipt of the request, takes the necessary steps to correct, modify, or delete the personal data of the subject, processed by the Museum.
If the subject believes that the processing of their data is exercised by the Museum in an unauthorised manner, they can object to the processing of their data. This objection is immediately, but not later than within 15 days of receipt of the request, inspected by the Museum, and the objecting subject is informed of the inspection’s result in writing – meanwhile the procession of the subject’s data is suspended. If the Museum fails to meet the deadline, or fails to comply with the request, the subject is entitled to turn to the Budapest Capital Regional Court or to the competent Regional Court of their permanent or temporary place of residence for legal remedy.
In case of personal data breach, or in case of immediate danger of breach, the subject or any third party may request investigation by submitting a report to the Hungarian National Authority for Data Protection and Freedom of Information (NAIH).
The Museum accepts questions, remarks, suggestions regarding the data it processes at the email address firstname.lastname@example.org and the postal address 1453 Budapest Pf. 36.
This notice is based on the following regulations:
• Act CXII of 2011 on the Right of Informational Self-Determination and on Freedom of Information;
• Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation);
• Act XLVIII of 2008 on Essential Conditions of and Certain Limitations to Business Advertising;
• Act CVIII of 2001 on certain issues of electronic commerce services and information society services.