Data Processing Guide

Personal data recorded by Financial and Economic Review (hereinafter: FER) concerning communication activities connected to FER (including but not limited to: calls for the submission of studies, presentation of publications, mailing of publications) will be controlled by FER in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC and those of Act CXII of 2011 on informational self-determination and freedom of information, according to the following.

Data controller:

Financial and Economic Review

Registered Office: H-1013 Budapest, Krisztina körút 55.

E-mail: szemle@hitelintezetiszemle.hu

The scope of the data subjects and the processed data:

Scope of data subjects: Authors of former and current publications, clients.

Scope of controlled data: If contact is maintained electronically, name, email address; if contact is maintained by mail: name, title, employer, position, postal address of the employer or private individual.

Legal basis of data processing:

Aware of the data processing guidance, the data subject has given his/here consent to the processing of his/her personal data.

Aim and time of data management:

FER will process the data for the purpose of maintenance of contact and distribution of publications. Only the editorial team of FER have access to these, FER does not use the services of data processors in its data control. The data controller will control the data for an indefinite term or until the permission to control data has been revoked.

Data transfer:

Data transfer shall not occur.

Data security measures:

FER uses the electronically recorded personal data on the servers of the Magyar Nemzeti Banks (hereinafter: MNB), its publisher, it does not use the services of any other company for such storage. FER and the MNB take appropriate measures to ensure the protection of personal data, from unauthorized access or change, among others.

Rights related to data processing:

Right of information and right to access:

The data subject may request written information from FER about the following, using the contact points listed as “Data Controller”:

• what personal data of his/hers FER controls,
• on what legal basis FER processes his/her personal data,
• for what reason FER processes his/her data,
• from which source FER acquired hikö personal data,
• for what period FER controls his/her personal data,
• if FER still controls his/her personal data,
• to whom, when, for what reason and to which personal data did MNB grant access to or to whom did MNB transfer your personal data.

In addition, it may request copies of his/her personal data stored by FER.

FER will fulfill the request of the data subject within 30 days at most, in a response letter sent to the contact detail provided in the request. If you send your request to FER through an electronic channel, FER will also reply using electronic means if possible. Please indicate if you would like to receive the reply through a different channel.

Right to rectification:

The data subject may request FER in writing using the contact point listed as “Data Controller” to modify or rectify his/her personal data (for example: name, email address if it changed). If you send your request to FER through an electronic channel, FER will also reply using electronic means if possible. Please indicate if you would like to receive the reply through a different channel.

FER will fulfill your request without undue delay, within 30 days at the latest, and will notify the applicant accordingly in a letter sent to the contact details specified by the applicant.

Right to erasure (“right to be forgotten”):

The data subject may request FER in writing to delete his/her personal data, using the contact point listed as “Data Controller”.

FER will reject the request for erasure if it is required by legislation to store the personal data of the person who submitted the request. If such requirements are not valid for his/her personal data, FER will fulfil the request in a maximum of 30 days without undue delay, and send a notification in a reply letter sent to the contact details provided in the request. If you send your request to FER through an electronic channel, FER will also reply using electronic means if possible. Please indicate if you would like to receive the reply through a different channel.

Right to restrict the processing of personal data:

The data subject may request FER in writing to restrict control of his/her personal data, using the contact point listed as “Data Controller”. In the case of restriction, FER is only allowed to store the personal data, any other data processing activity may only take place with the consent of the party requesting the restriction, because of the submission of a legal claim, or in the public interest.

A request to restrict the processing of data may be submitted if:

• you think that your data are not correct or
• you believe that FER’s control of your data was not legal but you do not wish to have your data erased,
• you request the processing to establish or defend legal claims but FER does not need these data any more.

FER will fulfill your request without undue delay, within 30 days at the latest, and will notify the you accordingly in a letter sent to the contact details specified by the applicant. If you send your request to FER through an electronic channel, FER will also reply using electronic means if possible. Please indicate if you would like to receive the reply through a different channel.

Right to withdraw consent:

The data subject may notify the MNB in writing, during the period of processing, that he/she wishes to withdraw his/her consent to the processing of his/her personal data, using the contact point listed as “Data Controller”. In the case of the withdrawal of consent, data processing by FER before the withdrawal continues to be legitimate.

FER will erase the personal data after the receipt of the withdrawal without undue delay and in any case within 30 days, and notify the person making the statement in a letter sent to the contact details provided by that person. If the data subject sends his/her request to FER through an electronic channel, FER will also reply using electronic means if possible. Please indicate in your notification if you would like to receive the reply through a different channel.

Legal remedy:

If in the opinion of the data subject, data retention did not comply with the legal requirements, he/she may refer the matter to a court. In addition, an investigation may be initiated by filing a report to the National Authority for Data Protection and Freedom of Information on the grounds that there was an infringement in practising the rights related to personal data management or there is imminent danger thereof.

Contact information to National Authority for Data Protection and Freedom of Information:

National Authority for Data Protection and Freedom of Information

Seat: 1125 Budapest, Szilágyi Erzsébet fasor 22/C.

Postal address: 1530 Budapest, Pf. 5.

Telephone: +36-1-391-1400

Telefax: +36-1-391-1410

E-mail: ugyfelszolgalat@naih.hu

The opportunity of modifying this Guide:

The controller reserves the right to modify this Information release unilaterally without prior notification. At the affected person’s request the controller will send out the up-to-date version of this Information release in email.