Privacy Policy

The purpose of this notice (hereinafter: Notice) is to outline the data protection and data processing principles applied by the Tanulj Tesó Foundation (registered office: 3752 Szendrő, Fő út 19.; registration number: 05-01-0064672; hereinafter: Foundation), as the owner of the website www.tanuljteso.hu and the executor of the Mosolytúra, Mosolytábor, and Secondary School Preparatory Mentor Programs, in connection with its fundraising and support activities. The Foundation, as the data controller, recognizes these principles as binding upon itself.

In formulating the provisions of this Notice, the Foundation has paid particular attention to the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR), Act CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information (Infotv.), and Act V of 2013 on the Civil Code (Ptk.).

In terms of the processing of your personal data, the Foundation acts as the data controller, meaning it is responsible for the lawful handling of your personal data. You may contact us using the following details:

Data Controller:
Name: Tanulj Tesó Foundation
Postal Address: 3752 Szendrő, Fő út 19.
Registration Number: 05-01-0064672
Email Address: juhasz@tanuljteso.hu
Website: www.tanuljteso.hu
Phone Number: +36 (20) 466-1841

Data Protection Officer Contact: juhasz@tanuljteso.hu

1. Scope of Processed Data, Legal Basis, Purpose, and Duration of Data Processing

1.1. Scope of Data Processed for Donation and Fundraising Purposes

Description of Data Processing and Purpose:

1.a) Donations:
If you wish to make a donation to us, you may do so via bank transfer or quick donation using a bank card. In the case of a bank transfer, we will process your bank account number and name. For card payments, we process your name, email address, residential address, and phone number. Processing this data is essential for facilitating donations.

1.b) Processing Data of Supported Individuals:
Personal and special categories of data of applicants (participants) wishing to join the Mosolytúra, Mosolytábor, and Secondary School Preparatory Mentor Programs, as well as other supported individuals of the Foundation, are processed with their consent.

Legal Basis for Data Processing:
The legal basis for processing is your consent, as per Article 6(1)(a) of the GDPR. Data processing is always voluntary. You may withdraw your consent at any time, though this does not affect the lawfulness of processing prior to withdrawal.

Duration of Data Processing:

• 1.a) The personal data of donors is processed for the duration required by accounting regulations.

• 1.b) Data of applicants not accepted into our support programs, along with their parents/guardians, is deleted five years after the admission process and is stored securely until then. Data of supported individuals is processed until their consent is withdrawn.

1.2. Public Disclosure of Donors’ Names

Description of Data Processing:
If you consent, your name will be listed on our website among the donors.

Legal Basis and Purpose:
The legal basis is your consent, as per Article 6(1)(a) of the GDPR.

Duration of Data Processing:
The data is processed until you withdraw your consent.

1.3. Applicants and Supported Individuals

Description of Data Processing:
Processing data of individuals intending to join the Foundation’s Programs and other supported individuals.

Legal Basis and Purpose:
The legal basis is your consent, as per Article 6(1)(a) of the GDPR. We process personal and special categories of data:

• To select applicants eligible for support;

• To ensure supported individuals receive benefits, services, scholarships, and other allowances as per the Life Path Program and the Support and Scholarship Regulations.

Duration of Data Processing:
Data of applicants not accepted into the Foundation’s Programs, along with their parents/guardians, is deleted five years after the admission process and stored securely until then. Data of supported individuals is processed until their consent is withdrawn.

1.4. Contact Form

Description of Data Processing:
Our website allows you to contact the Foundation via a form. We process your name, email address, and the content of your message.

Legal Basis and Purpose:
The legal basis is your consent, as per Article 6(1)(a) of the GDPR.

Duration of Data Processing:
The data is deleted after the contact is completed, unless further interaction requiring data processing occurs, in which case we will provide additional information.

2. Data Transfer

The data we process is fully accessible only to the Founder, the Board of Trustees, the Supervisory Body, and entities authorized to conduct audits.

1.b) Processing Data of Supported Individuals:
For media appearances of supported individuals (radio, television, print media, campaign videos, posters, and promotional materials), we request separate permission, statements, and consent.

3. Your Rights Regarding Data Processing

During the data processing period, you are entitled to the following rights under the GDPR:

• Access to personal data and information related to data processing;

• Right to rectification;

• Right to restriction of processing;

• Right to erasure;

• Right to data portability;

• Right to object;

• Right to withdraw consent.

If you wish to exercise your rights, this will involve your identification and necessary communication with you. Identification will require personal data (only data we already process about you), and your data processing-related complaints will be stored in our email system for the duration specified in this Notice. We will respond to data processing complaints within 30 days at the latest.

Right to Withdraw Consent:
You may withdraw your consent to data processing at any time, after which we will delete your data from our systems.

Right to Access Personal Data and Information:
You are entitled to receive confirmation as to whether your personal data is being processed, and if so, to access the data and be informed about:

• The purposes of processing;

• The categories of personal data processed about you;

• Recipients or categories of recipients with whom the data has been or will be shared;

• The planned duration of data storage, or if not possible, the criteria for determining this duration;

• Your rights to request rectification, erasure, or restriction of your data, and to object to processing based on legitimate interests;

• The right to lodge a complaint with a supervisory authority;

• If data was not collected from you, all available information about its source;

• The existence of automated decision-making (if applicable), including profiling, and its logic and significance to you.

This right aims to verify the lawfulness of data processing. For repeated requests, we may charge a reasonable fee. Access is provided via email after your identification.

Right to Rectification:
You are entitled to request the correction of inaccurate personal data about you without undue delay.

Right to Restriction of Processing:
You may request restriction of processing if:

• You contest the accuracy of the data (until we verify it);

• The processing is unlawful, and you oppose erasure, requesting restriction instead;

• We no longer need the data, but you require it for legal claims;

• You object to processing, pending verification of whether our legitimate grounds override yours.

Restricted data may only be processed with your consent or for legal claims or public interest. We will inform you before lifting any restriction.

Right to Erasure (Right to Be Forgotten):
You may request the erasure of your personal data without undue delay if:

• The data is no longer needed for its original purpose;

• You withdraw consent, and there’s no other legal basis;

• You object to legitimate interest-based processing, and no overriding grounds exist;

• The data was processed unlawfully;

• Erasure is required by law.

If data was made public, we will take reasonable steps to inform other controllers of your erasure request. Erasure does not apply if processing is necessary for freedom of expression, legal obligations, or legal claims.

Right to Object:
You may object to processing based on legitimate interests due to your specific situation, in which case we will cease processing unless compelling legitimate grounds override your rights.

Right to Data Portability:
If processing is based on consent or a contract, you may request your data in a machine-readable format (e.g., XML, JSON, CSV) and, if feasible, its transfer to another controller.

Remedies

If you believe we have violated data protection laws or failed to fulfill a request, you may initiate an investigation with the National Authority for Data Protection and Freedom of Information to address alleged unlawful processing:

National Authority for Data Protection and Freedom of Information:
Postal Address: 1363 Budapest, Pf. 9.
Email: ugyfelszolgalat@naih.hu
Phone: +36 1 391 1400
Fax: +36 1 391 1410
Website: http://naih.hu/

You may also pursue civil action in court.

4. Data Security

We ensure through appropriate authorization management, internal organization, and technical measures that your data does not fall into unauthorized hands or get deleted, modified, or extracted. We enforce these requirements with our data processors. We maintain records of data protection incidents and inform you if necessary.

5. Miscellaneous Provisions

We reserve the right to amend this Notice without affecting the purpose or legal basis of processing. If we intend to process data for a purpose other than its original collection, we will inform you beforehand. This Notice is effective from April 20, 2024.