1. Purpose of this privacy notice

Lilla Gallai, member of the Organizing Committee of the Attila Gallai National Clarinet and Saxophone Competition (2200 Monor, hereinafter referred to as the Data Controller), as the Data Controller, acknowledges the contents of this legal notice as binding upon her. It undertakes to ensure that any processing of data relating to its activities complies with the requirements of this Policy and the national legislation in force and the legal acts of the European Union.

The Data Controller's privacy policy in relation to its data processing is available on an ongoing basis at https://gallaiverseny.hu/. címen.

The Data Controller reserves the right to change this policy at any time. It will of course inform its audience of any changes in due time.

The Data Controller is committed to protecting the personal data of its customers and partners and attaches the utmost importance to respecting the right of information self-determination of its customers. The Data Controller shall treat personal data confidentially.

The Data Controller. describes its data management practices below.

2. Data controller's data

The Data Controller shall delete all e-mails received by it, together with the personal data, after a maximum of 2 years from the date of the communication.

Name: Lilla Gallai

Address: 2200 Monor.

E-mail: info@gallaiverseny.hu

3. Scope of personal data processed

3.1 Personal data to be provided when applying for the competition:

Name, email address, billing address, name of higher education institution

3.2 Technical data

The Data Controller shall select and operate the IT tools used to process personal data in the course of providing the service in such a way that the processed data:

  • ◦ is accessible to authorised persons (availability);
    • ◦ its authenticity and authenticity are ensured (authenticity of processing);
    • ◦ its integrity can be verified (data integrity);
    • ◦ protected against unauthorised access (data confidentiality).

The controller shall, during the processing, retain

  • ◦ confidentiality: protect information so that only those who are entitled to access it have access to it;
  • ◦ integrity: to protect the accuracy and completeness of the information and the processing method;
  • ◦ availability: ensuring that the information is available and that the means to access it are available when the authorised user needs it.

4. Cookies (Cookies)

4.1 What cookies do

  • ◦ collect information about visitors and their devices;
  • ◦ remember visitors' individual preferences, which are used, for example, when they make online transactions, so that they do not have to be re-entered;
  • ◦ facilitate the use of the website;
  • ◦ provide a quality user experience.

In order to provide a personalised service, a small piece of data, called a cookie, is placed on the user's computer and read back during a subsequent visit. If the browser returns a previously saved cookie,

4.2 Strictly necessary session cookies

The purpose of these cookies is to allow visitors to browse the website of the Attila Gallai National Clarinet and Saxophone Competition, use its functions and services without any problems. The validity period of this type of cookie lasts until the end of the session (browsing), and when the browser is closed, this type of cookie is automatically deleted from the computer's memory.

5. Data related to online administration

The information you must enter on the competition application form is as follows.

5.1 Intended use and retention period of the data processed

Name of data processingUse ofLegal basisRetention period
NameRequired for inclusion on the list of competitors.Acceptance1 year
Email addressFurther information about the competition will be sent to the email address provided.Acceptance1 year
Billing addressIt will appear on the invoice issued for the entry fee.Acceptance1 year
Name of higher education institutionRequired for inclusion on the list of competitors.Acceptance1 year

6. Purpose, method and legal basis of processing

6.1 General data processing policy

The data processing of the Data Controller's activities is based on voluntary consent or on legal authorisation. In the case of processing based on voluntary consent, data subjects may withdraw their consent at any time during the processing.

In certain cases, the processing, storage and transmission of some of the data provided is required by law and we will inform our customers separately.

We draw the attention of the data controllers to the fact that, if they do not provide their own personal data, it is the data controllers' duty to obtain the consent of the data subject.

Our data management principles are in accordance with the applicable data protection legislation, in particular the following:

  • - Act CXII of 2011 - on the Right to Informational Self-Determination and Freedom of Information (Infotv.);
  • Az Európai Parlament és a Tanács (EU) 2016/679 rendelete (2016. április 27.) – a természetes személyeknek a személyes adatok kezelése tekintetében tör-ténő védelméről és az ilyen adatok szabad áramlásáról, valamint a 95/46/EK rendelet hatályon kívül helyezéséről (általános adatvédelmi rendelet, GDPR);
  • - Act V of 2013 - on the Civil Code (Civil Code);
  • - Act C of 2000 - on Accounting (Accounting Act);
  • - Act LIII of 2017 - on the Prevention and Combating of Money Laundering and
  • Act CCXXXVII of 2013 - on Credit Institutions and Financial Undertakings (Hpt.).

6.2 Physical storage locations for data

Your personal data (i.e. the data that can be associated with you personally) may be processed by us in the following ways: on the one hand, technical data relating to the computer, browser program, Internet address and pages visited in connection with the maintenance of the Internet connection are automatically generated in our computer system, and on the other hand, you may provide your name, contact details or other data if you wish to contact us personally when using the website.

6.3 Adattovábbítás, adatfeldogozás, az adatokat megismerők köreyes adatok az Adatkezelő által továbbításra kerülnek a verseny zsűrijének összes tagjához.

The personal data provided on the entry form will be transmitted by the Data Controller to all members of the competition jury - the
list of jury members is available on the competition website https://gallaiverseny.hu/zsuri/ - as well as to the Együtt-Hangzás Association
(represented by Ildikó Szalai). On the day of the competition, the jury establishes the order of performances on the basis of the list of contestants.
Entry fees are to be transferred to the bank account of the Együtt-Hangzás Association maintained at Erste Bank.
The Association issues receipts for the payments using the personal data supplied in the application form.

One Hungary Zrt as the Internet Service Provider has access to the personal data.

7. Data subject's rights and means of enforcement

The data subject may request information about the processing of his/her personal data, and may request the rectification, erasure or withdrawal of his/her personal data, except for mandatory data processing, and may exercise his/her right to data portability and objection in the manner indicated when the data were collected, or by contacting the controller at the above contact details.

7.1 Right to information

The controller shall take appropriate measures to provide data subjects with all the information referred to in Articles 13 and 14 of the GDPR and each of the notifications referred to in Articles 15 to 22 and 34 of the GDPR concerning the processing of personal data in a concise, transparent, intelligible and easily accessible form, in clear and plain language.

7.2 Right of access of the data subject

The data subject shall have the right to obtain from the controller feedback as to whether or not his or her personal data are being processed and, if such processing is taking place, the right to access the personal data and the following information: the purposes of the processing; the categories of personal data concerned; the recipients or categories of recipients to whom or with which the personal data have been or will be disclosed, including in particular recipients in third countries or international organisations; the envisaged period of storage of the personal data; the right to rectification, erasure or restriction of processing and the right to object; the right to lodge a complaint with a supervisory authority; information on the data sources; the fact of automated decision-making, including profiling, and clear information on the logic used and the significance of such processing and its likely consequences for the data subject. The controller shall provide the information within a maximum of one month from the date of the request.

7.3 Right of rectification

The data subject may request the correction of inaccurate personal data relating to him or her processed by the controller and the completion of incomplete data.

7.4 Right to cancellation

The data subject shall have the right to obtain from the Data Controller, upon his or her request, the erasure of personal data relating to him or her without undue delay where one of the following grounds applies:

  • - the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
  • - the data subject withdraws the consent on the basis of which the processing was carried out and there is no other legal basis for the processing;
  • - the data subject objects to the processing and there are no overriding legitimate grounds for the processing;
  • - the personal data have been unlawfully processed;
  • - the personal data must be erased in order to comply with a legal obligation under Union or Member State law to which the controller is subject;
  • - the personal data have been collected in connection with the provision of information society services.

The erasure of data may not be initiated if the processing is necessary: for the exercise of the right to freedom of expression and information; for compliance with an obligation under Union or Member State law to process personal data or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller; for public health purposes or for archiving, scientific or historical research purposes or statistical purposes in the public interest; or for the establishment, exercise or defence of legal claims.

7.5 Right to restriction of processing

At the request of the data subject, the Controller shall restrict processing if one of the following conditions is met:

  • - the data subject contests the accuracy of the personal data, in which case the restriction shall apply for a period of time which allows the accuracy of the personal data to be verified;
  • - The processing is unlawful and the data subject opposes the erasure of the data and requests instead the restriction of their use;
  • - the controller no longer needs the personal data for the purposes of the processing but the data subject requires them for the establishment, exercise or defence of legal claims; or
  • - the data subject has objected to the processing; in this case, the restriction shall apply for a period of time until it is established whether the legitimate grounds of the controller override the legitimate grounds of the data subject.

Where processing is restricted, personal data, except for storage, may be processed only with the consent of the data subject or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or of an important public interest of the Union or of a Member State.

7.6 Right to data retention

The data subject has the right to obtain the personal data concerning him or her which he or she has provided to the controller in a structured, commonly used, machine-readable format and to transmit such data to another controller.

7.7 Right to object

The data subject shall have the right to object at any time, on grounds relating to his or her particular situation, to processing of his or her personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller, or necessary for the purposes of the legitimate interests pursued by the controller or by a third party, including profiling based on those provisions. In the event of an objection, the controller may no longer process the personal data, unless there are compelling legitimate grounds for doing so which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.

7.8 Automated decision-making in individual cases, including profiling

The data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her.

7.9 Right of withdrawal

The data subject has the right to withdraw his or her consent at any time.

7.10 Right to apply to the courts

The data subject may take the controller to court in the event of a breach of his or her rights. The court shall rule on the case out of turn.

7.11 Procedure before the data protection authority

Complaints may be lodged with the National Authority for Data Protection and Freedom of Information:

Name: National Authority for Data Protection and Freedom of Information

Registered office: 1125 Budapest, Szilágyi Erzsébet fasor 22/C. Postal address.

Phone: 0613911400

Fax: 0613911410

E-mail: ugyfelszolgalat@naih.hu

Website: http://www.naih.hu

8. Other provisions

Information on data processing not listed in this notice will be provided at the time of collection.

We inform our clients that the court, the prosecutor, the investigating authority, the law enforcement authority, the administrative authority, the National Authority for Data Protection and Freedom of Information, the Hungarian National Bank, or other bodies authorised by law may contact the data controller to provide information, to disclose or transfer data, or to provide documents.

The controller shall disclose to the authorities - if the authority has indicated the precise purpose and scope of the data - personal data only to the extent and to the extent strictly necessary for the purpose of the request.

Scroll to Top