Website Privacy Policy

We have reviewed our activities relating to the processing of personal data in the light of the rules laid down and applicable under the European Union’s General Data Protection Regulation (GDPR: General Data Protection Regulation) and are committed to carrying them out in accordance with the requirements set out therein and in the relevant national legislation.

Details and contact details of the Data Controller

The fundamental principles of data processing

We are committed to protecting the personal data of both visitors to our website and all other data subjects, and we attach the utmost importance to respecting their right to data autonomy.

We treat personal data as confidential and take all necessary security, technical and organisational measures to ensure the security of personal data.

Should you have any questions that are not clearly answered in this privacy notice, please contact us using the contact details provided above! We endeavour to reply to you as quickly as possible; however, if it takes longer to provide a proper answer to your question, we undertake to reply within a maximum of 15 days.

You may request information regarding the processing of your personal data at any time, either in writing (by email or by post to our address) or verbally (by telephone). Please note that if you contact us by telephone – where your request regarding data processing so warrants (e.g. you request the erasure of your data) – we will need to verify your identity to ensure you are entitled to make the request before we can comply with it. If identification is not possible, we can only provide general information regarding data processing. For this reason, we recommend that you submit your enquiry or request in writing where possible.

Relevant legislation

We undertake to process personal data in accordance with the legal provisions in force at any given time, and in particular those listed below:

• Regulation (EU) 2016/679 of the European Parliament and of the Council (27 April 2016) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), also known as the GDPR: General Data Protection Regulation;
• Act CXII of [year] (the Information Act) on the right to informational self-determination and freedom of information.

Complaints handling and further legal remedies

We do everything in our power to ensure that personal data is processed in accordance with legal requirements. If you feel that we have failed to do so, or if you have any questions in this regard, please contact us using the contact details provided above.

In the event of a breach of your rights regarding the protection of your personal data – should the Data Controller fail to cease its unlawful conduct despite your complaint – you may seek further redress through the To the National Authority for Data Protection and Freedom of Information You can contact us using the details below:

To protect your personal data, you may also bring the matter before a court, in which case the court will give priority to your case. Depending on your decision, you may lodge your claim with the court with jurisdiction over your place of residence or habitual residence; further information on this is available at the https://birosag.hu/birosag-kereso You can find it on the page.

Data processed on the website

Anyone can view the public content on our website – without having to provide any personal details – and this does not require registration or logging in.

In connection with your visit to and use of this website, we process the data listed below for the purposes and for the duration set out in this notice; furthermore, we ensure that you can exercise your rights in relation to the processing of your data as follows:

Images and videos displayed on the website

On our website, we regularly report on the latest news and events affecting our town, as well as on events and programmes, and we occasionally publish photographs and videos in connection with these.

We take great care to ensure that the content of the images and videos we publish does not infringe upon the personal rights or legitimate interests of others, and that we hold the necessary licence or authorisation for their lawful use in all cases.

The purpose of data processing

Providing information to visitors to the website.

The legal basis for data processing

In the case of recordings published on the website in which natural persons are recognisable, data processing is based on their voluntary consent in accordance with the EU General Data Protection Regulation, Article 6(1)(a) of the GDPR and Act CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information (Infotv.).

The scope of the data processed

The image of any identifiable, recognisable natural person appearing in the recordings, or, in the case of video recordings, their voice.

Duration of data processing

Until the data subject withdraws their consent or the content in question is deleted.

Enforcement of rights

You may request information regarding the processing of your personal data at any time using the contact details provided above.

You may also request that your data be deleted, and, upon your request, we will remove from the website any recordings in which you or your child can be identified or recognised.

Who is authorised to access the data?

Anyone who visits our website can access and view the information published on it.

Data processed in connection with enquiries and contact requests

You can contact us using any of the contact details available on our website, or via the https://zalakaros.hu/onkormanyzat/ You can send us a message via the form on this subpage. We will use the personal data you provide when contacting us solely for the purpose of communicating with you; we will not pass this information on to any third parties.

The purpose of data processing

Providing information to interested parties.

The legal basis for data processing

Where enquiries are made or information is requested, data processing is based on voluntary consent in accordance with the EU General Data Protection Regulation, Article 6(1)(a) of the GDPR and Act CXII of 2011 on the Right to Self-Determination in Information and Freedom of Information (Infotv.).

The scope of the data processed

When you contact us, we process the following data that you have voluntarily provided:

• name (please provide this on the message form so that we can reply to you by name),
• email address (this must be provided on the message form in order to receive a reply; if it is not provided, a reply cannot be guaranteed),
• telephone number,
• address (postal or correspondence address).

Duration of data processing

We process your personal data for varying lengths of time, depending on the nature of our contact.

Once the necessary information has been provided, we will not retain it any longer, unless a legitimate claim can be made regarding the ad hoc contact; in that case, we may retain it for up to 5 years for the purposes of verification.

Enforcement of rights

You may request information regarding the processing of your personal data at any time using the contact details provided above.

You may also request the correction of your personal data at any time if, for example, you find that you have provided them incorrectly or that we have recorded them incorrectly or incompletely.

You may also request the erasure of your data, and provided there are no legal obstacles to this, we will comply with your request without delay (otherwise, we will inform you of the reason for refusing to erase the data).

Who is authorised to access the data?

Only our staff are authorised to access the data you have provided.

Data processed in connection with reports of faults in street lighting

Our website https://zalakaros.hu/onkormanyzat/kozvilagitasi-hibabejelento/ You can report any issues with street lighting that you have noticed to us via the form on this subpage.

The purpose of data processing

Receiving and handling fault reports from members of the public.

The legal basis for data processing

The processing of personal data is necessary for the performance of our tasks carried out in the public interest or in the exercise of official authority vested in us, and is based on Article 6(1)(e) of the GDPR and the provisions of Act CXII of 2011 on the Right to Data Self-Determination and Freedom of Information (Infotv.).

The scope of the data processed

When you register, we process the following personal data:

• name of the person making the report (please provide this so that we can reply or provide feedback directly to you),
• email address (required for a reply; we cannot send a reply without it),
• telephone number (please provide this so that we can clarify the error or, if necessary, provide further details).

Duration of data processing

We will not retain your personal data after you have provided your feedback, unless a legitimate claim can be made in relation to the report, in which case we may retain it for up to 5 years for the purposes of verifying the claim.

Enforcement of rights

You may request information regarding the processing of your personal data at any time using the contact details provided above.

You may also request the correction of your personal data at any time if, for example, you find that you have provided them incorrectly or that we have recorded them incorrectly or incompletely.

You may also request the erasure of your data, and provided there are no legal obstacles to this, we will comply with your request without delay (otherwise, we will inform you of the reason for refusing to erase the data).

Who is authorised to access the data?

Our staff, as well as our contracted service provider, PLH Közvilágítási Kft., which carries out public lighting operational tasks, are authorised, in their capacity as data processors, to access the data you have provided.

Details of the data processor:

Data processed in connection with parking

Our website Parking On the subpage accessible via this menu item, you can purchase a virtual parking permit or settle any outstanding fines.

Pre-registration is required to ensure a smooth and swift process for purchasing a virtual parking pass (E-pass) and to obtain the necessary authorisation for discounted tickets purchased via mobile phone. To complete pre-registration, please submit the details of the vehicle and its owner/operator as stated on the vehicle registration certificate, along with the documents required for the relevant pass type, in accordance with the data submission templates.

The purpose of data processing

Providing online services relating to parking.

The legal basis for data processing

The processing of personal data is necessary for the performance of our tasks carried out in the public interest or in the exercise of official authority vested in us, and is based on Article 6(1)(e) of the GDPR and the provisions of Act CXII of 2011 on the Right to Data Self-Determination and Freedom of Information (Infotv.).

The scope of the data processed

During the registration process, we process the following personal data:

• Surname (required for issuing the invoice for the purchase of the parking permit; this information must be provided),
• First name (required for issuing the invoice for the purchase of the parking permit; this field must be completed),
• Address (required for issuing the invoice for the purchase of the parking permit; this information must be provided),
• email address (this must be provided in order to purchase a virtual season ticket; without it, we cannot guarantee that the ticket will be issued and sent to you),
• telephone number (this is optional).

Duration of data processing

Data from financial documents (invoices) relating to the payment must be retained for 8 years in accordance with the Accounting Act and, in order to ensure that a self-assessment for tax purposes can be carried out, – in accordance with the Act on the Rules of Taxation – for a period not exceeding that required for tax self-assessment (until the purpose has been fulfilled). After this period, we will delete, discard and destroy the documents.

Enforcement of rights

You may request information regarding the processing of your personal data at any time using the contact details provided above.

You may also request the correction of your personal data at any time if, for example, you find that you have provided them incorrectly or that we have recorded them incorrectly or incompletely.

You may also request the erasure of your data, and provided there are no legal obstacles to this, we will comply with your request without delay (otherwise, we will inform you of the reason for refusing to erase the data).

Who is authorised to access the data?

Our staff, as well as our contracted service provider, Mininform Kft., which provides and operates the parking system on our behalf, are authorised to access the data you have provided in their capacity as data processors.

Details of the data processor:

Newsletter subscription

You can subscribe to our newsletter via the form available on our website’s homepage or via the main menu, and receive updates on our latest news through this service. You can unsubscribe from the newsletter at any time, without restriction or having to give a reason, by clicking on the unsubscribe link included in the newsletter.

The purpose of data processing

Information for newsletter subscribers.

The legal basis for data processing

Data processing is based on voluntary consent in accordance with the EU General Data Protection Regulation, Article 6(1)(a) of the GDPR and Act CXII of 2011 on the Right to Self-Determination in Information and Freedom of Information (Infotv.).

The scope of the data processed

• email address (this is required so that we can send you the newsletter).

Who is authorised to access the data?

The data you provide when subscribing to the newsletter may be accessed by our staff, as well as by the staff of Zalakarosi Turisztikai Nonprofit Kft. whose staff are responsible for managing the newsletter, and the operator of the MailerLite service, which provides us with the newsletter delivery solution, are authorised to access this information in their capacity as data processors.

You can find further, detailed information about MailerLite’s data processing practices on the following page: https://www.mailerlite.com/legal/privacy-policy

Duration of data processing

We will process your data until you withdraw your consent. If you unsubscribe from our newsletter, your data will be deleted from the newsletter distribution system immediately.

Enforcement of rights

You may request information about the processing of your personal data at any time by contacting us using the contact details provided above.

You may also request the correction of your data at any time if, for example, you find that you have provided it incorrectly or that we have recorded it incorrectly or incompletely.

You may unsubscribe from the newsletter and have your data deleted at any time by clicking on the „Unsubscribe” link in the newsletter. Upon your request, your data will be automatically deleted from the newsletter distribution system, thereby ensuring your rights to the erasure and the right to be forgotten.

Details of data processors

Zalakarosi Turisztikai Nonprofit Kft. is responsible for managing the newsletters.

We use the MailerLite service to send out newsletters.

Data protection

To ensure the security of the personal data we process, we take all technical and organisational measures necessary to protect the data against accidental deletion (destruction), unauthorised use or alteration. Access to the data processed in our IT systems is granted exclusively to our staff through the use of an access control system.

By taking the above measures, we ensure that unauthorised persons cannot access, disclose, transfer, modify or delete the data we process.

The transfer of data

We do not disclose your personal data to anyone who is not authorised to access it; we will only pass it on to third parties if you have given your prior consent. An exception to this may apply if we are legally obliged to disclose the data, for example in the event of an official investigation, in which case we are obliged to provide the data necessary for the purposes of the investigation in response to an official request from the relevant authority (e.g. the police, the Crown Prosecution Service, a court, etc.) we are obliged to provide the data necessary for the purpose of the request. Your separate consent is not required for this, as it is our statutory duty.

Review and availability of the Privacy Notice

We reserve the right to review this notice and amend it as necessary, which may be justified in the event of changes to the relevant legislation or to our data processing activities and the technology used in connection therewith. Should any such amendment affect your personal data processed on the basis of your voluntary consent, we will inform you of this without delay and will suspend the further processing of your personal data until you have given your consent again.

The current Privacy Notice is always available here, published publicly on the website.