On the processing of personal data of users visiting websites operated by Vertis
Identity and contact details of the controller
Name of the controller: Vertis Environmental Finance Ltd.
Seat of the controller: 1124 Budapest, Csörsz utca 45., Hungary
Purpose of the processing
Vertis Ltd is operating several websites. (a) In order to maintain those sites, and to prevent, track down and investigate malicious activities affecting the operation of those sites, Vertis Ltd is processing personal data of the users. (b) In addition, Vertis Ltd is monitoring and analysing the use of its websites in order provide an efficient operation and a seamless user experience; this activity also involves the processing of personal data of website visitors.
Legal basis for the processing
The legal basis of the processing is
(a) that the processing is necessary for the purposes of the legitimate interests pursued by the controller, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data ((Art. 6 (1) (f) of the Regulation). The legitimate interest pursued by the controller (Vertis) is (a1) the interest in the operation of its websites and avoid IT security breaches and (a2) the interest in carrying out website analytics in order to provide a seamless user experience, and to conduct efficient marketing activity through the website.
The balancing tests establishing that these interests are not overridden by the interests or fundamental rights and freedoms of the data subject are available upon request sent to the above email address.
(b) the consent of the data subject (Art. 6 (1) (a) of the Regulation) in in case of cookies that are not strictly necessary for website operation.
Personal data processed
(a) For the purpose of maintaining the websites, and to prevent, track down and investigate malicious activities affecting the operation of those sites, Vertis is processing the following personal data:
- IP address;
- Technical information in the logfiles (operating system, data and time of visit, downloaded files, etc)
- Cookies strictly necessary for website operation.
(b) For the purpose of carrying out website analytics, Vertis is processing the following personal data:
- IP address;
- Technical information in the logfiles (operating system, data and time of visit, downloaded files, etc);
- Cookies not strictly necessary for website operation.
The period for which the personal data will be stored
Data listed under pont (a) above will be stored for a period of 90 days after visiting the website. Data listed under point (b) will be stored for a period of 14 months after visiting the website.
Rights of the data subject
As a data subject, you can exercise
- the right to access;
- the right to rectification;
- the right to erasure (right to be forgotten);
- the right to restrict the processing
subject to the conditions as set out by the GDPR.
In case the the legal basis of the processing is the legitimate interest of the controller, you can also object to the processing.
In case the legal basis of the processing is consent, you can withdraw the consent at any time; however, the withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from us.
According to Art. 25 of the Hungarian Act CXII of 2011 on the right to informational self-determination and freedom of information, the close relative of the deceased data subject or the person authorized by the deceased data subject might exercise data subject rights as determined by that Act within 5 years from the date of the death.
Sources of personal data
The source of the personal data is the user of the website and the IT system logging the activities of the user.
Recipients of the personal data
Vertis does not use data processors for this activity and does not transfer the data to third parties.
Data transfer to third countries / Automated decision making, including profiling
No data transfer to third countries is carried out by Vertis. Automated decision making, including profiling, does not occur in the context of the processing.
The right to lodge a complaint
As a data subject, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR. For a list of the data protection supervisory authorities, see https://edpb.europa.eu/about-edpb/about-edpb/members_en