The operator of the website www.alzamo.com is ALZAMO Informatikai Tanácsadó és Szolgáltató Zrt. (Alzamo Zrt., registered office: 1025 Budapest, Pusztaszeri út 16/B. Building A. 2nd floor 1/A., company registration number: 01-10-140587, represented by Zoltán Farkas CEO, hereinafter referred to as the “Data Controller”). The Data Controller hereby informs the Users, Clients, and Business Partners regarding data processing related to the use of the Website and the services provided by it, in accordance with the Act CXII of 2011 on Informational Self-Determination and Freedom of Information and the General Data Protection Regulation (GDPR) of the European Parliament and the Council, Regulation (EU) 2016/679.
The Data Controller acknowledges the mandatory nature of the content of this Privacy Policy. The Data Controller attaches great importance to respecting the informational self-determination rights of its partners, users, clients, and any other data subjects. Therefore, personal data is treated confidentially, and all necessary measures are taken to ensure the security of the data.
Alzamo Zrt. complies with the guidelines of the National Authority for Data Protection and Freedom of Information and the relevant legislation concerning data processing, including, in particular:
2.1. Website: The aggregate of content and services available under the domain www.alzamo.com, where Users can obtain information about the Data Controller’s activities. The website also contains links that are not operated by the Data Controller but serve the purpose of informing users. We kindly ask the Data Subjects to review the data protection notices of these websites before providing their personal data on the respective website.
2.2. Data Subject: Any identified or identifiable natural person during the data processing. This includes the Data Controller’s clients, business partners, suppliers, Users visiting the Website, and all those whose personal data is processed by the Data Controller.
2.3. Business Partner: Individuals and suppliers in a contractual relationship with the Data Controller.
2.4. Client: A person who orders the services of the Data Controller.
2.5. User: A person using the Website. The services of the Website can only be used by individuals over 18 years old.
2.6. Personal Data: Any information relating to the Data Subject. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
2.7. Data Processing: Any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction, as well as prevention of further use of the data.
2.8. Data Controller: ALZAMO Informatikai Tanácsadó és Szolgáltató Zrt. (registered office: 1025 Budapest, Pusztaszeri út 16/B. Building A. 2nd floor 1/A., company registration number: 01-10-140587), who determines the purpose and means of data processing and makes and executes decisions regarding data processing, or carries out data processing through a data processor appointed by the Data Controller.
2.9. Data Processing: Performing technical tasks related to data processing, regardless of the method and tools used for executing the operations and the location of the application.
2.10. Data Processor: Any natural or legal person, or organization without legal personality, who/which processes personal data on behalf of the Data Controller.
2.11. Consent: The voluntary, specific, informed, and unambiguous expression of the Data Subject’s will by which the Data Subject signifies agreement to the processing of personal data relating to him/her by means of a statement or a clear affirmative action.
2.12. Data Transmission: Making the data accessible to a specific third party.
2.13. Data Disclosure: Making the data accessible to anyone.
2.14. Data Deletion: Rendering data unrecognizable in such a way that its restoration is no longer possible.
2.15. Data Destruction: The complete physical destruction of data or the data carrier containing it.
2.16. Objection: A declaration by the Data Subject that they object to the processing of their personal data and request the cessation of data processing or the deletion of processed data. In this case, the Data Controller may no longer process the personal data, unless it demonstrates compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the Data Subject, or for the establishment, exercise, or defense of legal claims.
2.17. Data Blocking: Making it permanently or temporarily impossible to access, disclose, transform, modify, destroy, delete, combine, or align and use the data, as well as preventing further processing.
2.18. Third Party: Any natural or legal person, or organization without legal personality, who/which is not the Data Subject, the Data Controller, or the Data Processor.
2.19. Data Protection Notice: Due to the fact that a contract is concluded between the Data Subjects and the Data Controller through the use of the Data Controller’s services, the visit to the Website, and the establishment of contractual relationships with the Data Controller, personal data processing takes place, and the Data Controller informs the Data Subjects in accordance with legal requirements about the processing of personal data through this Data Protection Notice. The Data Controller reserves the right to modify this Data Protection Notice within 15 days and publish it on the Website if there are substantive changes in data processing. The Data Controller informs the Data Subjects that by entering into a contract with the Data Controller and accessing the Website, using its functions, they acknowledge and accept the provisions set forth in this Data Protection Notice, without the need for any further declaration.
Our company’s data processing activities can be carried out based on the legal grounds provided by Article 6(1) of the GDPR as follows:
a) Pursuant to point (a), processing of personal data is based on the Consent of the Data Subject (hereinafter referred to as “Consent”) following the Data Subject’s information for one or more specific purposes.
b) Pursuant to point (b), processing is necessary for the performance of a contract to which the Data Subject is party or in order to take steps at the request of the Data Subject prior to entering into a contract (hereinafter referred to as “Contract Performance”).
c) Pursuant to point (c), processing is necessary for compliance with a legal obligation to which the Controller is subject (hereinafter referred to as “Legal Obligation”).
d) Pursuant to point (d), processing is necessary in order to protect the vital interests of the Data Subject or another natural person (hereinafter referred to as “Vital Interests”).
e) Pursuant to point (e), processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller (hereinafter referred to as “Public Interest”).
f) Pursuant to point (f), processing is necessary for the purposes of the legitimate interests pursued by the Controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the Data Subject (hereinafter referred to as “Legitimate Interests”).
3.1. Data processing of our corporate clients, business partners, and suppliers’ contacts:
Scope of Data Subjects: Contacts of our corporate clients, business partners, and suppliers
Purpose of Data Processing:
a) Performance of the contract,
b) Communication, inquiry, and enforcement of rights and claims
Scope of Processed Data: Name, phone number, email address, position
Legal Basis for Data Processing:
In case of a): GDPR Article 6(1)(a) – Consent
In case of b): GDPR Article 6(1)(f) – Legitimate Interests
Source of Data: Our corporate clients, business partners, and suppliers
Data Deletion Period: 5 years following the termination of the contract. If the data is part of the contract, the data will be deleted after the retention period prescribed by the accounting law, which is 8 years from the termination of the contract.
Data Transfer: No data transfer occurs.
3.2. Processing of personal data of job applicants:
We inform the Data Subjects that by submitting their curriculum vitae (CV) or job application to our company, they automatically give their consent to the processing and storage of their personal data for recruitment, job offering, and communication purposes. We may also send messages to the provided contact details. The consent for data processing can be withdrawn at any time by sending a message to contact@alzamo.com including the name, address, and email address. In such a case, we will identify you based on the provided information and delete all your electronic and paper-based stored data.
If you apply for a job advertisement, we will process your personal data until the position is filled, and store your CV in our database for another 2 years for the purpose of future job offers. After 2 years, we will request your consent again for further data processing. If you do not respond or do not wish for further data processing, we will delete your CV from our database.
Scope of Data Subjects: Job applicants
Source of Data: Job applicants providing their information to us
Scope of Processed Data: Data provided in the curriculum vitae (CV), such as name, phone number, address, email
The Data Subject has the right to request information about the processing of their personal data, to request rectification of their data, and, in the case of consent-based processing, to request erasure, restriction, withdrawal, and, in certain cases, to object to the processing of their personal data.
Right to information: the Data Controller provides the Data Subject with concise, transparent, clear, and easily understandable information regarding the processing of personal data. The right to information can be exercised in writing. Upon verification of their identity, the Data Subject can also receive information verbally.
Right of access: the Data Subject is entitled to receive feedback from the Data Controller regarding whether their personal data is being processed, what personal data is being processed, for what purpose, for how long, to whom it is disclosed, where it originated from, and what rights they have in this regard. The Data Controller must provide the information within 30 days from the submission of the request.
Right to rectification: the Data Subject may request the Data Controller to rectify inaccurate personal data concerning them and to complete incomplete data.
Right to erasure: the Data Subject has the right to request the erasure of their personal data without undue delay in the following cases:
Erasure of data cannot be initiated if the processing is necessary for compliance with a legal obligation that requires the processing of personal data by the Data Controller or for the establishment, exercise, or defense of legal claims.
Right to object: the Data Subject has the right to object to the processing of their personal data when it is based on the legitimate interests of the Data Controller or a third party, including profiling. In this case, the Data Controller may no longer process the personal data unless they demonstrate compelling legitimate grounds for the processing that override the Data Subject’s rights, freedoms, and interests or for the establishment, exercise, or defense of legal claims.
If personal data is processed for scientific or historical research purposes or statistical purposes, the right to object may be limited unless the processing is necessary for the performance of a task carried out in the public interest. The Data Controller shall examine the objection as soon as possible and inform the Data Subject within 30 days.
Right to restriction of processing: the Data Subject may request the Data Controller to restrict the processing of their personal data if any of the following conditions are met:
When processing is restricted, except for storage, personal data may only be processed with the Data Subject’s consent or for the establishment, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
The Data Controller shall inform all recipients to whom the personal data has been disclosed regarding any rectification, erasure, or restriction of processing unless this proves impossible or involves disproportionate effort. The Data Controller shall inform the Data Subject about these recipients upon request.
Right to complain: if the Data Subject believes that their rights have been violated in relation to the processing of personal data, they have the right to lodge a complaint with the relevant supervisory authority:
National Authority for Data Protection and Freedom of Information (headquarters: 1125 Budapest, Szilágyi Erzsébet fasor 22/C)
Mailing address: 1530 Budapest, Pf.: 5.
Phone: +3613911400, Fax: +3613911410
Email: ugyfelszolgalat@naih.hu, Website: http: //www.naih.hu
A judicial review can be initiated against the decision of the supervisory authority.
In addition to the above, the Data Subject can file a lawsuit against the Data Controller. The court shall proceed with the case expeditiously.
You can submit your request regarding the above rights to the email address contact@alzamo.com or by sending a postal letter to the Data Controller’s registered address. The Data Controller undertakes to inform the Data Subject about the measures taken within 30 days from the receipt of the request.
Company Name: Alzamo Zrt.
Registered Address: 1025 Budapest, Pusztaszeri út 16/B. Building A. 2nd floor 1/A.
Company Registration Number: 01-10-140587, Tax Identification Number: 27120675-2-41
Represented by: Zoltán Farkas, CEO
Phone: +36202222333, Email: contact@alzamo.com
For any issues related to the data processing by Alzamo Zrt., the Data Controller, the following contact person can be approached for data protection matters: Zoltán Farkas (phone: +36202222333, email: contact@alzamo.com).
The Data Controller is not obliged to appoint a Data Protection Officer.
In order to fulfill its activities, the Data Controller engages the following Data Processors:
Websupport Magyarország Kft. (registered address: 1132 Budapest, Victor Hugo utca 18-22, company registration number: 01-09-381419, email: info@ezit.hu)
Purpose of data processing: Server hosting services
Scope of personal data: The data specified in point 3. The Data Processor shall not use the personal data for any purpose other than the performance of the task.
Farkas Csilla e.v. (registered address: 2525 Bajna, Vásár tér 29., individual entrepreneur registration: 52448395, email: farkascsilla75@gmail.com)
Purpose of data processing: Accounting, payroll
Scope of personal data: The data necessary for the performance of the task. The Data Processor shall not use the personal data for any purpose other than the performance of the task.
Microsoft 365 (Microsoft Corporation, One Microsoft Way, Redmond WA 98052-7329 USA, the Hungarian language data processing information of Microsoft is available on the microsoft.com website under the “Data processing at Microsoft” section.)
Purpose of data processing: Cloud services
Scope of personal data: The data specified in point 3. The Data Processor shall not use the personal data for any purpose other than the performance of the task.
The service provider of Microsoft is a US-based company listed on the EU-US Privacy Shield List established under Article 45 of the GDPR and Commission Implementing Decision 2016/1260. Participating companies have committed to GDPR compliance. The transmission of data to them is not considered a transfer of data to a third country outside the EU, and separate consent from the individuals is not required for this purpose. Further information about the EU-US Privacy Shield List is available on the website www.naih.hu/külföldi-adattovábbítás.
The Data Controller reserves the right to involve additional Data Processors in the future, and the Data Subjects will be informed about such modifications to this Data Processing Information.
Personal data is processed solely for the purposes and duration specified in this data processing information. We only process personal data that is essential and suitable for achieving the purpose of the data processing.
Our company protects personal data against unauthorized access, alteration, transmission, disclosure, deletion, or destruction, as well as accidental destruction, damage, and unavailability resulting from changes in applied technology. We ensure the integrity of personal data and that only those who are authorized or have tasks related to specific data processing have access to the personal data.
Our company is committed to informing any third parties to whom the data is transmitted or disclosed based on the consent of the Data Subject to comply with data protection requirements. The Data Controller imposes this obligation on its employees and data processors involved in the data processing activities.
Our computers are protected by antivirus software and passwords. The use of external data carriers is restricted and allowed only under secure conditions and after verification. We create backups of data on external storage media and ensure their security.
Personal data is securely stored on our own server, located in a reliable, locked place, with strict access control rules limiting the personnel who can access it. Personal data is stored on the hard drives of our computers as well as in the cloud through Microsoft Office 365 cloud services, with access requiring passwords and appropriate authorization.
Our employees receive regular training on data and information security requirements, and we adhere to data security requirements during document management.
In the event of a data protection incident, we will report it to the supervisory authority within 72 hours and keep a record of it in accordance with our incident management policy.
Budapest, October 4, 2023.
We use cookies to personalise content and ads, provide social media features and analyse our traffic. We also share information about your use of our Site with our social media, advertising and analytics partners, who may combine it with other information that you have provided to them or that they have collected from your use of their services.
