What You Need to Know about MVK Data Management
A private individual has the right to know who uses, where, when and for what purpose their personal data. This is required by the General Data Protection Regulation of the European Union (GDPR), and Act CXII of 2011 on the right to informational self-determination and on the freedom of information ("Privacy Act"). The data controller - in this case MVK - must prepare a data protection information, which contains in detail how it handles users' data.
The purpose of this information
Our aim is to provide you with accurate information about how we handle and protect the personal data you entrust to us. We take the security of your personal data seriously, as you honour us with your trust when you entrust it to us. Here you can find out how we use your personal data and we will also tell you how to contact us if you have any further questions.
What data do we collect and store?
The information we collect about you and how we collect that information depends largely on which services of ours you use. How you contacted us is an important factor as well, even if you are not our customer, or if we process your data that we have received from a third party with your permission.
We collect personal information when:
- you purchase a service or a (mobile) ticket
- you make a contract with us
- you contact us (e.g. via telephone or e-mail)
- you make a complaint
- we recover penalty fare debts
- you apply for a job at MVK
We handle your personal data with the following legal bases
In connection with a contract or its conclusion
In order for us to enter into a contractual relationship with you, we need to verify your personal data. In addition, we offer services that you can only use under special conditions. In such cases, we must always check the data required for the conclusion of the contract.
In order to meet our legal obligations
Your personal data may also be necessary for the fulfilment of our obligations related to taxation and accounting (e.g. when issuing an invoice related to the use of the service). We always handle such information according to strict internal rules.
Based on your consent
This includes cases such as when we do not handle your data based on a legal authorisation or obligation but based on your consent. You can withdraw your consent to the processing of your data at any time.
In the legitimate interest of MVK
There are cases when data processing is necessary to enforce the legitimate interests of MVK. It is important in such cases that we must pay special attention to the fact that the interests of MVK do not take precedence over your interests and fundamental rights, which necessitate the protection of your personal data.
Why do we need this data?
For instance,
- so that we can provide you with the right service;
- for data management necessary for the fulfilment of the contract concluded with MVK;
- to send marketing (advertising) or other offers by direct inquiry;
- for contact reasons;
- for handling complaints;
- for the protection of human life, physical integrity, personal liberty, the protection of business secrets and the continuous recording of images recorded by an electronic surveillance system for the protection of persons and property;
- for recruitment and selection processes.
How long do we store your data?
We will only process your personal data for the above purposes and for as long as:
- we have legal obligation or authority to do so;
- it is justified in order to fulfil your contract with MVK;
- you have given us authority to do so;
- it is strictly necessary for the purpose of data processing.
How do we ensure the protection of your data?
MVK stores personal data in secure server rooms, where appropriate security measures are taken to ensure the protection of this information. Our security staff responsible for data protection and security is constantly reviewing our information security procedures to ensure that your personal information is fully protected.
Your rights concerning your processed data
Right of rectification
By post to 3527 Miskolc, Szondi György utca 1., via e-mail to mail@mvkzrt.hu or adatfelelos@mvkzrt.hu or in person at our Customer Service office.
Right to access
You can request a copy of your personal data stored at MVK.
Right to data portability
You may request your personal data stored at MVK on a data carrier.
Right to object
In some justified cases, you may object to the processing of your personal data by MVK.
Right to restriction of processing
If you find any error concerning your personal data handled by MVK or in your opinion we are not authorised to handle it, please feel free to contact us.
Right to erasure
In some cases you may request the deletion of your personal data.
Complaints concerning data management
You can make a complaint about the handling of your personal data in the following ways:
- at MVK (you can reach our data protection officer at the e-mail address adatfelelos@mvkzrt.hu or by sending a letter to: 3527 Miskolc, Szondi György utca 1.);
- in court at National Authority for Data Protection and Freedom of Information (NAIH).
You can access our data management information at the following links (in Hungarian)