Privacy Policy

Who we are

mate.aero Zrt. (official name of Company)

1027 BUDAPEST, Tölgyfa utca 24. HUNGARY

Our website address is: https://mate.aero

The data subject may turn to us with questions or comments regarding the operation of mate.aero – as data controller – and the processing of their personal data using the contact details above. mate.aero shall examine the data subject’s request without undue delay and within one month from the receipt of the request, and if it is well-founded, shall take action and inform the applicant thereof in writing. If necessary, this deadline may be extended by an additional two months. mate.aero shall inform the data subject of the extension of the deadline within one month of receipt of the request, stating the reasons for the delay. If mate.aero does not take action upon the data subject’s request, it shall inform the data subject of the reasons for the failure to take action, as well as the legal remedies available to the data subject.

Introduction

Based on Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: GDPR), mate.aero Zrt. (hereinafter: Company or Our Company), as Data Controller, hereby provides the following information regarding the processing of personal data to customers who voluntarily provide their contact details and other personal data for contact purposes (hereinafter individually: data subject, and collectively: data subjects).

By using the message box on the Company’s website or by sending a message to the Company’s contact addresses, you may provide the Company with certain contact or other information that allows identification. These are personal data held by the Company based on the consent of the data subject, under the conditions detailed below. The Company processes these personal data based on the data subject’s consent, as well as its legitimate interest in concluding contracts and sending commercial offers, in accordance with the principles set out in the GDPR.

Legislation serving as the basis for data processing

  • GDPR – the current text of the regulation is available via the following link: https://mate.aero/privacy-policy/
  • Act CXII of 2011 on the Right to Informational Self-Determination and on Freedom of Information (hereinafter: Info Act) – the current text of the legislation is available via the following link:

http://naih.hu/2.1-a-szerv-alaptevekenysege,-feladat–es-hataskoere.html

Definitions

  • Contractual Partners: natural persons, sole proprietors, legal entities, and other organizations having a valid (effective or non-effective) contract with the Company.
  • Personal data under the GDPR: any information relating to an identified or identifiable natural person (“data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Purpose and legal basis of personal data processing

The Company processes the personal data provided by the data subject on the website or via other means (e.g., e-mail, SMS) based on the consent of the data subject (pursuant to Article 6(1)(a) of the GDPR).

The purpose of the processing of personal data: commercial contact, sending offers, direct marketing, sending newsletters, responding to questions raised by the data subject, and providing other information.

The scope of data processed by the Company in this context

  • Name, Company name,
  • e-mail address,
  • Phone number.

Who may become acquainted with the personal data of the Data Subjects?

  • The employees and officers of the Company involved in maintaining contact with prospective and existing Contractual Partners and customers may process personal data to the extent necessary for the performance of their duties.
  • The Company shall transfer personal data upon the request of a court, investigative or other authority, in the event of their official request, provided that the exact purpose of the request and the scope of the requested data are specified in detail.

Cookies

We do not use cookies on our website.

Duration of storage of personal data

The Company processes the data provided within the framework of contacting for 2 years from the collection of the data.

Data security measures

The Company undertakes to ensure the security of the personal data it processes and to take the technical and organizational measures that ensure the protection of the collected, stored, or processed personal data. The Company protects the stored personal data against unauthorized access, alteration, disclosure, erasure, or destruction.

The Company ensures the secure storage and retention of personal data within its own scope of authority as follows:

  • personal data may only be accessed by authorized persons, and
  • access is protected by establishing appropriate authorization levels, furthermore
  • the security measures taken are continuously monitored and reviewed for efficiency and security.

The data subject’s rights related to data processing

  • The data subject is entitled to receive information about the processing of their personal data.
  • The data subject may request access to personal data concerning them from the Company (pursuant to Article 15 of the GDPR), meaning they are entitled to receive feedback from the Company as to whether the processing of their personal data is ongoing, and if so, they are entitled to gain access to their personal data and information related to data processing. Upon the data subject’s request, the Company shall also provide the data subject with a copy of the personal data undergoing processing.
  • In addition, the data subject may request the rectification (pursuant to Article 16 of the GDPR) or completion of their personal data.
  • Upon the data subject’s request, the Company shall erase (pursuant to Article 17 of the GDPR) personal data concerning the data subject without undue delay if one of the following grounds applies:
    • the personal data are no longer needed by the Company for the purposes specified above, or the duration of data processing has expired;
    • in the case of data processing based on the data subject’s consent, the data subject withdraws their consent to the processing of their data;
    • if the data subject objects to the data processing;
    • if the personal data have been unlawfully processed;
    • if the personal data must be erased for compliance with a legal obligation under EU or domestic law.
  • Upon the data subject’s request, the Company shall restrict (pursuant to Article 18 of the GDPR) data processing if the accuracy of the personal data is contested, or the data processing is unlawful, or the data subject objects to the data processing, or if the Company no longer needs the provided personal data, but the data subject requires them for the establishment, exercise, or defense of legal claims.
  • In the case of automated data processing, the data subject is entitled to the right to data portability (pursuant to Article 20 of the GDPR), meaning that the data subject may receive the personal data concerning them, which they have provided, in a structured, commonly used, and machine-readable format, and have the right to transmit those data to another business, organization, or person, provided that the processing is carried out by automated means and based on their consent, or is necessary for the conclusion of a contract to which the data subject is a party, or to take steps at the data subject’s request prior to entering into a contract. In this context, the data subject may also request that the Company transmit the personal data directly to another data controller.
  • The data subject may object (pursuant to Article 21 of the GDPR) to the processing of their personal data on grounds relating to their particular situation, if the data processing is based not on the data subject’s consent, but on the necessity for the performance of a task carried out in the public interest or in the exercise of official authority, or if the data processing is necessary for the purposes of the legitimate interests pursued by the Company or a third party, or if the processing of personal data is carried out for direct marketing purposes.
  • The data subject is entitled to withdraw their consent to the processing of their personal data at any time (pursuant to Article 7(3) of the GDPR); the withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

Automated decision-making and profiling

No automated decision-making is applied during data processing.

Failure to provide personal data: the provision of personal data to the Company is not a prerequisite for the conclusion or performance of a contract or agreement. The Contractual Partner is not obliged to provide the necessary personal data to the Company; the failure to provide data does not entail any adverse consequences for the data subject.

The data subject’s right to legal remedy before a court, complaint addressed to the supervisory authority

  • The data subject may enforce their rights before a court based on Act V of 2013 on the Civil Code; if they have suffered financial damage or an infringement of personality rights as a result of the data processing, they may claim damages and/or grievance fees from the data controller for the damage or infringement suffered. From June 1, 2024, even in the absence of damage, the data subject may turn to a court against the data controller if they believe that the processing of their data was unlawful, and may request the termination of the unlawful data processing, the restoration of the lawfulness of data processing, and the assurance of the enforcement of their rights. The lawsuit falls within the jurisdiction of the Regional Court (Törvényszék).
  • In addition to the above, if the data subject – following a written inquiry to the Company – believes that the Company has committed an infringement in connection with the processing of their data through its activities or omissions, they may initiate an administrative procedure with the National Authority for Data Protection and Freedom of Information (hereinafter: NAIH) to investigate their complaint. Contact details of NAIH:
    • Address: 1125 Budapest, Szilágyi Erzsébet fasor 22/c.,
    • Postal address: 1530 Budapest, Pf. 5.,
    • E-mail: ugyfelszolgalat@naih.hu,
    • Website: www.naih.hu,
    • Telephone: + 36 1 391 1400,
    • Fax: + 36 1 391 1410.

Budapest, 01-June-2024.

Last review date: 01-July-2026.

mate.aero Zrt.