Marc Impact Program Privacy Statement

1.     Introduction

Thank you for visiting the website of the Marc Impact Program (hereinafter referred to as “Marc program” or “We”). We take the protection of personal data very seriously when it comes to processing it, in accordance with the relevant legislation. The following notice provides you (hereinafter referred to as “data subject” or “user”) with an overview of how we ensure data protection and for what purposes and what kind of data we process.

This Privacy Notice has been prepared in accordance with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

Data controller and contact details:

  • Name: IFUA Nonprofit Partner Public Benefit Nonprofit Ltd.
  • Headquarters: Budapest, Buda-part tér 2. 1117
  • Phone: 06-1-382-8888
  • E-mail address: adatvedelem@nonprofitpartner.hu

Data user organizations:

  • Name: ERSTE Foundation
  • Name: ERSTE Social Finance Holding
  • Name: SIMPACT Public Non-profit Ltd.
  • Name: SYNERB Venture Catalyzer
  • Name: IMPACT HUB VIENNA

2.     Scope of data processed, legal basis, purpose and duration of processing

As a data controller, we store your personal data (the purpose of the processing) to provide you with the best possible professional contents on our website.
When you register, we will record your name, e-mail address, company name, position – (mandatory) and LinkedIn contact – (optional) (scope of data processed).
The processing of your data is based on your consent (legal basis for processing). If you do not provide the required information, we will not be able to accept your registration and provide access to the professional content. If you withdraw your consent, your registration and related personal data will be deleted immediately. You can request the deletion of your data and withdraw your consent by contacting adatvedelem@nonprofitpartner.hu. Your data will be stored until your registration is cancelled or your consent is withdrawn (duration of processing).

Registration data is handled by data processors (website operated by our contracted partners) using security technologies and procedures that comply with the strict data protection requirements of the Marc Impact Program. Data controllers and processors must ensure technological, physical, organizational, and procedural safeguards in line with industry-accepted standards to ensure the protection, confidentiality, integrity, and availability of the personal data processed. To ensure the physical and software protection of the database server storing the data, the servers are located in a secure location (inaccessible to anyone).

The Data Controller may use the services of third parties for the purpose of cleaning and updating the available personal data, provided that the third party’s data management and processing practices comply with the applicable legal requirements. The Controller will ensure that no third party may use the personal data of users for any other purpose. By accepting this policy, the user expressly consents to the processing of data by third parties for such purposes.

3.     Use of cookies

The website uses cookies to enhance the user experience. These files are stored on your computer. The cookies are not personally identifiable, they are necessary for the provision of our services and to provide you with a superior user experience. Website users can disable the cookies in their browser at any time.

The cookies allow us to generate statistics on, for example, the number of visitors per day, the most frequently visited pages, and the time spent on them. This data allows us to better understand the needs of our visitors, so we can provide services that meet those needs. The data collected in this way will not be linked to any data that would identify you personally. This means that the visit is recorded, but the identity of the visitor remains unknown. We do not collect information about visitors’ personal habits. We do not sell or rent log files stored on our servers, customer data, or personal information to anyone, including those linked to or advertised on our sites.

If you enable the cookies, the site may store details of cookies (depending on the content of the page viewed):

  • The WordPress default cookie tester stores for the site whether the cookie is working or not.
  • At the bottom of the page, the “This website contains cookies – I accept” bar is stored so that this bar is not displayed each time it is accepted.
  • Google Analytics, and Facebook Pixel store a unique view ID for statistical anonymized tracking of views.
  • The Google AdWords advertising manager may store cookies on the administration interface of the site if one of the plugins advertises an update or other add-on on the administration interface.

Although some information is automatically recorded as part of the operation of our websites, we do not currently use it for any purpose. Personal information, such as your telephone number, postal address, or other information, will only be provided to us if you voluntarily give it to us when you complete the registration. In this case, by providing your personal data, you consent to the processing of your data – and to the recording, processing, and use of your data.

4.     Data processing for newsletter purposes

Your data will be used solely for the purpose of sending you our newsletters (professional news, content, training information); providing you with further information about the program and answering questions you may have about the Marc Impact Program.

We use your name and e-mail address to send you newsletters or further information, and we also store the date of subscription and the fact and content of your consent to the sending of the newsletter.

The processing is based on your consent (legal basis for processing), which entitles us to send you newsletters and/or additional information. If you withdraw your consent or use the unsubscribe function available in the newsletter, your personal data will be deleted immediately (duration of processing).

After you unsubscribe, we will continue to store the date of unsubscription and your e-mail address to prove that you have unsubscribed and will no longer send you newsletters, but we will not use your data in any other way.

5.     Rights of the Data Subject in relation to data processing

During the period of data processing, the Data Subject shall have the following rights in accordance with the provisions of the Regulation:

  • Access to personal data and request for information on data processing
  • Right to rectification
  • Restriction of processing
  • Right to erasure
  • Right to object

If the Data Subject wishes to exercise their rights, this will involve the identification of the user and communication with the user will be necessary. Therefore, personal data will be required for identification (however, identification may only be based on data that we already process).
We will respond to complaints about data management within 30 days at the latest.

Access to personal data and information

You have the right to receive feedback on whether your personal data are being processed and, if processing is ongoing, the right to:

  • Have access to the personal data processed; and
  • Be informed of the following information:
    • The purposes of processing
    • The categories of personal data processed about the Data Subject
    • Information about the recipients or categories of recipients to whom or with whom the Marc program has disclosed or will disclose personal data
    • The envisaged period of storage of the personal data or, if this is not possible, the criteria for determining that period
    • The Data Subject has the right to request the rectification, erasure, or restriction of processing personal data relating to them; in the case of processing based on legitimate interest, the Data Subject has the right to object to such processing
    • The right to lodge a complaint with a supervisory authority
    • In case the data have not been collected from a Data Subject, any available information about their source
    • The fact of automated decision-making (if such process is used), including profiling, and, at least in these cases, information about the logic used and the relevance and likely consequences for the Data Subject of such processing

The purpose of exercising this right may be to ascertain and verify the lawfulness of the processing, and we may charge reasonable fees for providing the information in exchange for repeated information requests.

Marc Impact Program provides access to personal data by sending the personal data and information processed to the Data Subject by e-mail after the Data Subject has been identified.
In the request, the Data Subject must indicate whether he or she requests access to the personal data or information about the processing.

Right to rectification

The data subject has the right to have inaccurate personal data relating to them corrected without delay at their request.

Right to restriction of processing

The data subject has the right to request us to restrict the processing if one of the following conditions is met:

  • The Data Subject contests the accuracy of the personal data, in which case the restriction applies for the period of time that allows us to verify the accuracy of the personal data; if verification is not necessary, we will not apply the limitation
  • The processing is unlawful, and the Data Subject opposes the erasure of the data and instead requests the restriction of their use
  • The personal data are no longer needed for the purposes for which they are processed, but the Data Subject requires them for the establishment, exercise, or defense of legal claims
  • The Data Subject has objected to the processing, but Marc program may also have a legitimate interest in the processing, in which case, until it is determined whether Marc Impact Program’s legitimate grounds prevail over the Data Subject’s legitimate grounds, the processing shall be restricted

If the processing is restricted, such personal data, except for storage, may only be processed with the consent of the Data Subject or for the establishment, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person or for important public interests of the Union or of a Member State.
We will inform the Data Subject in advance (at least 3 working days prior to the lifting of the restriction) about the lifting of the restriction.

Right to erasure – right to be forgotten

The Data Subject has the right to have the personal data concerning them deleted by Marc Impact Program without undue delay if one of the following grounds applies:

  • The personal data are no longer needed for the purposes for which they were collected or processed by the Marc program
  • You withdraw your consent and there is no other legal basis for processing
  • The Data Subject objects to processing based on legitimate interest and there is no overriding legitimate ground (i.e., legitimate interest) for processing
  • Personal data were unlawfully processed by the Marc program, and this has been established on the basis of the complaint
  • Personal data must be erased to comply with a legal obligation under EU or Member State law applicable to us

If, for any lawful reason, we have disclosed personal data about the user and we are required to delete it for any of the reasons set out above, we will take reasonable steps – including technical measures – to inform other data controllers that have processed the data that the user has requested the deletion of the links to or copies of the personal data in question. As a general rule, Marc Impact Program will not disclose the Data Subject’s personal data.

Erasure does not apply if the processing is necessary:

  • To exercise the right to freedom of expression and information
  • To comply with an obligation under EU or Member State law that requires the processing of personal data applicable to the Marc program
  • For the presentation, exercise, or defense of legal claims

Right to object

The data subject has the right to object to the processing of their personal data based on legitimate interests any time on grounds relating to his or her particular situation. In this case, we may no longer process the personal data, unless it can demonstrate compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the Data Subject or for the establishment, exercise, or defense of legal claims.

Remedies

If the Data Subject believes that we have violated a legal provision on data processing or have not fulfilled a request, he or she may initiate an investigation procedure with the National Authority for Data Protection and Freedom of Information (postal address: 1530 Budapest, Pf.: 5., e-mail: ugyfelszolgalat@naih.hu).

We hereby also inform the Data Subject that he or she may bring a civil action before a court.

Data security

During the operation of the IT systems, we ensure that the user’s data cannot be accessed by unauthorized persons, and that unauthorized persons cannot delete, extract from the system, or modify the data, by means of the necessary access control, internal organizational and technical solutions. We also enforce data protection and data security requirements with our data processors.

We keep records of any data protection incidents and, if necessary, inform the Data Subject about the incidents that occur.

6.     Other provisions

Marc Impact Program reserves the right to modify this privacy statement in a way that does not affect the purpose and legal basis of the processing.