Privacy Statement

 

This Privacy Policy sets forth the contact information of the data controller, the scope of the data processed, the purpose, duration, and legal basis of the processing, the rights of the data subject, and the data controller’s obligations.

The processing of personal data provided when sending a message is based on the consent given by the data subject.

By accepting this Privacy Policy, the data subject consents to the processing of their personal data for the purposes, to the extent, in the manner, and for the duration specified in this Privacy Policy.

 

The identity and contact information of the data controller and its representative

Identity of the data controller:

Name: Webstar Csoport Korlátolt Felelősségű Társaság

Company Registration Number: 02-09-072399

Tax ID: 14273027-2-02

Court of Registration: Commercial Registry of the Pécs Regional Court

 

A representative of the data controller

Attila Bertók, Managing Director (Senior Executive)

Contact information for the data controller:

• office: H-7625 Pécs, Majorossy Imre utca 36.
• E-mail address: info@webstar.hu
• website: https://www.webstar.hu/en

 

The scope of personal data processed, the purpose of processing, the duration of processing, and the legal basis

The scope of personal data processed

The data controller processes the following data of the data subject in connection with the messaging service available on the https://www.webstar.hu website:

• name,
• email address,
• phone number,

When subscribing to the newsletter or signing up for an event advertised on the website:

• company name
• name,
• title, position
• email address,
• phone number,

 

When applying for a job:

• name,
• email address,
• phone number,
• additional personally identifiable information provided by the applicant during the admissions process.

 

In the case of the newsletter, the Data Controller will process the data you provided when subscribing to the newsletter until you unsubscribe from the newsletter by by clicking the “Unsubscribe” button at the bottom of the newsletter or by notifying us in writing at the mailing address or via the email address provided on the website of your intention to unsubscribe. Upon unsubscribing, the Data Controller will no longer contact the Data Subject with further newsletters. You may unsubscribe from the newsletter at any time free of charge and withdraw your consent.

By registering for an event organized by Webstar Csoport Kft., the Registrant consents to the Data Controller sending information regarding events organized by Webstar Csoport Kft. following registration. If, after registration, you no longer wish to receive information about events organized by Webstar Group Ltd., you may indicate this in writing to the Data Controller’s contact information. Thereafter, the Data Controller will not send notifications or information regarding future events organized by Webstar Group Ltd.

We also process the personal data provided when applying for job postings on our website in accordance with this Privacy Policy. If, after the recruitment process has concluded, the Applicant does not wish to receive information from our company (or wishes to request the deletion of the data provided during the application process), they may indicate this in writing to the Data Controller’s contact information.

 

The duration of personal data processing

The data controller will process the data subject’s personal data specified in Section II.1 for a period of 730 days from the date on which the response to the message is sent to the data subject.

 

Purpose of the processing of personal data

The purpose of processing the personal data provided by the data subject is to enable the data controller to send a reply to the data subject in response to the electronic message sent by the data subject.

 

Legal basis for the processing of personal data

The legal basis for the processing of personal data provided by the data subject is Section 5(1) of Act CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information and Article 6(1)(a) of Regulation (EU) 2016/679 of the European Parliament and of the Council, based on the data subject’s voluntary consent.

 

Recipients of personal data

The personal data provided by the data subject may be disclosed exclusively to the data controller and its employees; personal data provided by the data subject may be transferred to other natural or legal persons, public authorities, agencies, or any other bodies only if required to do so by law, and only to the parties specified in the relevant legislation.

 

The rights of the data subject

The data subject's right of access to their personal data

The data subject has the right to receive confirmation from the data controller as to whether their personal data is being processed, and if such processing is taking place, they have the right to access their personal data and the following information:

• the purposes of data processing;
• the categories of personal data concerned;
• the recipients or categories of recipients to whom the personal data have been or will be disclosed, including, in particular, recipients in third countries or international organizations;
• where applicable, the envisaged period for which the personal data will be stored, or, if that is not possible, the criteria used to determine that period;
• the data subject’s right to request from the data controller the rectification, erasure, or restriction of processing of personal data concerning him or her, and to object to the processing of such personal data;
• the right to file a complaint with a supervisory authority;
• if the data were not collected from the data subject, any available information regarding their source;
• the fact that automated decision-making, including profiling, is being carried out in relation to the data subject, as well as, at least in those cases, the logic involved and meaningful information regarding the significance of such processing and the likely consequences for the data subject;
• information about activities related to data processing.

 

The data controller is required to provide the information in writing, in an easily understandable form, at the data subject’s request, as soon as possible after the request is submitted, but no later than 25 days thereafter.

 

The right to rectification

The data subject has the right to have inaccurate personal data concerning him or her rectified by the controller without undue delay upon request. Taking into account the purposes of the processing, the data subject has the right to request that incomplete personal data be completed, including by means of providing a supplementary statement.

 

The right to have personal data processed by the data controller erased or restricted

The data subject has the right to request that the data controller erase personal data concerning him or her without undue delay, and the data controller is obliged to erase personal data concerning the data subject without undue delay if any of the following grounds apply:

• the personal data is no longer necessary for the purpose for which it was collected or otherwise processed;
• the data subject withdraws their consent and there is no other legal basis for the processing;
• the data subject objects to the processing of their personal data on grounds relating to their particular situation, and there are no overriding legitimate grounds for the processing, or where the personal data are processed for direct marketing purposes and the data subject objects to such processing;
• the personal data was processed unlawfully;
• personal data must be erased to comply with a legal obligation under Union or Member State law to which the controller is subject;
• the collection of personal data took place directly in connection with the provision of information society services to children;
• at the request of the data subject;
• if it is incomplete or incorrect—and this situation cannot be lawfully remedied—provided that the law does not preclude its deletion;
• the purpose of the data processing has ceased to exist, or the statutory retention period for the data has expired;
• was ordered by a court or the National Authority for Data Protection and Freedom of Information.

 

Instead of erasure, the data controller shall block the personal data if the data subject requests it, or if, based on the information available, it can be assumed that erasure would harm the data subject’s legitimate interests. Personal data blocked in this manner may be processed only for as long as the purpose of processing that precluded the erasure of the personal data remains valid.

 

The right to restrict data processing

The data subject has the right to request that the data controller restrict the processing of their data if any of the following conditions are met:

• the data subject disputes the accuracy of the personal data; in this case, the restriction applies for a period that allows the data controller to verify the accuracy of the personal data;
• the processing is unlawful, and the data subject objects to the erasure of the data and requests, instead, that its use be restricted;
• the data controller no longer needs the personal data for the purposes of processing, but the data subject requires it for the establishment, exercise, or defense of legal claims;
• the data subject has objected to the processing on grounds relating to his or her particular situation; in this case, the restriction applies for as long as it has not been determined whether the controller’s legitimate grounds override those of the data subject.

 

Az érintett tiltakozásához való joga

The data subject has the right to object at any time, on grounds relating to his or her particular situation, to the processing of his or her personal data based on the legitimate interests pursued by the controller or by a third party, including profiling based on those provisions. In such a case, the data controller may no longer process the personal data unless the data controller demonstrates compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the data subject or which are related to the establishment, exercise, or defense of legal claims.

If personal data is processed for the purpose of direct marketing, the data subject has the right to object at any time to the processing of personal data concerning him or her for such purposes, including profiling, insofar as it is related to direct marketing.

If the data subject objects to the processing of personal data for direct marketing purposes, such personal data may no longer be processed for that purpose.

 

The data subject's right to data portability

The data subject has the right to receive the personal data concerning him or her, which he or she has provided to a data controller, in a structured, commonly used, and machine-readable format, and has the right to transmit those data to another controller without hindrance from the controller to whom the personal data have been provided, where:

• the processing is based on the data subject’s consent to the processing of their personal data or to the processing of special categories of personal data, or on a contract to which the data subject is a party; and
• Data processing is carried out automatically.

 

The right to withdraw consent at any time

The data subject may withdraw their consent at any time; such withdrawal shall not affect the lawfulness of any data processing carried out on the basis of that consent prior to the withdrawal.

 

Other legal remedies available to the affected party

If the data subject believes that the data controller has violated any of its obligations regarding personal data, the data subject may contact the National Authority for Data Protection and Freedom of Information (NAIH) (address: 1055 Budapest, Falk Miksa utca 9-11) via the website https://naih.hu/index.html or at the postal address 1363 Budapest, P.O. Box 9.

The data subject may request that the Authority conduct a data protection proceeding if, in his or her opinion, the data controller is violating the regulations governing the processing of personal data in the course of processing his or her personal data.

The data subject may bring a legal action against the data controller if he or she believes that the data controller is processing his or her personal data in violation of the regulations governing the processing of personal data.

The data subject may bring a legal action against the data controller if he or she believes that the data controller is processing his or her personal data in violation of the regulations governing the processing of personal data. The data subject may, at his or her discretion, bring the action before the court with jurisdiction over his or her place of residence or place of stay.

 

Consequences of failure to provide personal data

The data subject is not required to provide the personal data described in this privacy notice; however, if such data is not provided, the data controller will be unable to respond to the message sent to the data subject.

Other privacy notices not directly related to the operation of the website:

Information collected through questionnaires distributed via Webstar Csoport Kft.’s online platforms (company-owned websites, blogs, social media platforms), as well as via email and text message (personal data, resumes, other data provided by the respondent) is stored by Webstar Group Ltd. on its own or leased servers (located within the EU) for a period of 2 years. The stored data is disclosed to third parties only with the consent of the data subject and is deleted from the database within 7 business days upon the data subject’s written request.

The data provider may also request changes to the provided data in writing; Webstar Csoport Kft. undertakes to make such changes within 7 business days. Webstar Csoport Kft. is not entitled to any financial compensation for the storage of the provided data or for any work related thereto; these processes serve exclusively the purpose of professional cooperation with the market.

 

Updated: February 27, 2026