{"id":1159,"date":"2025-01-01T18:18:29","date_gmt":"2025-01-01T17:18:29","guid":{"rendered":"https:\/\/www.pallai.hu\/?page_id=1159"},"modified":"2025-03-03T12:29:09","modified_gmt":"2025-03-03T11:29:09","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/www.pallai.hu\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"

[et_pb_section fb_built=”1″ _builder_version=”4.27.3″ _module_preset=”default” use_background_color_gradient=”on” background_color_gradient_direction=”328deg” background_color_gradient_stops=”#2b87da 0%|#130986 100%” locked=”off” global_colors_info=”{}”][et_pb_row _builder_version=”4.27.3″ _module_preset=”default” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.27.3″ _module_preset=”default” global_colors_info=”{}”][et_pb_heading title=”Privacy Policy” _builder_version=”4.27.4″ _module_preset=”default” title_font=”|800|||||||” title_text_color=”#FFFFFF” title_font_size=”36px” custom_padding=”||0px|||” animation_style=”fade” hover_enabled=”0″ locked=”off” global_colors_info=”{}” sticky_enabled=”0″][\/et_pb_heading][\/et_pb_column][\/et_pb_row][et_pb_row column_structure=”3_4,1_4″ _builder_version=”4.27.3″ _module_preset=”default” global_colors_info=”{}”][et_pb_column type=”3_4″ _builder_version=”4.27.3″ _module_preset=”default” global_colors_info=”{}”][et_pb_text _builder_version=”4.27.4″ _module_preset=”default” text_text_color=”#FFFFFF” text_font_size=”18px” text_line_height=”1.8em” header_2_font=”|800|||||||” header_2_text_color=”#FFFFFF” header_2_font_size=”21px” hover_enabled=”0″ global_colors_info=”{}” sticky_enabled=”0″]<\/p>\n

Data Controller:<\/b>
<\/span>Dr. Katalin M\u00e1ria Pallai (Registered Address: Austria, 1090 Vienna, Spittelauer L\u00e4nde 15-21\/1\/19, Austrian Tax Number: 07360\/7376)<\/span><\/p>\n

As a service provider and data controller (hereinafter referred to as “Service Provider”), Dr. Katalin M\u00e1ria Pallai adopts the following data protection and data management policy, effective from May 25, 2018, in accordance with the <\/span>EU General Data Protection Regulation (GDPR) (Regulation (EU) 2016\/679 of April 27, 2016)<\/b>.<\/span><\/p>\n

1. Definitions<\/b><\/p>\n

1.1 <\/span>Personal Data:<\/b> Any information related to an identified or identifiable natural person (“Data Subject”). A natural person is identifiable if they can be identified directly or indirectly, particularly based on an identifier such as name, number, location data, online identifier, or one or more factors specific to their physical, physiological, genetic, mental, economic, cultural, or social identity.<\/span>
<\/span>1.2 <\/span>Data Processing:<\/b> Any operation performed on personal data, whether automated or not, including collection, recording, organization, structuring, storage, modification, retrieval, consultation, use, disclosure, transmission, dissemination, or making available by any means, alignment, combination, restriction, deletion, or destruction.<\/span>
<\/span>1.3 <\/span>Data Processing Restriction:<\/b> Marking stored personal data to limit future processing.<\/span>
<\/span>1.4 <\/span>Profiling:<\/b> Automated processing of personal data to evaluate specific personal aspects of a natural person, such as work performance, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements.<\/span>
<\/span>1.5 <\/span>Data Controller:<\/b> Dr. Katalin M\u00e1ria Pallai.<\/span>
<\/span>1.6 <\/span>Data Processor:<\/b> A natural or legal person, public authority, agency, or other body that processes personal data on behalf of the Data Controller.<\/span>
<\/span>1.7 <\/span>Recipient:<\/b> A natural or legal person, public authority, agency, or other body to whom personal data is disclosed, regardless of whether they are a third party.<\/span>
<\/span>1.8 <\/span>Third Party:<\/b> A natural or legal person, public authority, agency, or other body other than the Data Subject, Data Controller, Data Processor, or individuals authorized to process personal data under direct authority.<\/span>
<\/span>1.9 <\/span>Data Subject\u2019s Consent:<\/b> A freely given, specific, informed, and unambiguous indication of the Data Subject\u2019s wishes, either by a statement or a clear affirmative action, signifying agreement to the processing of personal data.<\/span>
<\/span>1.10 <\/span>Data Breach:<\/b> A security breach leading to accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access to personal data.<\/span>
<\/span>1.11 <\/span>Genetic Data:<\/b> Personal data related to inherited or acquired genetic characteristics, carrying unique information about an individual\u2019s physiology or health, primarily obtained from biological samples.<\/span>
<\/span>1.12 <\/span>Biometric Data:<\/b> Personal data resulting from specific technical processing related to physical, physiological, or behavioral characteristics of a person that enable their unique identification, such as facial images or fingerprint data.<\/span>
<\/span>1.13 <\/span>Health Data:<\/b> Personal data about an individual\u2019s physical or mental health, including information about healthcare services received.<\/span><\/p>\n

2. Data Processing and Protection<\/b><\/p>\n

2.1 Personal data may only be processed for a specified purpose, to exercise a right, or fulfill an obligation (principle of purpose limitation).<\/span>
<\/span>2.2 The Data Subject has the right to be informed about the processing of their personal data, including its source, purpose, legal basis, and duration.<\/span>
<\/span>2.3 Only authorized employees, subcontractors, or data processors with a legitimate need can access personal data.<\/span>
<\/span>2.4 The Service Provider ensures that any request for data is assessed to determine whether the requested data is essential for the stated purpose.<\/p>\n

<\/span>2.5 <\/span>Data Security Measures:<\/b><\/p>\n