Personal data recorded by the Magyar Nemzeti Bank (hereinafter: MNB) in connection with the use of the registration areas on its website are processed in accordance with the provisions of Regulation 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC and Act CXII of 2011 on the right to information self-determination and freedom of information, as set out below.

Data Controller:

Magyar Nemzeti Bank

Head office: 1054 Budapest, Szabadság tér 9.

The MNB’s Data Protection Officer is Dr Tivadar Marton (phone: 06-1-428-2600, email: martont@mnb.hu).

Data subjects and data processed:

Personal data provided during the registration process.

  • Username
  • Email address
  • Title
  • Last name
  • Middle name
  • First name
  • Company name
  • Company address
  • Phone number

Legal basis for processing:

The legal basis for processing is the legitimate interest of the MNB. The Bank carries out this processing using the legal basis of the balancing of interests. Therefore, processing by the Bank has a limited impact on your privacy. Furthermore, you can control the processing of your personal data, as the Bank can only know the data that are indispensable for you to be able to use the service. In view of the fact that the site operated by the Bank enables you to access information and services that facilitate your work and make it significantly easier for the Bank to perform its tasks, your privacy is not affected to a greater extent than the processing facilitates the Bank’s performance of its tasks.

Purpose of processing, time of processing:

The data are processed for the purpose of operating the site that makes available restricted content. The data may be accessed by employees of the organisational units responsible for the management of the restricted data in question. The MNB does not use a data processor to process the data.

The data controller shall process the data during the registration period at the most, and shall regularly review the appropriateness of the processing.

Data security measures:

The MNB stores personal data recorded in electronic form on its own servers and does not use the services of other companies for storage. The MNB takes appropriate measures to protect personal data from, inter alia, unauthorised access or alteration.

Rights related to data management:

Right to information and access:

The data subject may request information in writing from the MNB, via the contact details provided under the sub-heading ‘Data Controller’, that the MNB processes:

  • what personal data,
  • on what legal basis,
  • for what purpose,
  • from what source,
  • for how long,
  • whether it still processes your personal data,
  • to whom, when, for what reason and to which of your personal data it has given access or to whom it has transferred your personal data.

You can also request a copy of your personal data stored by the MNB.

The MNB will respond to the request of the person concerned within a maximum of 30 days, by sending a reply to the contact details provided in the request. If the request is sent to the MNB electronically, the MNB’s reply letter will also be sent to the data subject, if possible, electronically. If you request a reply by any other means, please indicate this in your request.

Right to rectification:

The data subject may request, in writing, through the contact details provided under the sub-heading ‘Data Controller’, that the MNB amend or correct any of his/her personal data (e.g. his/her name, email address, if there has been a change). If you send your request to the MNB electronically, you will also receive the MNB’s reply letter, preferably electronically. If you request a reply by any other means, please indicate this in your application.

The MNB will respond to your request without undue delay, within a maximum of 30 days, and will notify the applicant by letter to the contact details provided by the applicant.

The right to erasure (‘the right to be forgotten’):

The data subject may request the erasure of his/her personal data by writing to the MNB using the contact details provided under the sub-heading ‘Data Controller’.

The MNB will refuse a request for erasure if the Bank may need the personal data in connection with legal proceedings (for example, in the course of official or judicial proceedings initiated by you against the Bank) or if the MNB is required by law to continue to store the personal data. If, however, there is no such obligation for the personal data requested to be deleted, the MNB will comply with the request without undue delay, within a maximum of 30 days, and will inform the person making the request by sending a reply letter to the contact details provided by the person making the request. If the request is sent to the MNB by electronic means, the MNB’s reply letter will also be sent to the applicant, if possible, by electronic means. If you request a reply by any other means, please indicate this in your request.

Right to restriction of processing:

The data subject may request the restriction of processing in writing to the MNB via the contact details provided under the sub-heading ‘Data Controller’. In case of restriction, the MNB may only store the personal data; other processing activities may only be carried out with the consent of the data subject requesting restriction for the purpose of pursuing a legal claim or in the public interest.

Restriction of data may be requested if:

  • you believe that your data are not accurate, or
  • you believe that your data have been unlawfully processed by the MNB but you do not want the data to be deleted,
  • you require the processing for the establishment or defence of a legal claim, but the MNB no longer needs the data.

The MNB shall comply with your request without undue delay, within a maximum of 30 days, and will notify the person making the request by letter sent to the contact details provided by him/her. If the request is sent to the MNB by electronic means, the MNB’s reply letter will also be sent to the applicant, if possible, by electronic means. If you request a reply by any other means, please indicate this in your application.

Right to withdraw consent:

The data subject may withdraw his/her consent to the processing of personal data at any time during the period of processing, in writing, using the contact details provided under the sub-heading ‘Data Controller’. In the event of withdrawal of consent, the processing of the data by the MNB prior to the withdrawal shall remain lawful.

The MNB shall delete the personal data without undue delay after receipt of the withdrawal and shall inform the person who made the declaration by sending a letter to the contact details provided by him/her. If the request is sent to the MNB electronically, the MNB’s reply letter will also be sent electronically, where possible. If you request a reply by any other means, please indicate this in your declaration.

Legal remedies:

If the data subject considers that the data processing does not comply with the legal requirements, he/she may initiate proceedings with the MNB’s Data Protection Officer or take legal action.

In addition, any person may lodge a complaint with the National Authority for Data Protection and Freedom of Information to initiate an investigation on the grounds that there has been or is an imminent threat of a breach of the rights relating to the processing of personal data.

Contact details of the National Authority for Data Protection and Freedom of Information:

National Authority for Data Protection and Freedom of Information

Head office: 1055 Budapest, Falk Miksa utca 9-11.

Postal address: 1363 Budapest, Pf.: 9

Phone: 06-1-391-1400

Fax: 06-1-391-1410

Email: ugyfelszolgalat@naih.hu

Possibility to amend the Notice:

The Data Controller reserves the right to amend this Notice unilaterally without prior notice. The Data Controller shall send the current version of this Notice by email at the request of the data subject.