Data management information

Privacy policy of the journal Dunakavics

1. Name and contact details of the data controller

DUE Press
Name of the data controller's representative: István Németh
Address: Táncsics M. Street 1/A, H-2400 Dunaújváros, Hungary.
E-mail: duepress@uniduna.hu

2. Legal basis for data processing

  1. REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Regulation (EC) No 95/46/EC (GDPR or Regulation).
  2. Law CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information [Infotv.]
  3. Law V of 2013 on the Civil Code [Ptk].
  4. Law CXXX of 2016 on the Code of Civil Procedure [Pp.].
  5. Law C of 2000 on Accounting [Számviteli tv.].
  6. Law CVIII of 2001 on certain issues of electronic commerce services and information society services [Eker. tv.].
  7. Law XLVIII of 2008 on the Basic Conditions and Certain Restrictions of Economic Advertising Activities [Grt]. The data are processed in compliance with the above laws, taking into account the principles of lawfulness.
  8. The Data Processing and Privacy Policy of the University of Dunaújváros in force at any given time.

DUE Press processes data lawfully, fairly, and transparently for the data subject. DUE Press will not use or may not use the personal data provided for purposes other than those described in this notice. DUE Press will only process the data provided or otherwise lawfully made known to it on the basis of the data subject's voluntary consent and will not disclose them to third parties under any circumstances, except in the cases provided for by the legislation in force. The transfer of personal data may only take place in accordance with the relevant legal provisions to this effect or with the consent of the data subject, to the extent specified therein.

3. Principles of data management

  1. Personal data are processed by the data controller in a lawful and transparent manner, ensuring fairness (lawfulness, fairness, and transparency) in the processing of personal data relating to natural persons. 
  2. Personal data shall be processed by the data controller only for specified lawful purposes, for the exercise of rights, and for the performance of obligations. At all stages of processing, the purpose of the processing must be fulfilled, and the collection and processing of data must be fair and lawful (purpose limitation). 
  3. The data controller shall only process personal data that is necessary for the purpose of the processing and is adequate for the purpose. Personal data may be processed only to the extent and for the time necessary to achieve the purpose (data minimization principle and limited storage). 
  4. The data controller must ensure that personal data are accurate and up-to-date, bearing in mind that inaccurate personal data are corrected (accuracy). 
  5. The data controller must process personal data in such a way as to ensure adequate security of personal data, including the protection against unauthorized or unlawful processing, accidental loss, destruction, or damage (availability, integrity, and confidentiality), by implementing appropriate technical or organizational measures.

4. Purpose of data processing

The DUE Press processes personal data for the purpose of publishing the Dunakavics journal, distributing it to subscribers, and operating its website.

5. Process of data processing. Categories of personal data and duration of processing

Data of subscribers, authors, and partners involved in the publication of the journal are processed by DUE Press (Táncsics M. Street 1/A., H-2400 Dunaújváros, Hungary. - duepress@uniduna.hu).

DUE Press processes only personal data that are indispensable for the purpose of the processing and are suitable for achieving that purpose, and processes personal data only to the extent and for the duration strictly necessary for the purpose of the processing. In the course of the processing, DUE Press shall ensure the confidentiality of the personal data processed, in compliance with the provisions of Article 32 of the GDPR, and the protection of such data from unauthorized persons, as follows:

DUE PRESS ensures the continued confidentiality, integrity, availability, and resilience of the systems and services used to process personal data.

In the event of a physical or technical incident, DUE PRESS ensures the ability to restore access to and availability of personal data in a timely manner.

DUE PRESS shall regularly test and evaluate the effectiveness of the technical and organizational measures taken to ensure the security of data processing.

DUE PRESS shall ensure that natural persons acting under its authority and having access to personal data are allowed to process those data only in accordance with the instructions of the controller, unless they are required to do otherwise by European Union or Member State law. The controller shall grant access to natural persons only if they have read and declared in writing that they are aware of and accept this privacy notice.

5.1. Data processing concerning authors

Manuscripts can be freely submitted to the journal Dunakavics for publication. Manuscript submission requires prior registration at the website .........................hu.

Registration requires the following (data): name (first and last name), country, e-mail address, username, and password. In the case of submitting a manuscript to Dunakavics for publication purposes, the registration includes a written declaration of consent to the processing of personal data and to the publication of the data. Thereafter, the author's personal data will be made public via the Internet if his/her publication is accepted by the editorial staff. The archived issues of the journal are available free of charge at the website ..............hu, and therefore the authors' personal data provided in the published publications will be made public. In addition, the authors' data of published manuscripts will be provided to accepted providers in the scientific community, which will index and share the scientific publications. When registering, the author gives written consent to the transfer of data.   

Legal basis for data processingthe voluntary consent of the author pursuant to Article 6(1)(a) of the regulation.

Duration of data processing:authors' data will be kept in the journal archives indefinitely. The author has the right to withdraw his/her consent at any time. Withdrawal of consent shall not affect the lawfulness of the processing based on consent prior to its withdrawal. Authors may withdraw their consent by sending an email to the e-mail address of the data controller 1.

5.2. Data processing concerning subscribers

The latest content of the Dunakavics journal published by DUE Press is available on subscription, which requires us to process subscribers' personal data for the following two purposes: 

  • registration of subscribers; 
  • providing subscribers with an invoice.

Subscription requires registration at the website ........................ 

To register, you must provide: name (first and last name), country, billing address, e-mail address, username, and password.

Legal basis for data processing: subscription as a contractual relationship based on Article 6(1)(b) of the regulation. The purpose of data processing is to enable the sale of the Dunakavics journal, including the registration of subscribers and the invoicing of subscription fees to them.

Duration of data processing: Subscribers' data are kept by the data controllers for 8 years, in accordance with the law on accounting. The subscriber has the right to withdraw his/her consent at any time. Withdrawal of consent does not affect the lawfulness of the processing based on consent prior to its withdrawal. If the subscriber withdraws his/her consent, the services related to the subscription would also cease. The withdrawal of consent may be initiated by the subscriber by sending an email to the e-mail address of the data controller.

5.3. Data contained in the profile created during registration

The registration is done on the website ...................hu, the data is entered voluntarily. 

During registration, the following data may be entered in the profile of the registered author/subscriber: name (first and last name), country, email address, username, password, telephone number, postal address, and biographical data. 

No automated decision-making or profiling will take place during the registration process.

Legal basis and purpose of data processing: the voluntary consent of the author pursuant to Article 6(1)(a) of the regulation.

Duration of processing: authors' data will be kept in the journal archives indefinitely. The author has the right to withdraw his/her consent at any time. Withdrawal of consent shall not affect the lawfulness of the processing based on consent prior to its withdrawal. The author may withdraw consent by sending an email to the e-mail address of the data controller 1.

6. Rights of the data subject with regard to data processing

6.1 The data subject has the following rights in relation to the processing:

  1. The right to request information: on the basis of which the data subject may request, in writing, through the contact details provided under point 1, information about which personal data are processed by the data controller, on what legal basis, for what processing purposes, from what source, for how long, and to whom, when, under what law, to which personal data the data controller grants access and to whom the personal data are transmitted. The data controller shall comply with a written request by letter to the contact details provided by the applicant within a maximum of 25 days.
  2. Right to rectification: In the event of a change of data or an inaccurate recording of data, the data subject may or must request in writing, via the contact details provided in point 1, the rectification or correction of his or her personal data within 15 days of the change.
  3. Right to erasure, restriction of processing.No request for erasure or restriction may be made in respect of the scope of the data processed as defined by law. In the case of non-mandatory data processing beyond this, based on personal consent, the right is granted to the person who gave the consent.

In the case of a request for restriction of processing, the restriction shall last for as long as the grounds given by the applicant make it necessary to store the data. 

  1. Right to object: the data subject may object in writing, via the contact details provided in point 1, on grounds relating to his or her particular situation, to processing where the controller would transfer or use the personal data for direct marketing, public opinion polling, profiling, or scientific research purposes. 

6.2. Enforcement: in case of violation of his/her rights, the data subject may bring an action against the data controller before a court (the court of law of his/her place of residence or domicile) or request the National Authority for Data Protection and Freedom of Information (Falk Miksa Street 9-11., H-1055 Budapest, Hungary. Postal address: PO.: 9., H-1363 Budapest, Hungary. Website URL: http://naih.hu e-mail address: ugyfelszolgalat@naih.hu ) for investigation.

  1. Automated processing (including profiling)

No decision-making based on automated processing is carried out by the data controller.

  1. Other provisions

This privacy notice is available on the data controller's website.

The data controller reserves the right to unilaterally amend this privacy notice for future reference. 

The data subjects will be informed of such amendments via the data controller's website.