Privacy Policy
Effective: 25 April 2018
Alba-Zöchling Kft. (the "Controller") is committed to processing and protecting the personal data of its employees and business partners in accordance with the European Union's General Data Protection Regulation (Regulation 2016/679, the "GDPR"), which entered into force on 25 May 2018.
Data subjects include individuals employed by the Controller or having a business relationship with the company: clients, subcontractors, suppliers, and their representatives and employees.
I. Controller's Details
- Company name: Alba-Zöchling Kft.
- Registered office: 8000 Székesfehérvár, Holland fasor 9., Hungary
- Mailing address: 8000 Székesfehérvár, P.O. Box 288.
- Company registration number: 07-09-000033
- VAT number: 10268526-4-07
- Phone:
- Central email:
- Website: www.alba-zochling.hu
II. Purpose and Legal Basis of Processing
The Controller processes the personal data of its employees and business partners for the purpose of pursuing its legitimate interests, strictly to the extent necessary (Art. 6(1)(f) GDPR), while observing the following:
- employee data in accordance with labour and accounting laws and regulations;
- business partner data to ensure the smooth conduct of business relationships and the full performance of contracts and agreements;
- personal data provided to us may be transferred within the company for internal administrative purposes, e.g. invoicing, accounting, market research, etc.;
- we guarantee the secure operation of our IT systems;
- we protect the security of our facilities and workplaces through a 24-hour security service and camera surveillance of our premises.
In addition, the Controller must comply with various legal obligations (Art. 6(1)(c) GDPR) that may require the processing and transfer of the personal data provided. This takes place only to the legally permissible extent and in the business interest of the company.
III. Transfer of Personal Data and Recipients
Within the company, personal data is accessible only to authorised employees, for the performance of tasks related to their roles.
The Controller may engage external service providers for specialised tasks: e.g. IT providers, legal representatives, auditors. These external providers act under the Controller's supervision and on the company's instructions, and may therefore access the personal data held by the Controller, but only to the extent necessary to perform their services and subject to a confidentiality declaration.
Should personal data held by the Controller need to be transferred to countries outside the EEA, the company will take the necessary measures to ensure an adequate level of protection for the data disclosed.
IV. Data Storage and Confidentiality
The Controller stores all personal data for the period specified in the relevant legal regulations and treats it confidentially.
The Controller obliges all of its employees and all staff of its external service providers who process personal data to handle the data confidentially.
V. Rights of the Data Subject
At the request of data subjects, the Controller is obliged to provide information about their personal data and, upon request, to rectify, erase or restrict the use of the data.
The Controller acknowledges that the data subject has the right to lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH).
VI. Remedies
1. Court
- Székesfehérvár Regional Court – 8000 Székesfehérvár, Dózsa György út 1.
- birosag.hu
2. Data Protection Authority
- Name: National Authority for Data Protection and Freedom of Information (NAIH)
- Address: 1125 Budapest, Szilágyi Erzsébet fasor 22/C.
- Mailing address: 1530 Budapest, P.O. Box 5.
- Phone: +36 (1) 391-1400
- Email: ugyfelszolgalat@naih.hu
- Website: www.naih.hu
