Privacy policy

The portal www.nemzetbiztonsag.hu owned by the Special Service for National Security (head office: 1022 Budapest, Törökvész út 32-34.) (hereinafter referred to as the “website”) is edited by the State Secretariat for Civilian National Security Services of the Cabinet Office of the Prime Office (head office: 1014 Budapest, Színház utca 1.) (hereinafter referred to as “CNS State Secretariat”).  The website is operated by the company limited by shares NISZ Nemzeti Infokommunikációs Szolgáltató Zártkörűen Működő Részvénytársaság (head office: 1149 Budapest, Róna utca 52-80.) (hereinafter referred to as “NISZ”). The Cabinet Office of the Prime Minister is responsible for any content uploaded by it onto the website, and in that capacity also qualifies as controller under Section 3, point 9 of Act CXII of 2011 on the Right of Informational Self-Determination and on Freedom of Information (hereinafter referred to as the “Information Act”) and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the „GDPR”). In addition to operating the website, NISZ also performs processing responsibilities. 

By clicking onto the menu item ‘Contact us’ in the line of the website ‘Main menu’, completing the form accessible there, providing his or her personal data (full name and e-mail address) and submitting the form, the website user (hereinafter referred to as the “data subject”) may contact the CNS State Secretariat or – by selecting it from the scroll-down menu – directly one of the civilian national security services (Constitution Protection Office, Information Office, Special Service for National Security, National Information Centre).

Controller for the purposes of messaging and communication: recipient of the message, i.e. the Cabinet Office of the Prime Minister (head office: 1014 Budapest, Színház u. 1., mail address: 1357 Budapest, Pf. 1., data protection officer: Dr Ildikó Pékó, e-mail address: adatvedelem@mk.gov.hu) or the Constitution Protection Office (head office: 1117 Budapest, Fehérvári út 70., mail address: 1391 Budapest 62. Pf.: 217., data protection officer: Dr János Boczkó János, e-mail address: boczko.janos@ah.gov.hu) or the Information Office (head office: 1021 Budapest, Budakeszi út 85-87., mail address: 1539 Budapest, Pf. 600., e-mail address: info@ih.gov.hu) or the Special Service for National Security (head office: 1022 Budapest, Törökvész út 32-34., mail address: 1399 Budapest 62. Pf.: 710., data protection officer: Dr Barbara Bakos, e-mail address: adatvedelmitisztviselo@nbsz.gov.hu) or the National Information Centre (head office: 1117 Budapest, Fehérvári út 70., mail address: 1903 Budapest, Pf.: 314., data protection officer: Dr Edit Holpár, e-mail address: adatvedelem@nik.gov.hu).

Range of processed data: your full name and e-mail address.

Legal basis for and duration of processing: Clicking onto the button ‘I’m not a robot’, followed by the button ‘I accept the processing information and hereby consent to the processing of my personal data by the recipient of this message for the purposes of a reply’ and the button ‘Submit’ qualifies as voluntary consent under Article 6(1) point a) of the GDPR, authorising the controller to process such data until the withdrawal of your consent.

Processor: NISZ Nemzeti Infokommunikációs Szolgáltató Zártkörűen Működő Részvénytársaság (head office: 1149 Budapest, Róna utca 52-80.) In addition to the Controller, the personal data of the data subject will also be processed by the Processor.

Any data generated during the use of the website as well as any personal data recorded during the use of the website will be processed in compliance with the statutory regulations as in force, may not be disclosed to third parties, and can only be used to the extent necessary for the operation of the service.

Controller for the purposes of any data generated during the use of the website as well as any personal data recorded during the use of the website: Cabinet Office of the Prime Minister (head office: 1014 Budapest, Színház u. 1., mail address: 1357 Budapest, Pf. 1., data protection officer: Dr Ildikó Pékó; e-mail address: adatvedelem@mk.gov.hu)

Range of processed data: during a visit to the website, the start and end times of the data subject’s visit, the data of the browser and the operating system, and the data subject’s internet protocol (IT) address will only be recorded after third-party cookies have been accepted. The website sends co-called cookies (hereinafter referred to as “cookies”) to the electronic device used by the data subject. Statistical data are automatically generated from the data generated through the viewing of the website.

Legal basis for and duration of processing: Based on the information displayed in the pop-up window, by clicking onto the button “Accept cookies” you may allow the Controller to use cookies on the website and to thereby process your personal data. Clicking onto the button “Accept cookies” qualifies as voluntary consent within the meaning of Article 6(1) point a) of the GDPR; in consequence of such consent, the Controller will process your above data until the withdrawal of your consent. Based on the information displayed in the pop-up window, by clicking onto the button “Reject cookies” you will not allow the Controller to use cookies on the website and to thereby process your personal data. If you do not allow the use of cookies, as per Article 6(1) point e) of the GDPR the website will be limited to the use of the cookies and technologies that are essential for its functioning; no personal data will be processed.

Processor: NISZ Nemzeti Infokommunikációs Szolgáltató Zártkörűen Működő Részvénytársaság (head office: 1149 Budapest, Róna utca 52-80.) In addition to the Controller, the data subject’s personal data will also be processed by the Processor.

In connection with the processing of his or her personal data, the data subject has the rights of access to and rectification or erasure of such data, the right to restriction of processing, the right to data portability and the right to object.

Based on the right of access, the data subject has the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, has the right to obtain information on the purpose of processing, the recipients or categories of recipient to whom the personal data have been or will be disclosed, the envisaged period for which the personal data will be stored and the method of the collection of personal data. As part of the right of access, the Controller will provide a copy of the personal data undergoing processing.

The data subject has the right to obtain from the Controller at any time, without undue delay, the rectification of inaccurate personal data concerning him or her.

The data subject has the right to obtain from the Controller the erasure of personal data concerning him or her without undue delay and the Controller has the obligation to erase personal data without undue delay if the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; if the data subject withdraws consent on which the processing is based, and where there is no other legal ground for the processing; if the data subject objects to the processing and there are no overriding legitimate grounds for the processing; if the personal data have been unlawfully processed; if the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the Controller is subject or the personal data have been collected in relation to the offer of information society services.

Based on the right to restriction of processing, the data subject has the right to obtain from the Controller restriction of processing. If the accuracy of the personal data is contested by the data subject, such restriction is for a period enabling the Controller to verify the accuracy of the personal data. If the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead; or if the Controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims; further if the data subject has objected to processing, such restriction will be for a period pending the verification whether the legitimate grounds of the Controller override those of the data subject.

In respect of any data processed on the basis of the data subject’s consent, the data subject has the right to data portability, including to receive the personal data concerning him or her which he or she has provided to the Controller, in a structured, commonly used and machine-readable format or to have the personal data transmitted to a third party, where technically feasible.

Based on the right to object, the data subject has the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on Article 6(1) point (e) of the GDPR. In this case, the Controller will no longer process the personal data unless the Controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.

Right to effective judicial remedy. If a personal data breach concerning the data subject’s personal data has occurred as well as in the interest of the enforcement of his or her rights, the data subject may contact the Controller.

In the event of processing related to messaging, recipient of message: Cabinet Office of the Prime Minister (head office: 1014 Budapest, Színház u. 1., 1357 Budapest, Pf. 1., data protection officer: Dr Ildikó Pékó; e-mail address: adatvedelem@mk.gov.hu) or the Constitution Protection Office (head office: 1117 Budapest, Fehérvári út 70., mail address: 1391 Budapest 62. Pf.: 217., data protection officer: Dr János Boczkó, e-mail address: boczko.janos@ah.gov.hu) or the Information Office (head office: 1021 Budapest, Budakeszi út 85-87., mail address: 1539 Budapest, Pf. 600., e-mail address: info@ih.gov.hu) or the Special Service for National Security (head office: 1022 Budapest, Törökvész út 32-34., mail address: 1399 Budapest 62. Pf.: 710., data protection officer: Dr Barbara Bakos, e-mail address: adatvedelmitisztviselo@nbsz.gov.hu) or the National Information Centre (head office: 1117 Budapest, Fehérvári út 70., mail address: 1903 Budapest, Pf.: 314., data protection officer: Dr Edit Holpár, e-mail address: adatvedelem@nik.gov.hu).

In relation to any data generated during the use of the website as well as any personal data recorded during the use of the website, you may contact the Cabinet Office of the Prime Minister (head office: 1014 Budapest, Színház u. 1., mail address: 1357 Budapest, Pf. 1., data protection officer: Dr Ildikó Pékó; e-mail address: adatvedelem@mk.gov.hu).

The data subject may lodge a complaint against the Controller or processing with the National Authority for Data Protection and Freedom of Information or may bring proceedings before a court of law. Contact details of the Authority: National Authority for Data Protection and Freedom of Information (head office: 1055 Budapest, Falk Miksa u. 9-11., mail address: 1363 Budapest, Pf.: 9). In the event of the enforcement of a claim before a court of law, the tribunal with jurisdiction according to the Controller’s head office will proceed in the lawsuit (Metropolitan Tribunal, 1363 Budapest, Pf. 16 - 1055 Budapest, Markó utca 27.).  Such legal proceedings may also be instituted, at the data subject’s discretion, before the tribunal with jurisdiction according to his or her place of residence (temporary residence).

The detailed statutory rules relating to the method of the enforcement of righs/claims and the Controller’s obligations are contained in the GDPR, the Information Act and Act V of 2013 on the Civil Code.

The purpose of the use of cookies is to improve and accelerate website browsing, to balance the load on servers, or to help and facilitate website browsing with automated mechanisms.  Cookies are files or pieces of information which are sent by the web server reached by the visitor to the web browser of the visitor’s computer. Attributes contained in a cookie file usually include domain name, the name of the website that has sent the cookie; the cookie value which is a randomly generated individual number; and the cookie expiration, meaning the time during which the cookie remains on the online communication device. Cookies are stored in a file in the background storage of the user’s device. The web server sending the cookie can at any time access the content of the file from the browser.

Legal basis for processing of technical cookies: Article 6(1) point e) of the GDPR and Section 9(1) point 2 of Government Decree No. 182/2022. (V.24.) on the responsibilities and powers of members of the government. Technical cookies help make the website usable by enabling basic functions such as navigation on the website and access to the safe areas of the website. The website is unable to properly function without these cookies. In connection with technical cookies, you as data subject have the right of access, the rights to rectification and erasure, the right to restriction of processing and the right to object.

Legal basis of processing of third-party cookies: Article 6(1) point e) of the GDPR and data subject’s consent. In connection with third-party cookies, you as data subject have the right of access, the rights to rectification and erasure, the right to restriction of processing, the right to data portability and the right to the withdrawal of your consent.