1. Introduction

Using certain functions on our website under mirbycrane.com is not possible without processing your personal data.

Please read this privacy notice in order to understand all relevant facts and information relating to the processing of your personal data. Providing your personal data to us is generally voluntary, but in some cases we indicate that the provision of certain data is mandatory (‘*) in order to provide you with our services. If you decide not to provide us with your data, we may not be able to deliver certain features to you.

2. Who are we?

Crane Kft. (Cg. 01-09-862008, seat: 1138 Budapest, Révész utca 27-29. 2. em., tax No.: 13567257-2-41, registration authority: Fővárosi Törvényszék Cégbírósága; web: www.crane.hu; e-mail: info@crane.hu; hereinafter “Crane“) is a data driven marketing agency with Hungarian owners and management.

3. Relevant legal provisions

We process your data in line with European and Hungarian legal provisions, in particular the following:

• Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (general data protection regulation, hereinafter: “GDPR”)
• Hungarian Act 112 of 2011 on the Right to Informational Self-Determination and on Freedom of Information – to the extent as the GDPR allows its application.

4. For which purposes do we process your personal data?

4.1 Contacting Crane

Purpose of data processing: if you send us a message via our website mirbycrane.com/demo-eng then we will process your personal data in order to respond to your query. We also process your personal data for direct marketing, e.g. for sending newsletters or contacting you directly (see clause 4.4 below).
Legal basis of processing: your consent.
Categories of personal data: the data provided by you (name, e-mail, other personal data provided in the message).
Period of processing your personal data: we will store your personal data until you revoke your consent, or for five (5) years from responding to your query.

4.2 Access to content or services for which we require your personal data

Purpose of data processing: we might provide certain content or services in a way that we require you to provide your name and some additional personal data. Similar to other websites we do this with the purpose of being able to contact you later, e.g. by means of sending newsletters or contacting you directly (see clause 4.4 below).
Legal basis of processing: your consent.
Categories of personal data: the personal data provided by you (e.g. name, e-mail, post code, purpose of interest, company name or other contact particulars).
Period of processing your personal data: we process your personal data until you withdraw your consent (unsubscribe).

4.3 Registration to events

Purpose of data processing: when you submit your registration to one of our events, then we process your personal data for the purposes of recording the registration, delivering the event, requesting feedback and follow up. We also process your personal data for direct marketing, e.g. for sending newsletters or contacting you directly (see clause 4.4 below).
Legal basis of processing: your consent.
Categories of personal data: the personal data provided by you (e.g. name, email, telephone number, company name).
Period of processing your personal data: we process your personal data until you withdraw your consent.

4.4 Direct marketing (e.g. newsletters)

Purpose of data processing: when you provide your name and contact details, either during subscription for a newsletter or a similar marketing channel or for a purpose in relation to which we have indicated that we also process your personal data for latter purpose (e.g. clauses 4.1, 4.2 and 4.3 above), then we (also) process your personal data for the purpose of direct marketing. This means that we send you newsletters or similar messages, from which you can unsubscribe at any time.
Legal basis of processing: your consent.
Categories of personal data: the personal data provided by you (e.g. name, email, telephone number, company name).
Period of processing your personal data: we process your personal data until you withdraw your consent (unsubscribe).

5. What cookies do we use?

Our website uses cookies. Please read our Cookie policy in order to gain further information on the type of cookies, their functions, the purpose of data processing, the data collected and the lifetime of cookies.

6. What data processors do we use?

We process your personal data for the above purposes in our generally used systems and according to our generally used processes. We store your personal data in systems provided or supported by external service providers.  If you would like to receive detailed information on our external data processor partners, please contact us. As a main rule, your personal data will be stored within the European Economic Area (EU+ Iceland, Lichtenstein and Norway). If we forward your data outside of this area, we will provide adequate protection as required by Chapter V of the GDPR by using one of the measures listed therein.

7. What are your rights?

You have the right to be informed of the types of personal data that we store in relation to you. You also have the right to request access to your personal data (right to access). You have the right to rectify the incorrect data or erase it, or to request the restriction of data processing (right to rectification and erasure). If we process your data based on our legitimate interest, you can object to the data processing (right to object). You are also entitled to receive your personal data processed by us in a commonly used, machine-readable format and to forward it to another data processor, or you can ask us to forward it for you, if the legal perquisites are met (right to data portability). If we process your data based on your consent, you can withdraw your consent any time, but this will not affect the lawfulness of the previous data processing.

8. How can you exercise your rights?

You can send a request for exercising your above rights to any of the contacts indicated in clause 2 above. We will provide information on the actions taken based on your request without undue delay and in any event within one (1) month from the receipt of the request. If we do not take action based on your request, we shall inform you of the reasons for not taking action.

9. What remedies can you use?

If you do not agree with our action or response or believe that your rights have been breached you have the right to lodge a complaint with the Hungarian Data Protection Authority (in Hungarian: Nemzeti Adatvédelmi és Információszabadság Hatóságnál, NAIH). Address: 1125 Budapest, Szilágyi Erzsébet fasor 22/c; telephone: +36-1-391-1400; fax: +36 1 391 1410; e-mail: ugyfelszolgalat@naih.hu. You also have the right to have recourse to court. The tribunals (in Hungarian: törvényszékek) have jurisdiction to rule on these cases. You can commence legal proceedings, based on your choice, either at the Metropolitan Court (in Hungarian: Fővárosi Törvényszék) as the latter is competent based on the seat of Crane or at the tribunal that has jurisdiction at your place of residence. For a list of tribunals please click here).

10. Possible changes in this Privacy Notice

We reserve the right to amend this privacy notice at any time in order to comply with the future amendment of the data protection laws.