Cookie policy

General information

The following policy applies to data processing in connection with the cookies used on the website https://www.pwc.com/hu, operated by PricewaterhouseCoopers Könyvvizsgáló Kft. (“Controller”), and is intended to inform data subjects (e.g. you as an individual visiting our website). The policy also covers IP addresses collected when visiting the website. 

Information regarding the controller:

Controller’s name: PricewaterhouseCoopers Könyvvizsgáló Kft.

Contact person appointed by the Controller in matters concerning processing:

Name: Dr. Orsolya Hosszú, attorney-at-law, data protection officer

E-mail: hu_dataprotection@pwc.com

Our goal is to provide accurate information, in full compliance with applicable laws, on why and how we process the personal data of individuals who come into contact with the Controller through our website.

This policy was prepared in accordance with the following legal regulations:

• Regulation (EU) 2016/679 of the European Parliament and of the Council (“GDPR”);
• Act CXII of 2011 on the Right of Informational Self-Determination and the Freedom of Information (“Information Act”);
• Act C of 2003 on Electronic Communications.

Collection of IP addresses

The IP (‘Internet Protocol’) address is a unique set of numbers associated with each device connected to the Internet. The IP address identifies the device you use to browse the internet and allows it to communicate with other devices. If the user (i.e. you) becomes identifiable through the IP address (either solely on the basis of the IP address or in combination with other information), the IP address may be considered as personal data.

Some cookies used on the Controller’s website – if you have enabled them in the cookie settings – collect the IP address of the device from which you visited the website, as this is necessary for their functioning. IP addresses are collected on the website by cookies used by Facebook, Google and Adobe.

Nevertheless, the Controller is not able to identify you on the basis of IP addresses collected on the website, it does not have a registry of IP addresses and cannot search for specific IP addresses in a targeted manner. As a result, you are not identifiable by the Controller based on your IP address.

Data processing in connection with cookies

Cookies are small text files that are placed on your computer or other browsing device by the websites that you visit. Each cookie is stored on your device for a specific period of time, allowing the website you visit to "remember" certain data and settings (e.g. language preference, font size, and other display settings).

Types of cookie

The cookies used on this website are classified into the following categories:

• Strictly necessary cookies. These cookies are essential for the website to function (e.g. for displaying graphical content correctly), and therefore cannot be switched off. No information qualifying as personal data is collected through these cookies.
• Performance cookies. These cookies are used to measure traffic and users' activity on the website, allowing us to continuously improve its performance. These cookies can be switched off in cookie settings.
• Customisation cookies. These cookies help us understand how effective our marketing campaigns are, and enhance your website experience. These cookies can be switched off in cookie settings.
• Advertising cookies. These cookies are used to promote services, technical content, or events offered by PwC. These cookies can be switched off in cookie settings.

Legal grounds for our processing in connection with cookies

Except for the cookies that are strictly necessary for the website to function (which do not collect any information qualifying as personal data), the use of cookies is based on your explicit and fully informed consent, which comprises the legal grounds for the related processing. Cookies will only be used if you explicitly consent to their use on the appropriate interface. You may change cookie settings – and revoke your related consent – at any time.

Using your browser to control cookies

In addition to the website’s cookie settings, most browsers also allow you to view, manage, delete and block cookies for a particular website. Be aware that if you delete all cookies then any preferences you have set will be lost, including the ability to opt-out from cookies as this function itself requires placement of an opt out cookie on your device. Guidance on how to control cookies for common browsers is linked below.

Google Chrome

Mozilla Firefox

MacOS Safari

Microsoft Internet Explorer

For information on additional browsers and device types please see http://www.aboutcookies.org/ or http://www.cookiecentral.com/faq/.

Adobe: http://www.adobe.com/privacy/opt-out.html

Google Analytics: http://www.google.com/analytics/learn/privacy.html

A detailed list of cookies used

The table below provides detailed information on the types and features of the cookies we use.

Data subjects’ rights

Based on the applicable legal regulations currently in force, in view of the nature of and legal grounds for our processing in connection with cookies, you have the following rights in connection with our processing of your personal data. This section provides a general overview of your rights, while the sections further below describe the conditions for exercising each of these rights.

• You have the right to request from the Controller access to and rectification or erasure of your personal data, or restriction of their processing, or receiving them in a machine-readable format, provided that your request does not conflict with the statutory limitations on the exercise of such rights.
• You have the right to lodge a complaint with a supervisory authority, and the right to judicial remedy, at any time.

Please note that your ability to exercise the rights described here may be affected by the technical characteristics of the processing carried out in connection with cookies.

A)  Right of access

You have the right to obtain information at any time about whether the Controller processes personal data about you, the means and purposes for which the data are processed, the recipients to whom the personal data have been or are to be disclosed, the source from which the Controller has obtained the personal data, the period for which the personal data are retained, your rights in connection with such processing, and in the case of transfer of personal data to third countries or international organisations, information on the related safeguards.

When exercising your right of access, you also have the right to receive a copy of your personal data. In the case of a request filed electronically, unless otherwise noted, the Controller will provide the requested information electronically (by e-mail or in PDF format). If your right of access adversely affects the rights or freedoms of others, the Controller is entitled to refuse to act on your request to the extent that is necessary and proportionate. 

B)  Right to rectification

The Controller will amend or rectify your personal data on request (e.g. in the case of change in your data), provided that this is possible in view of the technical characteristics of the processing concerned. If there is any doubt regarding the data to be rectified, the Controller may request you to verify the data by any appropriate means (primarily by means of an official document). If the Controller has disclosed the personal data concerned to other persons, the Controller will communicate any rectification of personal data to each recipient to whom the data have been disclosed, unless this proves impossible or involves disproportionate effort.

On request, the Controller will inform you about those recipients.

C)  Right to erasure (‘right to be forgotten’)

If you request the Controller to erase any or all of your personal data, the Controller will erase the personal data concerned without undue delay if:

• the Controller no longer needs the personal data in relation to the purposes for which they were collected or otherwise processed;
• the processing was carried out on grounds of the legitimate interests of the Controller or a third party, but you have objected to the processing, and there are no overriding legitimate grounds for the processing;
• the Controller has unlawfully processed the personal data; or
• the personal data have to be erased for compliance with a legal obligation.

If the Controller has disclosed the personal data concerned to other persons, the Controller will notify each recipient to whom the data have been disclosed following erasure of such data, unless this proves impossible or involves disproportionate effort.

On request, the Controller will inform you about those recipients.

Please note that the Controller’s obligation to erase the personal data will not apply to the extent that processing is necessary for compliance with a legal obligation.

D)  Right to restriction of processing

You may request restriction of processing of your personal data if:

• you contest the accuracy of the personal data, for a period enabling the Controller to verify the accuracy of the personal data;
• the processing is unlawful but you oppose the erasure of the personal data and request the restriction of their use instead;
• the Controller no longer needs the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims; or
• you have objected to the processing, pending verification of whether the Controller’s legitimate grounds override yours.

Where processing has been restricted, the Controller will not, with the exception of storage, process such personal data. If the Controller has disclosed the personal data concerned to other persons, the Controller will communicate any restriction of processing to each recipient to whom the data have been disclosed, unless this proves impossible or involves disproportionate effort.

On request, the Controller will inform you about those recipients.

E)   Right to data portability

In respect of cookies that are processed based on your consent, you have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format.

F)   Right to lodge a complaint, and judicial remedy

You have the right to lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (“NAIH”) if you think that the Controller’s processing of your personal data infringes the provisions of applicable data protection laws, as in force from time to time, including in particular the GDPR and the Information Act.

You may contact NAIH at:

Webpage: http://naih.hu/

Address: 1055 Budapest, Falk Miksa utca 9-11.

Mailing address: 1363 Budapest Pf. 9.

Phone: +36-1-391-1400

Fax: +36-1-391-1410

E-mail: ugyfelszolgalat@naih.hu

You have the right to lodge a complaint with a data protection supervisory authority in the Member State of your habitual residence, place of work, or place of the alleged infringement as well.

Without prejudice to your right to lodge a complaint, you have the right to judicial remedy. In the case of the Controller, the competent court is the Budapest-Capital Regional Court, but you can also bring the case before the regional court with jurisdiction over your place of residence. For more information on how to contact regional courts, please visit the following link: http://birosag.hu/torvenyszekek. You may also initiate legal proceedings before a competent court in the Member State of your habitual residence if you are habitually resident in another Member State of the European Union.

You have the right to judicial remedy against a legally binding decision of NAIH concerning you. You also have the right to judicial remedy where NAIH does not handle your complaint or does not inform you within three months on the progress or outcome of the complaint you have lodged. You have the right to mandate a not-for-profit organisation or association that has been properly constituted in accordance with the law of a Member State and has statutory objectives that are in the public interest and concern the protection of data subjects' rights and freedoms with regard to the protection of their personal data, to lodge a complaint, seek a judicial review of NAIH’s decision, initiate legal action, and exercise the right to receive compensation on your behalf.