Privacy Policy
BEKO Engineering Ltd. (hereinafter referred to as "Data Controller" or "BEKO") is committed to fully respecting the data processing rights of visitors to its website (hereinafter referred to as "Data Subject"). Accordingly, we will process the personal data of Data Subjects in accordance with the provisions of the General Data Protection Regulation (EU) 2016/679 of the European Parliament and of the Council (hereinafter "GDPR").
Data controller details, contact details:
- Name of the Data Controller.
- Registered office.
- E-mail address: info@beko.hu
1. Management of cookies (cookies)
Cookies are short data files placed on the user's computer by the website visited. The purpose of the cookie is to make the given infocommunication, internet service easier and more convenient, when you visit the given website again, thanks to the cookie the website is able to recognize the visitor's browser. Cookies may also store user preferences (e.g. language chosen) and other information. Among other things, they may collect information about the visitor and his or her device, remember the visitor's individual preferences, or be used, for example, when using online shopping carts. In general, cookies facilitate the use of the website, help the website to provide users with a real web experience and an effective source of information, and enable the website operator to monitor the functioning of the site, prevent abuse and ensure the smooth and adequate provision of services on the website.
Our website collects and processes the following data about the visitor and the device used for browsing the website:
- the IP address used by the visitor,
- the type of browser,
- the operating system characteristics of the device used for browsing (language set),
- time of the visit
- the (sub)page, function or service visited.
Accepting or authorising the use of cookies is not mandatory. You can reset your browser settings to reject all cookies or to indicate when a cookie is being sent. While most browsers automatically accept cookies by default, these can usually be changed to prevent automatic acceptance and will offer you the choice each time.
To find out about the cookie settings of the most popular browsers, click on the links below
- Google Chrome
support.google.com/accounts/answer/61416?hl=en - Firefox
support.mozilla.org/en-US/kb/enhanced-tracking-protection-firefox-desktop - Microsoft Internet Explorer 11
support.microsoft.com/en-us/windows/manage-cookies-in-microsoft - Microsoft Internet Explorer 10
support.microsoft.com/en-us/windows/manage-cookies-in-microsoft - Microsoft Internet Explorer 9
support.microsoft.com/en-us/windows/manage-cookies-in-microsoft - Microsoft Internet Explorer 8
support.microsoft.com/en-us/windows/manage-cookies-in-microsoft - Microsoft Edge
support.microsoft.com/en-us/windows/manage-cookies-in-microsoft - Safari
support.apple.com/en-us/105082
That said, please note that some website features or services may not work properly without cookies.
2. Cookies used on the Data Controller's website
2.1. Technically necessary session cookies
These cookies are necessary to enable visitors to browse the website, to use its functions smoothly and fully, to use the services available through the website, including, but not limited to, in particular, to note the actions taken by the visitor on the pages during a visit. The duration of the processing of these cookies is limited to the current visit of the visitor, and this type of cookie is automatically deleted from his/her computer at the end of the session or when the browser is closed.
Legal basis for processing: the legitimate interest of the Service Provider in the proper functioning of the website.
Purpose of processing: to ensure the proper functioning of the website.
Session cookies used:
| Cookie file type | Device | Data collected |
| __utm.gif (pixel) | Google Analytics | details of the user's browser and computer |
| __utmb (http) | Google Analytics | records the time the page is loaded to accurately determine the time spent on the page |
| __utmc (http) | Google Analytics | records the time the page is left to determine the exact time spent on the page |
| __utmt (http) | Google Analytics | limits the speed of requests to the server |
| r/collect (pixel) | Google Analytics | sends data about the visitor's device and behaviour, tracks the visitor across devices and marketing channels |
Unsubscribe: tools.google.com/dlpage/gaoptout?hl=en
2.2. Cookies that require consent
These allow the Data Controller to remember the user's choices in relation to the website. The visitor can opt-out of this processing at any time before and during the use of the service. These data may not be linked to the user's identification data and may not be disclosed to third parties without the user's consent.
The purpose of the data collection is to provide analyses and statistics on how visitors use the website (e.g. from which source they came, which pages they visited, how long they spent on the site, which devices and browsers they used to visit the site, etc.) in order to understand the user's goals when visiting the website. Legal basis for processing: the data subject's voluntary consent.
Cookies used:
| Cookie file type | Device | Data collected | Expiry time |
| __utma (http) | Google Analytics | records the number of times the user has visited the site and the date of the first and last visit | 2 years |
| __utmz (http) | Google Analytics | collects data on the user's location, the search engine used, the links followed and the search terms entered | 6 months |
Unsubscribe: tools.google.com/dlpage/gaoptout?hl=en
3. Data Security
The Data Controller will take the necessary technical and organisational measures and establish appropriate rules of procedure to ensure the security of personal data throughout the entire processing process.
The Data Controller shall select and operate the IT tools used for the processing of personal data in such a way that the processed data:
- accessible to those authorised to access it (availability);
- its authenticity and authenticity are ensured (authenticity of processing);
- its integrity can be verified (data integrity);
- is protected against unauthorised access (data confidentiality).
The Data Controller shall
- shall take appropriate measures to protect the data against accidental or unlawful destruction, loss, alteration, damage, unauthorised disclosure or access,
- restrict access to personal data by setting levels of authorisation,
- protect information technology systems with firewalls and virus protection,
- ensure that, in the course of electronic data processing, access to data is restricted to those persons who need it for the performance of their tasks, for the purposes for which it is intended and under controlled conditions,
- ensure, by appropriate technical means, that the data stored cannot be directly linked and attributed to the data subject, except where permitted by law, in order to protect the data files managed electronically in its various registers
The Data Controller shall, taking into account the state of the art, ensure the security of data processing by technical, organisational and organisational measures that provide a level of protection appropriate to the risks associated with the processing.
The Data Controller shall keep records of any data protection incident, indicating the facts relating to the data protection incident, its effects and the measures taken to remedy it. The Data Controller shall notify a potential personal data breach to the National Authority for Data Protection and Freedom of Information (hereinafter referred to as "the Authority") without delay and, where possible, no later than 72 hours after the personal data breach has come to its attention, unless the personal data breach is unlikely to pose a risk to the rights and freedoms of natural persons.
4. The Data Subject's rights and the conditions for exercising them
The data subject may request information about the processing of his or her personal data and may request the rectification or, except for processing required by law, the erasure of his or her personal data by the means indicated at the time of collection or by contacting the Customer Service.
4.1. Right to information
At the request of the data subject, the controller shall provide information about the data of the data subject processed by the controller or by a processor to whom the controller has delegated the processing, the source of the data, the purposes, legal basis and duration of the processing, the name and address of the processor and the activities of the processor in relation to the processing, and, in the case of the transfer of the data subject's personal data, the legal basis and the recipient of the transfer. The controller shall provide the information in writing in an intelligible form within the shortest possible time from the date of the request, but not later than 25 days. The information shall be provided free of charge if the person requesting the information has not yet submitted a request for information to the controller in the current year for the same set of data. In other cases, a fee may be charged. The controller may refuse to provide information to the data subject only in cases provided for by law. In the event of refusal to provide information, the controller shall inform the data subject in writing of the provision of the Information Act on the basis of which the refusal was made. In the event of refusal to provide information, the controller shall inform the data subject of the possibility of judicial remedy and of recourse to the Authority.
4.2. Right of rectification
If the personal data is not accurate and the accurate personal data is available to the Data Controller, the Data Controller shall correct the personal data.
4.3 Right to erasure
Personal data shall be erased if its processing is unlawful; the Data Subject requests it (except for mandatory processing); it is incomplete or inaccurate - and this situation cannot be lawfully remedied - provided that erasure is not excluded by law; the purpose of the processing has ceased or the statutory time limit for storing the data has expired; or it has been ordered by a court or the Authority.
4.4 Right to restriction of processing
Instead of erasure, the controller shall block personal data if the data subject so requests or if, on the basis of the information available to him or her, it is likely that erasure would harm the data subject's legitimate interests. Personal data blocked in this way may be processed only for as long as the processing purpose which precluded the deletion of the personal data continues to exist. The controller shall mark the personal data which it processes where the data subject contests the accuracy or correctness of the personal data but the inaccuracy or incorrectness of the contested personal data cannot be clearly established.
4.5. Obligation to notify rectification or erasure of personal data or restriction of processing
The Controller shall notify the data subject of the rectification, restriction or erasure. The notification may be omitted if, having regard to the purposes of the processing, this does not harm the legitimate interests of the data subject. If the controller does not comply with the data subject's request for rectification, restriction or erasure, it shall, within 30 days of receipt of the request, communicate in writing the factual and legal grounds for refusing the request for rectification, restriction or erasure. In the event of refusal of a request for rectification, erasure or restriction, the controller shall inform the data subject of the possibility of judicial remedy and of recourse to the Authority.
4.6. Right to object
The data subject shall have the right to object at any time, on grounds relating to his or her particular situation, to processing of his or her personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller, or necessary for the purposes of the legitimate interests pursued by the controller or by a third party, including profiling based on those provisions.
In the event of an objection, the Controller shall no longer process the personal data, unless it is justified by compelling legitimate grounds which override the interests, rights and freedoms of the Data Subject or are related to the establishment, exercise or defence of legal claims. The controller shall examine the objection within the shortest possible time from the date of the request, but not later than 15 days, decide whether it is justified and inform the applicant in writing of its decision. If the controller establishes that the data subject's objection is justified, the controller shall terminate the processing, including further collection and further transmission, and block the data, and notify the objection and the action taken on the basis of the objection to all those to whom the personal data concerned by the objection have been previously disclosed and who are obliged to take measures to enforce the right to object. If the data subject disagrees with the decision taken by the controller or if the controller fails to comply with the statutory time limit, the data subject may, within 30 days of the notification of the decision or the last day of the time limit, have recourse to the courts. The controller may also bring legal proceedings against the data subject. The controller may not erase the data subject's data if the processing is required by law. However, the data may not be transferred to the data recipient if the controller has consented to the objection or if the court has ruled that the objection is justified.
4.7 Right to data portability
The data subject has the right to receive personal data relating to him or her which he or she has provided to the controller in a structured, commonly used, machine-readable format and to transmit such data to another controller.
4.8 Remedies
The data subject may take legal action against the controller in the event of a breach of his or her rights, and the data subject may also take legal action against the controller in the cases provided for by law. The court shall rule on the case out of turn.
If the data subject has suffered pecuniary or non-pecuniary damage as a result of a breach of the Data Protection Regulation, he or she shall be entitled to compensation from the controller or processor for the damage suffered. The controller or processor shall be exempted from liability if it proves that the damage was caused by an unforeseeable cause outside the scope of the processing. No compensation shall be due in so far as the damage resulted from the intentional or grossly negligent conduct of the data subject.
The lodging of a complaint or objection does not affect the other rights of the data subject under data protection law.
The Data Protection Officer (hereinafter referred to as "DPO") shall be involved in the handling of the complaint. The Data Subject may lodge a complaint:
- BEKO Engineering Ltd. to the AVK,
- the Authority (1024 Budapest, Szilágyi Erzsébet fasor 22/C), or
- to the court.
Contact details of the Data Protection Officer: