Privacy policy

This privacy policy has been prepared in accordance with Regulation (EU) 2016/679 (GDPR) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, and Act CXII of 2011 on the right to self-determination and freedom of information. The notice is available on the OFF Foundation’s (hereinafter: OFF Foundation) portal at https://hodworks.hu/, as well as on related subpages within the OFF Foundation’s sphere of interest, websites (hereinafter collectively referred to as: portals) and in the course of personal meetings, telephone or e-mail communication. The OFF Foundation is the data controller for all data processing carried out in connection with the personal data processing described above. The OFF Foundation is committed to the protection of personal data; in line with this, this information notice summarises the methods of data collection and processing, as well as information on the exercise of data subjects’ rights in relation to data processing. This notice is reviewed from time to time, and the OFF Foundation publishes any changes on the https://hodworks.hu/ portal, indicating the amended provisions.

DATA CONTROLLER

Name of data controller: OFF Foundation
Tax number: 18245842-2-43
Data controller registration number: 01-01-0008585
Data controller’s registered office and postal address: 1094 Budapest, Tűzoltó u. 3 . 3/2.
Person authorized to represent the data controller: Péter Petra Krisztina
Data controller’s email address: info@hodworks.hu

PRINCIPLES OF DATA PROCESSING

The OFF Foundation processes all data classified as personal data in accordance with the principles of lawfulness, fairness, transparency and data minimization. Data processing is purpose-bound, and the OFF Foundation will only process data if one of the legal grounds specified in this notice applies, and only for the duration of the legal ground’s validity. The OFF Foundation does not use the data for profiling, does not transfer it to third parties – either domestically or abroad, except in the case of an official or court request indicating the legal basis, or in the event of possible legal enforcement – and only uses the data processors specified in this notice for data processing. The OFF Foundation protects the data with appropriate, risk-proportionate technical and organizational measures, handles any data protection incidents in accordance with the provisions of the GDPR, and informs the data subjects about them in the manner and with the content prescribed by law.

SCOPE OF DATA PROCESSING, SCOPE OF DATA PROCESSED

Viewing the information shared on the portals does not require the provision of personal data; this is only necessary when contacting the OFF Foundation or using its services. However, when downloading and viewing the portals, we monitor the activities of visitors in accordance with this information notice, during which we also collect personal data. For services requiring registration or when initiating contact, the following data may be required or necessary, provided that you give your prior consent to data processing:

the first and last name of the data subject(s);
e-mail address;

The data subject is free to decide whether to provide the above data, but if consent to data processing is not given or at least some of the data is not provided, some of the services may not be available and registration or contact may fail. In addition to the above, OFF Foundation collects information about the IP addresses used to access the portals (an IP address is a unique network identifier that enables computers to communicate over the Internet), operating systems, browsers, and the time and duration of visits as part of its visitor monitoring activities. The information collected is considered personal data if it allows the direct or indirect identification of the natural person concerned. In order to improve the user experience, portals use cookies, which are information identifiers installed in the user’s browser and stored for a specified period of time. The use of cookies makes it possible to track users’ website usage habits, recognize returning users, and link browsing history to a given website. Cookies themselves are not suitable for identifying users; they only enable the recognition of the user’s browser. Cookies are used exclusively by portals and only when the user downloads and views the portals. The OFF Foundation does not use cookies to identify users who are merely visitors to the websites. Users can set the rules governing the use of cookies in their browser and can also disable the use of cookies (more information on cookie settings can be found in the user documentation of the browsers). The OFF Foundation does not process any special personal data.

LEGAL BASIS AND PURPOSE OF DATA PROCESSING

Data processing in connection with portals, meetings, and telephone or email communication is always based on the consent of the data subject or the legitimate interest of the OFF Foundation. The legal basis for data processing is thus

Article 6(1)(a) of the GDPR, the consent of the data subject;
Article 6(1)(b) of the GDPR, for the performance of a contract or in order to take steps at the request of the data subject prior to entering into a contract, and
Article 6(1)(f) of the GDPR, the legitimate interests of the OFF Foundation.

Purpose of data processing

Establishing and maintaining contact with potential partners and customers of the OFF Foundation, handling comments and inquiries;
fulfilling contracts or facilitating their conclusion
sharing information
ensuring the lawful and secure operation of portals and protecting their integrity
ensuring the enforcement of rights related to shared intellectual property and trademarks protected by copyright
enforcing legal claims.

DURATION OF DATA PROCESSING

The OFF Foundation processes the data

until the data subject withdraws their consent;
for the duration of the contract;
for the relevant purposes, until the legitimate interest related to them exists; or
until notification of a change in the data subject’s data, or in the case of a request for erasure, until its execution.

RIGHTS OF THE DATA SUBJECT

In accordance with Chapter III of the GDPR, the data subject has the right to

receive information about the circumstances and characteristics of data processing (the identity and contact details of the data controller; the legal basis and purpose of data processing; the duration of data processing; their rights, in particular the right to withdraw consent; the possibility of lodging a complaint);
request information from the data controller in connection with data processing;
request access to personal data concerning them;
exercise the possibility of data portability;
request the rectification, erasure (forgetting) or restriction of the processing of data concerning him or her; and
object to the processing of his or her personal data.

In the event of unjustified multiple or repeated exercise of the right of access and data portability, the data controller may charge an administrative fee. The exercise of the right of access and data portability may be subject to the provision by the data subject of a suitable data carrier with adequate security for the storage of the data. The data controller shall ensure access and data portability in the format and with the technological parameters used for data processing.

DATA SECURITY

The portals, the OFF Foundation, the IT systems serving them, and their network are protected against computer-assisted fraud, espionage, sabotage, vandalism, fire and flood, as well as computer viruses, computer intrusions, and attacks leading to denial of service. The OFF Foundation ensures security and the prevention of unauthorized access, alteration, transmission, disclosure, deletion or destruction of data, as well as accidental destruction and damage, through appropriate and risk-proportionate technical and organizational measures and server and application-level protection procedures. All employees and contractual partners of the OFF Foundation who have access to the data concerned have undertaken to protect the confidentiality, integrity and availability of personal data.

LEGAL REMEDIES

The Data Controller makes every effort to ensure that personal data is processed in accordance with the law. If you feel that we have not complied with this, please write to us at info@hodworks.hu or to the postal address of the OFF Foundation at 1094 Budapest, Tűzoltó u. 3 . 3/2. In the event of a violation of your rights in connection with data processing, you may contact the OFF Foundation’s registered office or the court with jurisdiction over your place of residence or stay. In order to verify and promote the enforcement of your rights, you may also contact the National Data Protection and Freedom of Information Authority (registered office: 1125 Budapest, Szilágyi Erzsébet Fasor 22/c.; telephone number: +36 (1) 391-1400; fax number: +36 (1) 391-1410; e-mail address: ugyfelszolgalat@naih.hu). You can find information about the steps to take to enforce your rights through the Authority on the www.naih.hu portal. You can exercise your rights as a data subject by contacting the data controller at the contact details provided in this notice.

DATA PROCESSORS

OFF Foundation uses the following data processors and services in connection with data processing related to the portals: OFF Foundation uses Google LLC. (1600 Amphitheatre Parkway Mountain View, CA 94043 USA; www.google.com/contact) to analyze the operation of the portals. Google Analytics is based on the use of cookies, and the information generated by the cookies about usage is transmitted to Google’s own servers, where it is stored and processed. The IP address anonymization service is active on the portals, so Google makes users’ IP addresses unidentifiable before transmission within the member states of the European Union or the contracting states of the European Economic Area. Users can prevent Google Analytics from collecting and processing data generated by cookies in connection with the use of the portals by downloading and installing the plug-in available at http://tools.google.com/dlpage/gaoptout. The OFF Foundation uses Google LLC. (1600 Amphitheatre Parkway Mountain View, CA 94043 USA; www.google.com/contact) Google AdWords service to support its advertising campaigns. Google AdWords enables Google to track advertising campaigns and measure their effectiveness. Google AdWords also uses cookies for its operation, and the general comments on the prohibition of cookies apply to their prohibition. The OFF Foundation uses the services of Attila Bacsó, a sole trader (1124 Budapest, Jagelló út 40/b.), for its data storage activities. The OFF Foundation does not use data processors in connection with data processing related to establishing contact; in the event of contract performance, the data processors are specified in the contract. The data processing policies of the data processors used are available at the contact details of the data processors indicated above. Effective: June 20, 2025.