Privacy Policy
The Democratic Youth Foundation (hereinafter: DIA) manages personal data in the course of performing its public interest objectives as specified in the Founding Document and its activities related to those goals, as well as when providing services through its websites at www.i-dia.org and its subpages, and other registered domains owned by it.
The DIA, or “Data Controller,” recognizes the content of this policy as binding upon itself, but reserves the right to modify the policy, provided that the affected individuals are notified in due time about any changes.
The Data Controller places a high value on respecting the informational self-determination rights of its followers, partners, and clients.
This Privacy Policy applies to the personal data you provide to us and all personal data we collect, store, and process in accordance with the law, whether through our websites, other online platforms, or during events where you provide consent.
Laws governing data processing: a) The Fundamental Law of Hungary, Article VI; b) The Civil Code of Hungary, Act V of 2013, Book Two, Part Three; c) Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) regarding the protection of individuals with regard to the processing of personal data and the free movement of such data, repealing Directive 95/46/EC; d) Act CXII of 2011 on the Right of Informational Self-Determination and Freedom of Information (Infotv.).
Principles of data processing
Personal data is processed by DIA based on the legal grounds listed in Article 6 of the GDPR.
Personal data may be transferred or connected with other data processing activities if the affected individual has consented or if the law allows, and if the conditions for processing are met for each personal data.
Personal data may only be processed for a specific purpose, for the exercise of a right or the fulfillment of an obligation, and only for as long as necessary.
Only personal data that is essential for the purpose of the data processing, is suitable for achieving the objective, and is limited to the necessary extent and duration for the realization of the purpose may be processed. Voluntary personal data may only be processed with explicit informed consent.
The affected individual must be informed about all facts concerning the processing of their data, especially regarding the purpose and legal basis of the processing, the identity of the data processor, the duration of the data processing, and who may have access to the data. The information should also include the affected individual’s rights and available remedies.
The use of a general, standardized personal identification number is prohibited.
Processed personal data should: a) Be recorded and processed fairly and lawfully; b) Be accurate, complete, and, where necessary, kept up-to-date; c) Be stored in a manner that allows the identification of the individual only as long as necessary for the purpose.
Data transfers within the EEA (European Economic Area) are treated as if they were transfers within Hungary. Personal data may only be transferred to third countries if the affected individual has explicitly consented, or the law permits it, and the transferred data will be processed with adequate protection of personal data in those third countries.
WHO ARE WE?
The DIA, as the Data Controller, processes the personal data of affected individuals.
The Data Controller is a public benefit foundation registered in Hungary:
Democratic Youth Foundation (DIA) (headquarters: 1068 Budapest Király utca 80. fsz/11, Hungary; registration number: 07-01-0000550).
The DIA organizes training courses, professional events, conferences, and events. The Foundation’s full activity and program/project portfolio, goals, and mission are available in detail on our website.
Contact Information
The Data Controller’s details are:
Name: Democratic Youth Foundation (DIA)
Headquarters: 1068 Budapest, Király utca 80. fsz./11.
Tax number: 18489554-1-42
Registration number: 07-01-0000550
Website: www.i-dia.org
Email: hellodia@i-dia.org
For questions related to data protection, to exercise your rights, or to file a complaint, as the DIA does not have a designated data protection officer, please contact us at the following address:
Democratic Youth Foundation, 1068 Budapest, Király utca 80. fsz/11.
By postal mail or email: hellodia@i-dia.org
YOUR PERSONAL DATA – WHAT DOES IT MEAN
Personal data refers to any information related to an identified or identifiable living person. This includes, particularly, your name, address, phone number, email address, bank account number, and any other personal data required for contract purposes.
HOW DO WE COLLECT YOUR PERSONAL DATA?
We collect your personal data via our website, at events, through paper forms, email, or registration/questionnaire forms, solely with your consent.
WHY DO WE COLLECT PERSONAL DATA? (PURPOSES OF DATA PROCESSING)
The Data Controller processes personal data only for specific purposes, the exercise of a right, and the fulfillment of obligations/activities. All data processing stages are aligned with the purpose of processing. The collection and processing of data are carried out fairly and in accordance with legal requirements. The DIA aims to process only the personal data necessary to achieve the processing objective. The personal data may only be processed to the extent and duration necessary to achieve the purpose.
The main purposes of data processing are:
- Registration for events, conferences, training, and meetings (name, place of birth, date, email address);
- Sending newsletters related to the DIA’s professional activities, events, services, and training (name, email address);
- Voluntary sign-ups for internships/volunteering (name, email, birth data, tax number, possibly phone number);
- If the data provider enters into an employment relationship, including volunteers and interns, to manage communication, contracts, and employment relationships (name, email, birth data, tax number, social security number, possibly phone number);
- Service provision/receipt (contracting, invoicing, payments, debt enforcement) (name, headquarters, tax number, registration number, payment and bank data, representative’s name, title, possibly email and phone number).
SPECIAL CATEGORIES OF PERSONAL DATA
In certain cases, we must process special categories of personal data, such as health-related data (e.g., when you require special assistance, such as oxygen provision at an airport or if you disclose information regarding your fitness to fly, like pregnancy or allergies).
We must obtain your explicit consent to process such sensitive data; otherwise, we may not be able to provide the requested services. In certain cases, special personal data may be processed for legal claims, or to comply with mandatory legal obligations. Some personal data may be transferred to third parties, including outside the European Economic Area, when required by law.
Other Data Processing Activities
For data processing activities not listed in this policy, we will inform you at the time of data collection.
LEGAL BASIS FOR DATA PROCESSING
As Data Controllers (DIA), we process only the personal data specified by law or provided by the affected individuals for the purposes outlined, in accordance with applicable laws:
The legal basis for the data processing activities described in this Privacy Policy is Section 5(1)(a) of Act CXII of 2011 on the Right of Informational Self-Determination and Freedom of Information (the “Information Freedom Act”), which is based on your consent.
HOW LONG DO WE KEEP YOUR PERSONAL DATA?
We will keep your personal data for the duration necessary for the purposes outlined in this Privacy Policy or for the retention period specified by applicable laws.
For example, accounting documents must be kept for eight years after the end of the financial year, according to the Accounting Act. If data processing is based on consent (including newsletter subscriptions), we will process your personal data until you withdraw your consent.
If we need to deviate from these periods (e.g., for domestic or international grants or retention requirements), we will notify you in advance.
In case of legal or disciplinary proceedings, personal data must be kept until the proceedings have concluded, including the duration of any appeals. Afterwards, the data will be deleted following the statutory limitation period for civil claims.
Data Storage and Security of Data Processing
DIA treats personal data confidentially and takes all necessary measures to ensure its security.
Personal data is stored on:
- Google Drive (Google LLC, Alphabet Inc., California, USA), a cloud-based private storage service to which DIA staff has access.
- Computers and other (paper-based) data storage locations in the DIA office (1063 Budapest, Bajnok utca 13.), which are accessible to DIA staff.
The DIA ensures the protection of data during processing through technical, organizational, and procedural measures aligned with identified risks.
Data Transfers
DIA may transfer personal data to third parties when required to fulfill legal obligations. We will inform affected individuals in advance about any data transfers and seek their consent.
Personal Data We Collect and Why We Collect It
Comments
When submitting a comment, in addition to the data provided in the comment form, the visitor’s IP address and browser user agent string are collected to help detect spam.
A hash (a de-personalized string derived from the email address) is sent to the Gravatar service if it is being used on the site. The Gravatar service’s privacy policy can be viewed here: https://automattic.com/privacy/. After the comment is approved, the comment content and profile picture will be publicly visible.
Media
If a registered user uploads an image to the website, they should avoid including any EXIF data that contains GPS location information. Visitors to the website can download and extract location data from images on the site.
Contact Forms
Cookies
When we write a comment on the website, the name, email, and website fields are stored in cookies. This is for convenience, so you don’t have to fill in these details again when you comment in the future. The cookies expire after one year.
If we visit the login page, temporary cookies are set to determine if the browser accepts cookies. These cookies do not contain personal information and are deleted when the browser is closed.
When logged in, additional cookies are created to save the login information and display options for the editor. The login cookies are valid for two days, and the cookie storing the display options of the editor is valid for one year. If the “Remember Me” option is selected, the login will persist for two weeks. Upon logging out, the login cookies are removed.
If we edit a post or page, a further cookie is stored in the browser. This cookie does not contain personal data but simply stores the ID of the post we edited. It expires after one day.
Embedded Content from Other Websites
Posts on this site may include embedded content (e.g., videos, images, articles, etc.) from external websites. Embedded content from other websites behaves exactly the same as if the visitor has visited that other website.
These websites may collect data about visitors, use cookies, or third-party tracking technologies to monitor user behavior with embedded content, especially if the visitor has an account and is logged in to that website.
Analytics
Who We Share Your Data With
How Long We Retain Your Data
If you leave a comment, the comment and its metadata are retained indefinitely. This is so that any follow-up comments from the user are recognized and approved, meaning they do not go into the moderation queue.
For registered users (if any), personal data is stored in their user profile. Each user can view, edit, or delete their personal data at any time (except for changing their username). The website administrators can also view and edit this information.
What Rights You Have Over Your Data
If you have a registered account or have written a comment, you can request that your personal data be exported in a file containing all the data you’ve provided. You can also request that any personal data we hold about you be deleted. This does not include data we are obliged to keep for administrative, legal, or security reasons.
Where We Send Your Data
Visitor comments may be checked through an automated spam detection service.