Privacy policy

1. PURPOSE OF THE NOTICE AND GENERAL INFORMATION ON DATA PROCESSING

1.1. The purpose of this notice (hereinafter: the "Privacy Policy") is to provide information on the data protection and data management principles applied by Duna Capital in relation to subscribing to newsletters, applying for job opportunities, and initiating contact by the website visitor.

1.2. Duna Capital Management Ltd. (hereinafter: the "Data Controller" or "Duna Capital") processes the personal data of visitors to the www.dunacapital.com website, as well as of individuals subscribing to the newsletter.

1.3. Use of the website does not require registration. If you use the website as a visitor, we process only limited personal information relating to you, and only in the manner described herein.

1.4. By subscribing to our newsletter or sending an e-mail containing your personal data (e.g. CV), you consent to the collection, processing, handling, and transfer of your personal data to the extent necessary for the purpose for which you provided the data (e.g. marketing purposes, notification of marketing events, etc.).

2. DATA CONTROLLER

2.1. If you have any questions regarding this Privacy Policy or the use of your personal data, or if you would like to see what personal data we hold about you, or believe that the data we hold about you needs to be corrected or supplemented, or if you would like to have all or part of it deleted, or if you have concerns about the lawfulness of data processing, please contact us using any of the following contact details:

Name: Duna Capital Management Ltd.
Registered office: 2016 Leányfalu, Vadrózsa Street 45.
Representative: Csaba Karaszi
Phone: +36 20 479 67 09
E-mail: info@dunacapital.com
Website: www.dunacapital.com

3. SCOPE OF PERSONAL DATA PROCESSED

3.1. In case you send your CV to the Data Controller or apply for job opportunities, the Data Controller may process the following personal data:

  • your first and last name,

  • e-mail address,

  • telephone number,

  • name of current and previous workplaces,

  • position held at the workplace,

  • year of obtaining (or expected year of obtaining) a law degree,

  • any other personal data and contact details provided in the CV.

3.2. In relation to newsletter subscriptions and sending messages via the online form, the Data Controller may process the following personal data:

  • subscriber's first and last name,

  • e-mail address.

3.3. In case of contact via WhatsApp, the Data Controller may process the following personal data:

  • first and last name,

  • phone number.

3.4. For the processing referred to in Section 4, the personal data listed in this section will be processed. If any modification or change occurs in your data during the data processing period, please report it immediately using one of the above contact details.

3.5. The scope of the above personal data may expand if you share more personal data with the Data Controller. In such cases, the Data Controller cannot exactly define the scope of the data provided; therefore, this notice describes the personal data typically involved. In such cases, the provisions of this Privacy Policy shall also apply to unlisted data.

3.6. The website uses small text files (cookies), through which technical information is recorded about visits to the website. Some of these cookies are necessary for the basic functioning of the site and the security of the IT system, while others serve functional or preference purposes. The information collected by cookies does not personally identify the visitor but makes their computer and internet connection recognizable upon the next visit or even when browsing other websites. If you do not wish to receive cookies from our website, you can set your browser to notify you each time a cookie is sent. You can then decide whether to accept or reject the cookie. Please note that disabling cookies may reduce user experience.

4. LEGAL BASIS, PURPOSE, AND METHOD OF DATA PROCESSING

4.1. Newsletter and sending messages via online form
The Data Controller sends newsletters to those who subscribe. Subscription requires providing your name and e-mail address, after which you will receive information by e-mail about updates on our website, blog posts, legislative changes affecting the Data Controller's activities, and legal news. Subscription is possible through the designated form on the website by providing your name and e-mail address and accepting this Privacy Policy. By subscribing, you consent to the processing of your personal data; the legal basis of the processing is the voluntary consent of the data subject pursuant to Article 6 (1) (a) of the GDPR.

4.2. Submitting applications for job opportunities
When applying for job opportunities, processing is based on the voluntary consent of the data subject. By sending your CV electronically or submitting it in person, you expressly consent to the registration and processing of your personal data by the Data Controller until the evaluation of the application. If your application is not successful or no vacancy exists, the Data Controller will retain your data for future recruitment purposes, and as evidence in possible official proceedings to demonstrate compliance with the principle of equal treatment.

4.3. Contact via WhatsApp
The purpose of processing data sent via WhatsApp is to enable the Data Controller to contact you in response to your written inquiry. By contacting us via WhatsApp, you expressly consent to the processing of your personal data; the legal basis of the processing is your voluntary consent pursuant to Article 6 (1) (a) of the GDPR.

4.4. The info@dunacapital.com e-mail account used for handling personal data and newsletter-related tasks is accessible only by the Data Controller and those employees whose job duties require access.

4.5. The Data Controller does not use the provided personal data for purposes other than those described herein. Processing is only carried out if you have consented to it, or if it is necessary for the performance of a contractual obligation, or for steps requested by you prior to entering into a contract, or for compliance with a legal obligation.

4.6. The Data Controller does not verify the accuracy of the provided data. Responsibility for the correctness of the provided data lies solely with the person providing it. By providing your e-mail address, you also assume responsibility for using that e-mail address exclusively for services.

5. USE OF GOOGLE ANALYTICS

This website uses Google Analytics, a web analysis service provided by Google Inc. ("Google"). Google Analytics uses "cookies," which are text files placed on your computer, to help analyze how users use the website. Information generated by cookies about your use of the website (including your IP address) is transmitted to and stored on Google's servers in the United States. Google uses this information to evaluate your use of the website, to compile reports on website activity for the website operators, and to provide other services related to website activity and internet usage. Google may transfer this information to third parties where required by law or where such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser. Please note, however, that in doing so you may not be able to use the full functionality of this website. By using this website, you consent to Google processing your data in the manner and for the purposes set out above.

Further information can be found at www.google.com/intl/en/analytics/privacyoverview.html. On this website, Google Analytics has been supplemented with the "gat._anonymizeIp();" code to ensure anonymized collection of IP addresses (IP masking). Instructions for disabling Google Analytics Services are available at https://tools.google.com/dlpage/gaoptout?hl=en-GB.

6. DURATION OF DATA PROCESSING

6.1. Personal data will be stored and processed until the withdrawal of your consent, but no later than as long as it is necessary and justified for the purpose of data processing, or as required by law.

7. DATA SUBJECT RIGHTS AND LEGAL REMEDIES

7.1. Right of access and information
You have the right to obtain confirmation from the Data Controller as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data and related information.

7.2. Right to rectification and erasure ("right to be forgotten")
You may request without undue delay the rectification of inaccurate personal data or completion of incomplete data. You may also request the deletion of your personal data. The Data Controller shall delete the relevant data without undue delay if one of the following applies: the data is no longer necessary for the purpose for which it was collected; you object to processing; the data was unlawfully processed; deletion is required to comply with a legal obligation.

7.3. Right to restriction of processing
You have the right to request restriction of processing where the conditions under Article 18 (1) GDPR apply.

7.4. Right to data portability
You have the right to receive the personal data concerning you in a structured, commonly used, and machine-readable format, and have the right to transmit that data to another controller.

7.5. Right to withdraw consent
Where processing is based on your consent, you have the right to withdraw it at any time. Withdrawal does not affect the lawfulness of processing before its withdrawal.

7.6. Right to lodge a complaint
You may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH) (address: 1055 Budapest, Falk Miksa Street 9-11.; postal address: 1363 Budapest, P.O. Box: 9.; website: www.naih.hu; phone: +36 (1) 391-1400; e-mail: ugyfelszolgalat@naih.hu).

7.7. If you have provided the data of a third party in connection with the use of the service, the Data Controller shall be entitled to claim compensation from you. The Data Controller will provide all possible assistance to the authorities in identifying the infringer.

7.8. You may exercise your rights at: info@dunacapital.com. You may also contact the Data Controller with any questions or comments regarding data processing.

8. OTHER PROVISIONS

8.1. Personal data are processed by the Data Controller's designated employees and contractual partners (e.g. interns). Personal data are not disclosed to third countries.

8.2. The Data Controller is committed to ensuring data security and takes all technical measures necessary to ensure that recorded, stored, and processed data are protected, and to prevent their destruction, unauthorized use, and alteration. The Data Controller also obliges all third parties to whom data may be transferred to comply with the same obligations.

8.3. The website may contain links to third-party websites. This Privacy Policy does not apply to those websites.

8.4. The Data Controller reserves the right to unilaterally modify the data processing rules and this Privacy Policy with prior notification on its website.