Contact data
Privacy Policy
for persons and clients who are in contact with the MLSZ or other sports organizations or partners through the MLSZ or the contribution of the MLSZ
1.) Where can you find information on data processing?
MLSZ has prepared this policy in accordance with the provisions of the General Data Protection Regulation of the European Union 2016/679 (hereinafter: GDPR or Regulation) with the specific purpose of making the data processing operations transparent in an easily understandable way.
In addition to other existing material published on specific topics, the MLSZ issued this privacy policy with the sports organizations, their partners and own partners, as well as requests from the outsiders, for general information purposes and in order to illustrate the processing of the related data.
With respect to those data processing where the data processing for contact purposes are not included in a separate information the provisions of this document are valid.
This privacy policy contains the main information about the data processing (legal basis, purpose of the data processing, scope of processed data, duration and your rights) which supplemented by a document called General Information on Data Processing, which explains your rights, how you can exercise it, the data security responsibilities, and the rules for changing this information. The General Information on Data Processing is available here.
This privacy policy does not apply to the data processing required to the performance of the contract, or can be applied only as a general rule, when the contact takes place in a specific manner. These contact purpose data processing are basically contained in the privacy policy issued for the specific activity.
2.) Presentation of processing cases and the scope of processed data
2.1) The MLSZ maintain contact with sports organizations starting in their competition system (including management, administrators, security personnel, and marketing professionals involved in organizing, etc.), other partners and their associates (hereafter collectively referred to as ’the partners’) through the designated contact persons.
The scope of processed data in order to maintain contact:
- contact person name,
- occasionally his/her job title,
- in the case of a company, the name of the manager or its representative,
- e-mail address,
- phone,
- the name of the sports organization, if any,
- in the case of companies, the company data, or the data available from them.
2.2) This privacy policy also applies if a customer or person not referred to the above (hereinafter referred to as ’third party’) applies to the MLSZ at any contact of the MLSZ for a complaint, public interest announcement or other inquiry (hereinafter referred to as ’general purpose request’). In such a case, depending on the chosen contact form, the MLSZ processing the name of the person making the request, other identifiers provided, and the data contained in the request.
3.) Duration of data processing
3.1)The MLSZ processes contact person’s data until its contact status, or, in the absence thereof, until the preparation of the next season's (prepared for a specific area) address list, in order to achieve the purposes, set forth in section 4.
If the legal basis for the processing of contact data is the consent of the data subject, the data will be processed until such consent is withdrawn or our legitimate interest in maintaining the contact (e.g. handling a complaint) exists.
3.2) In the case of a general purpose request, if a response is required or otherwise justified, will be recorded in the central records management system of the MLSZ (or where available, in a dedicated system). The MLSZ deletes such materials containing third party data after 5 years from the end of the procedure.
4.) Purpose of data processing
4.1) The purpose of data processing is to maintain a good quality direct relationship with the sports organizations participating in their competition systems, their staff and contractual partners, and to help direct communication between sports organizations, sports organization’s contacts or sports organizations' contractual partners (e.g. security companies).
Another purpose is to be able to work through contacts with MLSZ contractual partners, or to provide address lists to sports organizations and other partners to easily determine if a particular request/letter has been received from a designated specialist contact, to find the designated contact or properly inform those concerned about the handling of their personal data.
4.2) In the case of a general-purpose request, the purpose of data processing is to handle the request by the MLSZ, where appropriate be able to answer, and to store the materials for a general civil statute of limitations (5 years).
5.) Recipients of data, categories of recipients
5.1) The MLSZ treats personal data confidentially, however, the names and contact details of the sports organizations and their contact partners will be shared between the sports organizations/partners (to the extent justified by the task being performed, only for a specific area), and the address lists will be made available to their staff.
The sports organization/contractual partner/organizing body etc. is responsible for providing contact information that may become known as described above.
5.2) The MLSZ shares the general-purpose requests with its data processors and its contributors to the extent necessary to respond to the request.
Otherwise, the personal information of the person making the contact will not be disclosed to any third party, unless otherwise provided by law, authority or the person making the request.
6.) Source of personal data
The data is provided by the sports organizations, their affiliated partners, or directly by the partners or contact persons, or by the persons themselves who make a request.
7.) Legal basis for data processing
The legal basis for the processing of data under Article 6 (1) (f) of the Regulation is the legitimate interest of the MLSZ to maintain a good quality relationship with sports organizations, their staff, security companies, contractual partners, and persons who make a general purpose request and to help the sports organizations with this.
The MLSZ, the sports organizations and our partners have a legitimate interest in the preparation and organization of events, the organization and preparation of training courses or any other matter and, where appropriate, each of the partners can easily contact with the MLSZ, other contacts, and be able to verify without further request and administration whether the request is coming from an authorized contact, or that our contractual partners or clients are informed about the processing of their personal data.
It is also in the MLSZ's legitimate interest to have the case file available for the necessary time in the event of any complaint or proceeding.
8.) Rights of the contact person and the person making the request
Under the Regulation, data subjects have several rights (e.g.: right to request information, right to access the personal data, right to erasure and to be forgotten, right to restriction, right to withdraw the consent, right to bring a case to the supervisory authority and court), however, what rights can be exercised and how and under which data processing legal basis is contained in the General Information on Data Processing.
You can access the forms needed to exercise your rights here.
This information is effective from March 27, 2020.
