This coverage’s purpose is to show how I handle personal information on my family magazine’s website, the Mom With Five blog. My readers are mostly young parents and (youthful) grandparents, whose personal information I get to know in some instances throughout my activities.
I. The data manager
Name: Barbara Riederné Fonyó
Electronic contact: info@momwithfive.com
The data manager’s website address: http://momwithfive.com
II. Data protection officer’s contact
Mom With Five is a hobby blog site, on our site there are no activities conducted that would make the use of a data protection officer necessary.
III. The planned use of personal data, and the legal base for data handling
Since my blog is only intended for natural persons, it is not likely for me to handle a lot of personal data.
IV. How do I get personal information, what are these, how long do I handle them, what do you need to know about my data handling?
IV.1. Through our website, you can get in contact with me
To get in contact, and for you to message me directly, I need your name and your e-mail address, the legal base for handling this is your approval. Your message lands in my own mailbox. If there is no regular contact between us, I will delete your letter throughout our regular mailbox cleanings, that are done at least every six months.
The approval can be withdrawn any time, just as simply as is was given. Your approval can be withdrawn if you send a message to my e-mail at info@momwithfive.com. The data handling before your withdrawal is legal.
IV.2. I write my fresh news
I would like to inform you about my latest posts, news, so once in a while I send you newsletters. I will ask for the following data from you: you name and e-mail address will be needed for this, the legal base for handling this is your approval. The given personal data is used until you unsubscribe. The approval can be withdrawn any time, just as simply as it was given. Your approval can most easily be withdrawn by clicking the “unsubscribe” link at the bottom of the newsletter. The data handling before your withdrawal is legal.
IV.3. You can comment on the blog posts
You can share your opinion and thoughts under the blog posts, with the help of the form beneath them. The mentioned data – avatar, name (nickname), e-mail address, IP address – are used based on your approval and are asked for to filter out spam and comments made by robots, and we can also differentiate between the commenters this way.
The given personal data is handled until withdrawal. The approval can be withdrawn any time, just as simply as it was given. Your approval can be withdrawn if you send a message to my e-mail at info@momwithfive.com, and we will delete your comment, your name and e-mail address. The data handling before your withdrawal is legal.
IV.4. I am present on social media under the name Mom With Five
If it is easier for you to contact me on Facebook, Instagram, Twitter, Linkedin, Pinterest or Google+, you can send me messages on these sites. In these cases we get to know such personal data that is given on your public profile and what you voluntarily let us know.
If you like or follow any of my sites, I will see your name, public profile, public shares and comments based on your approval. On my social media I show my blog entries and you can share your opinion. I do not collect personal information from these sites. There is a surface where I am an administrator, but you decide on everything. As long as you do not withdraw the liking, following of the site, or as long as we don’t terminate the website, we can see your data.
If you would like to withdraw your approval, on Facebook, click on the „Unfollow” button! On the other social media sites you also have to option to stop following me. Your own comments and public shares can be deleted any time. The data handling before your withdrawal is legal.
IV.5. Blog posts that contain personal data
It occurs, that in my posts I talk about other bloggers, people and I mention their name, company or photos based on their approval. My aim with this is to prove my opinion and thus become more genuine or to promote their work.
These posts with unchanged content will stay on the site as long as the natural person mentioned in the post withdraws their approval. Your approval can be withdrawn if you send a message to my e-mail at info@momwithfive.com, and we will delete the post or modify it so the personal data won’t be in it anymore. The data handling before your withdrawal is legal.
IV.6. You can directly send messages to my public electronical mailing address
You can directly send messages to our public mailing address at info@momwithfive.com. In these messages, we get to know your name, e-mail address and any other personal information that you share with us in the e-mail (ex. your profession, phone number, photo at your signature). We handle this data based on your approval to start a conversation in writing or via phone as per your initiative.
Your approval can be withdrawn if you send a message to my e-mail at info@momwithfive.com, and we will delete the message within one business day and we will not be keeping a copy and your name will not be on any other list that contains the deleted messages. The data handling before your withdrawal is legal. If we do not communicate anymore, your letter will be deleted in one of our mailbox cleaning sessions that we do at least every six months.
IV.7. Media offer
My permanent reader group who come back regularly is continuously growing with new visitors, I am present on many social media surfaces. On my advertising surface I provide a personalized media offer to the ones who are interested. Mostly legal personnel and companies. It often occurs however, that I get to know the legal person’s representative’s name, identifier data and the personal data for keeping in touch such as a phone number and an e-mail address.
The personal data used for asking for and accepting the offer (name, phone number, e-mail address, workplace address, profession) is handled based on the contract legal base until the termination of the contract.
It is the premise of making the contract that you let me handle this personal data.
IV.8. Billing
Most of my bills are created electronically. For the billing, I will ask for the following data: billing name, billing address, e-mail address. In case your company does not accept electronic bills, I will send it to you in paper, and for that I will ask for your name (which is not necessarily the same as the billing name) and your mailing address. If you want to receive the the paper bill in e-mail too, as a scan, I will also ask for your e-mail address. If you balance the bills via bank transfer, the statement of account contains the name and the bank account number.
Billing is my legal obligation, this is why I will need your data. The duration of the storage is not my decision, it is law, that in the year of the billing, plus for eight more years I have to keep it. If you do not provide the data that I ask for, I will not be able to complete the billing obligation, so it will be impossible to provide the service that you asked for.
IV.9. Data handling of my professional partners
I regularly am in contact with experts, partners, hobby bloggers who work in similar areas, I pertinently contact them, or once we were in a contract.
My partners name, phone number, e-mail address is handled, maybe profession, based on legal interest. The aim of the data handling is to continuously keep in contact.
Until our long-term, but periodic professional contact is happening, I am keeping this data, or until objection, deleting request.
I made an interest measuring test, that showed that the data I receive and handle like this is not violating my partners private sphere. My partners, if requested, can see the interest measuring test and I also provide the right to objection for them.
IV.10. Cookie handling
A cookie is a small file that gets on the computer when you open a visit. Cookies have a number of different functions. Mostly, they collect information, they remember the visitor’s personal settings, and in general make the usage of the website easier for the visitor. Cookies can be deleted from your browser any time.
On our site, we use cookies that are necessary for the functioning of the blog: for example, the storage of language settings, cookies for performance measuring and analysis: with the help of these we get information on how much time you spend on certain websites;
functional cookies: for example, with the help of these we store the name you use at the comments. On the blog we use Google Analytics, Google Inc.’s web analysis service. With the plug-in on the following website you can stop Google from using the data of your blog visit: http://tools.google.com/dlpage/gaoptout.
For Facebook Inc.’s advertisement campaigns we use Facebook Pixel. Facebook’s cookie regulation: https://www.facebook.com/policies/cookies/.
If you want to turn down the online interest based advertisements on Facebook and other firms in the system, look up the website of the European Interactive Digital Advertising Alliance. The denial has to be done one by one in each browser used by you.
V. Who knows personal data? Recipients.
To handle some tasks of my blog, I use data handlers.
Hosting service provider
Company name: SiteGround Spain S.L.,
contact: Calle de Prim 19, 28004 Madrid, Spain
Data protection informant: https://www.siteground.com/terms.htm
(Access to the entire content of the website and the mailing system, the primary task is storage, other than this, it does not execute other tasks on personal data.)
Newsletter sending service (MailChimp)
Company name: The Rocket Science Group, LLC
contact: 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308
Data protection informant: https://mailchimp.com/legal/privacy/
(Access to the natural persons list that are subscribed to the newsletter, names, e-mail addresses, it provides the surface for the service, other than this, it does not execute other tasks on personal data.)
VI. Data forwarding to third countries or international organizations
Certain personal data is forwarded to a third country (USA). The according adequacy regulation can be reached on the following link:
VII. Throughout the entire duration of the data handling, you have the following rights
- Access to personal data
You have the right to ask for feedback on whether your personal data is being handled, and if yes, why, what data, who I am forwarding it to, how long I am storing it, what other rights you have, where you can make complaints etc.
- The right to correction
If I misspelled your name, email address or any other personal data, if you request me to do so, I will correct it or add to it. If I forwarded your personal data to anyone, I will notify them of the changes as well.
- The right to delete personal data (“forgetting”)
Without delay, I will delete all of your personal data if you have withdrawn your consent from the data handling based on your approval, or if I no longer need the data for the purpose that I originally asked them for.
If I handled the data without legal base, I will delete it. You can protest against the data handling with a legal base, your data will be deleted. Personal data is sometimes publicised according to the informant. If you later want to use the right to forgetting, I will do the necessary measures to provide this for you.
- The right to control personal data
If you think that I am not handling your personal data properly, you can ask for control, as long as the matter is not cleared up.
If I handle personal data on you without legal base, instead of deleting you can also ask for controlling.
It can occur that I want to delete data but you need it, because for ex. You need it to validate your rights. In this case, you can ask that instead of deleting I control it, so I hold on to it for a little longer.
In these cases I am only allowed to store the data.
- Protest against handling personal data
You can protest against handling your personal data, if the data handling is has legal base. This can only occur with the contact data of my professional partners, by other activities this is not the legal base for data handling.
- Data medium
You can ask for me to give you your data on a format that is widely available and can be read on computer, or be sent to another data handler. You can only ask for this, if the legal base for my data handling is consent or a contract. In this case I give the data to you or another handler.
- Automatic decision making
I do not do activities based on automatic decision making , so my readers and contract partners are not affected by this.
VIII. Filing a complaint
If you feel like you data is handled incorrectly, I am happy to help and correct the mistake immediately. You can send your message here: info@momwithfive.com. If you do not want to discuss the problem with me, you can validate your rights at court as well. This can be done as a civil suit. The suit’s consideration is the job of the court. You have to file the case at the court of your address (the court’s list and contact can be found on this link: http://birosag.hu/torvenyszekek. With any complaints regarding personal data, you can go to the National Data Protection and Information Freedom Authority, you can reach them at the following address: 1125 Budapest, Szilágyi Erzsébet fasor 22/C; post address: 1530 Budapest, Pf. 5.
IX. Automatic decision making
I do not condone activities that involve automatic decision making.
X. Proper safety
When configuring proper safety measures, I took into consideration the current stage of science and technology, the nature, reach, circumstances, aim of the data handling and the changing chances of the risk that could affect natural persons and their freedom.
XI. Other regulations
This data protection informant is operative from 2018. May 25.
This informant does not repeat the according laws that are compulsory for everyone. When making the informant, I took into consideration and use as example in the not detailed questions the following sources:
The European Parliament and Council (EU) 2016/679 regulation on the protection and freedom of the data of natural persons and the 95/46/EK regulation being put outof order (39); (42); (50); (55); (60)-(63); (66); (71) preambulum paragraphs and articles 12-22. And http://naih.hu/files/CELEX_32016R0679_HU_TXT.pdf .
- The 2011. year CXII. law on information autonomy right and information freedom
https://net.jogtar.hu/getpdf?docid=a1100112.tv&targetdate=20180101&printTitle=2011.+%C3%A9vi+CXII.+t%C3%B6rv%C3%A9ny (the right bay version can not be linked here)
- NAIH recommendations on advance information on data protection requirements (2015.10.09.) https://naih.hu/files/tajekoztato-ajanlas-v-2015-10-09.pdf
- 29 Data Protection Work Group recommendations on advance information(17/EN WP259 rev.01 – last modification: 2018.04.10.);
http://naih.hu/files/wp259rev.01_EN_Guidelines_on_Consent.pdf
- 29 Data Protection Work Group recommendations on clarity (17/EN WP260 rev.01 – last modification: 2018.04.11.)
http://naih.hu/files/wp260rev.01_EN_Guidelines_on_Transparency.pdf
In the data protection informant 3. Point legal bases definition I took into consideration the following laws:
- Through our website, you can get in contact with me
According to the European Parliament and Council (EU) 2016/679. order 6. item (1) paragraph a) point the legal base for my data handling is approval.
- I write my fresh news
Az Európai Parlament és Tanács (EU) 2016/679. rendelete 6. cikk (1) bek. a) point, and economic advertisement basic requirements and certain restrictions 2008.XLVIII. tv. 6. § (1) – (3) paragraph the legal base for my data handling is approval, the data that can be asked for: name and e-mail address.
- You can comment on blog posts
According to the European Parliament and Council (EU) 2016/679. order 6. item (1) paragraph a) point the legal base for my data handling is approval.
- I am present on social media under the name Mom With Five
According to the European Parliament and Council (EU) 2016/679. order 6. item (1) paragraph a) point the legal base for my data handling is approval.
- Blog posts that contain personal data
According to the European Parliament and Council (EU) 2016/679. order 6. item (1) paragraph a) and the Civil Code 2013. V. tv. 2:48. § (approval for publication).
- You can directly send messages to my public electronical mailing address
According to the European Parliament and Council (EU) 2016/679. order 6. item (1) paragraph a) point the legal base for my data handling is approval.
- Media offer
According to the European Parliament and Council (EU) 2016/679. order 6. item (1) paragraph b) point the legal base for data handling is the contract.
- Billing
According to the European Parliament and Council (EU) 2016/679. order 6. item (1) paragraph c) point the legal base for my data handling is legal obligation. The 2000. year C. tv. 169. § (2) paragraph on accountancy details the deadline of keeping warranties, 2007. Year CXXVII. tv. 169. § e) point on value added tax details the bills compulsory elements, moreover the 175. § (2) paragraph a) point details the e-bill’s authorization.
- Handling the data of my professional partners
According to the European Parliament and Council (EU) 2016/679. order 6. item (1) paragraph f) point my legal base for data handling is legal interest.
- Cookie handling
According to the European Parliament and Council (EU) 2016/679. order 6. item (1) paragraph a) point my legal base for data handling is approval.