Veganport Trademark (European Certification Trademark)
Privacy Policy
Processing of Your Data and Your Rights
— In accordance with Articles 13, 14, and 21 of the European Union General Data Protection Regulation (GDPR) —
Dear Vegan Trademark (European Certification Trademark) Partners,
We would like to inform you below about the processing of your personal data and the rights and claims to which you are entitled under the data protection regulations.
The processing and use of your data largely depends on the services you request or utilize.
Who is responsible for data processing and whom can you contact?
Responsible organization:
Name: Öko-völgy Foundation
Address: 8699 Somogyvámos, Fő utca 38.
Phone: +36 30 965 8358
Email: [email protected]
Data Protection Officer contact:
Company: Öko-völgy Foundation
Postal Code, City: 8699 Somogyvámos
Street, Number: Fő utca 38.
Contact Person: Norbert de Jonge
Phone: +36 30 845 6634
Email: [email protected]
What data do we use and from what sources?
In the course of our business relationship, we process personal data provided by you. In addition, and only if required to provide our services, we also process personal data officially provided by other organizations (e.g., the National Company Register and Company Information System) based on contract execution or your consent.
We may also collect and process personal data from publicly available sources (e.g., commercial and association registers, media, press) that are legally accessible and usable by us.
Relevant personal data includes: name, address, and other contact details, place and date of birth, and nationality. It may also include order data, contract fulfillment data (e.g., performance of certification agreements), advertising and sales data (including advertising IDs), documentation data (e.g., meeting minutes), data on the use of our mass communication services (e.g., visits to our websites, apps, or newsletters), survey data, and other data equivalent to the categories listed.
What is the purpose of processing your data?
To fulfill contractual obligations (GDPR Article 6 (1)(b)):
We process personal data (as defined in GDPR Article 4(2)) to provide and mediate services, particularly for activities necessary for concluding and fulfilling contracts with you, executing orders, operating the Vegan Trademark in Hungary, and facilitating international cooperation.
The purpose of data processing includes entering into and fulfilling the Vegan Trademark licensing agreement, including but not limited to monitoring and analyzing associated requirements, consultations, and transactions.
Additional processing details are found in the relevant contract terms.
For legitimate interests (GDPR Article 6 (1)(f)):
When necessary, we process your data beyond the actual fulfillment of the contract to protect the legitimate interests of the Vegan Trademark or third parties. For example:
- Ensuring IT security and operations;
- Analyzing and optimizing business processes, including direct partner inquiries;
- Advertising, market, and public opinion research (without using personal data in our current practices);
- Enforcing legal claims and defending in legal disputes;
- Business performance measurement and service development;
- Consulting and data exchange with financial institutions to assess credit and default risks.
Based on your consent (GDPR Article 6 (1)(a)):
If you have granted us consent to process personal data for specific purposes (e.g., data transfer, evaluating usage data for marketing), that consent constitutes the legal basis for processing. Consent can be withdrawn at any time, including consents granted before GDPR’s effective date of May 25, 2018. Please note that withdrawal only applies to future processing; it does not affect processing carried out before the withdrawal.
Who has access to your data?
Within our organization, access is granted only to those who need the data to fulfill contractual or legal obligations. Our contracted data processors (as per GDPR Article 28) may also receive data. These may include IT or printing services, telecommunications, debt collection, consulting, sales, marketing, and licensing agreement support, including appointed auditors.
With regard to external data recipients, we only share information when legally permitted, based on your consent, or when authorized.
Such recipients may include:
- Public authorities or institutions (e.g., regulatory bodies) in cases of legal or official obligations.
- Other institutions that are entitled to license contracts or have a business relationship with you and require access to such data.
- Other recipients for whom we have received your consent for data transfer.
How long do we store your data?
We process and store your personal data only as long as necessary, for the duration of our business relationship, including contract preparation and execution.
Additionally, we are subject to statutory retention and documentation obligations (e.g., under Hungary’s Tax Procedure Act – Act CL of 2017, also known as the new “Art”), which specify retention periods ranging from two to ten years.
Finally, retention may be determined by statutory limitation periods, generally three years, but up to thirty years in certain cases.
Will data be transferred to third countries or international organizations?
Data transfer to a third country (outside the European Economic Area) is only allowed if necessary for contract execution, legally required, or based on your consent.
What are your data protection rights?
You have the right:
- to access (GDPR Article 15),
- to rectify (GDPR Article 16),
- to delete (“be forgotten,” GDPR Article 17),
- to restrict processing (GDPR Article 18),
- to data portability (GDPR Article 20),
- and to file complaints with a supervisory authority (GDPR Article 77).
Is providing data mandatory?
Within our business relationship, you are only required to provide the personal data necessary to initiate, maintain, or terminate the relationship or which we are legally required to collect. Without this data, we generally cannot conclude a contract, process orders, or fulfill existing agreements. Refusal to provide data may result in the termination of the business relationship.
Is automated decision-making used?
We do not use fully automated decision-making under GDPR Article 22 during our business relationship. Should this change, and if legally required, we will notify you separately.
Is profiling used?
In principle, we do not use profiling as defined by GDPR Article 22. If applied in specific cases, we will inform you separately if required by law.
Information about your right to object (GDPR Article 21)
You have the right to object at any time to the processing of your personal data based on GDPR Article 6(1)(e) (public interest) or 6(1)(f) (legitimate interests), including profiling based on these provisions, such as credit scoring or advertising. If you object, we will stop processing your data unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms or are necessary for legal claims.
If your data is processed for direct marketing purposes, you may object at any time, including any related profiling. If you object to such use, we will no longer process your data for these purposes.
You may submit objections without filling out a form to:
Organization name: Öko-völgy Foundation for Applied Sustainability
Address: 8699 Somogyvámos, Fő utca 38.
Email: [email protected]
International email: [email protected]