Data Protection

The library pays special attention to ensuring the protection of personal data in the course of data processing in accordance with the relevant legal regulations.

Our documents regarding privacy can be downloaded from the sidebar.


Cookie Policy


On data processing related to the use of „cookies” on the websites of the University of Pécs

LIB.PTE.HU and Sub pages

The University of Pécs (hereinafter: University) is committed to the fair and lawful processing of personal data in order to ensure that its data processing activities are in compliance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as: GDPR), with Act CXII of 2011 on Informational Self Determination and the Freedom of Information (hereinafter: Privacy Act), to Act CVIII of 2001 on certain issues of electronic commerce activities and information society services, and other legislation, and to the good practices developed by the Hungarian National Authority for Data Protection and Freedom of Information (hereinafter referred to as: NAIH). Precise details are set out below.

Please note that the website of the University uses cookies to facilitate the operation and use of the website, to track activity on the website, and to display relevant offers.

A "cookie" is a small text file that is stored by the visited website on the computer or other device used to browse the internet, which, among other things, collects information, remembers the visitor's preferences, and generally makes it easier for users to use the website. Cookies alone do not collect any data stored on the computer; their role is to make browsing more convenient for users.

1. The data controller

Name: University of Pécs

Registered office and contact address: 4 Vasvári Pál St. Pécs 7622

Represented by: Dr. Attila Miseta Rector and István Decsi Chancellor

Name of the Unit that manages the data: University of Pécs Library and Knowledge Centre

Representing the Unit: Gábor Szeberényi Director General

Contact information: Dr. Barnabás Füzes Deputy Director-General for Strategy and Innovation

Phone Number: +36 (30) 922 9436

Email address: adatvedelem@lib.pte.hu

Name of data protection officer: Dr. Gergely László Szőke, PhD head of the Department of Technology- and Energy Law

Contact information: adatvedelem@pte.hu; +36 (30) 179 5672

2. The scope of the processed data and the purpose and legal ground of the data processing

The University uses "cookies" that are strictly necessary for the proper functioning of the website and for the performance of its task carried out in the public interest (Article 6(1)(e) of the GDPR), as well as other "cookies" with the explicit and voluntary consent of the data subject (Article 6(1)(a) of the GDPR) to facilitate the use of the website. A list of the "cookies" used, their purpose, and the duration of their processing is summarised in the table in section 3.

The website uses session cookies which are strictly necessary and indispensable for the use of the website, to enable visitors to browse the website and its sub-sites and use its functions and services fully and smoothly. These cookies are stored until the end of the session (browsing), or for the time specified in the table and are automatically deleted from the computer or other device used to browse the site when the browser is closed. For all data subjects who visit the website and its sub-sites, the web server logs the hostname (IP address) and referring IP address of the device used to improve and make the website more user-friendly and to find and correct errors occurring during the use of the pages more quickly.

3. Cookies used

„Cookies” that are essential for the functioning of the website

Name of „Cookie”

Purpose

Duration of data processing

Managed website

PHPSESSID

User session identification

session

lib.pte.hu, digitalia.lib.pte.hu,

smp.lib.pte.hu

JSESSIONID

User session identification

session

pea.lib.pte.hu

OJSSID

User session identification

session

journals.lib.pte.hu

filterBar

Store filter band settings

session

digitalia.lib.pte.hu,

smp.lib.pte.hu

sideBar

Store sidebar settings

session

digitalia.lib.pte.hu,

smp.lib.pte.hu

gridList

Store view settings

1 year

lib.pte.hu, digitalia.lib.pte.hu,

smp.lib.pte.hu

Functionality „Cookies”

Name of „Cookie”

Purpose

Duration of data processing

Managed website

EEMDSXSP

Stores the state of the EBSCO search service

session

lib.pte.hu

lhc_per

Stores the status of the live helper chat service

6 months and 6 days

lib.pte.hu

_ga_*

To preserve session state. (Google Analytics)

1 year and 1 month

digitalia.lib.pte.hu, my.lib.pte.hu, tgyoblog.lib.pte.hu, kalauz.lib.pte.hu, journals.lib.pte.hu, pea.lib.pte.hu

_ga

Used to distinguish unique users. (Google Analytics)

1 year and 1 month

digitalia.lib.pte.hu, my.lib.pte.hu, tgyoblog.lib.pte.hu, kalauz.lib.pte.hu, journals.lib.pte.hu, pea.lib.pte.hu

_ gid

Used to count and track page views. (Google Analytics)

1 day

digitalia.lib.pte.hu, journals.lib.pte.hu, pea.lib.pte.hu

_gat

To regulate data collection. (Google Analytics)

1 minute

journals.lib.pte.hu, pea.lib.pte.hu

pll_language

Stores the language setting

1 day

my.lib.pte.hu

Marketing „Cookies”

Name of „Cookie”

Purpose

Duration of data processing

Managed website

YSC

Youtube tracking

session

lib.pte.hu, digitalia.lib.pte.hu

VISITOR_INFO1_LIVE

Youtube tracking

6 months

lib.pte.hu, digitalia.lib.pte.hu

_gat_gtag_UA_156443364_1

Used to limit requests (control the speed of requests) (Google Analytics.

1 minute

digitalia.lib.pte.hu


4. The scope of personnel who can access the personal data, data processing, data transfer

The data can only be accessed by the employees of the organizational unit of the University which organizational unit needs the data to perform its tasks. Employees are bound by the obligation of confidentiality regarding the personal data they learn.

Cookies from an external Partner are recognised by the relevant service provider, whose information is available at:

-Youtube

Name: Youtube LLC

Headquarters: 901 Cherry Ave., San Bruno, CA 94066, USA;

Data management information:

https://www.youtube.com/intl/ALL_hu/howyoutubeworks/our-commitments/protecting-user-data/

-Google Analytics

Name: Google LLC

Headquarters: 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

Data management information:

https://support.google.com/analytics/answer/6004245?hl=hu#zippy=%2Cadatv%C3%A9delem-%C3%A9s-biztons%C3%A1g

-Ebsco

Name: Ebsco Industries Inc.

Headquarters: 5724 Highway 280 East, Birmingham, AL 35242, USA

Data management information:

https://more.ebsco.com/privacy-policy

The University does not use additional data processors for data management.

5. Data Security

The University shall process the personal data in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction, or damage, using appropriate technical or organisational measures. More information can be found in Articles 20-22. of the University’s Data Protection Regulation and in the University’s IT Policy.

6. Rights of data subjects and how to exercise them

6.1 The Participant has the right to access the information in relation with the data processing related to him/her defined in Article 15 of the GDPR (right of access), including in particular, information by the University about

  • the types of personal data,
  • the purpose and legal ground,
  • the source,
  • the duration of the processing or the criteria for determining the duration,
  • who, when, on what legal basis, to which personal data was granted access to by the University or to whom did it transfer the data,
  • the rights and possible legal remedies of the data subject during the data processing.

6.2 The Participant shall have the right to rectification of inaccurate (false or incomplete) personal data concerning him or her pursuant to Article 16 of the GDPR. (right to rectification)

6.3 According to Article 17 of the GDPR, the data subject have the right to erasure (’right to be forgotten’), if

  • the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
  • the data subject withdraws consent on which the data processing is based and there is no other legal ground for the data processing;
  • the data subject successfully objected against the processing of the data pursuant to point 6.7;
  • the personal data have been unlawfully processed;
  • the personal data have to be erased for compliance with a legal obligation;

The data will not be erased if the data processing is necessary:

  • for compliance with a legal obligation which requires the data processing or to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
  • for the establishment, exercise or defence of legal claims;
  • for exercising the right of freedom of expression and information
  • for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in so far as practicing the right to erasure is likely to render impossible or seriously impair the achievement of the objectives of that data processing

6.4 According to Article 18 of the GDPR, the data subject has the right to restriction of processing (right to restriction), if

  • the accuracy of the personal data is contested by the data subject, for a period enabling the University to verify the accuracy of the personal data;
  • the data subject has objected to the processing pursuant to point 6.7; in this case, the restriction shall apply for the period until it is established whether the University upholds the objection.
  • the processing is unlawful, and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
  • the University no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims;

Where processing has been restricted, such personal data shall, except for storage, only be processed with the data subject's consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

6.5 According to GDPR Article 7 (3), the data subject shall have the right to withdraw his or her consent at any time (right to withdraw the consent). The withdrawal must be made in writing or in the form in which the consent was given. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

6.6 In the case of automated (electronic) processing based on consent or for the performance of a contract, the data subject has the right to receive personal data relating to him or her, provided by him or her in a commonly used electronic format or to request the University to transfer the data to another controller, as provided for in Article 20 of the General Data Protection Regulation (right to data portability).

6.7 The data subject shall have the right to object (right to object), on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on balance of interest, or necessary for a task carried out in the public interest or in the exercise of official authority (the right to object). According to Article 21 of the GDPR, the University shall no longer process the personal data unless it demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.

6.8 The data subject can exercise his or her rights free of charge via the contact person or the data protection officer listed in point 1. The exercise of the data subject's rights may in most cases require the identification of the data subject, while in some cases (e.g. the exercise of the right to rectification) additional information may be required. The application for the exercise of the rights of the data subject shall be assessed by the University within one month at the latest. If necessary, considering the complexity of the application and the number of applications, this period may be extended by a further two months, the extension being notified to the person concerned within 1 month.

7. Deleting cookies and withdrawing consent

All browsers allow changing cookie settings; however, because cookies are intended to facilitate the usability and processes of our website, if cookies are prevented or deleted, users may not be able to use the full functionality of our website, or the website may not function as intended in their browser. The settings for cookies can be found in the "Settings" menu of browsers, and more information can be found about setting cookies in the "Help" menu of each browser, or they can be set individually in the cookie information window that pops up.

With consent, the browser will store cookies on the data subject's computer or other devices during use to recognise the data subject's preferences. If the data subject wishes to withdraw their consent, they can do so at any time in their browser's cookie settings, depending on the browser type.

8. Complaints and remedies

Any complaints related to data processing can be filed through the contact person specified in point 1, or the University's Data Protection Officer can also be contacted (adatvedelem@pte.hu). If the complaint is submitted by mail, please address it to 4 Vasvári Pál Street, 7622 Pécs, Hungary, and send it to the contact person mentioned in point 1 or the Data Protection Officer.

In the event that a violation of rights or a direct threat of such would arise in connection with the processing of personal data, the National Authority for Data Protection and Freedom of Information can be contacted (postal address: 1363 Budapest, P.O. box. 9, phone: +36 (1) 391 1400, email: ugyfelszolgalat@naih.hu, website: https://naih.hu).

In the case of violations of data protection rights, the case can be taken to court and the legal proceedings can also be initiated in the court that has jurisdiction based on the place of residence or habitual residence of the data subject.


For further documents, click
here

Trackback link: