This Privacy Policy describes the data management practices of Steel Global Kft. (hereinafter referred to as the “Data Controller”) on the steelglobal.eu website (hereinafter referred to as the “Website”), particularly regarding data collection, storage, and usage.
This Privacy Policy has been effective since August 30, 2026. The current version of the Privacy Policy is made available by the Data Controller on the Website and at its headquarters.
[email protected] or file a complaint with the National Authority for Data Protection and Freedom of Information (NAIH). You can also seek legal remedy in court, choosing either the court of your residence or temporary address.
Right to Rectification
As a data subject, you have the right to request that the Data Controller correct any inaccurate personal data concerning you without undue delay. Considering the purpose of data processing, you are also entitled to request the completion of incomplete personal data, including by providing a supplementary statement.
For the period during which the Data Controller verifies the accuracy of the personal data, the processing of the contested personal data may be restricted according to the provisions of this privacy notice.
Right to Object
As a data subject, you may object to the processing of your personal data by making a statement to the Data Controller if the legal basis for the data processing is:
- Public interest under GDPR Article 6(1)(e), or
- Legitimate interest under GDPR Article 6(1)(f).
If you exercise your right to object, the Data Controller may no longer process the personal data unless they can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing is related to the establishment, exercise, or defense of legal claims.
Determining whether compelling legitimate grounds exist for the data processing is the responsibility of the Data Controller’s leadership. They will inform you of their decision regarding this matter.
Right to Restriction of Processing
You may request the restriction of data processing in the following cases:
- If you, as the data subject, contest the accuracy of the data, the Data Controller will restrict the processing of the personal data for the time necessary to verify its accuracy.
- If the data processing is unlawful, but you, as the data subject, oppose the erasure of the data and request the restriction of its use instead.
- If the Data Controller no longer needs the data, but you, as the data subject, require it for the establishment, exercise, or defense of legal claims.
- If you, as the data subject, object to the processing of your personal data under GDPR Article 21, pending the verification of whether the legitimate grounds of the Data Controller override your objection.
During the period while your objection to the processing of your personal data is being evaluated, the Data Controller will suspend data processing, examine the validity of the objection, and make a decision, which they will communicate to you.
If the objection is valid, the Data Controller will restrict the data processing, meaning that data will only be stored and not otherwise processed until:
- The data subject consents to the processing;
- The processing is necessary for the establishment, exercise, or defense of legal claims;
- The processing is necessary to protect the rights of another natural or legal person; or
- The processing is required by law for reasons of public interest.
If the data subject requests the restriction of data processing, the Data Controller will inform the data subject in advance about lifting the restriction.
Right to Erasure (“Right to be Forgotten”)
As a data subject, you have the right to request the Data Controller to erase personal data concerning you without undue delay, and the Data Controller is obliged to erase personal data without undue delay if one of the following grounds applies:
- The personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
- You, as the data subject, withdraw the consent on which the processing is based, and there is no other legal basis for the processing;
- You, as the data subject, object to the processing under GDPR Article 21(1), and there are no overriding legitimate grounds for the processing, or you object to the processing under GDPR Article 21(2);
- The personal data has been unlawfully processed;
- The personal data must be erased to comply with a legal obligation under Union or Member State law to which the Data Controller is subject; or
- The personal data has been collected in relation to the offer of information society services referred to in GDPR Article 8(1).
The right to erasure does not apply where the processing is necessary for:
- Exercising the right of freedom of expression and information;
- Compliance with a legal obligation requiring processing by Union or Member State law to which the Data Controller is subject;
- The establishment, exercise, or defense of legal claims.
Right to Data Portability
As a data subject, you have the right to receive your personal data, which you have provided to the Data Controller, in a structured, commonly used, and machine-readable format (.XML, .CSV). You also have the right to transmit this data to another data controller without hindrance from the original controller, provided that:
- The data processing is based on your consent or a contract where you are a party, and
- The processing is carried out by automated means.
The Data Controller must inform any recipients of corrections, deletions, or restrictions unless this is impossible or requires disproportionate effort. Upon request, the Data Controller will inform you about these recipients.
Right to Withdraw Consent
If your personal data processing is based on your consent, you may withdraw your consent at any time. The Data Controller may continue to process your personal data if necessary to comply with legal obligations or to protect legitimate interests, provided these interests are balanced with your rights.
Legal Remedies
If you believe that the processing of your personal data violates GDPR or other relevant laws, you can file a complaint with the Data Controller at [email protected]. You also have the right to lodge a complaint directly with the National Authority for Data Protection and Freedom of Information (NAIH) or seek legal remedy in court. You may choose to bring your case to the court in your place of residence (permanent or temporary address).
For more details, visit the National Authority for Data Protection and Freedom of Information website: www.naih.hu or find your local court using the following link: https://birosag.hu/birosag-kereso.