Data processing information
The Data Protection Notice includes János Kerényi EV. (Registered office: 1188 Budapest, Lajos utca 47/b., registration number: 57528162, tax number: 59485234-1-43; e-mail: info@bevizsgalas.hu; hereinafter referred to as: Data Controller) information about data processing related to its contact with clients. We maintain direct contact with our clients for matters related to the performance of orders. Contact is necessary to perform the case, we request and provide information to our clients via the contact details provided.
A János Kerényi EV. By sending a request to, you acknowledge the contents of this information and also consent to the processing of the personal data you provide by e-mail as described in this information.
The regulations on data processing and the protection of users' personal data apply exclusively to natural persons, given that personal data can only be interpreted in relation to natural persons (based on Section 3, Sections 1 and 2 of Act CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information), therefore the conditions under this chapter apply exclusively to the processing of personal data of natural persons. Information on the processing of personal data is contained in a separate document, which was prepared in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Regulation 95/46/EC (hereinafter: General Data Protection Regulation).
Contact details:
Name: János Kerényi EV.
Address: 1188 Budapest, Lajos Street 47/b.
Email address: info@bevizsgalas.hu
1. Scope of the processed data, legal basis for data processing, purpose and duration of data processing
Designation of data processing cases
Data processing carried out during contact with users, as well as János Kerényi EV. Data processing necessary for the conclusion of a contract between the Company and the Customer.
Legal basis and purpose of data processing
In the case of a natural person User, according to Article 6(1)(a) of the Regulation, the contact is fulfilled or the data subject has given consent to the processing of his/her personal data for one or more specific purposes.
In the case of a natural person Customer, according to Article 6(1)(b) of the Regulation, the processing is necessary for the performance of a contract to which the data subject is a party, or in order to take steps at the request of the data subject prior to entering into a contract.
In the case of our legal entity client, according to Article 6(1)(f) of the Regulation, it is a legitimate interest to maintain contact with clients.
Scope of data processed
In order to maintain direct contact, we process:
- the name, address, telephone number and email address of our natural person customers,
- In the case of our legal entity customers, the name, position, telephone number and email address of the designated contact person
Duration of data processing
Data management will be carried out for 5 years after the performance of the contract, as civil law claims can be asserted against us until that date. If the contact person changes, the previous data must be deleted, while the data of the new contact person must be recorded.
2. User rights regarding data processing
Your rights regarding data processing
Within the period of data processing, you have the following rights in accordance with the provisions of the Regulation:
- access to personal data and information related to data processing,
- right to rectification
- restriction of data processing,
- right to erasure,
- right to portability,
- right to protest,
- right to withdraw consent.
If you wish to exercise your rights, this will involve your identification and we will need to communicate with you as necessary. Therefore, for the purpose of identification, it will be necessary to provide personal data (but the identification can only be based on data that we already process about you), and your complaint regarding data processing will be available in our email account within the period specified in this notice regarding complaints.
We will respond to complaints regarding data processing within 30 days at the latest.
Right to withdraw consent
You have the right to withdraw your consent to data processing at any time, in which case we will delete the data you provided from our systems.
Access to personal data and information
You have the right to receive feedback on whether your personal data is being processed and, if so, you have the right to:
- obtain access to the personal data processed and
- We would like to inform you about the following information:
- the purposes of data processing;
- the categories of personal data processed about you;
- information about the recipients or categories of recipients to whom we have disclosed or will disclose the personal data;
- the planned period for which the personal data will be stored or, if this is not possible, the criteria for determining this period;
- your right to request rectification, erasure or restriction of processing of personal data concerning you and, where processing is based on legitimate interest, to object to the processing of such personal data;
- the right to lodge a complaint with the supervisory authority;
- if the data was not collected from you, all available information about its source;
- the fact of automated decision-making (if such a procedure is used), including profiling, and at least in these cases, understandable information about the logic involved and the significance and likely consequences of such processing for you.
The purpose of exercising the right may be to establish and verify the lawfulness of data processing, therefore, in the event of multiple requests for information, we may charge a fair fee in exchange for providing the information.
We provide access to your personal data by sending you the processed personal data and information by email after you have been identified.
Please indicate in your request whether you are requesting access to personal data or information related to data processing.
Right to rectification
You have the right to request that we rectify inaccurate personal data concerning you without delay.
Right to restrict data processing
You have the right to request that we restrict the processing of your data if one of the following applies:
- You dispute the accuracy of the personal data, in which case the restriction applies for the period that allows us to verify the accuracy of the personal data, if verification is not necessary, we will not apply any restriction;
- the processing is unlawful and you oppose the erasure of the data and instead request the restriction of its use;
- we no longer need the personal data for the specified processing purposes, but you require them for the establishment, exercise or defence of legal claims; or
- You have objected to the data processing, but our legitimate interest may also justify the data processing, in which case, until it is determined whether our legitimate reasons override your legitimate reasons, data processing must be restricted.
If processing is subject to restrictions, such personal data may only be processed, with the exception of storage, with your consent, or for the establishment, exercise or defence of legal claims, or for the protection of the rights of another natural or legal person, or for important public interest reasons of the Union or a Member State.
We will inform you in advance (at least 3 working days before the restriction is lifted) about the lifting of the restriction on data processing.
Right to erasure – right to be forgotten
You have the right to have personal data concerning you erased without undue delay if one of the following reasons applies:
- the personal data are no longer necessary for the purposes for which they were collected or processed;
- You withdraw your consent and there is no other legal basis for the processing;
- You object to processing based on legitimate interest and there is no overriding legitimate reason (i.e. legitimate interest) for the processing,
- the personal data was processed unlawfully and this was established based on the complaint,
- the personal data must be erased to comply with a legal obligation under EU or Member State law applicable to us.
If we have made personal data processed about you public for any legitimate reason and we are obliged to erase them for any of the reasons indicated above, we will take reasonable steps, taking into account available technology and the cost of implementation, including technical measures, to inform other controllers processing the data that you have requested the erasure of links to the personal data in question or of copies or replications of these personal data. As a general rule, we will not make your personal data public.
Erasure does not apply if data processing is necessary:
- for the purpose of exercising the right to freedom of expression and information;
- to comply with an obligation under EU or Member State law to which we are subject to which we are subject to processing personal data (such as processing in the context of invoicing, as the retention of the invoice is required by law), or to perform a task carried out in the public interest or in the exercise of official authority vested in the controller;
- to submit, enforce or defend legal claims (e.g. if we have a claim against you and you have not yet fulfilled it, or if a consumer or data processing complaint is in progress).
Right to object
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on legitimate interest. In such a case, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.
Right to portability
If the data processing is necessary for the performance of a contract or the data processing is based on your voluntary consent, you have the right to request that you receive the data you have provided to us in a machine-readable format, which we will provide to you in xml, JSON, or csv format, and if this is technically feasible, you may request that we transmit the data in this form to another data controller.
Legal remedies
If you believe that we have violated any legal provisions relating to data processing or have not fulfilled any of your requests, you may initiate an investigation procedure with the National Data Protection and Freedom of Information Authority in order to terminate the allegedly unlawful data processing (correspondence address: 1530 Budapest, P.O. Box: 5., e-mail: ugyfelszolgalat@naih.hu).
We also inform you that you can also file a civil lawsuit in court.
Data security
When operating IT systems, we ensure the necessary authorization management, internal organizational and technical solutions so that your data cannot fall into the possession of unauthorized persons, and that unauthorized persons cannot delete, remove or modify the data. We also enforce data protection and data security requirements against our data processors.
We keep records of any data protection incidents and, if necessary, we will inform you of any incidents that arise.
3. Information about cookies used on the website
The Data Controller is www.bevizsgalas.hu The website uses only technical cookies that are essential for the operation and safe use of the website.
There is no webshop on the website, there is no user registration, and the Data Controller does not use Google Tag Manager, Google Analytics, Meta Pixel, advertising tracking code, marketing cookies, social media tracking code or other technology used to analyze, profile or track visitor behavior for advertising purposes.
When using the appointment booking application on the website, the data subject provides the data necessary for the booking — in particular, their name, email address and telephone number. The use of cookies in this context serves solely to ensure the technical operation of the appointment booking interface, maintain the session, ensure secure operation and ensure the proper conduct of the booking process. Cookies do not serve advertising, statistical, visit analysis or profiling purposes.
3.1. What are cookies?
A cookie is a small data file that a website can place on a visitor's browser or device and read back from it. Cookies can, for example, enable the basic operation of the website, maintain a session, enable security features, or provide technical support for a form.
3.2. Types of cookies used by the Data Controller
The Data Controller only uses the following types of cookies:
| Cookie type | Purpose | Nature of processed data | Legal basis | Retention time |
| Essential technical cookie | Ensuring the basic functioning, loading, security and intended use of the website | Technical identifier, session-related technical information | The Data Controller's legitimate interest in maintaining a functional and secure website; if necessary to perform the service requested by the data subject, to take steps prior to entering into a contract | Until the end of the session or for the time necessary to achieve the technical goal |
| Technical cookie required for the appointment booking interface to function | Technical support for the appointment booking process, operation of the booking form, maintenance of the work session | Technical session ID, technical information required for the booking process to work | Taking the necessary steps prior to concluding a contract for an appointment initiated by the data subject, and the legitimate interest of the Data Controller in ensuring secure technical operation | Until the booking process is completed, the end of the session, or for the time necessary to achieve the technical goal |
The technical cookies used cannot be used to track visitors for advertising purposes, create interest profiles, or track their behavior on other websites.
3.3. Lack of cookies requiring consent
Since the website uses only essential technical cookies, the Data Controller does not use consent-based analytical, marketing, advertising or social media cookies on the website.
If the Data Controller wishes to use analytical, statistical, marketing or other non-essential cookies in the future, it will do so solely on the basis of the prior, voluntary, specific and appropriately informed consent of the data subject, and will amend this notice accordingly.
3.4. Managing cookies in your browser
The data subject may delete, block or restrict the use of cookies at any time in his/her own browser. The settings for managing cookies are available in the settings of the browser used.
Please note that if essential technical cookies are disabled, some functions of the website or the appointment booking interface may not work or may not work properly.
3.5. Exclusion of third-party tracking
The Data Controller does not transmit data to advertising providers, social media providers or traffic analysis providers via cookies on the website. The cookies used on the website are intended solely to ensure the technical operation of the website and the appointment booking function.
4. Other provisions
János Kerényi EV. reserves the right to amend this Data Management Notice in a way that does not affect the purpose and legal basis of data management.
However, if we intend to further process the collected data for purposes other than the purpose for which it was collected, we will inform you of the purpose of the data processing and the following information prior to further processing:
- the duration of storage of personal data or, if this is not possible, the criteria for determining the duration;
- your right to request access to, rectification, erasure or restriction of processing of your personal data, and to object to the processing of your personal data in the case of processing based on legitimate interest, and to request the right to data portability in the case of processing based on consent or a contractual relationship;
- in the case of data processing based on consent, that you can withdraw your consent at any time,
- the right to lodge a complaint with the supervisory authority;
- whether the provision of personal data is based on a legal or contractual obligation or is a prerequisite for concluding a contract, whether you are obliged to provide the personal data, and what the possible consequences of failure to provide the data may be;
- the fact of automated decision-making (if such a procedure is used), including profiling, and at least in these cases, understandable information about the logic involved and the significance and likely consequences of such processing for you.
Data processing can only begin after this, if the legal basis for data processing is consent, you must also consent to data processing in addition to being informed. This Data Processing Notice is valid from 01.05.2026.
