Skip to main content
PRIVACY NOTICE

 

On the personal data processing activities carried out by Vertis Ltd. in relation to the visitors of its webpage http://vertis.com

Vertis Environmental Finance Ltd. (hereinafter referred to as “VERTIS” or “data controller”), in accordance with Article 13 of the Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (“General Data Protection Regulation”, “GDPR” or the “Regulation”), hereby provides information relating to the personal data processing carried out in the context of the operation of its website http://vertis.com.

Identity and contact details of the data controller
Name of the controller: Vertis Environmental Finance Ltd.
Seat of the controller: Csörsz utca 45, 1124 Budapest, Hungary
Email: privacy@vertis.com
Contact details of the data protection officer: vertis@dataprotection.eu
Purpose, legal basis and retention period of the processing, in relation to each category of personal data processed
A) In the context of the use of cookies

VERTIS uses “cookie” technology on its website. Cookies are small pieces of information, held in simple text files, stored on your computer when you visit a website. Some cookies are necessary to ensure the proper technical functioning of the website and to make all of its content available to you. Other cookies have a certain convenience function (e.g. remembering certain settings), enhance the user experience based on your activity on the website, or serve marketing purposes.

Cookies allow us to collect the following data about the visitor of the website and the device used while browsing:

  • your IP-address,
  • date and time of your visit,
  • address of the site you visited previously
  • features of the operating system of the browsing device,
  • the visited sub-sites of our website, functions used and time spent on the site and sub-pages.

There are different types of cookies. Some cookies are necessary to ensure the proper technical functioning of the website and to make all of its content available to you (“functional cookies”). Other cookies have a certain convenience function (e.g. remembering certain settings), enhance the user experience based on your activity on the website, or serve statistical purposes (“convenience, analytics or statistical cookies”), other cookies serve marketing purposes, eg. showing advertisement which might be of your interest (“marketing cookies”).

Session cookies are only valid for the current visit and by finishing the session or closing the browser, this type of cookie is deleted automatically from the computer. Persistent cookies remain on the computer of the visitor or in its browser until deletion by the visitor. Performance cookies are used to collect information about how visitors use our website. The aim of all above is to optimise our website and improve your user experience.

Some cookies are used by ourselves, and others by third-party data controllers or third party service providers acting as data processors. The cookies used by our third-party partners on the website transmit information that can be used for statistical or marketing activities of the given partner, as well. When transferring data to third countries, these third parties are acting independently from VERTIS, for which VERTIS is not responsible, so in relation to the use of your data by them, you are kindly advised to obtain information from them. Third party cookies on our website:

  • LinkedIn, LinkedIn Ads,
  • Google, Google Analytics services.

If you would like to change the cookie settings on your device used for browsing, including blocking the use or placement of cookies, you are free to do this, as all browsers and devices used for browsing allow the modification of cookie settings. Please bear in mind that blocking the application of cookies or deleting them may result in preventing you from using all functions of our website fully and smoothly.

In case of functional cookies, the legal basis of data processing is our legitimate interest in properly operating and the website and protecting it from malicious activities.
In case of convenience, analytics, statistical or marketing cookies, the legal basis of data processing is your consent, which may be provided by the cookie settings on the webpage.

The retention periods for your data in case of the cookies are indicated in the table below.

Please find below the properties of those cookies VERTIS uses on its website:

Cookie ID Type of cookie Description (purpose) Time period Third party cookie / not
_ga Analytics The _ga cookie, installed by Google Analytics, calculates visitor, session and campaign data and also keeps track of site usage for the site’s analytics report. The cookie stores information anonymously and assigns a randomly generated number to recognize unique visitors. 2 years Yes
_gid Analytics Installed by Google Analytics, _gid cookie stores information on how visitors use a website, while also creating an analytics report of the website’s performance. Some of the data that are collected include the number of visitors, their source, and the pages they visit anonymously. 1 day Yes
_gat_gtag_UA_199139531_1 Analytics Set by Google to distinguish users. 1 minute Yes
_ga_8Q24M8GVT5 Analytics This cookie is installed by Google Analytics. 2 years Yes
UserMatchHistory Functional LinkedIn sets this cookie for LinkedIn Ads ID syncing. 1 month Yes
lang Functional LinkedIn sets this cookie to remember a user’s language setting. session Yes
bcookie Functional LinkedIn sets this cookie from LinkedIn share buttons and ad tags to recognize browser ID. 1 year Yes
lidc Functional LinkedIn sets the lidc cookie to facilitate data center selection. 1 day Yes
lang Functional LinkedIn sets this cookie to remember a user’s language setting. session Yes
bscookie Functional LinkedIn sets this cookie to store performed actions on the website. 1 year
wpjb_transient_id Functional This cookie lets us remember certain settings when using the job application system. 1 day No
AnalyticsSyncHistory Analytics Used to store information about the time a sync took place with the lms_analytics cookie 1 month No
li_gc Analytics Used to store consent of guests regarding the use of cookies for non-essential purposes 2 year No
_gat Statistical This cookie is installed by Google Universal Analytics to restrain request rate and thus limit the collection of data on high-traffic sites. 1 minute Yes
B) In the context of the use of cookies
Purpose of data processing Personal data processed Legal basis Retention period
Sending newsletter to you subject to previous checking of the data provided by you on our webpage Full name, e-mail address, company, position, country, contact phone number (optional), area of interest Consent Until revocation of your consent
Monitoring whether you have opened the newsletter and on what content you clicked on Fact of opening the newsletter and chosen content Our legitimate interest in monitoring the efficiency of our marketing (newsletter sending) activity Until revocation of the consent given to newsletter sending
C) In the context of  “Contact us” feature of the webpage
Purpose of data processing Personal data processed Legal basis Retention period
Contacting you on the basis of your contacting request sent through the website, subject to previous checking of the data provided by you on our webpage Name, e-mail address, company, contact number (optional), area of interest (optional), content of the message (“how can we help you” field) Legitimate interest of VERTIS and the company represented by you, in successfully establishing contact and creating a possible business opportunity ive years from establishing contact
Additional information on data processing

Provision of your data is not a requirement necessary to enter into a contract and you are not obliged to provide any of the personal data this privacy notice refers to. Please note however that in case of functional cookies, once you visit our webpage, it is technically not possible to avoid that we collect your data required for the use of those cookies. Possible consequences of failure to provide your data may be that you cannot visit our website, or in case of the newsletter subscription and “Contact us” feature, that VERTIS cannot get into touch with you or the entity you represent.

In case the legal basis of the processing is consent, you can withdraw the consent at any time; however, the withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

Recipients of the personal data

In the context of the data processing activities referred to in this privacy notice, personal data shall be shared with the following addressees, in relation to the below detailed services VERTIS has engaged in order to be able to operate its systems and pursue its business activities. Most of such addressees, if they provide services to VERTIS, act as data processors providing the guarantees to implement appropriate technical and organisational measures in line with the rules of GDPR, in order to ensure protection of your data.

Data category Addressee Activity or role which serves as grounds for the data sharing
Data processed in relation to newsletter subscription and “Contact us” feature Microsoft Ireland Operations Limited Cloud based system for e-mail correspondence
Data processed in relation to newsletter subscription The Rocket Science Group LLC,  675 Ponce De Leon Ave NE, Suite 5000 Atlanta, Georgia 30308, USA Providing Mailchimp newsletter sending service
Data used by third party cookies Third party cookie user (LinkedIn, LinkedIn Ads, Google, Google Analytics) Use of third party cookies on the website
Data transfer to third countries

Data transfer to third countries is carried out by VERTIS in the following events, in relation to the involvement of the following service providers. The chart below also provides you with information regarding the safeguards applied in relation to such data transfers.

Service provider / other addressee Third country to which data are transferred Safeguards for ensuring proper protection for the data When does it happen?
The Rocket Science Group LLC USA Standard Contractual Clauses If you subscribe to our newsletter
LinkedIn, LinkedIn Ads, Google, Google Analytics USA Standard Contractual Clauses In case of third party cookies
Automated decision making, profiling

Automated decision making does not occur in the context of the data processing referred to in this Privacy Notice. Our data processing aiming to follow up whether our newsletters may be useful to you, may be considered as profiling, since the Mailchimp newsletter service includes an automatized function which provides us information if you have opened the newsletter and what parts of it you have clicked on. This however is only used for the analysis of the efficiency of our marketing activity and in no event will it produce legal effects concerning You or similarly significantly affect You.

Your rights in relation to our data processing activity

As a data subject, you can exercise

  • the right to access;
  • the right to rectification;
  • the right to erasure (right to be forgotten);
  • the right to restrict the processing
  • the right to object to the processing of your personal data,
  • the right to data portability subject to the conditions as set out by the GDPR.
a) Right to  access

You as data subject shall have the right at any time to request information whether your personal data are processed, and if so, in what manner such data are processed by the data controller, including the purposes of the processing, recipients to whom the personal data have been or will be disclosed, the source of information from where the data controller obtained such data, the retention period of such data, any right that they may have concerning the processing, and where personal data are transferred to a third country or any international organisation, you as data subject shall have the right to be informed of the appropriate safeguards relating to the transfer. When exercising the right of access, the data subject shall also be entitled to request copies of such data. In the event the data subject makes the request by electronic means, and unless otherwise requested by the data subject, the information shall be provided in an electronic form. If the right of access exercised by the data subject would affect adversely the rights and freedoms, in particular the business secrets or intellectual properties of others, the data controller shall have the right to refuse the request of the data subject to the extent necessary and proportionate. For any further copies of the above information requested by the data subject, the data controller may charge a reasonable fee that is proportionate to the related administrative costs.

b) Right to rectification

The data controller shall rectify or supplement the personal data of the data subject based on any related request from the data subject. Where there is any doubt concerning any rectified data, the data controller may call upon the data subject to adequately verify, preferably by an official document, the rectified data for the data controller. If the data controller has disclosed the personal data affected by such right to any other persons (i.e. to another recipient e.g. the data processor), the data controller shall inform such persons of the rectification of such data without delay, provided that it is not impossible or does not require a disproportionate effort from the data controller. At the request of the data subject, the data controller shall inform the data subject of the identity of these recipients.

c) Right to erasure (“right to be forgotten”)

Where You as data subject request the erasure of any or all of your personal data, the data controller shall have the obligation to erase those without undue delay, if:

  • the data controller does not need the affected personal data in relation for the purposes for which they were collected or otherwise processed;
  • processing was based on your consent, however, you have withdrawn your consent, and there is no other legal ground for the processing;
  • processing was based on the legitimate interest of the data controller or a third party, however, You have objected to the processing, and there are no overriding legitimate grounds for the processing, except for objection to data processing for direct marketing purposes;
  • the personal data have been unlawfully processed by the data controller, or
  • the personal data have to be erased for compliance with a legal obligation.

If the data controller has disclosed the personal data affected by such right to any other persons (i.e. to another recipient e.g. the data processor), the data controller shall inform such persons of the rectification of such data without delay, provided that it is not impossible or does not require a disproportionate effort from the data controller. At the request of the data subject, the data controller shall inform the data subject of the identity of these recipients. The data controller shall not always be required to erase the personal data, in particular where e.g. the data processing is necessary for the establishment, exercise or defence of legal claims.

d) Right to restriction of processing

You as data subject may request restriction of processing in relation to your personal data where one of the following applies:

  • the accuracy of the personal data is contested by the data subject, in this case restriction of processing shall be applied for a period enabling the data controller to verify the accuracy of the personal data;
  • the processing is unlawful, but the data subject opposes the erasure of the data, and requests the restriction of their use instead;
  • the data controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise and defence of legal claims; or
  • the data subject has objected to the processing, in this case restriction of processing shall be applied until it is verified whether the legitimate grounds of the data controller override those of the data subject.

Restriction of processing means that such personal data shall not be processed by the data controller or shall, with the exception of storage, only be processed with the data subject’s consent, or in the absence of such consent the data controller may also process these data for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a member state of it. The data subject shall be informed by the data controller before the restriction of processing is lifted. If the data controller has disclosed the personal data affected by such right to any other persons (i.e. to another recipient e.g. the data processor), the data controller shall inform such persons of the rectification of such data without delay, provided that it is not impossible or does not require a disproportionate effort from the data controller. At the request of the data subject, the data controller shall inform the data subject of the identity of these recipients.

e) Right to object

Where processing of data concerning You as data subject is based on the legitimate interest of the data controller or a third party, You as data subject shall have the right to object to processing of data. The data controller shall not be obliged to accept such objection, unless the data controller demonstrates

  • compelling legitimate grounds for the processing which override the interests, rights and freedoms of the User, or • that the data processing is related to the submission, enforcement or protection of the data controller’s legal claims.
f) The right to data portability

Right to data portability means that You as the data subject shall have the right to receive the personal data concerning You, which You provided to the data controller based on consent or on a contract, and are processed by the data controller by automated means (e.g. in a computer system), in a structured, commonly used and machine-readable format, and You have the right to transmit those data to another controller, or to have the personal data transmitted directly from us to another data controller, where technically feasible. In the case of such requests, we shall make available the requested data in Pdf file format. Where the exercise of the right to data portability by You would adversely affect the rights and freedoms of others, we shall have the right to refuse to comply with your request to the extent necessary. A measure taken in the field of data portability shall not mean the erasure of the data, unless You have submitted a request for erasure at the same time, in the absence thereof, we shall continue to retain the data, until any purpose for processing or an appropriate legal basis exists.

In addition to the above, as a data subject, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of the EU of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR. For a list of the data protection supervisory authorities, see https://edpb.europa.eu/about-edpb/about-edpb/members_en. You may also enforce your rights in court pursuant to the provisions of the GDPR and the Hungarian Civil Code or other legislation applicable to you.

Additionally, according to Art. 25 of the Hungarian Act CXII of 2011 on the right to informational self-determination and freedom of information, the close relative of the deceased data subject or the person authorized by the deceased data subject might exercise data subject rights as determined by that Act within 5 years from the date of the death.

How we handle your requests or questions in relation to our data processing activities

We shall provide information on the action taken on your questions or requests submitted to us relating to the processing of your personal data or to the exercise of your rights as data subject, without undue delay and in any event within one month of receipt of the request. That period may be extended by two further months where necessary, taking into account the complexity and number of the requests we receive. We shall inform You of any such extension within one month of receipt of the request, together with the reasons for the delay. If You make the request by electronic means, we shall also provide you our answer by electronic means where possible, unless otherwise requested by You. Should it be the case that we do not take action on your request, we shall inform You on that without delay and at the latest within one month of receipt of the request, explaining you the reasons for not taking action and on the possibility of lodging a complaint with a supervisory authority and seeking a judicial remedy.