Protecting your personal data and your private sphere is very important to us. To ensure that you are fully aware of the collection and use of personal data on our website, please take note of the following information.

1. Data Controller

Mediso Medical Imaging Systems Kft. (seated at 1037 Budapest, Laborc utca 3.; hereinafter referred to as “Mediso” or “Data Controller”), as operator of the website under the domain www.mediso.com and as data controller, provides you (hereinafter referred to as “User”, “you” or “Data Subject”) with the following privacy notice pursuant to Art. 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council (“GDPR”) regarding the data management in connection with the operation of the website and the connecting services.

The provision of personal data is voluntary and based on the User’s agreement as well as needed to fulfil Mediso’s services to the User, based on Art. 6 of GDPR. The personal data that you supply Mediso with will be processed for the purposes specified in Section 2 of the present notice.

Personal data concerning you, supplied by you, will be processed in compliance with the principles of necessity, fairness, lawfulness and transparency established in GDPR. The terms of this privacy notice shall be valid from when your consent is given, until when it is withdrawn.

Your personal data will be processed by employees of Mediso on a need-to-know basis, acting as data controllers and managers, with or without the aid of electronic, print, IT or remote instruments and, in any event, according to logic closely correlated with the purposes listed below.

By using the website as well as the services of Mediso, the users browsing the website and the applicants for the job offers published thereon accept all terms and conditions of the present notice. We therefore kindly ask you to read this notice carefully before using the website or its services.

Details of the Data Controller

2. Collection and Processing of Personal Data

2.1 Contact Forms – Online Request, Application

The User may send Mediso information through contact forms available on the website, as well as contact Mediso by e-mail through the email address info@mediso.com. Mediso will store and use your name, e-mail address, country, company or other institution, address, phone number and any other personal data you enter into the contact forms for the purpose of contacting you individually and delivering all information you need.

Data you enter when completing an online request or application form will be stored and used for the purpose of the process you requested. This will only happen after you have agreed to your data being stored and processed, indicated by accepting the appropriate checkbox provided with the contact form. Your data shall be stored per your consent, until either you withdraw your consent or the purpose of the handling of the personal data is fulfilled.

2.2 Job Application

Mediso is committed to protecting the personal data of applicants. This section provides detailed information on how the personal data of job seekers applying for our positions is processed, in accordance with the GDPR.

A) Selection process (application for an advertised position)

B) Inclusion in the database for future positions (data retention)

Duration of data processing

Who may access the data? (Data processors, recipients)

Personal data may only be accessed by those employees of the Data Controller for whom this is strictly necessary to perform their duties: HR staff, the head of the relevant department, and the management.

2.3 Browsing Mediso’s Website – Cookies and Google Analytics

The Mediso.com website uses “cookies”, which help to make our internet presence more user-friendly, effective and secure – for instance, by speeding up navigation around our website. You can find our detailed cookie policy here.

Mediso’s website uses Google Analytics, a web analysis service of Google Inc. (“Google”). Google Analytics uses “cookies”, text files which are stored on your computer and which allow an analysis of your use of the website. The information generated by the cookie about your use of this website (including your IP address) is transferred to a Google server in the USA and stored there. The European Commission – under Art. 45 of GDPR – has recognized USA as providing adequate protection for personal data to be transmitted.

Google will use this information to evaluate your use of the website in order to compile reports on website activities for website operators and to provide other services related to use of the website and the internet. Google will also transmit this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. Under no circumstances will Google connect your IP address with other data from Google.

You can prevent the installation of cookies through an appropriate setting in your browser; however, we hereby inform you that in such case you may not be able to make full use of all the functions of this website. By using this website, you declare your agreement with the processing of the data collected about you by Mediso and Google in the manner previously described and for the purposes previously mentioned. You can revoke permission for your data to be collected and stored at any time with future effect. Alternatively, you can install the deactivation add-on for Google Analytics, so long as it is available for your browser.

Please note that this website uses Google Analytics with the IP anonymization extension, which means that IP addresses are only used in shortened form to prevent them being directly linked to an individual.

Personal data are handled in a non-automated way.

3. Third Parties, Data Processing

Mediso and its data processors are entitled to know about the personal data according to the relevant legislation.

Mediso retains the right to involve further data processors in the data controlling, of which it shall inform the data subjects by amending the present notice.

In the absence of relevant legislation, Mediso shall only hand over personal data to third parties with the explicit consent of the given data subject.

4. Right of Revocation

The User may withdraw his/her consent for the handling of his/her personal data for any or all of the purposes specified in Section 2 at any time, free of any charge. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

The User may withdraw his/her consent by sending Mediso an appropriate message by e-mail or post, or by any other appropriate method indicated in the corresponding part of Section 2.

Job applicants may withdraw their consent to being kept in the database for future positions at any time, free of charge, by sending a message to allashirdetes@mediso.com.

If the handling of personal data is based on the User’s consent, revoking such permission results in the deletion of the User’s corresponding personal data.

5. Data Protection

When using the online form, your personal data is transmitted over the internet in encrypted form using SSL. By taking technical and administrative measures, we secure our website and other systems against attempts by unauthorised persons to delete, destroy, access, alter or transmit your data.

You recognise and accept that in case of providing your personal data on the website – despite the fact that Mediso has up-to-date security tools at its disposal for preventing unauthorized access to the personal data – the full defence of the personal data on the internet cannot be warranted.

Therefore, in case of unauthorized access despite our efforts, Mediso is not liable for this access to and understanding of the personal data, nor for the resulting damages arising at the data subjects.

The security of the data is ensured by the Data Controller in the most up-to-date way possible. The Data Controller undertakes to immediately suspend the service and publish a statement in the event of a personal data breach that occurs despite the above measures, and to keep a record of the data protection incidents and the measures taken. If the incident poses a risk to the rights and freedoms of the Data Subject, the Data Controller shall act in accordance with Section 8 of this notice.

6. Links to Other Websites

Our internet presence includes links to other websites. We are not able to influence whether the operators of other websites comply with privacy regulations.

As a provider we are responsible for our own content according to the general laws. Our own content is to be distinguished from the links to content supplied by other providers. We take no responsibility for third-party content provided for use via links, and we do not adopt their content as our own.

Solely the provider of the page to which the link is directed is liable for illegal, incorrect or incomplete content, and especially for damage that results from the use, or lack thereof, of such content.

7. Rights of the Data Subjects

As a User or job applicant (Data Subject), you may exercise the following rights throughout the entire period of data processing:

• Right of access: You may request information on which of your data we process and on the details of the processing (e.g. purpose, data categories, possible recipients, storage period).
• Right to rectification: You may request the correction of your inaccurate or outdated data, or the completion of incomplete data.
• Right to erasure (“right to be forgotten”): You may request the deletion of your data if the legal basis has ceased or you have withdrawn your consent.
• Right to restriction of processing: You may request the blocking of the data in certain cases (e.g. if you dispute the accuracy of the data, in case of unlawful processing, or if you object to the deletion and request limited use instead).
• Right to withdraw consent: You may withdraw your consent at any time, free of charge, as described in Section 4. Consent to inclusion in the database for future positions can be withdrawn by a message sent to allashirdetes@mediso.com. The withdrawal does not affect the lawfulness of the earlier processing.
• Right to object: You may object to the processing of your personal data (e.g. in the case of data processing based on the legitimate interests of the Data Controller or a third party, including profiling).
• Right to data portability: You are entitled to receive your electronically processed personal data in a structured, widely used, machine-readable format.

You may also request information on the personal data processed by any data processor, their source, the purpose, legal basis and duration of the data processing, and the name, address and data-processing activities of the data processor. In the case of transfer of personal data, you may also request information on the legal basis and recipient of any transfer.

8. Procedure in Case of Personal Data Breach

A personal data breach is any event that results in the unlawful handling or processing of personal data managed, transmitted, stored or processed by the Data Controller, in particular unauthorized or accidental access, alteration, communication, deletion, loss or destruction, and accidental destruction and harm.

In the event of a personal data breach, you may request information on the circumstances of the incident, its effects and the measures taken to remedy it. If the incident is likely to pose a high risk to your rights and freedoms, the Data Controller shall, without undue delay, inform you in the manner specified in Article 34 of the GDPR.

9. Legal Remedies

If you feel that we have violated the provisions of the GDPR in the course of processing your personal data, please contact us first – at info@mediso.com, or at allashirdetes@mediso.com for job applications – so that we can investigate your complaint without delay.

In relation to data processing, you have the right of appeal and objection provided for in Chapter VIII and Article 21 of the GDPR, and you may enforce your rights and claim damages and compensation before a court in accordance with Section 23 of Act CXII of 2011.

For legal remedy you may also turn to the following authority or court:

In addition, you have the right to go to court in the following cases:

• against a legally binding decision of the supervisory authority;
• if the supervisory authority does not deal with the complaint;
• if the supervisory authority does not inform you of the developments or the outcome of the complaint procedure within 3 months;
• if, in your opinion, the Data Controller or the Data Processor employed by it has violated your rights under the GDPR as a result of data processing that does not comply with the provisions of the GDPR.

10. Further Information and Contact

If you have any further questions regarding data protection, please contact us. For questions on the collection, processing or use of your personal data, to obtain information on, correct, block or erase your personal data, or to revoke any permissions you have given, please contact: