The purpose of the following policy is to help you understand our practices related to the processing of your personal data, the categories of the data we process, the measures we have taken to ensure the security of your data and your rights related to our data processing, in line with Regulation 2016/679 of the EU (GDPR).
1. Who are we?
This policy covers the data processing of Mito Group Zrt. (“Mito”, “we”), as data controller, related to the Agentic Commerce webinar.
2. Principles
- Mito is committed to protecting your personal data and processing it lawfully, to the extent and for the time strictly necessary to achieve the purpose.
- Where the nature of the processing allows, we provide you with simple and effective choices about your data.
- We carefully select our partners and suppliers who are involved in the personal data processing and we only transfer personal data to our partners in accordance with the content of this privacy policy, applying legal and technical safeguards.
- We apply appropriate technical and organizational measures to protect your personal data from unauthorized access, use, modification or deletion.
- Data protection aspects are always taken into account when planning our processes (data protection by design).
- We also aim to ensure that our measures protect data as much as possible when we have to balance data protection with other obligations.
3. Categories of your personal data processed by us
Mito processes the following categories of personal data to be able to provide you our webinar:
- Identification data: full name, title, company data
- Contact data: email address, phone number
- Registration data: webinar registration details
- Technical data: IP address, device data, login data
- Video recordings of the webinar
4. Lawful basis for Mito's data processing
We always process your data on a lawful basis specified by law. This differs, depending on the different types and purposes of data processing, such legal bases are:
- Based on your consent, data processing in which you provide data completely voluntarily (e.g. video recording, marketing communications and storing your contact details in our CRM system),
- To comply with Mito's legal obligations, such as keeping tax records,
- Mito's legitimate interests, including, for example, data related to the operation and security of the webinar system.
5. Purpose of Mito's data processing
Mito collects and uses the personal data in the categories listed above as necessary for the provision of the webinar in high quality and for reaching out to you with news and marketing offers in the future in case you agree to that; for this purpose, we store your contact details in our CRM system.
6. Data transmission
In order to provide the webinar on a proper platform we use ClickMeeting Sp z.o.o. as a data processor. You can find detailed information on ClickMeet’s data processing and security practices here: https://legal.clickmeeting.com/privacy-security/. We transfer your data on the basis of a data processor contract in accordance with the law. This contract ensures that your data is safe even in the event of a transfer.
To provide our services and operate our systems we also share your data with Google LLC. You can find detailed information and their privacy policy here: https://policies.google.com/privacy?hl=en-US.
The registration form is available on our website. The data you submit through it is stored by the providers of our website hosting and form services, who act as our data processors on the basis of data processing agreements.
If you consent to marketing communications, we store your contact details in our CRM system provided by monday.com Ltd. as a data processor. You can find detailed information on monday.com’s data processing and security practices here: https://monday.com/trustcenter/privacy.
We might also share your data with our suppliers who conduct accounting services for us.
Where we transfer your personal data to a country outside the European Economic Area (e.g. the data is stored on servers and data centres outside the EEA), we will ensure that this transfer is based on an appropriate legal basis and that your personal data is protected in accordance with applicable law, such as through the use of standard contractual clauses approved by competent authorities and other appropriate technical and organisational measures to protect your personal information.
We record the webinar for our internal purposes and may make the recording available to registered participants.
6. Duration of data processing
We will retain your personal data for the period prescribed by law. If there is no legal deadline for the storage of the given data and purpose, we will store them for the period strictly necessary for achieving the purpose, after which we will ensure the deletion or anonymization of the data. The date of deletion is always determined after carefully considering the circumstances and goals, at the earliest possible time. We delete the data required for the technical provision of the webinar 1 month after the event, we keep financial data as long as relevant laws require, we keep your contact details for marketing communications and the recording of the webinar for 1 year after the event. We delete marketing contact data earlier in case you withdraw your consent, but this withdrawal doesn’t affect the lawfulness of the processing prior to the withdrawal.
8. Security of your data
We use strict security and organizational measures to protect your personal information from unauthorized access, use, loss, disclosure, or destruction. To this end, for example, we store them in a controlled environment with limited access, we protect the data stored in the IT systems with a firewall and the virus protection of the systems, and we provide physical protection for the data stored on physical media. Your data can only be accessed by those who need it to do so in order to achieve the purpose of data processing.
During the development of our processes, we keep in mind the application of appropriate data protection measures and security guarantees.
We require our partners who process personal information on our behalf to comply with our high standards and with legal requirements.
8. Your rights in relation to your data
You have several rights in relation to your personal data, which you can exercise by sending an inquiry to dpo@mito.hu email address. Your rights are:
- Right of access: you can request information about the data we process about you and we will provide you with a copy of it upon your request.
- Right to correct or update your data: you have the right to correct the data we process about you if it is incorrectly stated by us.
- Right to object: you have the right to object to the processing of your personal data in cases where the processing is based on Mito's legitimate interest. In this case, if no other legal basis can be established for the data processing, we will delete the data.
- Right to erasure: in some cases, you have the right to request that we erase the personal data we hold about you.
- Right to the restriction of data processing: you can request the restriction of the processing of your data if you feel that the data is not correct or you do not want us to process it, until the foundation of your request is reviewed and applicability of other rights has been decided.
- Right to data portability: in certain cases, you have the right to carry the personal data you have provided to us, in which case we will provide it to you in electronic form.
If you request to exercise your rights, we will investigate it without delay and comply with it or inform you of the reason for any rejection within one month.
9. Legal remedy
In case you have any concerns about the processing of your personal data, please contact us first to clarify your question or concern. If we are unable to provide you with a satisfactory response, you can lodge a complaint with the data protection authority or a claim with the court.
Contact details of the data protection authority: