Privacy Policy of CSFK EduID

This Privacy Policy (hereinafter referred to as the Policy) is the Policy of the Research Centre for Astronomy and Earth Sciences (hereinafter referred to as the CSFK) as the data controller (hereinafter referred to as the Data Controller) in accordance with the provisions of Act LXIII of 1992 on the Protection of Personal Data and the Disclosure of Data of Public Interest (Act on the Protection of Personal Data and the Disclosure of Data of Public Interest).
The purpose of this Policy is to set out the terms and conditions of the processing of certain personal data of users of the eduID federation by the CSFK as Data Controller, to provide information on the personal data processed, the detailed conditions and methods of processing and the conditions for the transfer of users' personal data to third parties.

Name and contact details of the controller
Research Centre for Astronomy and Earth Sciences (CSFK)
15-17. road Konkoly Thege Miklós, Budapest, 1121

Phone: +36 1 391 9320

Data processor:
CSFK IT Group
Phone: +36 1 3919344

Data storage
The CSFK EduID identification database is managed by the CSFK IT group. The database contains the following data (scope of personal data processed):

  • Last name, first name
  • Username
  • E-mail address
  • Phone number (optional)
  • Workplace group number (optional)
  • Entitlement (optional)
  • Password
  • Unique identifier

The Data Controller stores the data in a secure manner. The User's password is stored in the database in encrypted form and cannot be displayed unencrypted. The Data Controller shall ensure the technical security of the processing of personal data of the data subject and shall take technical and organisational measures to prevent unauthorised persons from accessing the personal data.

Purpose of data processing
The processing of data by the Data Controller, as defined in this Policy, is carried out for the purpose of identifying the User for the use of electronic services provided by the CSFK as a service provider in the framework of the federation cooperation to users of other institutions (third parties), for the purpose of providing a level of service tailored to the person and the user group defined in the description of the service. For the purposes of this Policy, users are defined as users under the eduID federation agreement. The Data Controller shall only request the provision of personal data that are necessary for the purposes of the processing, are suitable for the purposes for which they are collected and shall process such personal data only to the extent and for the duration necessary for the purposes for which they are collected. The Data Controller shall not use personal data for purposes other than those specified in this Policy.

Legal basis for processing
The processing is based on the voluntary, informed and explicit consent of the user.

Duration of data processing
The duration of data processing lasts until the termination of the federative service provided by CSFK to the users specified in the eduID contract or the termination of the CSFK eduID contract.