In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as "**GDPR**"), as well as Act CXII of 2011 on the Right of Informational Self-Determination and on Freedom of Information (hereinafter referred to as "**Infotv.**"), and based on Section 28 of Act CIX of 2011 on the Hungarian Academy of Arts (hereinafter referred to as "**MMA Act**"), the **Secretariat of the Hungarian Academy of Arts** (hereinafter referred to as **MMA**), **as controller** (hereinafter referred to as "**Controller**"), publishes this notice to protect the personal data it processes.
**1.** **Details of the controller and of the processors**
Controller: **Secretariat of the Hungarian Academy of Arts**
Address: H-1062 Budapest, Andrássy út 101.
Tax number: 15795506-2-42
Contact: [titkarsag@mma.hu](file:///\192.168.1.111\villam\V2025\V56263\customer\titkarsag@mma.hu)
Represented by: the Secretary General of the MMA
Contact details of the Data Protection Officer: [dpo@jaczkovics.hu](file:///\192.168.1.111\villam\V2025\V56263\customer\dpo@jaczkovics.hu)
The Data Protection Officer provides assistance with any questions or comments regarding data processing.
**2\. Processors engaged in the course of the processing activities**
| For populating and updating the A-Z OPUS artistic creators' database with data, structuring data, and providing IT (support and development) services: | **MMA Kiadó Nonprofit Korlátolt Felelősségű Társaság** (company registration number: 01-09-305115;
registered office: H-1051 Budapest, Vörösmarty tér 1., 4th floor; tax number: 26159575-2-41;
represented by: János Szentmártoni, Managing Director) |
| ------------------------------------------------------------------------------------------------------------------------------------------------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| For the provision of IT (server hosting) services: | **Master ITC Információ Technológia és Consulting Korlátolt Felelősségű Társaság**
(company registration number: 01-09-467131;
registered office: H-1145 Budapest, Mexikói út 42/B.;
tax number: 12127786-2-42;
represented by: Gábor Ujvári, Managing Director) |
**3\. Information on the use of cookies**
In line with standard practice, the controller also uses cookies on the [https://azopus.hu/](https://azopus.hu/%20) website (hereinafter referred to as the "**website**"). Cookies on their own are not suitable for identifying the user.
Cookies are small data files placed on a user's computer by the website they visit. Their purpose is to ensure the continuous operation of the given infocommunications and internet service, to make its use easier and more convenient, and to contribute, through anonymous statistics, to the further development of the website.
Cookies may be either session or persistent cookies.
Session cookies enable a website to function correctly during a visit and allow the user's settings to be remembered for the duration of browsing or for the cookie's validity period. These cookies enable certain operations during navigation on the website (e.g. providing specific data or settings) to be performed without having to repeat them each time.
Persistent cookies remain stored on the device for their validity period, even after leaving the website or closing the browser, thereby allowing the application of the user's preferences or actions on subsequent visits.
Saved cookies are stored on the device until their validity period expires; however, they can also be deleted before the predetermined expiry date.
**3.1 Functions of the cookies used by the website and legal bases for processing related to cookies**
According to their functions, the cookies used by the website may be essential, functional, statistical, or marketing cookies.
3.1.1 **Cookies essential for the operation of the website (basic-operation cookies)** support the use of the website and manage the current session for the current visitor.
**The website cannot function properly without this cookie; therefore, the legal basis for processing for this cookie is Point (e) of Paragraph (1) of Article 6 of the GDPR**, i.e. processing is necessary for the performance of tasks carried out in the public interest by the controller, having regard to Point (i) of Subsection (2) of Section 4 of the MMA Act and, accordingly, Subsection (14) of Section 4 of the Statutes of the MMA, as well as Points (a), (c), and (g) of Subsection (2) of Section 4, Point (a) of Subsection (1) of Section 28, and Subsection (7) of Section 27 of the MMA Act, which detail the public-interest tasks.
Pursuant to the above provisions, and given that the controller organises the MMA's public tasks, the controller's public-interest tasks include operating a documentation centre for members of the MMA. Within this framework, documentation is prepared on the members of the MMA's public body, including the collection of original and/or digitised versions of their works, thereby ensuring their researchability and preservation. This promotes the enforcement and protection of the values of Hungarian and universal culture and contributes to the care and public availability of the Hungarian artistic heritage and to the public disclosure of creative works. To perform these tasks, the A-Z OPUS artistic creators' database, which presents the careers and work of the members of the MMA's public body, has been established, and the information is published on the website hosting it. In other words, the purpose of operating the website is to perform the controller's public tasks to the fullest possible extent.
3.1.2 **Statistical cookies** provide feedback to the controller about which content visitors prefer on the website. These cookies collect statistical information - for example, about website traffic - to measure performance and improve it by counting visits and traffic sources on the website.
**Statistical cookies are placed on the data subject's device only with the data subject's consent pursuant to Point (a) of Paragraph (1) of Article 6 of the GDPR; that is,** if the user has consented to the use of cookies, the browser stores cookies on the user's computer or other device so that the system recognises the user's settings.
The validity of consent may expire periodically; however, the data subject may withdraw their consent at any time, even before the validity period expires. The data subject may do so at any time via their browser's cookie settings. The controller draws attention to the fact that withdrawal of consent does not affect the lawfulness of processing based on consent prior to its withdrawal.
3.1.3 **Marketing cookies** serve, among other things, to track views of embedded videos, measure bandwidth (to determine whether the user receives the new or the old player interface), and store the user's video settings.
**Marketing cookies are placed on the data subject's device only with the data subject's consent, pursuant to Point (a) of Paragraph (1) of Article 6 of the GDPR.** In other words, if the data subject has consented to the use of cookies, the browser stores them on the data subject's computer or other device.
The validity of consent may expire periodically; however, the data subject may withdraw their consent at any time, even before the validity period expires. The data subject may do so at any time via their browser's cookie settings. The controller draws attention to the fact that withdrawal of consent does not affect the lawfulness of processing based on consent prior to its withdrawal.
3.1.4 **Functional cookies** used by the website are connected to marketing cookies, as they store a user's video settings when an embedded YouTube video is played, and information related to the embedded YouTube video player interface.
**Functional cookies are placed on the data subject's device only with the data subject's consent, pursuant to Point (a) of Paragraph (1) of Article 6 of the GDPR.** In other words, if the data subject has consented to the use of cookies, the browser stores them on the data subject's computer or other device.
The validity of consent may expire periodically; however, the data subject may withdraw their consent at any time, even before the validity period expires. The data subject may do so at any time via their browser's cookie settings. The controller draws attention to the fact that withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
3.1.5 With regard to processing carried out via the cookies of Google Analytics and YouTube used by the website, the providers' own privacy notices shall apply, and are available at the following websites:
**3.2** **Cookies actually used by the website**
| **Name** | **Function** | **Purpose** | **Validity period** |
| ---------- | -------------------------------- | --------------------------------------------------------------------------------------------------------------------------- | ------------------------------- |
| JSESSIONID | essential (necessary) cookie | This cookie manages the visitor's current session. | for the duration of the session |
| \_\_ga | statistical (third-party cookie) | Cookie required for sending data to the Google Analytics statistical system used for anonymous website traffic measurement. | 1 year 1 month 4 days |
| \_ga\_\* | statistical (third-party cookie) | Cookie set by Google Analytics to store and count pageviews. | 1 year 1 month 4 days |
| YSC | marketing (third-party cookie) | YouTube sets this cookie to track views of embedded videos on YouTube pages. | for the duration of the session |
| --------------------------- | ------------------------------- | ------------------------------------------------------------------------------------------------------------------- | ------------------------------- |
| VISITOR_INFO1_LIVE | marketing (third-party cookie) | Cookie set by YouTube to measure bandwidth and determine whether the user uses the new or the old player interface. | 6 months |
| VISITOR_PRIVACY_METADATA | marketing (third-party cookie) | Cookie set by YouTube to store the user's consent status for cookies. | 6 months |
| yt-remote-device-id | functional (third-party cookie) | A cookie set by YouTube to store the user's video settings when using the embedded YouTube video. | persistent |
| yt-remote-connected-devices | functional (third-party cookie) | Cookie set by YouTube to store the video settings of the user viewing the embedded YouTube video. | persistent |
| yt-remote-session-app | functional (third-party cookie) | Cookie set by YouTube to store user settings and information about the embedded YouTube video player interface. | for the duration of the session |
| yt-remote-session-name | functional (third-party cookie) | This cookie is used by YouTube to store the user's video player settings for the embedded YouTube video. | for the duration of the session |
| --------------------------- | ------------------------------- | -------------------------------------------------------------------------------------------------------- | ------------------------------- |
| yt-remote-fast-check-period | functional (third-party cookie) | This cookie is used by YouTube to store the user's video player settings for embedded YouTube videos. | for the duration of the session |
With regard to processing carried out via the Google Analytics and YouTube cookies used by the website, the providers' privacy notices shall apply and are available at the following websites:
**3.3 Browser settings and prohibition of the use of cookies**
Accepting or enabling cookies is not mandatory. The data subject may reset their browser settings to refuse all cookies or to be notified when a cookie is sent; however, certain functions or services may not work properly without cookies. Most browsers accept cookies by default, but these settings can usually be changed to prevent automatic acceptance and to offer a choice each time.
Settings options are generally found in the "Options" or "Settings" menu of the browser; to find the settings best suited to the data subject, it is recommended to use the browser's "Help" menu and search.
Guides for managing cookies in the respective browsers are available at the following links:
Google Chrome (PC):
Google Chrome (Mobile):
Mozilla Firefox:
Microsoft Edge:
Opera: [https://help.opera.com/en/latest/web-preferences/#cookies](https://help.opera.com/en/latest/web-preferences/%23cookies)
Safari (PC):
Safari (Mobile):
**4\. Key rights of the data subject related to the processing**
**The data subject may exercise their rights by contacting the controller. In this framework, the data subject may exercise their rights via any of the contact details provided in Section 1 of this notice.**
**4.1 Right of access**
The data subject shall have the right, via the contact details provided in Section 1 of this notice, to obtain from the controller confirmation as to whether or not personal data concerning them are being processed, and, where that is the case, to access the following information:
- which of their personal data the controller processes, on what legal basis, for what purpose, and for how long;
- to whom, when, based on which legal provision, and which personal data have been made accessible by the controller or transferred to whom;
- from which source the personal data originates;
- whether the controller applies automated decision-making, including the logic involved and profiling.
The controller shall provide a copy of the personal data being processed to the data subject free of charge upon the first request; thereafter, a reasonable fee based on administrative costs may be charged.
To ensure compliance with data-security requirements and to protect the data subject's rights, the controller must verify that the person seeking to exercise the right of access is, in fact, the data subject. Therefore, the provision of information, the enabling of inspection of the data, and the issuing of copies are conditional upon verification of the data subject's identity.
**4.2 Right to rectification**
The data subject may, via the contact details provided in Section 1 of this notice, request that the controller modify any of their personal data. If the data subject can credibly demonstrate the accuracy of the rectified data, the controller shall comply with the request within one month at the latest and notify the data subject at the provided contact.
**4.3 Right to restriction of processing**
By using the contact details provided in Section 1 of this notice, the data subject may request that the controller restrict the processing of their personal data (with a clear indication of the restricted nature of processing and ensuring separate storage from other data). The controller shall comply with the request if any of the following applies:
- the data subject contests the accuracy of the personal data; in this case, restriction shall apply for a period sufficient for the controller to verify the accuracy of the personal data;
- the processing is unlawful and the data subject opposes the erasure of the personal data and requests a restriction on its use instead;
- the controller no longer needs the personal data for the purposes of the processing, but the data subject requires them for the establishment, exercise, or defence of legal claims;
- the data subject has objected to the processing; in this case, restriction shall apply until it is established whether the controller's legitimate grounds override those of the data subject.
**4.4 Right to object**
On grounds relating to their particular situation, the data subject may, at any time and via any of the contact details provided in Section 1 of this notice, object to processing under Point (e) of Paragraph (1) of Article 6 GDPR if, in their view, the controller does not process the personal data appropriately for the purpose set out in this privacy notice. In such a case, it is for the controller to demonstrate compelling legitimate grounds for the processing that override the interests, rights and freedoms of the data subject, or relate to the establishment, exercise, or defence of legal claims.
**4.5 Right to erasure**
By using the contact details provided in Section 1 of this notice, the data subject may request that the controller erase their personal data, which means that the controller is obliged to erase personal data concerning the data subject without undue delay if:
- the data subject withdraws their consent to the processing;
- the personal data are no longer necessary in relation to the purposes for which the controller processed them;
- the personal data have been processed unlawfully;
- a legal obligation imposes on the controller a duty to erase the data, and this duty has not yet been complied with.
**4.6 Right to lodge a complaint and to an effective judicial remedy**
If the data subject considers that the processing infringes the GDPR or the provisions of Act CXII of 2011 on the Right of Informational Self-Determination and on Freedom of Information, or considers the controller's processing of their personal data otherwise objectionable, we recommend first contacting the controller directly; all complaints will be investigated.
If, despite their complaint, the data subject continues to find the controller's processing objectionable or wishes to contact the authority directly, they may file a report with the National Authority for Data Protection and Freedom of Information (address: 1055 Budapest, Falk Miksa utca 9-11.; postal address: H-1363 Budapest, Pf. 9.; email: ; website: ).
The data subject may bring an action before a court for the protection of their data; the court shall proceed without delay. In this case, the data subject may bring the action before the tribunal with jurisdiction over their place of residence (permanent address) or place of stay (temporary address) (). The tribunal competent by place of residence or place of stay can be found at .
This notice takes effect on 17 December 2025 and remains in force until withdrawn.