The following description contains general information, but the specific details of each data processing can be found in the various privacy policies.
What You Need to Know about BKK Data Processing
Everybody has the right for the protection of her / his personal data, and accordingly the private individuals have the right to know who are using, where, when and for what purpose her/his personal data. This is required by the General Data Protection Regulation of the European Union (GDPR), and Act CXII of 2011 on the right to informational self-determination and on the freedom of information ("Privacy Act"). As a data controller, the BKK is responsible for providing its customers, partners and employees with appropriate and clear information on the details of its own data processing activities, in compliance with the provisions of the GDPR and the Privacy Act.
The purpose of this information
Our aim is to provide you with accurate information about how we are processing and protecting the personal data you entrust to us. We are taking the security of your personal data seriously, as you honour us with your trust when you share them with us. Here you can find out how we are using your personal data and we also tell you how to contact us if you have any further questions.
What personal data are we collecting and storing?
The personal data we are collecting about you and how we are collecting that personal data depends largely on which services of ours you use. How you contacted us is an important factor as well, even if you are not our customer, or if we are processing your personal data that we received from a third party with your permission.
We are collecting personal data when:
- you purchase a service or a (mobile) ticket, so that we can provide you with the right service,
- you make a contract with us, and it is necessary for the fulfilment of the contract,
- you subscribe to our newsletter to send direct marketing (advertising) or other offers by direct inquiry,
- you contact us (e.g., via telephone or e-mail), we are storing your contact details provided for contact reasons,
- you make a complaint, for handling complaints;
- we recover penalty fare debts, for settling penalty fares,
- cameras of the ticket vending machines (TVMs) take pictures of you, for the protection of human life, physical integrity, personal liberty, the protection of business secrets and the continuous recording of images recorded by an electronic surveillance system for the protection of persons and property,
- you apply for a job at BKK, for recruitment and selection processes.
We are processing your personal data with the following legal bases
- Based on your consent
This includes cases such as when we are not processing your personal data based on a legal authorisation or obligation but based on your consent. You can withdraw your consent to the processing of your data at any time.
- In connection with a contract or its conclusion
In order for us to enter into a contractual relationship with you, we need to verify your personal data. In addition, we are offering services that you can only use under special conditions. In such cases, we must always check the personal data required for the conclusion of the contract.
- In order to meet our legal obligations
Your personal data may also be necessary for the fulfilment of our obligations related to taxation and accounting (e.g., when issuing an invoice related to the use of the service). We are always processing such personal data according to strict internal rules.
- Necessary to carry out a public interest task
Under the relevant legal provisions, the activities of BKK (service control and integrated customer service activities) are defined as public tasks. The use of on-board camera recordings is necessary for the implementation of BKK's service monitoring and integrated customer service tasks, i.e., public tasks.
- In the legitimate interest of BKK
There are cases when data processing is necessary to enforce the legitimate interests of BKK. It is important in such cases that we must pay special attention to the fact that the interests of BKK do not take precedence over your interests and fundamental rights, which necessitate the protection of your personal data.
How long are we storing your personal data?
We are only processing your personal data for the above purposes and for as long as:
- we have legal obligation or authority to do so;
- it is justified in order to fulfil your contract with BKK;
- you have given us a consent to do so;
- it is strictly necessary for the purpose of data processing.
How are we ensuring the protection of your personal data?
BKK is storing personal data in secure server rooms, where appropriate security measures are taken to ensure the protection of this personal data. Our security staff is responsible for data protection and security by constantly reviewing our data security procedures to ensure that your personal data is fully protected.
We cannot be held responsible for any unauthorised access or loss of data beyond our control. If a third-party website is also available from the BKK website, we cannot be held responsible for the content displayed there. However, we are responsible for protecting the personal data you entrust to us and for never sharing it with anyone who is not authorised.
Your rights concerning your processed data
- Right of rectification
You can request clarification or updating of the personal data we are processing by posting to 1075 Budapest, Rumbach Sebestyén utca 19-21., via e-mail to bkkbkk.hu or adatvedelembkk.hu or in person at one of our Customer Service Centres by taking minutes, after identification of the person.
- Right to access
You can request a copy of your personal data stored at BKK.
- Right to data portability
You may request your personal data stored at BKK on a data carrier.
- Right to object
In some justified cases, you may object to the processing of your personal data by BKK.
- Marketing related inquiries
If you do not want to receive information or offers from us, you can let us know.
- Right to restriction of processing
If you find any error concerning your personal data handled by BKK or in your opinion we are not authorised to handle it, please feel free to contact us.
- Right to erasure
In some cases, you may request the deletion of your personal data.
Complaints concerning data processing
You can make a complaint on the processing of your personal data in the following ways:
- at BKK (you can reach our data protection officer at the e-mail address adatvedelembkk.hu or by sending a letter to: 19-21, Rumbach Sebestyén utca, 1075 Budapest);
- in court
- at National Authority for Data Protection and Freedom of Information (NAIH).
Privacy Policies
You can find our specific privacy policies on our most typical data processing operations and activities in the downloads.