{"id":3,"date":"2026-04-13T13:57:06","date_gmt":"2026-04-13T11:57:06","guid":{"rendered":"http:\/\/atetofedo.hu\/?page_id=3"},"modified":"2026-10-08T12:25:07","modified_gmt":"2026-10-08T10:25:07","slug":"adatkezelesi-tajekoztato","status":"publish","type":"page","link":"https:\/\/atetofedo.hu\/en\/adatkezelesi-tajekoztato\/","title":{"rendered":"Privacy and Data Protection Notice"},"content":{"rendered":"<div data-elementor-type=\"wp-page\" data-elementor-id=\"3\" class=\"elementor elementor-3\">\n\t\t\t\t<div class=\"elementor-element elementor-element-7a19f186 e-flex e-con-boxed e-con e-parent\" data-id=\"7a19f186\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-7373219b elementor-widget elementor-widget-text-editor\" data-id=\"7373219b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t\n<p><b>The MURMO Centre for Specialist Psychology and Art Therapy<\/b><\/p>\n<p><b>and the Pro Juventa Foundation for the Mental Health of Young People.\u00a0<\/b><\/p>\n<ol>\n<li><b><\/b><b>Name of the Data Controller<\/b><\/li>\n<\/ol>\n<p>MURMO Centre for Specialist Psychology and Art Therapy and the Pro Juventa Foundation for the Mental Health of Young People (hereinafter:\u00a0<i>Institution, Data Controller<\/i>)<\/p>\n<p><b>Postal address:\u00a0<\/b>1123 Budapest, Gy\u0151ri \u00fat 2\/c, 2nd floor.<br \/><b>Telephone:<\/b>\u00a0+36 20 374 8983<br \/><b>Email address<\/b>:\u00a0<a href=\"mailto:murmomail@murmo.hu\">murmomail@murmo.hu<\/a>\u00a0.hu<\/p>\n<p><b>Website:<\/b>\u00a0www. murmo.hu<\/p>\n<p>\u00a0<\/p>\n<p>The staff of the MURMO Centre for Specialist Psychology and Art Therapy and the Pro Juventa Foundation for the Mental Health of Young People handle the right to self-determination of the people receiving care at our centre with particular care and security. Recorded health and personal data are treated confidentially, in accordance with data protection legislation, professional requirements and the applicable data-processing policy. The Centre takes all security, technical and organisational measures necessary to safeguard the data.<\/p>\n<p>The MURMO Centre for Specialist Psychology and Art Therapy and the Pro Juventa Foundation for the Mental Health of Young People: the former is an organisational unit without separate legal personality.<\/p>\n<p>The current version of this policy is always available on the\u00a0<a href=\"http:\/\/www.murmo.hu\/\">www.murmo.hu<\/a>\u00a0website.<\/p>\n<p>MURMO Centre for Specialist Psychology and Art Therapy (privately funded)<\/p>\n<p>Pro Juventa Foundation for the Mental Health of Young People (non-profit organisation).<\/p>\n<p>\u00a0<\/p>\n<p><b>Legislation Governing Data Processing<\/b><\/p>\n<p>Health and personal data are processed on the basis of the data subject\u2019s personal and voluntary consent and the following legislation:<\/p>\n<p>\u00a0<\/p>\n<ul>\n<li aria-level=\"1\">Act CXII of 2011 on Informational Self-Determination and Freedom of Information<\/li>\n<li aria-level=\"1\">Act CLIV of 1997 on Healthcare;<\/li>\n<\/ul>\n<ul>\n<li aria-level=\"1\">Government Decree 43\/1999 (XII. 3.) on the detailed rules for financing healthcare services from the Health Insurance Fund.<\/li>\n<li aria-level=\"1\">Act CL of 2017 on the Rules of Taxation;<\/li>\n<li aria-level=\"1\">Regulation (EU) 2016\/679 of the European Parliament and of the Council (General Data Protection Regulation, GDPR)<\/li>\n<\/ul>\n<p>This notice applies to:<\/p>\n<ul>\n<li aria-level=\"1\">all organisational units of the Foundation and the Institution that provide healthcare, and all organisations and staff carrying out professional supervision or control who process health and personal data;<\/li>\n<li aria-level=\"1\">all natural persons using the Institution\u2019s publicly or privately funded healthcare services (hereinafter:\u00a0<b>data subject<\/b>), and their relatives or legal representatives;<\/li>\n<\/ul>\n<p>\u00a0<\/p>\n<ul>\n<li aria-level=\"1\">all health and identification data relating to the data subject processed under Act XLVII of 1997 on the Processing and Protection of Health and Related Personal Data;<\/li>\n<\/ul>\n<p>\u00a0<\/p>\n<ul>\n<li aria-level=\"1\">external service providers that process or come into contact with personal data within the Institution\u2019s remit.<\/li>\n<\/ul>\n<p>\u00a0<\/p>\n<ol>\n<li aria-level=\"1\">Purpose of Data Processing:<\/li>\n<\/ol>\n<p>At our Centre and Foundation, health and identification data are processed for the following purposes:<\/p>\n<ul>\n<li aria-level=\"1\">to preserve, improve and maintain the client\u2019s health;<\/li>\n<\/ul>\n<p>\u00a0<\/p>\n<ul>\n<li aria-level=\"1\">to promote the preservation, improvement and maintenance of health;<\/li>\n<\/ul>\n<p>\u00a0<\/p>\n<ul>\n<li aria-level=\"1\">to support effective healthcare and treatment, including professional supervision;<\/li>\n<\/ul>\n<p>\u00a0<\/p>\n<ul>\n<li aria-level=\"1\">to monitor the data subject\u2019s state of health;<\/li>\n<\/ul>\n<p>\u00a0<\/p>\n<ul>\n<li aria-level=\"1\">to take measures required in the interests of public health and epidemiology;<\/li>\n<li aria-level=\"1\">to enforce patients\u2019 rights.<\/li>\n<\/ul>\n<p>Beyond the purposes listed above, health and personal data are processed only in cases specified by law, for the purposes stated there and in order to fulfil statutory obligations.<\/p>\n<p>Only health and identification data required by law and professional rules and strictly necessary for the stated purpose may be processed.<\/p>\n<p>Data Processing Related to Appointment Requests<\/p>\n<p>The Data Controller enables data subjects to arrange appointments concerning its services or other questions.<\/p>\n<p><b>Data subjects:<\/b><b><br \/><\/b>Any natural person with whom the Data Controller arranges an appointment or whose questions it answers.<\/p>\n<p>\u00a0<\/p>\n<p><b>Scope of Data Processed and Purpose of Processing:<\/b><\/p>\n<table>\n<tbody>\n<tr>\n<td><b>Personal data<\/b><\/td>\n<td><b>Purpose of Data Processing<\/b><\/td>\n<\/tr>\n<tr>\n<td>Name of the minor<\/td>\n<td>Identification<\/td>\n<\/tr>\n<tr>\n<td>Name, email address and telephone number of the legal representative<\/td>\n<td>Contact and communication.<\/td>\n<\/tr>\n<tr>\n<td>Address of the minor<\/td>\n<td>Communication<\/td>\n<\/tr>\n<tr>\n<td>Date of birth of the minor<\/td>\n<td>Identification, age verification.<\/td>\n<\/tr>\n<tr>\n<td>Reason for registration and relevant history<\/td>\n<td>Used to book an appointment with the appropriate specialist.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u00a0<\/p>\n<p><b>Legal Basis for Processing<\/b><\/p>\n<p>The legal basis is the data subject\u2019s consent under Section 5(1)(a) of the Hungarian Information Act (Infotv.).<\/p>\n<p>\u00a0<\/p>\n<p><b>Duration of Processing<\/b><\/p>\n<p>The Data Controller retains personal data recorded in connection with patient registration for 5 years.<\/p>\n<p>\u00a0<\/p>\n<p><b>Data Processing for Assessment and Treatment\u00a0<\/b><\/p>\n<p>Collection of health and personal data forms part of treatment. Providing the required data is mandatory, and the data subject must verify the information provided.<\/p>\n<p>\u00a0<\/p>\n<p><b>Data subjects: \u00a0<\/b><b><br \/><\/b>Any person to whom the Data Controller provides treatment, as well as the data subject\u2019s relative or legal representative and any other person designated by the data subject.<\/p>\n<p><b>Scope of Data Processed and Purpose of Processing\u00a0<\/b><\/p>\n<table>\n<tbody>\n<tr>\n<td>Personal data<\/td>\n<td>Purpose of Data Processing<\/td>\n<\/tr>\n<tr>\n<td>Child\u2019s family and given name, registered address, place and date of birth, mother\u2019s name and sex<\/td>\n<td>Identification<\/td>\n<\/tr>\n<tr>\n<td>TAJ (social security) number of the minor<\/td>\n<td>Identification<\/td>\n<\/tr>\n<tr>\n<td>Name, email address, telephone number \/ billing address of the legal representative<\/td>\n<td>Contact and communication \/ in the case of privately funded services, issuance of a legally compliant invoice.<\/td>\n<\/tr>\n<tr>\n<td>Health data and documentation concerning physical or mental condition<\/td>\n<td>Provision of treatment.<\/td>\n<\/tr>\n<tr>\n<td>Email address and telephone number of a minor aged 14 or over<\/td>\n<td>Communication and consultation (with the consent of the legal representative)<\/td>\n<\/tr>\n<tr>\n<td>Health-fund identification data (for privately funded services)<\/td>\n<td>Issuance of a health-fund invoice.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u00a0<\/p>\n<p><b>Legal Basis for Processing<\/b><b><br \/><\/b>For the treatment of a minor and the preservation or protection of the child\u2019s health, the legal basis for processing is the statutory provision under Section 5(1)(b) of the Hungarian Information Act (Infotv.).<\/p>\n<p><b>Mandatory data processing<\/b><b><br \/><\/b>Apart from identification data required for healthcare, provision of other health and identification data by the data subject or legal representative is voluntary and is based on consent under Section 5(1)(a) of the Hungarian Information Act (Infotv.).<b>.<\/b><\/p>\n<p><b>Data subject\u2019s consent<\/b><\/p>\n<p>If the data subject contacts the therapy centre voluntarily,\u00a0<b>their consent to the processing of their health and identification data related to treatment shall be deemed to have been given unless they declare otherwise<\/b>, and the data subject and their legal representative are informed accordingly.<\/p>\n<p>We do not provide care in cases of urgent medical need or where the data subject lacks decision-making capacity.<\/p>\n<p>\u00a0<\/p>\n<p>For invoicing, processing is mandatory under Section 5(1)(b) of the Info Act, as required by Act CXXVII of 2007 on Value Added Tax.<\/p>\n<p><b>Duration of Processing\u00a0<\/b><\/p>\n<p>Health documentation must be retained for at least 30 years from the date of recording, and final\/closing documentation for at least 50 years. After the mandatory retention period, data may continue to be retained for treatment or scientific research where justified. If further retention is not justified, the data must be deleted, except for documentation of scientific significance.<\/p>\n<p><b>Data processing during online consultations<\/b><\/p>\n<p><b><br \/><\/b>Where necessary and with the data subject\u2019s separate consent, a consultation may also take place by online video connection (Skype, Zoom). The rules governing processing of health data are the same as for an in-person consultation. In this case, the personal data processed by the Data Controller are extended only by the identifier used by the data subject in the relevant application (e.g. Skype ID). Only the member of staff conducting the consultation is present on behalf of the Data Controller, and no video or audio recording is made.<\/p>\n<p>Skype\u2019s privacy notice is available at the following link:\u00a0<a href=\"https:\/\/privacy.microsoft.com\/hu-hu\/privacystatement\">https:\/\/privacy.microsoft.com\/hu-hu\/privacystatement<\/a><\/p>\n<p>Skype\u2019s privacy notice is available at the following link:<br \/><a href=\"https:\/\/zoom.hu\/adatvedelem\/\">https:\/\/zoom.hu\/adatvedelem\/<\/a><\/p>\n<p><b>Processing relating to consent declarations:\u00a0<\/b><\/p>\n<p>Processing consent declarations is necessary to demonstrate the legal basis for processing and fulfilment of consent, in accordance with the accountability principle, and for communication purposes.<\/p>\n<p><b>Data subject<\/b><b>\u00a0<\/b><b><br \/><\/b>Any natural person who provides the Data Controller with a declaration consenting to the processing of their data for a specified purpose.<\/p>\n<p>Scope of Data Processed and Purpose of Processing<\/p>\n<table>\n<tbody>\n<tr>\n<td><b>Personal data<\/b><\/td>\n<td><b>Purpose of Data Processing<\/b><\/td>\n<\/tr>\n<tr>\n<td>Name, place and date of birth, registered address<\/td>\n<td>Communication<\/td>\n<\/tr>\n<tr>\n<td>Data specified in the consent declaration and signature.<\/td>\n<td>Necessary for the fulfilment of the consent.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u00a0<\/p>\n<p><b>Legal Basis for Processing<\/b><\/p>\n<p>The data subject\u2019s consent under Section 5(1)(a) of the Hungarian Information Act (Infotv.).<\/p>\n<p><b>Duration of Processing<\/b><\/p>\n<p>Processing lasts until the limitation period for enforcing rights and obligations arising from the relevant legal relationship expires, or, if no such legal relationship was established, until deletion at the data subject\u2019s request.<\/p>\n<p>Processing for scientific research purposes<\/p>\n<p>Processing of Personal and Health Data in Scientific Research Conducted at the Institution<\/p>\n<p><b>Data subject<\/b><br \/>The minor and the relative (legal representative) of the data subject who take part in scientific research.<\/p>\n<p><b>Scope of Data Processed and Purpose of Processing<\/b><\/p>\n<table>\n<tbody>\n<tr>\n<td><b>Personal data<\/b><\/td>\n<td><b>Purpose of Data Processing<\/b><\/td>\n<\/tr>\n<tr>\n<td>Name, place and date of birth, registered address, sex<\/td>\n<td>Identification and communication<\/td>\n<\/tr>\n<tr>\n<td>Data specified in the consent declaration and signature.<\/td>\n<td>Necessary for the fulfilment of the consent<\/td>\n<\/tr>\n<tr>\n<td>Health data and documentation concerning physical or mental condition<\/td>\n<td>Supporting research activities<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u00a0<\/p>\n<p><b>Legal Basis for Processing<\/b><\/p>\n<p>The legal basis for processing is consent under Section 5(1)(a) of the Hungarian Information Act (Infotv.).<\/p>\n<p><b>Duration of Processing<\/b><\/p>\n<p>Processing lasts until the limitation period for enforcing rights and obligations arising from the relevant legal relationship expires, or, if no such legal relationship was established, until deletion at the data subject\u2019s request.<\/p>\n<p>Other information: personal data collected or stored for scientific research may be used only for scientific research. Personal data must be anonymised as soon as the research purpose permits. Until then, data capable of identifying a specific or identifiable natural person are stored separately. Such data may be linked to other data only where necessary for the research. A body or person carrying out scientific research may publish personal data only with the data subject\u2019s written consent. Scientific publications must not contain health or identifying data in a form that makes the identity of the person receiving treatment ascertainable.<\/p>\n<p>A researcher applying for access for scientific research purposes may inspect the personal and health data of people receiving care if the application has been approved. The research application must specify the scope of the data requested and the purpose of the research. Permission is granted by the director responsible for education and research, who also informs the head of the relevant organisational unit and the data protection officer.<\/p>\n<p>The Data Controller keeps a register of research applications and of persons who have obtained access to data on the basis of granted permission; the register is retained for 10 years.<\/p>\n<p>During scientific research, no copy of stored data may be made that also contains identifying personal data.<\/p>\n<p><b>General rules for processing health data:<\/b><\/p>\n<ul>\n<li aria-level=\"1\">When data are recorded, the date and time of recording and the identity of the person recording the data must be entered in the health documentation.<\/li>\n<\/ul>\n<p>\u00a0<\/p>\n<ul>\n<li aria-level=\"1\">Every note or entry made in a patient\u2019s documentation must be authenticated by signature or initials and, where necessary, dated; in electronic data processing, the system must ensure clear identification of the person making the entry.<\/li>\n<\/ul>\n<p>\u00a0<\/p>\n<ul>\n<li aria-level=\"1\">Data relating to the patient\u2019s assessment and treatment are contained in the health documentation. The documentation must be maintained so that it accurately reflects the course of care.<\/li>\n<\/ul>\n<p>\u00a0<\/p>\n<ul>\n<li aria-level=\"1\">During treatment, data required by professional rules must be recorded in the health documentation. The treating physician determines which additional health data, beyond mandatory data, are necessary in accordance with professional rules.<\/li>\n<\/ul>\n<p>\u00a0<\/p>\n<ul>\n<li aria-level=\"1\">Data not directly related to the patient\u2019s treatment may be entered in health documentation only if they are relevant to the patient\u2019s care. During treatment, only persons with appropriate access rights may access the documentation or the patient\u2019s personal data.<\/li>\n<\/ul>\n<p>Every person employed by the Institution, or working for it under another legal relationship, is bound without time limit by a duty of confidentiality regarding information about a patient\u2019s health and any other information learned in connection with their work. This duty applies regardless of how the information was obtained and therefore binds not only treating physicians and healthcare professionals but every employee of the Institution.<\/p>\n<p>The patient may provide a written waiver of confidentiality. The Institution must comply with a statutory duty to disclose data where transmission is required by law.<\/p>\n<p>Access to data and data-security measures<\/p>\n<p>\u00a0<\/p>\n<p><b>Access to data<\/b><\/p>\n<p>The Institution records in its health-data-processing register the names and positions of staff involved in data processing in each organisational unit, together with the relevant organisational unit.<\/p>\n<p>Within the therapy centre, the following persons may be authorised to process health and identifying data:<\/p>\n<ul>\n<li aria-level=\"1\">the head of the Centre<\/li>\n<li aria-level=\"1\">psychiatrists<\/li>\n<li aria-level=\"1\">psychologists, special education teachers, art therapists<\/li>\n<li aria-level=\"1\">staff performing administrative tasks<\/li>\n<li aria-level=\"1\">data-processing staff member<\/li>\n<li aria-level=\"1\">volunteers with restricted access<\/li>\n<li aria-level=\"1\">IT\/web development staff member<\/li>\n<li aria-level=\"1\">the accountants of the therapy centre and its professionals<\/li>\n<\/ul>\n<p>In electronic data processing, a user-name\/password pair replaces a signature. The person exercising employer rights for the organisational unit is responsible for maintaining the register and authorising access. The password owner is responsible for keeping the password confidential and for any misuse. The Institution uses only electronic systems capable of secure password handling. In electronic processing, the system logs access.<\/p>\n<p>For manual data processing, the identity of the person processing or modifying the data is verified by comparing their signature with the signature sample recorded in the register.<\/p>\n<p><b>Data-security measures<\/b><\/p>\n<p>The Data Controller uses technical and organisational measures for data protection and information security to prevent unauthorised or unlawful processing, accidental loss, destruction or damage of personal data and to ensure the accuracy, completeness and currency of the data.<\/p>\n<p>As part of its duties relating to\u00a0<b>IT security and digital data protection<\/b>\u00a0, the Data Controller ensures the following measures:<\/p>\n<ul>\n<li aria-level=\"1\">Measures against unauthorised access include access protection, password-protected network protection and a firewall, protection of the network and data files against viruses, and physical protection of data files and storage devices.\n<ul>\n<li aria-level=\"2\">Access protection \u2013 the computer and the databases accessible on it containing personal information may be accessed only with valid, identifiable authorisation (user name and unique password), and access passwords are changed every three months;<\/li>\n<li aria-level=\"2\">Network protection \u2013 password-protected Wi-Fi (WPA2-PSK) and a Sophos-protected router provide a firewall between the internal network and the internet;<\/li>\n<li aria-level=\"2\">Protection of the network and data files against viruses (NOD32);<\/li>\n<li aria-level=\"2\">Physical protection of data files and the devices carrying them (archiving, fire-safety rules and a secured server).<\/li>\n<\/ul>\n<\/li>\n<li aria-level=\"1\">To ensure secure storage, the Data Controller makes a daily backup of the entire central-server dataset to a backup NAS using RAID5. The backed-up storage medium is kept securely in the designated place and manner.<\/li>\n<\/ul>\n<p>Files containing data are irreversibly deleted once the purpose of processing has been fulfilled or when the processing period has expired or its legal basis has ceased.<\/p>\n<p>To ensure the appropriate security of personal data stored and processed on paper, the Data Controller applies the following measures:<\/p>\n<ul>\n<li aria-level=\"1\">only staff members with access rights may access the documents;<\/li>\n<li aria-level=\"1\">After documentation relating to care has been completed, the staff member processing the data stores the documents securely in accordance with the rules, locks the data-processing room, or keeps the documents in a place under continuous staff supervision (for example, a lockable filing cabinet or lockable office).<\/li>\n<li aria-level=\"1\">The Data Controller stores paper documents in a dry room suitable for document storage that can be securely locked and is equipped with appropriate fire and property-protection measures (records archive).<\/li>\n<\/ul>\n<p>Documents containing data are destroyed in a demonstrable manner once the purpose of processing has been fulfilled or when the processing period has expired or its legal basis has ceased, using measures such as document shredding and recorded disposal in accordance with the data-retention policy.<\/p>\n<p>Modification and deletion of data<\/p>\n<p>The data subject must inform the Data Controller in writing of changes occurring during the period of therapy, using the form entitled Declaration of Change to Personal Data. The data subject may request rectification or deletion of their data; details are set out in the section on the data subject\u2019s rights relating to data processing.<\/p>\n<p>When deleting data, the Data Controller physically destroys manually processed data and irreversibly removes electronically stored data. Deletion may be carried out with the joint authorisation of the data-protection officer and the director of the Institution, and the Data Controller keeps a record of the deletion. If health documentation has scientific significance, it is archived after the mandatory retention period.<\/p>\n<p>Incorrect health or personal data in health documentation are corrected or deleted in a way that preserves the ability to identify the originally recorded data. Amendments must be initialled; for electronic processing, the system ensures clear identification of the person making the entry and logs the amendment.<\/p>\n<p>Disclosure of the data subject\u2019s own or a relative\u2019s health data<\/p>\n<p>The data subject and their legal representative are entitled to information about the processing of data relating to treatment, to access health and identifying data concerning the data subject, to inspect health documentation and to make or receive copies of it.<\/p>\n<p>During the period of care, the right to request data may also be exercised by a person authorised in writing by the data subject, in addition to the data subject and legal representative. After care has ended, this right may also be exercised by a person authorised by the data subject in a private document with full probative force.<\/p>\n<p>Requests to inspect documents or obtain copies should be addressed to the professional treating the client.<\/p>\n<p>The request may be submitted\u00a0<i>in person<\/i>, with proof of identity, or\u00a0<i>in writing<\/i>, in the form of a private document with full probative force. The applicant must prove their entitlement with a photo identity document suitable for identification (e.g. identity card, new-type driving licence) and a document proving their entitlement (TAJ card, birth certificate, marriage certificate, death certificate, private document with full probative force). An oral request must be put in writing, attached to the patient\u2019s documentation and kept there.<\/p>\n<p>Where disclosure is requested by someone other than the data subject, the applicant \u2013 except in the case of a request based on law \u2013 must prove their identity and entitlement:<\/p>\n<ul>\n<li aria-level=\"1\">by an authorisation handwritten and signed by the data subject; or<\/li>\n<li aria-level=\"1\">by an authorisation prepared electronically, printed and signed by hand, certified by two witnesses; or<\/li>\n<li aria-level=\"1\">by an authorisation from the data subject contained in a private document with full probative force.<\/li>\n<\/ul>\n<p>In these cases, the document proving entitlement must be attached to the request.<\/p>\n<p>The staff member responsible for patient administration keeps a register of requests and the measures taken in response, including disclosure or refusal of disclosure.<\/p>\n<p>The first set of copies is provided free of charge. Further copies are subject to a fee based on the cost categories specified in the relevant ministerial decree. The Institution informs the applicant in writing. Payment may be made by bank transfer to the Institution\u2019s account or in cash at the cash desk.<\/p>\n<p>Each page of a paper copy provided to the applicant must bear the Institution\u2019s stamp and date. A copy made electronically onto a data carrier, including by photographing or scanning, also constitutes making a copy.<\/p>\n<p>After certification and signature, the Data Controller sends the copy to the data subject, or to an authorised representative whose authorisation includes receipt of the documentation, by registered postal item or hands it over personally at the place where the request was submitted, according to the applicant\u2019s request. Where possible, the copy is provided in the manner specified in the request. For personal collection, the applicant must prove their identity and confirm receipt and the date of receipt by signature.<\/p>\n<p><b>Access by relatives to health data relating to the cause of death of a deceased person or to treatment preceding death<\/b><\/p>\n<p>In the event of the data subject\u2019s death, the legal representative, close relative and heir are entitled, on written request, to:<\/p>\n<ul>\n<li aria-level=\"1\">access health data related or relatable to the cause of death, and<\/li>\n<li aria-level=\"1\">relating to treatment preceding death, to inspect the health documentation, and to make or receive copies of it.<\/li>\n<\/ul>\n<p><b>Identification of circumstances affecting relatives\u2019 lives and access to data relevant to their healthcare during the patient\u2019s lifetime or after death<\/b><\/p>\n<p>During the patient\u2019s lifetime or after death, the spouse, direct-line relative, sibling, heir or partner may also exercise the right to request data on written application where the health data are required because:<\/p>\n<ul>\n<li aria-level=\"1\">to identify a cause affecting the life or health of the spouse, direct-line relative, sibling, partner or their descendants; or<\/li>\n<li aria-level=\"1\">the data are required for the healthcare of the persons listed above; and<\/li>\n<li aria-level=\"1\">the health data cannot otherwise be obtained or inferred;<\/li>\n<li aria-level=\"1\">the head of the therapy centre confirms that the requested copies relate solely to the cause of death or circumstances connected with it, or to treatment preceding death; or<\/li>\n<li aria-level=\"1\">contain health data directly connected with the legally defined reason stated in the request.<\/li>\n<\/ul>\n<p>Where a relative requests only inspection of the documentation, the head of the patient-care unit provides access subject to the above restrictions and provides the necessary information. Inspection must be documented, including the time of inspection, the details of the person inspecting the documents and the signature of the manager authorising or supervising the inspection.<\/p>\n<p>\u00a0<\/p>\n<p>Data transfers and data processors<\/p>\n<p>\u00a0<\/p>\n<p>Data transfer in the case of a child-protection report:<\/p>\n<p>The Institution is required<i>\u00a0<\/i>to notify the child welfare service where a child is at risk, or<i>\u00a0<\/i>to initiate an authority procedure in cases of abuse, severe neglect or another serious risk factor, including serious self-endangering behaviour by the child (Section 17 of Act XXXI of 1997).<\/p>\n<p>Data disclosure at the request of a body outside the healthcare provider network: upon a data request or written enquiry from the bodies specified by law, the treating physician and the health-insurance body provide the requesting body with the data subject\u2019s health data and the identifying data necessary for identification that the requesting body is legally entitled to process. In accordance with Section 4(4) of the relevant health-data legislation, the request must specify the health and identifying data sought, including data available from a medical report prepared by the healthcare provider. Requesting bodies may include the following:<\/p>\n<ol>\n<li aria-level=\"1\"><b>in criminal proceedings: the court, prosecution service, investigating authority,<\/b>body conducting preparatory proceedings and forensic expert; in civil, non-contentious and administrative proceedings: the competent administrative authority, prosecution service, court and forensic expert;<\/li>\n<li aria-level=\"1\">in administrative-offence proceedings:\u00a0<b>the bodies conducting the proceedings;<\/b>,<\/li>\n<li aria-level=\"1\">for potential conscripts and persons subject to military service:\u00a0<b>the competent district office of the government office<\/b>, the\u00a0<b>Hungarian Defence Forces<\/b>\u00a0military administration and central data-processing body, and the committee determining military medical fitness;<\/li>\n<li aria-level=\"1\">the\u00a0<b>national security services<\/b>, in order to perform the tasks defined in Act CXXV of 1995 on the National Security Services, within the scope of the authorisation granted therein,<\/li>\n<li aria-level=\"1\">the\u00a0<b>Hungarian Defence Forces<\/b>\u00a0military administration and central data-processing body, for the assignment and rapid, differentiated call-up of trained reservists within the scope defined by defence legislation;<\/li>\n<li aria-level=\"1\">in an ethics procedure concerning a healthcare professional: the competent\u00a0<b>chamber body authorised to conduct the procedure;<\/b>,<\/li>\n<li aria-level=\"1\">the bodies responsible for internal crime prevention and detection and for\u00a0<b>counter-terrorism<\/b>under the Police Act, within the scope of their statutory powers;<\/li>\n<\/ol>\n<p><b>Information on data processing and storage carried out at the Institution<\/b><\/p>\n<p>\u00a0<\/p>\n<table>\n<tbody>\n<tr>\n<td><b>Professional \/ data processor\u00a0<\/b><\/td>\n<td><b>Incoming data<\/b><\/td>\n<td><b>Channel<\/b><\/td>\n<td><b>Outgoing data (another professional, system or contact)<\/b><\/td>\n<td><b>Channel<\/b><\/td>\n<\/tr>\n<tr>\n<td>clinical psychologist<\/td>\n<td>medical report<\/td>\n<td>from parent, email<\/td>\n<td>team, external physician<\/td>\n<td>telephone<\/td>\n<\/tr>\n<tr>\n<td>neuropsychologist<\/td>\n<td>case history form<\/td>\n<td>from parent, email<\/td>\n<td>external supervisor<\/td>\n<td>verbally<\/td>\n<\/tr>\n<tr>\n<td>art therapist<\/td>\n<td>photo<\/td>\n<td>camera<\/td>\n<td>court, team, exhibition,<\/td>\n<td>email, exhibition, website<\/td>\n<\/tr>\n<tr>\n<td>special education teacher<\/td>\n<td>court request<\/td>\n<td>Zoom<\/td>\n<td>family support service<\/td>\n<td>letter<\/td>\n<\/tr>\n<tr>\n<td>psychotherapist<\/td>\n<td>educational report<\/td>\n<td>letter<\/td>\n<td>educational support service<\/td>\n<td>online meeting \u2013 Zoom<\/td>\n<\/tr>\n<tr>\n<td>couples and family therapist<\/td>\n<td>artwork? (drawing, painting, etc.)<\/td>\n<td>SMS, Messenger message<\/td>\n<td>hospital<\/td>\n<td>Drive\/email<\/td>\n<\/tr>\n<tr>\n<td>art therapist<\/td>\n<td>test results (Rorschach, WISC-IV, TAT, World Test, etc.)<\/td>\n<td>verbally by telephone<\/td>\n<td>child psychiatry department<\/td>\n<td>email\/Drive<\/td>\n<\/tr>\n<tr>\n<td>child psychiatrist<\/td>\n<td>special education report<\/td>\n<td>in-person meeting<\/td>\n<td>school: teacher, school psychologist, mentor, school counsellor, head teacher<\/td>\n<td>email\/Drive<\/td>\n<\/tr>\n<tr>\n<td>counselling psychologist<\/td>\n<td>neuropsychological expert report<\/td>\n<td>Viber, WhatsApp, etc.<\/td>\n<td>nursery school: nursery teacher, nursery school psychologist, nursery school head<\/td>\n<td>email \/ Drive<\/td>\n<\/tr>\n<tr>\n<td>educational psychologist<\/td>\n<td>police letter<\/td>\n<td>\u00a0<\/td>\n<td>external:<\/td>\n<td>email\/Drive<\/td>\n<\/tr>\n<tr>\n<td>\u00a0<\/td>\n<td>\u00a0<\/td>\n<td>\u00a0<\/td>\n<td>psychologist<\/td>\n<td>email\/Drive<\/td>\n<\/tr>\n<tr>\n<td>\u00a0<\/td>\n<td>\u00a0<\/td>\n<td>\u00a0<\/td>\n<td>family therapist<\/td>\n<td>email\/Drive<\/td>\n<\/tr>\n<tr>\n<td>\u00a0<\/td>\n<td>\u00a0<\/td>\n<td>\u00a0<\/td>\n<td>mediator<\/td>\n<td>email\/Drive<\/td>\n<\/tr>\n<tr>\n<td>\u00a0<\/td>\n<td>\u00a0<\/td>\n<td>\u00a0<\/td>\n<td>police<\/td>\n<td>email\/Drive<\/td>\n<\/tr>\n<tr>\n<td>\u00a0<\/td>\n<td>\u00a0<\/td>\n<td>\u00a0<\/td>\n<td>psychiatrist<\/td>\n<td>email\/Drive<\/td>\n<\/tr>\n<tr>\n<td>\u00a0<\/td>\n<td>\u00a0<\/td>\n<td>\u00a0<\/td>\n<td>family support service<\/td>\n<td>email\/Drive<\/td>\n<\/tr>\n<tr>\n<td>\u00a0<\/td>\n<td>\u00a0<\/td>\n<td>\u00a0<\/td>\n<td>child welfare service<\/td>\n<td>email\/Drive<\/td>\n<\/tr>\n<tr>\n<td>\u00a0<\/td>\n<td>\u00a0<\/td>\n<td>\u00a0<\/td>\n<td>public education institutions<\/td>\n<td>email\/Drive<\/td>\n<\/tr>\n<tr>\n<td>clinical psychologist<\/td>\n<td>\u00a0<\/td>\n<td>\u00a0<\/td>\n<td>child-protection report to the family support service<\/td>\n<td>email, letter, telephone<\/td>\n<\/tr>\n<tr>\n<td>clinical psychologist<\/td>\n<td>case history form<\/td>\n<td>from parent, email<\/td>\n<td>team<\/td>\n<td>Drive<\/td>\n<\/tr>\n<tr>\n<td>\u00a0<\/td>\n<td>case history form<\/td>\n<td>from parent, on paper, handed over in person<\/td>\n<td>team<\/td>\n<td>Drive<\/td>\n<\/tr>\n<tr>\n<td>child psychiatrist<\/td>\n<td>Educational support service report<\/td>\n<td>email<\/td>\n<td>special education teacher, psychologist, movement therapist<\/td>\n<td>email\/Drive<\/td>\n<\/tr>\n<tr>\n<td>clinical psychologist<\/td>\n<td>test results (administered test)<\/td>\n<td>generated on site<\/td>\n<td>\u00a0<\/td>\n<td>Drive<\/td>\n<\/tr>\n<tr>\n<td>Clinical psychologist<\/td>\n<td>patient\u2019s telephone number, email address, home address, billing address<\/td>\n<td>murmomail<\/td>\n<td>\u00a0<\/td>\n<td>murmomail<\/td>\n<\/tr>\n<tr>\n<td>clinical psychologist<\/td>\n<td>therapeutic material, clinical progress notes<\/td>\n<td>generated on site, notes<\/td>\n<td>\u00a0<\/td>\n<td>child\u2019s folder, Drive<\/td>\n<\/tr>\n<tr>\n<td>clinical psychologist<\/td>\n<td>therapeutic material, test documentation, photograph<\/td>\n<td>generated on site<\/td>\n<td>\u00a0<\/td>\n<td>Drive, phone photo gallery<\/td>\n<\/tr>\n<tr>\n<td>clinical psychologist<\/td>\n<td>expert report, short report, comprehensive expert report<\/td>\n<td>generated on site<\/td>\n<td>parent, patient<\/td>\n<td>email, Drive, printed report provided to the parent<\/td>\n<\/tr>\n<tr>\n<td>clinical psychologist, art therapist<\/td>\n<td>minutes (of group or individual sessions and team meetings)<\/td>\n<td>generated on site<\/td>\n<td>team, volunteer<\/td>\n<td>Drive<\/td>\n<\/tr>\n<tr>\n<td>neuropsychologist<\/td>\n<td>Educational support service report<\/td>\n<td>email<\/td>\n<td>special education teacher, psychologist, movement therapist<\/td>\n<td>email\/Drive<\/td>\n<\/tr>\n<tr>\n<td>neuropsychologist<\/td>\n<td>test results (administered test)<\/td>\n<td>generated on site<\/td>\n<td>special education teacher, psychologist, movement therapist<\/td>\n<td>Drive<\/td>\n<\/tr>\n<tr>\n<td>neuropsychologist<\/td>\n<td>patient\u2019s telephone number, email address, home address, billing address<\/td>\n<td>murmomail<\/td>\n<td>\u00a0<\/td>\n<td>murmomail<\/td>\n<\/tr>\n<tr>\n<td>neuropsychologist<\/td>\n<td>test documentation, photograph<\/td>\n<td>generated on site<\/td>\n<td>special education teacher, psychologist, movement therapist<\/td>\n<td>Drive, phone photo gallery<\/td>\n<\/tr>\n<tr>\n<td>neuropsychologist<\/td>\n<td>expert report, short report, comprehensive expert report<\/td>\n<td>generated on site<\/td>\n<td>parent, patient<\/td>\n<td>email, Drive, printed report provided to the parent<\/td>\n<\/tr>\n<tr>\n<td>neuropsychologist<\/td>\n<td>minutes (of group or individual sessions and team meetings)<\/td>\n<td>generated on site<\/td>\n<td>team, volunteer<\/td>\n<td>Drive<\/td>\n<\/tr>\n<tr>\n<td>art therapist<\/td>\n<td>previous discharge reports<\/td>\n<td>from parents, email<\/td>\n<td>team<\/td>\n<td>Drive<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>Accountant\u2019s details<\/p>\n<p>IT specialist\u2019s details<\/p>\n<p>\u00a0<\/p>\n<p>Rights of the data subject in relation to data processing<\/p>\n<p>At the data subject\u2019s request, the patient-rights representative provides information about rights relating to the handling of health documentation, taking into account the practice applied by the Institution. The name and contact details of the patient-rights representative are published at www.murmo.hu and in the Institution\u2019s waiting room.<\/p>\n<p>\u00a0<\/p>\n<p>Data protection officer<b>:<\/b><\/p>\n<p>\u00a0<\/p>\n<p><i>Right to request information<\/i><\/p>\n<p>The data subject may request information about data processed by the Institution, their source, purpose, legal basis and duration, and, where personal data are transferred, the legal basis and recipient of the transfer.<\/p>\n<p>The Institution responds in writing within no more than 30 days of receiving the request.<\/p>\n<p><i>Right to rectification<\/i><\/p>\n<p>The data subject may request rectification of personal data in writing, specifying the correct data.<\/p>\n<p>The Institution completes the modification of personal data within no more than 30 days of receiving the request and sends written confirmation that the change has been made.<\/p>\n<p><i>Right to erasure<\/i><\/p>\n<p>The data subject may request deletion of personal data in writing.<\/p>\n<p>The Institution refuses a deletion request only where legislation or an internal rule requires further retention, for example retention periods applying to invoicing or records management. Where no such obligation applies, the Institution deletes the personal data within no more than 30 days of receiving the request and provides written confirmation.<\/p>\n<p><i>Right to restriction\/blocking of processing<\/i><\/p>\n<p>The data subject may request in writing that personal data be blocked\/restricted. The restriction remains in place for as long as the reason stated by the data subject makes it necessary and prevents deletion of the data.<\/p>\n<p><i>Right to object<\/i><\/p>\n<p>The data subject may object in writing to processing where the Institution would transfer personal data for direct marketing, opinion polling or scientific research, or where processing is required solely for compliance with a legal obligation or pursuit of a legitimate interest, except for processing based on statutory authorisation.<\/p>\n<p>The Institution provides written information on action taken in response to the request without undue delay and in any event within 30 days of receipt. Where necessary, the period may be extended by two months, stating the reasons for the delay; the data subject is informed of the extension within one month of receipt of the request.<\/p>\n<p>Legal remedies relating to data processing<\/p>\n<p><i>Initiating proceedings with the authority<\/i>: Complaints about any infringement by the Data Controller may be lodged with the Hungarian National Authority for Data Protection and Freedom of Information:<\/p>\n<p><b>Hungarian National Authority for Data Protection and Freedom of Information<\/b><br \/>Address: 1125 Budapest, Szil\u00e1gyi Erzs\u00e9bet fasor 22\/c.<br \/>Postal address: 1530 Budapest, PO Box 5.<br \/>Telephone: 06 1 391 1400<br \/>Fax: 06 1 391 1410<br \/>E-mail: ugyfelszolgalat@naih.hu<br \/>Website:\u00a0<a href=\"http:\/\/www.naih.hu\/\">http:\/\/www.naih.hu\/<\/a><\/p>\n<p><i>Initiating court proceedings<\/i>: If judicial remedy is chosen, proceedings may also be initiated before the regional court competent for the data subject\u2019s place of residence or stay.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"<p>A Murmo Szakpszichol\u00f3giai \u00e9s M\u0171v\u00e9szetter\u00e1pi\u00e1s K\u00f6zpont mag\u00e1nfinansz\u00edrozott eg\u00e9szs\u00e9g\u00fcgyi szolg\u00e1ltat\u00e1sair\u00f3l valamint az Eg\u00e9szs\u00e9ges Lelk\u0171 Ifj\u00fas\u00e1g\u00e9rt Pro-Juventa Alap\u00edtv\u00e1ny adatkezel\u00e9si \u00e9s adatv\u00e9delmi t\u00e1j\u00e9koztat\u00f3ja.\u00a0 Az adatkezel\u0151 megnevez\u00e9se Murmo Szakpszichol\u00f3giai \u00e9s M\u0171v\u00e9szetter\u00e1pi\u00e1s K\u00f6zpont \u00e9s az Eg\u00e9szs\u00e9ges Lelk\u0171 Ifj\u00fas\u00e1g\u00e9rt Pro-Juventa Alap\u00edtv\u00e1ny (a tov\u00e1bbiakban:\u00a0Int\u00e9zm\u00e9ny, Adatkezel\u0151) Postac\u00edm:\u00a0Budapest 1123 Gy\u0151ri \u00fat 2\/c 2. emelet.Telefonsz\u00e1m:\u00a0+36 20 374 8983E-mail c\u00edm:\u00a0murmomail@murmo.hu\u00a0.hu Honlap:\u00a0www. murmo.hu \u00a0 A MURMO Szakpszichol\u00f3giai [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"open","template":"","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-3","page","type-page","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/atetofedo.hu\/en\/wp-json\/wp\/v2\/pages\/3","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/atetofedo.hu\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/atetofedo.hu\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/atetofedo.hu\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/atetofedo.hu\/en\/wp-json\/wp\/v2\/comments?post=3"}],"version-history":[{"count":2,"href":"https:\/\/atetofedo.hu\/en\/wp-json\/wp\/v2\/pages\/3\/revisions"}],"predecessor-version":[{"id":6153,"href":"https:\/\/atetofedo.hu\/en\/wp-json\/wp\/v2\/pages\/3\/revisions\/6153"}],"wp:attachment":[{"href":"https:\/\/atetofedo.hu\/en\/wp-json\/wp\/v2\/media?parent=3"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}