These Terms of Use (hereinafter: "Terms") set out the conditions for using the website https://www.partimap.eu/ (hereinafter: "PARTIMAP"), the framework for the proper use of the platform, the basic rules governing content that may be published on the platform, and the main provisions governing the legal relationship between users and the platform operator.
By using the PARTIMAP platform, all users accept the provisions of these Terms and undertake to use the platform solely in a lawful manner, in accordance with its intended purpose and whilst respecting the rights of others.
Detailed rules regarding the processing of personal data are set out in PARTIMAP's separate Privacy Notice. These Terms and Conditions primarily set out the framework for the use of the platform, the rights and obligations of users, and the rules relating to moderation, compliance and liability in connection with the operation of the platform.
The operator of the PARTIMAP platform is the K-Monitor Public Benefit Association (registered office: 1077 Budapest, Rózsa u. 8.; Postal address for data subjects to exercise their rights: 1077 Budapest, Jósika utca 25. Tel.: +36 1 789 5005) (hereinafter: 'K-Monitor').
The aim of PARTIMAP is to collect knowledge, issues, needs, preferences and local experiences relevant from a regional and community perspective in a structured manner, and to organise them in a form that can be used for research, planning, decision-preparation or other analytical purposes. The platform enables the conduct of various questionnaire- and map-based data collection exercises, as well as community engagement, participatory planning and the structured collection of public feedback. PARTIMAP can be used in academic and applied research, in social science, environmental and tourism surveys, in public policy and local government decision-preparation processes, in preliminary impact assessments, in needs assessments, and in community planning and public consultation procedures. The system is particularly well-suited to examining development concepts, transport and mobility issues, urban regeneration projects, environmental problems and other matters affecting local communities, as well as to conducting satisfaction surveys, preference studies, community problem mapping, environmental status assessments and participatory consultations. Its open-source operation ensures transparent, flexible and customisable use for researchers, higher education institutions, civil society organisations, local authorities and other organisations.
The platform may not be used for purposes that are manifestly contrary to its community, research or social participation objectives.
K-Monitor is entitled, at its own discretion, to assess whether a particular questionnaire, project or data processing purpose is compatible with the purpose of PARTIMAP and the provisions of these Terms and Conditions.
K-Monitor is the operator of the PARTIMAP platform. In connection with the operation of the platform, K-Monitor provides the technical infrastructure and acts as a sole or joint data controller within the scope set out in the Data Processing Notice.
K-Monitor:
The publication of questionnaires or content on the platform does not imply their approval, endorsement or authentication by K-Monitor.
K-Monitor is entitled to take action against any content or use of the platform that jeopardises its secure, lawful or intended operation.
Certain functions of the PARTIMAP platform – in particular the creation, editing, management and publication of questionnaires – are available only following registration.
For the purposes of these Terms and Conditions, a 'questionnaire creator' is a person who creates a user account on the PARTIMAP platform.
During registration, the questionnaire creator is obliged to provide true and accurate details, including in particular:
During registration, the questionnaire creator:
During registration, the platform will send a confirmation email to the email address provided. The user account can only be activated once the email address has been confirmed.
The questionnaire creator is obliged to ensure that the login details for their user account are not made accessible to unauthorised persons. The questionnaire creator is responsible for all activities carried out via their user account.
The questionnaire creator must notify K-Monitor immediately if:
K-Monitor – as set out in clause 10 – is entitled to refuse registration, or to restrict or delete a user account, if:
Questionnaires are created via the administration interface.
When creating a questionnaire, the questionnaire creator must, in particular:
The questionnaire may consist of several consecutive worksheets. The platform may allow for:
creation.
The platform may allow:
The platform may also allow the use of conditional questions, which are only displayed to the respondent if specific answers or attributes are selected.
The questionnaire creator is solely responsible for the further processing of data that has been exported or transferred to an external system.
The publication and distribution of the questionnaire is the responsibility of the questionnaire creator.
The platform may provide a unique web link for the questionnaire, which:
The questionnaire creator decides whether the questionnaire is:
As a general rule, K-Monitor does not participate in the distribution or promotion of questionnaires.
Persons under the age of sixteen may not create a questionnaire on the platform. Persons under the age of eighteen but who have reached the age of sixteen may only create a questionnaire with the prior consent of their legal representative, and by creating the questionnaire they warrant that they have such consent.
The questionnaire creator must exercise particular care if the questionnaire is aimed at minors or if it is likely that minors will also take part in completing the questionnaire. In such cases, the questionnaire creator must pay particular attention to ensuring that the processing of personal data complies with the legal requirements governing the processing of personal data, in particular the principles of data minimisation, the principles of purpose limitation, necessity and proportionality, and whether, in view of the minors' age, the consent of a legal representative or the fulfilment of other statutory conditions is required. The questionnaire designer is also obliged to refrain from any data processing that could unreasonably jeopardise the rights, interests or development of minors, in particular
The aim of the PARTIMAP platform is to provide technical support for community and participatory processes that enable the views of data subjects to be ascertained and collected in a structured manner.
The questionnaire creator is obliged to:
The results of surveys conducted via the platform cannot, in themselves, be regarded as representative opinion polls, unless the survey creator specifically ensures this through appropriate professional methodology.
K-Monitor does not verify or guarantee that the questionnaire creator's data processing complies in all cases with the applicable legislation or with the information provided in the questionnaire.
Use of the platform is not a substitute for face-to-face participation processes, forums or other deliberative decision-making mechanisms.
The PARTIMAP platform may only be used for lawful purposes, in accordance with its intended purpose as set out in these Terms and Conditions. When using the platform, the questionnaire creator is obliged to respect the relevant legislation, as well as the rights and legitimate interests of other persons.
Only questionnaires, content or other information that is lawful, does not infringe the rights of third parties and does not contravene the provisions of these Terms and Conditions may be created or published on the platform.
In particular, it is prohibited to:
K-Monitor is entitled, at its own discretion, to determine whether any content, questionnaire or use of the platform breaches these Terms and Conditions or the intended purpose of the platform.
The questionnaire creator bears full and exclusive responsibility for:
The questionnaire creator is obliged to make their own backup of the data stored on the platform and to ensure its preservation.
The questionnaire creator acknowledges that, whilst using the PARTIMAP platform, they may be regarded as a joint data controller with K-Monitor in respect of certain data processing operations within the platform, as set out in the separate Data Processing Notice. Joint data processing extends exclusively to platform-level data processing operations as defined in the Data Processing Notice, and does not affect the questionnaire creator's sole responsibility for the content of the questionnaire they have created, for determining the purpose of data processing, for the scope of personal data processed, for the legal basis of data processing, providing data subjects with appropriate information, and the lawfulness of the data processing.
K-Monitor accepts no liability, amongst other things, for:
In the event of a breach of the terms of use, K-Monitor is entitled to delete, restrict or render inaccessible questionnaires, user accounts or data, and accepts no liability whatsoever towards the questionnaire creator for any resulting damages.
K-Monitor does not review the content of questionnaires in advance; however, it is entitled, and in cases specified by the relevant legislation is obliged, to remove content that is unlawful or contravenes these Terms and Conditions.
By accepting these Terms and Conditions, the questionnaire creator indemnifies K-Monitor against any claims, regulatory proceedings, fines, damages, costs or demands arising from:
The following persons and organisations, in particular, may access data processed on the platform – for the purposes of performing their duties and for the purposes set out in the relevant legislation and in this Policy:
The questionnaire creator is entitled to:
In certain cases, the platform may allow:
The questionnaire creator may also grant other registered users editing or access rights to the questionnaire and the associated responses.
K-Monitor is entitled to access data stored on the platform for the purposes of operating and maintaining the platform, ensuring its security, carrying out moderation and compliance tasks, incident management, bug fixing, and for other purposes set out in these Terms and Conditions and the Privacy Notice.
K-Monitor is entitled, in accordance with the conditions set out in the Data Processing Notice, to use the responses collected via the PARTIMAP platform, questionnaire data and other research data for its own research, statistical, methodological and platform development purposes, including, in particular, the internal analysis, organisation, aggregation, comparison, statistical processing and evaluation of the data for research purposes.
K-Monitor is entitled to investigate any questionnaire, content or user activity, inter alia, if:
K-Monitor is specifically entitled to:
Prior to applying the measures set out in this clause – provided that the circumstances of the case so permit – K-Monitor shall take all reasonable steps to ensure that the questionnaire creator remedies the deficiency, breach of law or any other circumstance contrary to the provisions of these Rules or the Data Protection Notice within a reasonable timeframe. Should the questionnaire creator fail to comply with K-Monitor's request within a reasonable timeframe, or refuse to cooperate, K-Monitor shall be entitled to apply the measures set out in this clause unilaterally. K-Monitor is also entitled to take immediate action without prior notice if the infringement or breach of the provisions of these Rules or the Data Protection Notice is serious or manifest, or if it directly jeopardises the rights and freedoms of data subjects, the security of the PARTIMAP platform or the fulfilment of K-Monitor's legal or compliance obligations.
Complaints regarding the operation of the platform or any questionnaire may be submitted to K-Monitor electronically at the email address lovasz.dorottya@k-monitor.hu.
Where possible, the complaint should include:
K-Monitor is entitled to:
K-Monitor is entitled to reject complaints that are manifestly unfounded, made in bad faith or repetitive.
Certain features of the platform may enable the use of external services or third-party systems.
K-Monitor accepts no liability:
The questionnaire creator is entitled to integrate or use external services in connection with the platform solely at their own risk.
K-Monitor does not guarantee:
K-Monitor accepts no responsibility:
Use of the platform is entirely at the user's own risk.
K-Monitor is entitled and obliged to cooperate with courts, authorities and other bodies acting in accordance with the law.
In the event of a request made in accordance with the law, K-Monitor is entitled to:
K-Monitor is entitled to amend these Terms and Conditions unilaterally. The amended Terms and Conditions shall come into force upon their publication on the platform. K-Monitor shall also notify users registered on the platform and questionnaire creators of any amendments to the Terms and Conditions by email sent to the email addresses provided during registration. Failure to receive the email notification shall not affect the entry into force of the amendment. Continued use of the platform shall constitute acceptance of the amended Terms and Conditions.
These Terms and Conditions are governed by Hungarian law.
The parties shall endeavour to resolve any disputes that may arise primarily by amicable means.
Should this prove unsuccessful, the Hungarian courts shall have jurisdiction and competence to adjudicate such disputes. The parties agree that the Budapest Metropolitan Court and the Pest Central District Court shall have exclusive jurisdiction to adjudicate non-pecuniary claims.
Budapest, 3 September 2026.
This translation was produced using artificial intelligence.
The purpose of this Privacy Notice is to provide data subjects with transparent, clear and comprehensible information, in accordance with applicable legislation, regarding the processing of personal data carried out in connection with the operation of the PARTIMAP platform. This Privacy Notice sets out the data processing rules applicable when using the PARTIMAP platform, the legal status of the parties involved in data processing, the purposes, legal bases and retention periods of individual data processing activities, as well as the rights of data subjects and the manner in which such rights may be exercised.
This Privacy Notice is primarily based on Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, GDPR), as well as Act CXII of 2011 on Informational Self-Determination and Freedom of Information (the Hungarian Privacy Act, "Infotv."), taking into account other applicable Hungarian and European Union legislation concerning the processing of personal data, as well as the relevant practice of supervisory authorities and courts.
This Privacy Notice also aims to clarify that, in relation to certain processing operations carried out in the course of operating the PARTIMAP platform, responsibility as a data controller may differ depending on the specific nature of the processing and the actual role of the parties involved in the processing.
The purpose of PARTIMAP is to collect in a structured manner knowledge, problems, needs, preferences and local experiences that are relevant from a territorial and community perspective, and to organise them in a form that can be used for research, planning, decision-making, preparatory decision-making or other analytical purposes.
The platform enables the implementation of various questionnaire-based and map-based data collection activities, as well as community engagement, participatory planning and the structured collection of public feedback.
PARTIMAP may be used for academic and applied research, social science, environmental and tourism surveys, public policy and municipal decision-making processes, preliminary impact assessments, needs assessments, community planning and social consultation procedures.
The system is particularly suitable for examining development concepts, transport and mobility issues, urban rehabilitation projects, environmental problems and other matters affecting local communities, as well as for conducting satisfaction surveys, preference studies, community problem mapping, environmental assessments and participatory consultations.
Its open-source operation provides transparent, flexible and customisable use for researchers, higher education institutions, civil society organisations, municipalities and other organisations.
Privacy Notice: means this Privacy Notice.
PARTIMAP or platform: means the platform operated at https://www.partimap.eu/.
Personal data: means any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Special categories of personal data: means particularly sensitive categories of personal data relating to racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, health data, or a natural person's sex life or sexual orientation.
Minor: means a natural person under the age of eighteen. Applicable legislation may provide for different age limits in relation to certain consent requirements concerning the processing of personal data.
Processing: means any operation or set of operations performed on personal data or on sets of personal data, whether by automated or non-automated means, such as collection, recording, organisation, storage, alteration, retrieval, consultation, use, disclosure, dissemination, alignment, restriction, erasure or destruction.
Data controller: means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
Data processor: means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the data controller.
Recipient: means a natural or legal person, public authority, agency or other body to whom or with which the personal data are disclosed, whether or not it is a third party.
Consent: means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which they signify their agreement to the processing of personal data relating to them by means of a statement or by a clear affirmative action.
Profiling: means any form of automated processing of personal data consisting of the use of personal data to evaluate, analyse or predict certain personal characteristics relating to a natural person.
K-Monitor as data controller: means the data controller providing the technical infrastructure of the platform and determining the operational, compliance, research, analytical and institutional data processing framework of the platform, which may act independently or jointly with other parties depending on the nature of the individual processing operations.
Questionnaire creator: means a registered user authorised under the Terms of Use to create questionnaires on the PARTIMAP platform, who, within the platform framework determined by K-Monitor, determines the specific purpose, data content and parameters for the use of the questionnaire and, depending on the nature of the relevant processing operation, may act as an independent data controller or as a joint data controller with K-Monitor.
Joint controllership: means a situation in which K-Monitor and the User jointly determine the purposes and means of processing personal data.
Data subject: means an identified or identifiable natural person to whom the processed personal data relate.
Registered user: means a natural person who creates a user account on the platform in their own name or on behalf of an organisation and uses the platform's services, including in particular the questionnaire creator and the entity or person completing the questionnaire.
Questionnaire respondent/data subject: means a natural person who completes a questionnaire and whose personal data are processed in connection with the questionnaire.
User account: means the individual access authorisation created for the use of PARTIMAP, which enables the identification of the registered user, the management of their authorisations and the use of the platform's functions.
Account data: means the personal data necessary for creating, maintaining and managing a user account, including, in particular, identification, contact, login and access-management data.
Questionnaire: means a data collection unit created on the PARTIMAP platform for the purpose of collecting personal data or other information for a specified purpose.
Response data: means the data, answers, free-text content and uploaded information provided by the questionnaire respondent while completing the questionnaire, together with the technical or metadata associated with such information.
Platform data: means personal data related to the use of the platform, registration, access management, security operations, customer support, compliance activities and system administration.
Metadata: means technical or accompanying information generated during the use of PARTIMAP or the completion of a questionnaire and associated with the primary content data, including, in particular, timestamps, device data, log data, IP addresses and other system information.
Log data: means technical data automatically recorded in connection with the operation and use of PARTIMAP, access, technical events or security incidents.
Content: means any data, information, textual response, document or other digital content created, provided, uploaded or published on the platform by the questionnaire creator or questionnaire respondent.
Use for research and analytical purposes: means data processing carried out by K-Monitor using data generated on the platform for research, analytical, statistical or other institutional purposes.
Terms of Use: means the mandatory set of rules governing the use of the platform, which determines the conditions for using the platform, the permitted and prohibited data processing frameworks, and the measures that may be applied in the event of a breach.
Compliance measure: means a measure that may be taken by K-Monitor in the event of a breach of the Terms of Use, including in particular the suspension, restriction or deletion of a questionnaire or the termination of access by a questionnaire creator or respondent.
Prohibited processing purpose: means a data processing purpose excluded by the Terms of Use or by law for which the platform may not be used.
Official request: means a request or order based on legislation issued by a court, authority or other body acting under statutory authority concerning the disclosure, preservation or processing of personal data.
Incident: means an event affecting the security, integrity, availability or lawful processing of personal data that occurs in connection with the operation or use of the platform.
Several parties may participate in the processing of personal data during the operation of the platform, and the responsibility of each data controller depends on the content, purpose and actual framework of the individual processing operations.
K-Monitor determines and provides the technical infrastructure and operational framework of the platform and therefore acts as a data controller in relation to all processing operations connected with the operation of the platform, user registration, the secure operation of the platform, customer support and compliance activities, as well as the use of data processed through the platform for K-Monitor's own research, analytical and institutional purposes.
In connection with the creation of individual questionnaires and the specific data collection carried out within them, the questionnaire creator determines, within the platform framework established by K-Monitor, the specific content and purpose of the data collection and certain conditions thereof. Therefore, depending on the nature of the relevant processing operation, the questionnaire creator may act as an independent data controller or within a framework of joint controllership with K-Monitor.
This means that responsibility for processing activities carried out on the platform is not uniform, but must always be determined on the basis of the actual characteristics of the specific processing operation.
To ensure transparency, the platform makes the name of the questionnaire creator available alongside each questionnaire so that data subjects can clearly identify who participates in determining the processing of personal data related to the relevant questionnaire.
Accordingly, this Privacy Notice describes the data processing roles associated with the operation of the platform, as well as the framework within which K-Monitor and individual questionnaire creators participate in the processing of personal data.
K-Monitor Közhasznú Egyesület
Registered office: 1077 Budapest, Rózsa u. 8.
Postal address for exercising data subject rights: 1077 Budapest, Jósika utca 25.
Tel.: +36 1 789 5005
E-mail for exercising data subject rights: info@k-monitor.hu
Registration is required to use the PARTIMAP platform.
In connection with operating the platform, K-Monitor processes the following personal data: name data necessary to identify the registered user; e-mail address; residential address; place and date of birth; authentication and access-management data associated with the user account, including passwords or other identification data; metadata and log data related to the use of the platform, including data relating to logins, access, IP addresses, device use, system events, errors and security events; contact details, communication content and related technical data provided by the user when submitting customer service or technical support requests; as well as records containing personal data, action data and related log data generated in connection with compliance measures, investigations of breaches and verification of the lawful use of the platform.
a) Name, e-mail address, authentication and access-management data associated with the user account
K-Monitor processes these data for the purposes of creating the user account, identifying the registered user, providing access to the platform, authenticating logins, enabling the use of the PARTIMAP platform and maintaining contact with the questionnaire creator.
The legal basis for processing is Article 6(1)(b) GDPR, as the processing of these data is objectively necessary for providing the platform-use service established between the user and K-Monitor.
b) Residential address, place and date of birth
K-Monitor processes data relating to place and date of birth and residential address for the purposes of clearly identifying the questionnaire creator, preventing confusion with other persons, ensuring that legal responsibility relating to data processing activities carried out on the platform can be enforced, taking action in connection with breaches of the terms of use, enforcing legal claims, complying with official requests, and preventing and investigating misuse related to the use of the platform.
The legal basis for processing is the legitimate interest under Article 6(1)(f) GDPR.
K-Monitor's legitimate interest is to ensure that questionnaire creators processing data relating to third parties on the platform can, where necessary, be clearly and reliably identified, and that in cases of unlawful processing, misuse, official proceedings or legal disputes, the identity of the actual user can be established, the terms of use can be enforced and potential legal claims can effectively be exercised.
Based on K-Monitor's balancing of interests, this legitimate interest takes precedence over the data protection interests of the questionnaire creator as a data subject, taking into account that these data are not public, are processed only with restricted access, and are used exclusively for the purposes set out above.
Given that the purpose of the processing is to ensure the exercise of the data protection rights of persons completing questionnaires, such processing is also compatible with the data protection expectations of third parties.
c) Metadata and log data
K-Monitor processes metadata and log data for the purposes of ensuring the secure operation of the platform, resolving system errors, preventing unauthorised access, handling security events, detecting misuse, and ensuring the IT security and continuous operation of the platform.
The legal basis for processing is the legitimate interest under Article 6(1)(f) GDPR.
K-Monitor's legitimate interest is to ensure the security, integrity and continuous operation of the platform and to prevent and investigate misuse.
d) Data provided in customer service and technical support requests
K-Monitor processes contact details, communication content and related technical data provided by registered users when submitting customer service or technical support requests for the purposes of handling the request, investigating errors, providing technical support and maintaining contact with the user.
The legal basis for processing is, as a general rule, Article 6(1)(b) GDPR where the request relates to the provision of services connected with the use of the platform.
Where the request is no longer related to the performance of the service, the legal basis for processing is the legitimate interest under Article 6(1)(f) GDPR, consisting in handling user requests and ensuring the proper operation of the platform.
e) Data generated in connection with compliance measures and investigations of breaches
K-Monitor processes these data for the purposes of monitoring compliance with the terms of use, investigating breaches, taking necessary restrictive, suspensive or deletion measures, ensuring the security and lawful operation of the platform, and bringing, enforcing or defending potential legal claims.
The legal basis for processing is the legitimate interest under Article 6(1)(f) GDPR.
K-Monitor's legitimate interest is to maintain the intended, lawful and secure operation of the platform, prevent misuse and ensure that legal claims can be enforced.
K-Monitor processes personal data in connection with operating the PARTIMAP platform for the duration of the registered user's account.
If the questionnaire creator deletes a questionnaire created by them or the data collected through it, or if K-Monitor decides to delete or terminate the questionnaire, the related data or user access, K-Monitor may retain the relevant personal data for five years from the date of deletion or termination of access.
The purpose of retaining the data is to ensure the possibility of enforcing potential legal liability related to the use of the platform, bringing, enforcing or defending legal claims, enabling subsequent verification of proceedings relating to breaches of the terms of use, and ensuring compliance with official requests.
Where legislation requires certain data to be retained for a longer period, or an ongoing administrative, judicial or other legal proceeding justifies such retention, K-Monitor may continue to process the relevant data for the necessary period.
After the retention period has expired, personal data will be deleted or anonymised.
The PARTIMAP website uses only cookies that are essential for the proper functioning of the website.
These cookies are not used for statistical, marketing or profiling purposes, but solely to provide the basic functions of the website.
As these cookies are essential for providing the service, the user's consent is not required for their use.
The following cookies are used on the website:
| Cookie name | Purpose | Expiry |
|---|---|---|
| partimap-session | Ensures the identification of the logged-in user while navigating the administration interface and enables the user to continue working upon returning to the website without having to log in again. | 1 week |
| i18n_redirected | Stores the display language selected by the user or recognised by the system so that the website can be displayed in the appropriate language during subsequent visits. | 1 year |
PARTIMAP does not use cookies for analytical, statistical, marketing or advertising purposes and does not use third-party cookies designed to track users' browsing habits or create profiles.
The legal basis for the use of cookies necessary for operation is the legitimate interest under Article 6(1)(f) GDPR, consisting in ensuring the secure and intended operation of the website and providing the service requested by the user.
Under electronic communications rules, the user's prior consent is not required for placing cookies that are strictly necessary for providing the service.
Users may manage, delete or block cookies in their browser at any time. However, if cookies necessary for operation are disabled, certain functions of the website may not work or may not work properly.
PARTIMAP enables the questionnaire creator to create questionnaires for their own purposes, collect personal data and use the responses received at their own discretion.
Within the framework established by this Privacy Notice and the PARTIMAP Terms of Use, the questionnaire creator acts as an independent data controller when determining the content of the questionnaire, the purpose of data collection, the scope of questions asked, the categories of data subjects, and the further use, organisation, filtering, aggregation, analysis, export, publication, disclosure or other use of the data collected.
The independent data controller status of the questionnaire creator does not extend to processing operations in respect of which the questionnaire creator and K-Monitor jointly determine the purposes and essential means of processing in accordance with Section 4 of this Privacy Notice.
In relation to data collection carried out within the PARTIMAP platform, the technical processing of responses within the platform, the management of consent, technical measures related to the exercise of data subject rights, and deletion and access operations within the platform, the questionnaire creator acts as a joint controller with K-Monitor.
The questionnaire creator's status as an independent data controller applies in particular to determining the specific data processing purpose of the questionnaire, the content of the questions, the substantive use of responses, and any further processing carried out outside the PARTIMAP platform.
Full name: Meghan Blancher
E-mail: meghan@tbrpc.org
On the PARTIMAP platform, the questionnaire creator may, in accordance with and within the framework of PARTIMAP's general purposes, independently determine the purpose of specific questionnaire-based processing, including research, public opinion research, social consultation, participatory planning, project preparation, project feedback, community engagement, contacting, applications, recruitment or feedback collection, data collection related to the questionnaire creator's own organisational operations, as well as viewing, organising, filtering, aggregating, statistically evaluating, analysing, exporting, publishing, disclosing or otherwise using the collected responses.
As a general rule, the legal basis for questionnaire-based processing carried out by the questionnaire creator on the PARTIMAP platform is the consent of the data subject under Article 6(1)(a) GDPR.
Where the questionnaire involves the processing of special categories of personal data, the processing of such data is lawful only if the data subject has also provided their explicit consent to the processing of such data pursuant to Article 9(2)(a) GDPR.
Only questionnaires may be published on the platform for which the questionnaire creator clearly and comprehensibly specifies on the questionnaire interface the specific purpose of the processing, the principal ways in which the processed data will be used, and the potential recipients of the responses or the fact that the responses will be made public.
When creating a questionnaire, the questionnaire creator must clearly specify to the data subject the purpose of the processing, the intended use of the responses, the categories of potential recipients, and whether the responses are intended solely for internal processing, aggregated publication, access by other persons or other further use.
The questionnaire creator must ensure that the questionnaire requests only personal data necessary to achieve the purpose of the processing and must refrain from unnecessary or disproportionate data collection.
The data subject may withdraw their consent to the processing of their personal data at any time.
The withdrawal of consent may be initiated directly with the questionnaire creator publishing the questionnaire, as well as with K-Monitor using the contact details specified in this Privacy Notice.
Where the withdrawal of consent is submitted to K-Monitor, K-Monitor shall forward the request to the questionnaire creator publishing the questionnaire and shall assist in handling the request within the scope of its available technical capabilities.
Personal data collected by the questionnaire creator through a questionnaire created on the PARTIMAP platform shall be processed until the purpose of the processing has been fulfilled.
Processing of personal data shall also cease if the questionnaire creator deletes the questionnaire or the data collected through it.
Regardless of the above, personal data may be processed for a maximum of two years from the publication or closure of the questionnaire. Thereafter, the personal data must be deleted or anonymised.
Where consent is withdrawn, further processing of personal data may continue only if another separate lawful basis for such processing exists.
Where responses are anonymised or aggregated by the questionnaire creator in such a way that the data subject can no longer be identified, directly or indirectly, by means reasonably likely to be used, the resulting dataset shall not be considered personal data.
Pseudonymised or otherwise re-identifiable datasets shall not in themselves be considered anonymised data.
This Privacy Notice establishes the general framework for processing activities that may be carried out by the questionnaire creator as an independent data controller.
The data subject shall, in each case, receive information from the questionnaire creator on the questionnaire interface, before beginning to complete the questionnaire, regarding the purpose of processing associated with the specific questionnaire, the categories of data processed, the manner in which responses will be used, potential recipients, data transfers, publication and other specific characteristics of the processing.
In connection with the operation of questionnaires created on the PARTIMAP platform, K-Monitor and the questionnaire creator jointly determine the purposes and essential means of certain processing operations and therefore qualify as joint controllers under Article 26 GDPR in relation to such processing.
Joint controllership applies exclusively to those processing operations in which the questionnaire-based processing can take place only through the joint involvement of both parties.
The status of joint controller is not general, but applies exclusively to the specific processing operations defined in this section.
The joint controllership of K-Monitor and the User covers the following processing operations.
a) Framework of questionnaire-based data collection within the PARTIMAP platform
K-Monitor and the questionnaire creator act as joint controllers in relation to the platform-level implementation of questionnaire-based data collection carried out through the PARTIMAP platform.
Joint controllership is limited to the collection, technical processing and storage of personal data within the PARTIMAP platform and making such data accessible to the questionnaire creator.
As the operator of the platform, K-Monitor determines the purpose and intended operation of PARTIMAP, its operating conditions, and the general data protection, security and compliance requirements set out in the Terms of Use and this Privacy Notice, and provides the technical conditions necessary for operating the platform.
Within this framework, the questionnaire creator independently determines the purpose of the relevant questionnaire, the categories of personal data processed, the legal basis and retention period of the processing, the content of the privacy information and other material conditions of the processing, and is responsible for the lawfulness of the processing.
Any further processing of personal data exported from the PARTIMAP platform or processed outside the platform shall in all cases constitute the independent processing of the questionnaire creator.
b) Cooperation in ensuring the exercise of data subject rights
K-Monitor and the questionnaire creator shall cooperate to ensure that data subjects can effectively exercise their rights relating to the processing of their personal data when using the PARTIMAP platform.
Where a data subject submits a request to K-Monitor or directly to the questionnaire creator, the parties shall cooperate to ensure that the request is promptly forwarded to the data controller competent to handle it and is assessed within the statutory deadline.
The questionnaire creator is responsible for fulfilling requests concerning the purpose and legal basis of the specific processing, the categories of personal data processed, the content of the privacy information or the lawfulness of the processing.
K-Monitor is responsible for fulfilling requests concerning the operation of the PARTIMAP platform, platform security and platform-level technical measures.
The purpose of joint processing carried out on the PARTIMAP platform is to enable the questionnaire creator to lawfully carry out questionnaire-based data collection and processing for research, community engagement, social consultation, feedback collection or other purposes compatible with the intended use of the platform, as determined within the framework of PARTIMAP's general purposes, through PARTIMAP's technical and data protection infrastructure.
K-Monitor provides the technical platform functions, data protection framework, channels for exercising data subject rights, deletion mechanisms and security mechanisms necessary for conducting questionnaire-based processing.
The legal basis for questionnaire-based data collection carried out by the questionnaire creator within the questionnaire is, as a general rule, the consent of the data subject pursuant to Article 6(1)(a) GDPR.
Where the questionnaire concerns the processing of special categories of personal data, the additional legal basis for the questionnaire creator's processing is the explicit consent referred to in Article 9(2)(a) GDPR.
Within the scope of joint controllership, K-Monitor may also carry out separate processing operations necessary to maintain platform security, investigate misuse, receive and facilitate the handling of data subject requests, assist in handling disputes or complaints relating to the processing between the questionnaire creator and the data subject, and bring, enforce or defend specific legal claims, on the basis of K-Monitor's legitimate interest under Article 6(1)(f) GDPR.
K-Monitor shall carry out processing based on Article 6(1)(f) GDPR only where it has a real and lawful legitimate interest and the processing is necessary to achieve the purpose, with due regard to the rights, freedoms and legitimate interests of data subjects and with the application of appropriate safeguards.
The data subject may exercise their rights under the GDPR against either joint controller in relation to joint processing.
In particular, the data subject may withdraw their consent directly from the questionnaire creator who created the questionnaire or directly from K-Monitor.
Where a data subject contacts either joint controller, the joint controllers shall cooperate with each other to ensure that the request is fulfilled.
Personal data and response content processed within the scope of joint controllership on the PARTIMAP platform shall be processed by the joint controllers until the specific data processing purpose of the questionnaire has been achieved.
Processing shall cease upon termination of the purpose of the questionnaire, deletion of the questionnaire by the questionnaire creator, platform-level deletion by K-Monitor or withdrawal of the data subject's consent, unless further processing of certain data is necessary for the establishment, exercise or defence of legal claims.
Personal data collected through the questionnaire may be processed for a maximum of two years from the creation of the questionnaire, after which the personal data shall be deleted or anonymised by the system.
Joint controllership does not cover K-Monitor's own processing activities for platform operation, IT security, compliance, moderation, enforcement of legal claims or its own research purposes.
Joint controllership does not cover any further processing carried out by the questionnaire creator after exporting personal data from the PARTIMAP platform or processing data outside the platform based on their own decision, including their own analysis, publication, disclosure, research use or other independent purposes.
In connection with the operation of the PARTIMAP platform, K-Monitor may also carry out certain processing operations separately from the questionnaire creator and from joint controllership, in its capacity as an independent data controller, for its own research, analytical, methodological, statistical and platform development purposes.
In this context, K-Monitor may use data and responses generated through the PARTIMAP platform for its own research and analytical purposes within the framework set out in this section.
K-Monitor's independent research processing does not affect the processing carried out by the questionnaire creator in their own capacity as a data controller and does not authorise K-Monitor to use personal data collected through PARTIMAP for its own purposes beyond those specified in this section.
K-Monitor may process data and responses collected through the PARTIMAP platform for the following independent research and analytical purposes in particular:
a) evaluating, developing and further developing the operation, usability, participation mechanisms, questionnaire-based data collection methods, technical performance and services of the PARTIMAP platform;
b) conducting general research, analyses and statistical studies concerning questionnaire-based public participation, social engagement, community consultation, participatory planning and similar social participation processes; preparing statistical, social science or methodological analyses concerning the operation and use of the PARTIMAP platform, the characteristics of questionnaire-based participation, willingness to participate, response patterns and participation processes;
c) conducting independent research, analyses and methodological studies concerning specific public, social or community participation issues related to the topic or subject matter of questionnaires, or analysing aggregated social trends;
d) preparing professional, academic, methodological or public policy analyses, research reports, statistical summaries or publications related to the above research purposes.
As a general rule, K-Monitor carries out the independent research, analytical, statistical and platform development processing referred to in this section on the basis of the data subject's consent pursuant to Article 6(1)(a) GDPR.
Consent covers the research, statistical, methodological and platform development purposes related to the general purposes of the PARTIMAP platform and specified in this Privacy Notice, including in particular evaluating and developing the operation of the PARTIMAP platform, researching the social and methodological characteristics of questionnaire-based public participation, and preparing aggregated research and analyses related to public participation, social engagement and participatory processes.
Where the research processing also involves the provision of special categories of personal data within the questionnaire, such data may be processed exclusively on the basis of explicit consent under Article 9(2)(a) GDPR.
K-Monitor shall not use special categories of personal data in identifiable form for its own research purposes and shall not make such data public.
Consent may also cover further research, statistical and methodological analyses carried out within the research areas specified in this Privacy Notice and related to the general purposes of the PARTIMAP platform, provided that such activities remain within the purposes specified in this Privacy Notice and are consistent with the reasonable expectations of the data subjects.
The data subject may withdraw their consent from K-Monitor at any time. Withdrawal of consent shall not affect the lawfulness of processing carried out prior to the withdrawal.
K-Monitor may also carry out processing operations separate from research processing that are necessary for platform security, handling misuse, enforcing legal claims and ensuring the lawful operation of the platform on the basis of its legitimate interest under Article 6(1)(f) GDPR.
When carrying out independent research processing, K-Monitor shall act only to the extent necessary to achieve the research purpose and in accordance with the principles of data minimisation and purpose limitation.
K-Monitor may use responses, questionnaire data and other research data collected through the PARTIMAP platform for its own research, statistical, methodological and platform development purposes within the framework specified in this Privacy Notice, including internal analysis, organisation, aggregation, comparison, statistical processing and research evaluation of the data.
K-Monitor may publish research results, analyses, statistical summaries, reports or other research outputs exclusively in anonymised, aggregated, pseudonymised or otherwise non-identifiable form.
K-Monitor shall not use special categories of personal data in identifiable form for its own research purposes and shall not publish such data.
Where information concerning special categories of personal data appears in the preparation of research results, such information may be used only in anonymised, aggregated or otherwise non-identifiable form.
During research processing, K-Monitor shall apply appropriate technical and organisational measures to ensure that research processing presents the lowest possible risk to the rights and freedoms of data subjects, including, in particular, restricting access, keeping data separately, pseudonymisation, aggregation and anonymisation where this is possible without compromising the research purpose.
K-Monitor may conduct research processing exclusively within research, methodological, statistical and public participation analysis frameworks related to the general purposes of the PARTIMAP platform and may not use data collected through PARTIMAP for any separate purpose not specified in this Privacy Notice.
K-Monitor shall process personal data used for independent research purposes for as long as necessary to achieve the research purpose.
Where the research purpose no longer requires the continued processing of personal data in identifiable form, K-Monitor shall anonymise, pseudonymise or delete the data.
K-Monitor may retain research results, statistical summaries, anonymised research datasets or research outputs that do not allow the identification of natural persons thereafter, in accordance with the research purpose.
The data subject may exercise their rights relating to the processing of their personal data by submitting a request to the data controller responsible for the relevant processing operation.
Where K-Monitor acts as an independent data controller in relation to the relevant processing, a request concerning the exercise of data subject rights must be submitted to K-Monitor.
Where the questionnaire creator is the data controller in relation to the relevant processing, the request must be submitted directly to them.
Where K-Monitor and the questionnaire creator act as joint controllers in relation to the relevant processing, the data subject may submit their request to either joint controller, and the joint controllers shall ensure that the request is handled in accordance with the internal division of responsibilities established pursuant to Article 26 GDPR.
The data subject may submit a request electronically, by post or, where the relevant data controller provides such an option, in person, using the contact details of the relevant data controller.
Upon receipt of a request, the data controller shall examine its content and may, where necessary, request additional information necessary to confirm the identity of the data subject. In the cases specified in Article 12 GDPR, the data controller may also examine whether the request is manifestly unfounded or excessive.
The data controller shall assess the request concerning the exercise of data subject rights as soon as possible after receipt and within a maximum of twenty-five days, and shall inform the data subject in writing of its decision and the measures taken or, where the request was submitted electronically, electronically.
The persons covered by this Privacy Notice have the following rights:
a) right of access;
b) right to rectification;
c) right to erasure (right to be forgotten);
d) right to restriction of processing;
e) right to data portability;
f) right to object.
The data subject has the right to obtain confirmation from the data controller competent in relation to the relevant processing as to whether or not personal data concerning them are being processed.
Where such processing is taking place, the data subject has the right to obtain access to their personal data and information concerning, in particular, the purposes of the processing, the categories of personal data concerned, the recipients or categories of recipients, the envisaged period for which the personal data will be stored or the criteria used to determine that period, the rights available to the data subject, the possibility of lodging a complaint with a supervisory authority, the source of the data where they were not collected directly from the data subject, and, where automated decision-making or profiling is used, information concerning the essential circumstances of such processing.
The data subject also has the right to obtain a copy of the personal data being processed by the data controller.
The data subject has the right to request from the data controller responsible for the relevant processing the rectification of inaccurate personal data concerning them without undue delay and has the right to request the completion of incomplete personal data.
The data controller may request additional information or supporting evidence to the extent necessary to fulfil the request where this is necessary to verify the validity of the rectification request.
The data subject has the right to request the erasure of personal data concerning them where one of the conditions specified in Article 17 GDPR applies.
This includes, in particular, cases where the personal data are no longer necessary for the purposes for which they were collected or otherwise processed; where the data subject withdraws consent and there is no other legal basis for the processing; where the data subject objects to the processing and there are no overriding legitimate grounds for the processing; where the personal data have been unlawfully processed; or where the personal data must be erased in compliance with a legal obligation imposed on the data controller.
The data controller shall assess the erasure request in accordance with the GDPR and may refuse erasure where one of the exceptions specified in Article 17(3) GDPR applies.
The data subject has the right to request restriction of the processing of their personal data in the cases specified in Article 18 GDPR, including in particular where the accuracy of the personal data is contested; where the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead; where the data controller no longer needs the personal data but the data subject requires them for the establishment, exercise or defence of legal claims; or where the data subject has objected to processing and it has not yet been determined whether the legitimate grounds of the data controller override those of the data subject.
Where processing is restricted, the data controller may process the personal data, other than for storage, only in the cases specified by the GDPR.
The data subject has the right to receive personal data concerning them which they have provided to a data controller in a structured, commonly used and machine-readable format and has the right to transmit those data to another data controller where the processing is based on consent or on a contract and is carried out by automated means.
The data subject also has the right, where technically feasible, to request that the personal data be transmitted directly from one data controller to another.
This right may be exercised only in relation to processing operations where the conditions set out in Article 20 GDPR are met.
The data subject has the right to object, on grounds relating to their particular situation, at any time to the processing of personal data concerning them where the legal basis for processing is the legitimate interest of the data controller or a third party, including profiling based on such legal grounds.
In such a case, the data controller shall no longer process the personal data unless it demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or unless the processing is necessary for the establishment, exercise or defence of legal claims.
In operating the PARTIMAP platform, K-Monitor shall implement appropriate technical and organisational measures to ensure the security of personal data processed on the platform in a manner appropriate to the nature of the data processed, the circumstances of the processing and the risks posed to the rights and freedoms of natural persons.
When determining and applying platform-level data security measures, K-Monitor shall take into account the state of the art, the costs of implementation, the nature, scope, context and purposes of the processing, and the risks of varying likelihood and severity.
In particular, K-Monitor shall implement technical and organisational measures in connection with the operation of the PARTIMAP platform that are appropriate for protecting the platform infrastructure, access to the system, access rights management, and the security of data storage and processing operations within the platform against unauthorised access, disclosure, alteration, loss, damage, destruction or other unauthorised processing.
The questionnaire creator or other user acting as an independent data controller in relation to a specific processing operation shall be responsible for taking data security measures related to their own processing activities, including in particular the appropriate configuration of their organisational access rights, the security of data processed or exported outside the platform, the processing of data in their own IT or organisational environment, and all data security measures that do not fall within K-Monitor's operational control over the platform.
K-Monitor's responsibility is limited exclusively to technical and organisational measures related to the operation of the PARTIMAP platform that fall within its own control and operational scope.
K-Monitor shall not be responsible for breaches of data security obligations relating to the questionnaire creator's or other user's own processing activities, including in particular inadequate access-rights management, improper handling of data exported from the platform, data security deficiencies occurring in their own IT or organisational environment, or other failures outside K-Monitor's control.
Where K-Monitor and the questionnaire creator qualify as joint controllers in relation to a specific processing operation, the internal division of data security obligations shall be governed by the agreement between the joint controllers, taking into account that responsibility shall correspond to the actual control over the relevant processing operation and the authority to determine the relevant technical or organisational measures.
A personal data breach means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.
In connection with operating the PARTIMAP platform, K-Monitor is required to maintain appropriate procedures for detecting, investigating, documenting and handling personal data breaches falling within its own control and operational scope and, where required by the GDPR and applicable legislation, to take the necessary notification and communication measures.
Where a personal data breach affects the infrastructure of the PARTIMAP platform, technical or organisational measures related to operating the platform, or another processing operation falling within K-Monitor's control, K-Monitor shall be responsible for investigating and handling the incident.
The questionnaire creator or other user acting as an independent data controller in relation to a specific processing operation shall be responsible for detecting, investigating and documenting personal data breaches occurring within their own control and relating to their own processing activities, as well as for fulfilling the necessary statutory notification and communication obligations.
This applies in particular where the incident relates to the user's own access management, data exported from the platform, processing carried out outside the platform or other circumstances outside K-Monitor's control.
K-Monitor shall not be responsible for personal data breaches relating to the questionnaire creator's or other user's own processing activities occurring within the user's own control, including in particular incidents resulting from inadequate access-rights management, improper handling of data exported from the platform, data security deficiencies occurring in the user's own IT or organisational environment, or other failures outside K-Monitor's control.
Where a data subject or any user becomes aware of circumstances indicating the possibility of a personal data breach related to the operation of the PARTIMAP platform, they may notify K-Monitor without undue delay.
K-Monitor shall investigate the notification and, where necessary, take appropriate measures.
In relation to processing operations for which K-Monitor and the questionnaire creator qualify as joint controllers, the allocation of tasks and responsibilities relating to the handling of personal data breaches shall be governed by the agreement between the joint controllers, taking into account that responsibility shall correspond to the actual control over the processing operation affected by the incident and the authority to determine the relevant technical or organisational measures.
Where the data subject considers that the relevant data controller has infringed the provisions of data protection legislation in the course of processing their personal data, they have the right to lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information and may also seek judicial remedy.
The data subject has the right to bring proceedings before a court against the data controller where they consider that their rights have been infringed in the course of processing their personal data.
The court shall deal with the case as a matter of priority.
The data subject may, at their discretion, bring the proceedings before the competent court having jurisdiction according to their place of residence or stay, or before the court having jurisdiction according to the registered office of the defendant data controller.
Where K-Monitor acts as an independent data controller in relation to the relevant processing operation, a legal remedy may be sought against K-Monitor.
Where the questionnaire creator or another user acts as an independent data controller in relation to the relevant processing operation, a legal remedy may be sought against the relevant questionnaire creator using the contact details provided for the questionnaire.
In cases of joint controllership, the data subject may seek legal remedy against the joint controllers in accordance with the GDPR and applicable legislation, taking into account the rules on responsibility relating to the individual processing operations.
Contact details of the Hungarian National Authority for Data Protection and Freedom of Information (NAIH):
Registered office: 1055 Budapest, Falk Miksa utca 9–11.
Telephone: +36 (1) 391-1400
E-mail: ugyfelszolgalat@naih.hu
Official Gateway short name: NAIH
KR ID: 429616918
Website: https://www.naih.hu
This Privacy Notice shall enter into force on the date indicated at the end of the document.
K-Monitor shall make this Privacy Notice available on the PARTIMAP platform and shall ensure that data subjects can access information concerning the processing of personal data in connection with the operation of the platform.
The questionnaire creator or other user acting as an independent data controller in relation to a specific processing operation shall be responsible for ensuring that data subjects receive any additional privacy information required by law in relation to the processing carried out by them.
Budapest, 3 September 2026
This translation was prepared with the assistance of artificial intelligence.