Data Privacy Notice

Your Data Privacy Rights

Right to Withdraw Consent

You have the right to withdraw your consent to data processing at any time. Upon withdrawal, your personal data will generally be deleted unless another legal basis justifies its continued processing.

Note: The right to withdraw consent is subject to case-by-case evaluation, as it may be influenced or overridden by existing contractual obligations or legal requirements. In such cases, always contact the Data Controller using the contact details provided under the Data Controller or Data Privacy Officer to determine the implications of data processing.

Right of Access

You have the right to receive confirmation as to whether your personal data is being processed and to access the following information:

• The purposes of data processing.
• The categories of personal data being processed.
• The recipients or categories of recipients to whom the data has been disclosed.
• The planned data retention period or the criteria for determining it.
• Your rights to rectification, erasure, restriction of processing, or objection.
• The right to lodge a complaint with a supervisory authority.
• The source of the data if it was not provided by you.
• Automated decision-making, including profiling.

The Data Controller will provide this information within 30 days. If additional time is needed due to the complexity or volume of the request, you will be notified accordingly.

Right to Rectification

You have the right to request the rectification or completion of your personal data without undue delay.

Right to Restriction of Processing

You may request the restriction of data processing in the following cases:

• The accuracy of the data is contested (during the verification period).
• The processing is unlawful, but you oppose the deletion of the data.
• The Data Controller no longer needs the data, but it is required for the establishment, exercise, or defense of legal claims.
• You have objected to processing, and verification of its lawfulness is ongoing.

Restricted data may only be processed with your consent, for the establishment, exercise, or defense of legal claims, to protect the rights of others, or for important public interest reasons.

Right to Erasure ("Right to be Forgotten")

You may request the deletion of your personal data when the following conditions are met:

• The data is no longer necessary for the original purpose.
• You withdraw consent, and there is no other legal basis for processing.
• You object to processing, and there are no overriding legitimate grounds.
• Your data was processed unlawfully.
• Deletion is required to comply with a legal obligation.

If your data has been made public, we will take reasonable steps to inform other data controllers of your deletion request.

Exceptions: Deletion does not apply if processing is necessary for freedom of expression and information, compliance with legal obligations, performance of public interest tasks, archiving purposes in the public interest, scientific or historical research purposes, statistical purposes, or the establishment, exercise, or defense of legal claims.

Right to Object

You have the right to object to data processing if it is based on legitimate interests or performed for public interest tasks. The Data Controller will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims.

Right to Data Portability

If processing is carried out by automated means or based on consent or contract, you may request your data in a structured, commonly used, and machine-readable format (such as XML, JSON, or CSV), or have it transmitted directly to another data controller where technically feasible.

Right Against Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, unless it is necessary for entering into or performing a contract, authorized by law with suitable safeguards, or based on your explicit consent.

Remedies

If you believe your data protection rights have been violated, you may file a complaint with the competent supervisory authority. In Hungary, this is the **National Authority for Data Protection and Freedom of Information (NAIH)**:

• Postal Address: **1363 Budapest, Pf. 9.**
• Email: **ugyfelszolgalat@naih.hu**
• Phone Numbers: **+36 (30) 683-5969, +36 (30) 549-6838, +36 (1) 391 1400**

Additionally, you may seek judicial remedy by initiating **civil proceedings** against the Data Controller in court.

Contact Us

For any questions or concerns regarding your data privacy rights or this Data Privacy Notice, please contact us using the details provided under the Data Controller contact details or the Data Privacy Officer.

Amendments to Data Privacy Notice

The Data Controller reserves the right to modify this Data Privacy Notice. In case of significant changes, we will notify you via email, postal mail, or other appropriate means depending on our relationship with you. Continued engagement with our services after such notification constitutes acceptance of the modified notice.

We recommend that you periodically review this Data Privacy Notice to stay informed about how we protect your personal data.