Your Rights in Relation to Data Processing

Right to Withdraw Consent

You have the right to withdraw your consent to data processing at any time. Upon withdrawal, your personal data will generally be erased unless another legal basis exists for its continued processing.

Note: The right to withdraw consent must be assessed on a case-by-case basis, as it may be impacted or overridden by ongoing contractual obligations, legal requirements, or legitimate interests (e.g., invoicing data retention, debt collection). In such cases, you must contact the Data Controller to determine how withdrawal affects your data processing.

Right of Access

You have the right to request confirmation from the Data Controller as to whether your personal data is being processed. If so, you are entitled to receive access to the following information:

• The purposes of processing.
• Categories of personal data being processed.
• Recipients or categories of recipients to whom the personal data has been or will be disclosed.
• The envisaged period of retention or the criteria used to determine it.
• Your rights regarding rectification, erasure, restriction, or objection to processing.
• The right to lodge a complaint with a supervisory authority.
• The source of the data if not collected from you directly.
• The existence of automated decision-making, including profiling, along with meaningful information about the logic involved and the potential consequences of such processing.

The Data Controller will provide this information within 30 days. If additional time is needed due to complexity or volume of requests, you will be informed accordingly.

Right to Rectification

If any of your personal data is inaccurate or incomplete, you have the right to request correction or completion without undue delay.

Right to Restriction of Processing

You may request limited processing under the following circumstances:

• You contest the accuracy of the data, for a period allowing verification.
• The processing is unlawful, and you oppose erasure, opting instead for restriction.
• The Data Controller no longer needs the data, but you require it for legal claims.
• You have objected to processing, pending resolution of the legitimacy of the Data Controller’s grounds.

Restricted data will only be processed with your consent or for legal claims, protection of others’ rights, or important public interests.

Right to Erasure (Right to Be Forgotten)

You may request deletion of your data under the following conditions:

• The data is no longer necessary for the original purpose.
• You withdraw consent, and no other legal basis applies.
• You object to processing, and there are no overriding legitimate grounds.
• Your data was unlawfully processed.
• Erasure is required for compliance with a legal obligation.

If your data has been made public, reasonable steps will be taken to inform other data controllers of your erasure request.

Exceptions: Erasure is not applicable if processing is required for freedom of expression, legal compliance, public interest tasks, or legal claims.

Legal Remedies

If you believe your data protection rights have been violated, you may file a complaint with the **Hungarian National Authority for Data Protection and Freedom of Information (NAIH)**:

• Mailing address: **H-1363 Budapest, Pf. 9.**
• Email: **ugyfelszolgalat@naih.hu**
• Phone numbers: **+36 (30) 683-5969, +36 (30) 549-6838, +36 (1) 391 1400**

Additionally, you may file a **civil lawsuit** against the Data Controller in court.

Amendment of the Privacy Policy

The Data Controller reserves the right to modify this Privacy Policy without altering the purpose and legal basis of data processing. By continuing to use the website after modifications, you accept the updated policy.