The Controller is committed to protecting the personal data of the Data Subjects and considers it of paramount importance to respect their right to informational self-determination. The Controller handles personal data confidentially and takes all security, technical and organisational measures necessary to ensure the security of the data. 

The Controller processes the personal data of the Data Subjects exclusively within the territory of Hungary and, apart from the data processor specified in this Notice, does not transfer them to any other party.

Controller:

1. Right to request information

The Data Subject may request information in writing from the Controller regarding which personal data it processes, from what source, on what legal basis, for what purposes, for how long, and to whom, when, on what legal basis and which personal data have been disclosed or granted access. The Controller shall respond to the request for information in writing within a maximum of 8 days.

2. Right to rectification

The Data Subject may request in writing that the Controller modify any of their processed personal data. The Controller shall carry out the rectification within a maximum of 8 days and shall inform the Data Subject in writing of the rectification or, within the same deadline, of the refusal of the request.

3. Right to object

The Data Subject may object in writing to such processing of personal data where the Controller would transfer or use the personal data for the purposes of direct marketing, public opinion polling or scientific research.

4. Right to erasure and blocking

The Data Subject may at any time request in writing the erasure or blocking of their processed data, provided there is no legal obstacle to this.

The Controller shall, where possible, notify the Data Subject in writing immediately, but no later than within 8 days, of the fulfilment of the request and shall at the same time provide information on the statutory mandatory retention period applicable to the deleted data.

Depending on the type of personal data and the right the Data Subject wishes to exercise as described in this section, written notification may be provided electronically or in the form of an official document.

5. Remedies relating to data processing

If the Data Subject has any questions regarding data protection, they may contact the Controller in writing at any time to request information.

6. Data Protection Authority

If the Data Subject experiences any infringement in connection with the processing of their personal data, becomes aware of a personal data breach or perceives a risk thereof, they may lodge a written complaint with the Data Protection Authority.

7. Initiation of court proceedings

If the rights of the Data Subject are infringed, they may bring the case before a court. The action falls within the jurisdiction of the competent regional court. The action may, at the choice of the Data Subject, also be brought before the regional court having jurisdiction over their place of residence or place of stay.