Data Subject Rights

The data subject has the right to obtain confirmation from the Data Controller as to whether personal data concerning them is being processed. If such processing is taking place, the data subject has the right to access the following information: the purpose of the processing, the categories of personal data concerned, the recipients, the planned storage period, and the data subject's rights.

The data subject has the right to request the Data Controller to rectify inaccurate personal data concerning them without undue delay. They may also request the completion of incomplete personal data.

The data subject has the right to request that the Data Controller erase personal data concerning them without undue delay, if one of the following grounds applies: • The personal data is no longer necessary for the purpose for which it was collected • The data subject objects to the processing and there is no overriding legitimate ground • The personal data has been unlawfully processed • Erasure is required under EU or member state law Exceptions: Where processing is necessary for compliance with a legal obligation or for the establishment, exercise, or defence of legal claims.

The data subject has the right to request that the Data Controller restrict processing if one of the following applies: • The data subject contests the accuracy of the personal data • The processing is unlawful and the data subject requests restriction instead of erasure • The Data Controller no longer needs the data but the data subject requires it for legal claims • The data subject has objected to the processing and it is pending verification whether legitimate grounds override

The data subject has the right to object at any time to the processing of their personal data based on legitimate interest. In this case, the Data Controller shall no longer process the personal data, unless it demonstrates compelling legitimate grounds for the processing which override the interests of the data subject.

The data subject has the right to receive their personal data, which they have provided to the Data Controller, in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.

The data subject has the right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, place of work, or place of the alleged infringement, if they consider that the processing of their personal data infringes the General Data Protection Regulation.

Hungarian National Authority for Data Protection and Freedom of Information (NAIH) Address: 1055 Budapest, Falk Miksa utca 9-11. Postal address: 1363 Budapest, Pf.: 9. Phone: +36 (1) 391-1400 Email: [email protected] Web: https://naih.hu

To exercise your data subject rights, please contact us at [email protected]. The Data Controller shall provide a written response within 30 days of receiving the request. If the complexity of the request warrants it, this deadline may be extended once by a maximum of 60 days.