Data management of Maalbeck Kft regulations

I. Data management and data protection official name and contact details

• the data controller: Maalbeck Kft. ( hereinafter: Maalbeck Kft., or" Data Controller")
• Headquarters: 1047 Budapest, Attila utca 12-18, building B, flat 1
• Postal address: 1047 Budapest, Attila utca 12-18, building B, flat. 1
• E-mail address: info@maalbeck.hu
• Phone number: +36 1 617 5251
• Fax: +36 1 617 5264
• Website: www.maalbeck.hu

The Data Manager is data protection the details of his official are as follows :

• Name: Sándor Szabó
• Postal address: 1047 Budapest, Attila utca 12-18, building B, flat. 1
• E-mail address: sandor.szabo@maalbeck.hu
• Phone number: +36 1 617 5251

II. General provisions

Maalbeck Kft. as an additional financial intermediary mediation activity performs for PFN-Prestige Financial Zrt ( www.pfn.hu ). PFN-Prestige Financial Zrt. CXXXVIII of 2007 on the Erste Befektetési Zrt. investment companies and commodity exchange service providers, as well as the rules of the activities they can perform. Dependent agent according to § 111. (2) point A) of the Act ( Bszt .). Maalbeck Kft. is the financial mediation his activity directly or through intermediaries its subcontractors ( hereinafter: intermediaries through a subcontractor or sub- agent performs ​The Intermediaries subcontractors - this Data Management In a newsletter defined data management among - data processor qualify as. The scope of this information is provided by Maalbeck Kft directly or through intermediaries subcontractors through finished financial mediation, or by Maalbeck Kft finished recruitment with activity covers related ̋ data management .

II.1 Concept definitions

" personal data": identified or identifiable natural relating to a person (" concerned") any information ́; you can identify the natural person who is direct or indirect way, especially some identifier ́, for example name, number, locator data, online identifier or the natural person's physical, physiological, genetic, mental, economic, cultural or social identity related to one or more based on factor ̋ can identify ́;" data management": personal data or data files automated or non -automated way finished any operation or operations as a whole, such as the collection, recording, systematization, segmentation, storage, transformation or change, query, insight, use, communication, transmission, distribution or other way happening ̋ accessible ́ item through, coordination or connection, restriction, deletion or destruction;" data management limit ”: the stored marking of personal data future their treatment restriction for the purpose of;" data controller": the natural or legal person, public authority, agency or any other body that handles personal data goals and tools alone or with others together defines; if the data management goals and its means are determined by EU or member state law, to designate the data manager or the data manager relevant special aspects may also be determined by EU or member state law;" data processor": the natural or legal person, public authority, agency or any other body, which is on behalf of the data controller manages personal data;"the concerned consent": the person concerned of his will voluntary, concrete and on appropriate information and​​ a clear ̋ statement with which the affected statement or confirmation unmistakably through an expressive act, he indicates that he gives his consent for the management of relevant personal data;" addressee": the natural or legal person, public authority, agency or any other body with or with which the personal data is communicated, regardless whether it is a third party. Those public bodies that have a unique investigation in accordance with EU or Member State law they can access personal data, they do not qualify to addressee; the mentioned data is provided by these public authorities data management must be responsible for handling it goals according to the alkamanando ́ data protection rules;"third party": the natural or legal person, public authority, agency or any other body, which is not the same as the data subject, the data manager, the data processor or the persons who are the data manager or data processor directly for the management of personal data under its control they have been authorized;" aliasing": personal data in such a way handling ̋, as a result of which additional information use without you can no longer determine which personal data is specific natural applies to a person, provided that such further information separately stored, and technical and organizational measures by doing it is ensured that it is identified or can be identified as natural this personal data cannot be linked to persons;" data protection incident": a breach of security that is transmitted, stored or otherwise accidental or illegal destruction, loss, alteration, unauthorized disclosure or unauthorized access to personal data managed in results in;" enterprise": economic activity operator is a natural or legal person, regardless of its legal form, including a regular economic one activity continues ́ personal association ̋ companies and also associations;" enterprise group": the controlling enterprise and by him controlled businesses;" supervisory authority ': a Member State by created independent public authority, in Hungary the National Data Protection Authority and Freedom of information Authority (NAIH);" involved supervisory authority ”: the supervisory authority, which the processing of personal data is based on one of the following reasons affects :

• a) the data manager ̋ or the data processor ́ is mentioned supervisory authorities of its Member State has a place of business in its territory ;
• b) data management significant extent affected or likely to be significant extent affects the supervisory authorities in its Member State with residence have ̋ stakeholders; or
• c) a complaint was submitted to the aforementioned supervisory to authority ;

„ personal data at borders cross-cutting ́ data management ”:

• a) personal data in the Union a treatment is realized for which the one more in a Member State ̋ data manager ̋ or data processor ́ more than one with a place of activity in a Member State can be found ́ with the activities carried out in their places of activity in context takes place; or
• b) personal data in the Union is carried out, for which the data manager or the data processor has the sole activity with activities carried out in place in context takes place in such a way that at one more in a Member State significant degree affects or is likely to affect significant degree affects stakeholders ;

II.2 Data management purpose

Maalbeck Kft. is the Data Controller In a newsletter circumscribed data management operations with its execution concerned natural personal data of persons ( hereinafter: Data subject ).

• with Touch making ̋ contact for the purpose of
• direct business acquisition for the purpose of
• prize draw conduct for the purpose of
• complaint handling for the purpose of
• quality assurance for the purpose of
• the Affected for mediated financial service after recurring commission​ claim accounting and the commission from his rewrite arising ̋ demand validation for the purpose of
• with taxation and legal related to the accounting discipline obligations fulfillment for the purpose of
• statements, analyses making for the purpose of
• and new co-workers recruitment and selection is managed for the purpose of

Individual data management the purpose of III. point the individual data management in case of separately we indicate .

II.3 With data management concerned persons circle

Maalbeck Kft. is the financial mediation, membership organization and recruitment activity execution respectively recruitment activity execution during :

• by the Data Manager ̋ mediated financial service towards inquisitive is natural persons
• the direct by acquiring business concerned natural persons
• the prize game organized by data manager ̋ participative ̋ natural persons ,
• complaint handling proceedings during which the complaint is reported and is affected by the complaint natural persons ,
• its intermediaries subcontractor 's participation by Maalbeck Kft mediated financial for service related contract​ binding ̋ natural person ,
• by the call center of Maalbeck Kft initiated calls for recording contributing ́ happening ̋
• for the jobs advertised by the Data Controller ( including activities carried out in the employment relationship and the legal relationship of commission ) inquire ̋, about the jobs apply ̋ naturally persons personal data.

II.4 Legal basis for data management

Maalbeck Kft. in this Prospectus detailed performs data processing on the following legal bases from among the legal bases listed in Article 6 of the GDPR :

• On consent based on data management

On consent based ́ data processing may take place if the Data Subject voluntary, informed, express and definite consent to this Privacy Policy for your personal data For handling according to the information contained in the information sheet. The consent entering volunteer, the Data Subject at any time and restriction is entitled to withdraw his consent by notifying Maalbeck Kft. The notice on Data Management sólo ́ In information defined contact addresses to any of them you can send. The consent withdrawal to the Data Subject does n't look good with consequences. The consent however, your withdrawal will not be affected by the withdrawal before data management legality .

• Mandatory ̋ data management

Mandatory ̋ data management Maalbeck Kft. manages personal data whose management legislation or the European It is required by Unio's ́ mandatory ̋ legal act. The mandatory ̋ data management applied by Maalbeck Kft. is explained below legislation provides:

• about accounting § 169 (2) of the Act disposition Maalbeck Kft. is the bookkeeper accounting directly and indirectly supporting ́ accounting documents ( including the ledger invoices, analytical and detailed records ), including the personal data contained therein, for at least eight years can be read in the form of accounting notes reference based on in a retrievable way preserves .
• About credit institutions and about financial enterprises say § 288.(1) of Act CCXXXVII of 2013 and on the basis of MNB Decree 28/2014 (VII.23.) erofodo ́ complaint handling activity are carried out, in which - if the procedure or omission of Maalbeck Kft. is also part of the complaint, to investigate the complaint necessary data available with its release - Maalbeck Kft. also participates. If the complaint is about a procedure or omission of Maalbeck Kft affects, in which Maalbeck Kft. handles personal data as a data controller, for the investigation of the complaint necessary transfers personal data to the Principal financial institution conducting the procedure. Maalbeck Kft. and the Principal financial institution conducting the procedure are described in this point type ́ customer complaints in case of common data controllers .
• Legitimate interest as a legal basis for data management

This Information defines those cases and types of data for which the legal basis for data management is the legitimate interest of Maalbeck Kft. In the legitimate interests of Maalbeck Kft data management of the basis the Data Subject may object to data processing. Maalbeck Kft. is entitled to the Data Subjects your personal data - as necessary and appropriate ̋ data security measures ( in particular pseudonymisation, encryption ) by Maalbeck Kft. or on its behalf process intermediaries​ subcontractors and broadcasting​ activity executive officers​ business about his activity statements, analyses for making to use. Maalbeck Kft. is entitled to direct personal data business acquisition purpose ́ activity effectiveness and efficiency remeasurement, the results obtained from this later campaigns in the design for the use of ̋ refers to data management .

By Maalbeck Kft finished data management statutory background

Maalbeck Kft. is the financial mediation activity data processing carried out in the following legislation properly happens :

• a) GDPR: the natural the management of personal data for persons regarding about the protection of and on the free flow of such data, as well as Directive 95/46/EC in force outside placement szólo ́ 2016/679/EU of the European Parliament and council decree ( hereinafter: Decree),
• b) Infotv: 2011 on the right to access to information and freedom of information. year CXII. law ,
• c) Hpt.: about credit institutions and financial about businesses sólo ́ CCXXXVII of 2013 law ,
• d) Grt .: the economic advertising activity basic veto conditions and some of its limitations sólo ́ XLVIII of 2008 law .
• e) Eht: about electronic communications Act C of 2003​
• f) Ekertv. – electronic commercial services and information with society about some issues of related services sólo ́ CVIII of 2001 law
• g) Sztv: about accounting Act C of 2000​
• h) Art: Taxation order szólo ́ 2017 CL. law
• i) Szja Tv.: personal on income tax sólo ́ CXVII of 1995 law

III. INDIVIDUAL DATA MANAGEMENT OPERATIONS

III.1 Connecting to the data controller ̋ for purpose contribution ado ́ natural processing of personal data

• Data management description: The The intermediaries of Maalbeck Kft. were affected subcontractors or intermediaries his agent is not considered a subcontractor through or his consent given directly based on we will contact the Contact in order to get detailed be informed by the Client's financial institutions provided financial about services .
• Data management purpose: Data management aim with the leendo ̋ client contact in order to be detailed​ be informed by the Client's financial institutions provided financial about services .
• What is the legal basis for data management: The data subject is the legal basis for data management consent, with which you give your consent to the connection of your personal data purpose for treatment .
• managed data: The It touched me we handle your name, phone number, and email address .
• Data management duration: The data subject is detailed above your personal data processed for the purpose is your consent until revocation, revocation in the absence of contact we handle it .
• The persons entitled to access the personal data are: The Data Subject your personal data has been authorized by Maalbeck Kft employees and intermediaries subcontractors can get to know it.

III.2 Direct for business acquisition refers to data management

• Data management description: The It touched me you can give consent to direct your personal data business acquisition for the purpose of handling by Maalbeck Kft mediated financial news and information about services contains information, contractual​ offers to the Data Subject .
• Data management purpose: Direct business acquisition by Maalbeck Kft mediated financial news and information about services contains information, contractual​ offers delivery to the Data Subject .
• Data management legal basis: The The legal basis for data management is the Data Subject your consent, with which you give your consent to the processing of your personal data .
• managed data: The Name, telephone number and email address of the person concerned .
• Data management duration: Az Affected detailed above your personal data processed for the purpose is your consent until its withdrawal we handle it .
• The persons entitled to access the personal data are: The Data Subject your personal data has been authorized by Maalbeck Kft employees and intermediaries subcontractors can get to know it.

III.3 Personalized offers​ elaboration in order to ̋ data management

• The data management description: by Maalbeck Kft mediated financial services towards interested ̋ Affected your personal data is provided by Maalbeck Kft mediated financial services related to your request survey and personalized offers​ elaboration manages for the sake of
• Data management purpose: That data management aims to meet individual needs survey and personalized offers​ development .
• Data management legal basis: The The legal basis for data management is the Data Subject your consent, with which you give your consent to the processing of your personal data .
• personal data handled: Name, telephone number and email address of the person concerned .
• Data management duration: The data subject is detailed above your personal data processed for the purpose is your consent until its withdrawal, but at most the goal until its realization we handle it .
• The persons entitled to access the personal data are: The Data Subject your personal data has been authorized by Maalbeck Kft employees and intermediaries subcontractors can get to know it.

III.4 Data Manager ̋ by the Data Manager ̋ call center through initiated calls recording

• Data management description: If Not directly affected by Maalbeck Kft. or its intermediaries gave consent to the subcontractor's personal data via contact or direct business acquisition purpose Maalbeck Kft. owns the management (lead) of the event call center contacts the Contact through Recording of the telephone conversation - if you consent to it costs​
• Data management purpose: quality assurance goal
• Data management legal basis: The The legal basis for data management is the Data Subject contribution .
• Scope of managed data: If affected consent is given by the call to record the telephone conversation for recording costs​
• Data management duration: Az Affected detailed above your personal data processed for the purpose is your consent until its withdrawal, but for a maximum of 18 months we handle it .
• To get to know your personal data are entitled: The It touched me your personal data has been authorized by Maalbeck Kft employees can get to know it.

III.5 On behalf of Maalbeck Kft process ́ mediators subcontractors and broadcasting​ activity final persons​ business about his activity statements, analyses for making necessary handling of personal data

• Data management description: statements and analyzes commissioned by Maalbeck Kft process ́ mediators subcontractors and broadcasting​ activity final persons​ business about the activity for which it is used are paid with the consent of the given agent persons contacted on the basis of personal data.
• Data management purpose: That data management purpose analyses and statements made on behalf of Maalbeck Kft process ́ mediators subcontractors and broadcasting​ activity final persons​ business about his activity .
• Data management legal basis: The the legal basis of data management is the legitimate interest of the data manager .
• personal data handled: analysis preparation during we use it with Touch making ̋ contact result (successful/unsuccessful), as well as – successful contact in case of financial mediation its result ( whether the contract was concluded ) and – if the contract the contract was created, the contract type .
• of data management: 1 year .
• Who can see the personal data: The Data Subject your personal data has been authorized by Maalbeck Kft employees can get to know it.

III.6 The sub-agent assignment contract fulfillment in case of intermediaries to a subcontractor recurring commission​ accounting to prepare necessary handling of personal data

• Data management description: Maalbeck Kft. - if these conditions exist - your broker pays a commission for subcontractors, and commission the intermediary writes back from a subcontractor ( including: commission settlement ), during which the customer we also use your personal data .
• Data management purpose: Commission settlement preparation and supporting .
• Data management legal basis: mandatory ̋ data management ( section 169 (1) of Act C of 2000 )
• Scope of processed personal data: name of the contracting party, tax number, account number, product name, contractual amount, contract date of .
• Data management duration: the demand from its origin calculated 8 years .
• group of persons entitled to access the personal data: The Data Subject your personal data has been authorized by Maalbeck Kft employees can get to know.

III.7 With complaint handling related to data management

• Data management description: A about credit institutions and financial about businesses sólo ́ CCXXXVII of 2013 § 288 (1) of the Act and pursuant to MNB Decree 28/2014 (VII.23.) the Principal financial institution as the principal of Maalbeck Kft. by law erofodo ́ complaint handling activity carries out, in which - if the procedure or omission of Maalbeck Kft. is also part of the complaint, to investigate the complaint necessary data available with its release - Maalbeck Kft. also participates. If the complaint is about a procedure or omission of Maalbeck Kft affects, in which Maalbeck Kft. handles personal data as a data controller, for the investigation of the complaint necessary transfers personal data to the Client's financial institution .
• Data management purpose: complaint handling
• data management: mandatory ̋ data management
• Scope of processed personal data: name, address, phone number, email address of the notifier, the notification way, the announcement subject, the announcement type, content of the complaint and investigation of the complaint established facts
• Data management duration: that is demand from its origin calculated 8 years
• The scope of those entitled to access personal data: The It touched me your personal data has been authorized by Maalbeck Kft employees forwarded to the Client's financial institution authorized to respond to the complaint .

III.8 Recruitment with activity related to data management

• Data management description: The portals for applying for Maalbeck Kft.'s job applications ( including both employment and contract applications ) or jobseeker portals by operated from database called me resumes uploader is natural persons personal of your data treatment .
• Data management purpose: the right employee for the job application advertised by Maalbeck Kft selection .
• Data management legal basis: The legitimate interest of the data controller .
• Scope of personal data handled: name, address, email address, phone number, CV .
• Data management duration ?: The goal until its implementation, but for a maximum of 6 months
• group of persons entitled to access the personal data: The Data Subject your personal data has been authorized by Maalbeck Kft employees and intermediaries subcontractors can get to know it.

IV. Viewing the website

The website of Maalbeck Kft. ( www.maalbeck.hu ) uses cookies is used for the operation and use of the website facilitation, done on the website activity tracking​ and relevant offers display for the sake of. The used one data protection related to cookies information below​ table summarizes: The General Data Protection Regulation 12-21. according to its articles, in person ( any of the Client's financial institution in your bank branch ), in writing by post (Maalbeck Kft., 1047 Budapest, Attila utca 12-18, building B, floor 1), or by e-mail (info@maalbeck.hu) you can request from Maalbeck Kft., as Data Controller, the to you access to personal data, their correction, deletion or management​​ limitation, and can object to the processing of such personal data, as well as use data portability with valo 's right. Detailed information about the cookies managed on the website information on the website of Maalbeck Kft you can read ́

ARC. Recipients of personal data

IV.1 Transfer of personal data to a third party for

this Prospectus wrote data management in that case, Maalbeck Kft. forwards it to the Data Subject your personal data to a third party for, if

• the Data Subject gives his consent to this, or
• legislation and the European Unio ́ binding ̋ legal act in this direction ́ obligation ro ́ to the data manager, or
• interest of Maalbeck Kft. is the basis for data transmission .

Maalbeck Kft. does not transmit data to third countries or international organizations .

IV.2 Data processors use

Maalbeck Kft. in this Information wrote activity among the below uses data processors :

Intermediaries subcontractors	financial mediation activity, membership organization activity and financial mediation final ̋ intermediaries subcontractors recruitment​​ activity	Its intermediaries about the name of the subcontractor and the first ̋ contact about his availability until the date separately we provide information .
Principal financial institutions	Recording and storage of contractual data, customers service, hardware devices and infrastructure provision
Websupport Hungary Limited Liability Company	server provisioning	1132 Budapest, Victor Hugo Street 18-22.

V. The rights of the data subject

V.1 The data subject right of access

The Stakeholders at the request of the Data Manager ̋ information provides information on whether it processes the personal data of the Data Subject and, if so, a copy of the processed personal data and the one below information is released by the Person concerned at your disposal :

• data management purpose ;
• categories of processed personal data ;
• addressees or recipients thereof categories with whom the Data Controller is the Data Subject you have disclosed or will disclose your personal data ;
• the planned period of storage of personal data, or if this is not possible, this period aspects of its definition ;
• to the Data Subject's right concerning ́ information ́, that you can request from the Data Controller the correction, deletion or management of personal data concerning limitation and may object to the processing of such personal data ;
• of Data Protection To authority the right of the recipient to file a complaint ;

In the event that the Data Subject provides the above information more in copy requests, the Data Manager is entitled to the excess specimens preparation administrative with its costs proportionate and a reasonable fee​​ charge. If the Data Subject's right of access according to this section is adversely affected it affects the rights of others and freedoms, so especially others business secrets or intellectual property, the Data Controller is entitled to the Data Subject of your request fulfillment necessary and proportionate refuse to the extent. The Data Controller ̋ the request from the Data Subject fulfillment prior to its content clarification, the requested information and data management precise designation of activities you can ask. V.2 To correct valo ́ right The Data Controller ̋ is the Data Subject unreasonable delay at your request without corrects or supplements the Data Subject concerning inaccurate or incomplete data. The Data Controller is the Data Subject for correction valo 's right for validation refer to your request fulfillment after immediately informs the persons with whom the Data Subject is involved disclosed his personal data, provided that it is not impossible or does not require the Data Controller disproportionate effort .

V.3 To delete valo ́ right (" for forgetting valo ́ right")

the following cases, the Data Subject is entitled to unjustified delay in relation to personal data without deletion initiate :

• personal data is no longer needed for the purpose for which they were collected by the Data Manager or otherwise handled it in a way ;
• the Data Subject withdraws his consent, provided that by the Data Controller there is no other legal basis for data processing ;
• the Data Subject objects to data processing and has no priority you have a legitimate reason for data processing ,
• the Data Subject objects to data processing ;
• the Affected your personal data was handled illegally by the Data Manager ;
• Hungarian or European Union legislation by the Data Controller prescribed obligation fulfillment personal data to the Data Controller you must delete; or
• offered to children to collect personal data informative with society it took place in connection with related services .

In the event that the Data Controller is involved to delete your personal data obliged, the Data Manager will take all reasonable steps - including technical measures also its application - which is necessary for the mandatory deletion of personal data also inform the data controllers who are the Data Subject your personal data as a result of their disclosure was recognized. Adatkezelo ̋ in its information about it the rest are obliged data controller notify that the Data Subject links to your personal data or copies of these personal data deletion by the Data Subject applied for. The Data Controller is the Data Subject to delete valo 's right for validation refer to your request fulfillment after immediately informs the persons with whom the Data Subject is involved disclosed his personal data, provided that it is not impossible or does not require the Data Controller disproportionate effort. The Data Controller ̋ is not obliged to delete personal data in the event that the data management required :

• the expression of opinion to his freedom and for information to exercise valo ́ rights ;
• Hungarian or European Union legislation by the Data Controller installed to manage personal data directional obligation​ to fulfill ;
• in the public interest or to the Data Controller he wore public authority driver's license practice in the framework of to carry out the task ;
• public health area affecting public interest for its implementation ;
• public interest ̋ archiving purpose, scientific and historical research purpose or for statistical purposes, provided that the Data Subject to oblivion valo 's right practice as a result probably data management would become impossible or seriously compromised ;
• legal claims for its presentation, validation and protection .

V.4 Data management to limit valo ́ right

The Data Subject is entitled to request that the Data Controller limit data processing if one of the following conditions is met :

• the Data Subject disputes the accuracy of the personal data, in this case the limitation applies to the period that allows the Data Controller to check the accuracy of the personal data ;
• the data management is illegal and the Data Subject opposes the deletion of the data and instead requests their use limitation ;
• the Data Controller you no longer need personal data data management purpose, but the Data Subject they are required by legal requirements to submit, enforce or defend; or
• the Data Subject objected to data processing; in this case, the restriction applies to the period until it is not established that the legitimate reasons of the Data Controller take precedence whether they enjoy against the legitimate reasons of the data subject .

If the data management is a restriction according to the above ala ́ falls, the storage of such personal data with the exception of only the Data Subject consent, or legal claims for its presentation, validation or protection, or otherwise protection of the rights of a natural or legal person for the sake of, or the European It can be handled in the important public interest of the Union or a member state. Data Management is data management limitation about its dissolution to the Data Subject in advance informs. The Data Controller is the Data Subject to limit valo 's right for validation refer to your request fulfillment after immediately informs the persons with whom the Data Subject is involved disclosed his personal data, provided that it is not impossible or does not require the Data Controller disproportionate effort .

V.5 For data portability valo ́ right

The Affected at any time you can ask the Data Controller to give consent personal data managed on the basis of segmented, broad in a circle used, with machine can be read in ́ format forgive me available. If it is otherwise technically possible, the Data Controller is the Data Subject at the request of the personal data directly to another, the Data Subject in your application marked for data manager ̋ transmits. For data portability according to this point valo ́ right does not create an obligation that the data controllers with each other introduce or maintain technically compatible data management systems. In the event that the Data Subject for data portability valo ́ rights adversely it affects the rights of others and freedoms, so especially others business secrets or intellectual property, the Data Controller is entitled to the Data Subject of your request fulfillment necessary refuse to the extent .

V.6 A to protest valo ́ right

the Data Subject in his right stands on its own for reasons related to his situation object to the processing of your personal data at any time. In the event that the Data Controller cannot prove that the data processing is justified by compelling legitimate reasons that take priority they enjoy the interests, rights and​​ against your freedoms or which are legal claims for its presentation, validation or protection are connected, the Data Manager may no longer process personal data and he is obliged to do them delete. In the event that the Data Subject direct business acquisition objects to data processing for this purpose, personal data processed for this purpose may no longer be processed .

V.7 Right to legal remedy

If the Affected business deems to be in force at all times data protection his rights according to the law have been violated, in his right stands the National Data Protection and Freedom of information File a complaint with the authority. The National Data Protection Authority and Freedom of information Authorities contact details: Website: http://naih.hu/; Address: 1125 Budapest, Szilágyi Erzsébet fasor 22/c; Postal address: 1530 Budapest, Pf.: 5.; Phone: +36-1-391-1400; Fax: +36-1-391-1410; E-mail: ugyfelszolgalat@naih.hu Illegal data processing by the Data Subject in case of may file a civil lawsuit against the Data Controller. The lawsuit is about the person concerned at your choice, the court of your place of residence can also be initiated before ́ (the courts his contact information can be found at the following link: http://birosag.hu/torvenyszekek ). To the Data Subject further ́ in his right the person concerned is responsible for the complaint on behalf of by submitting, court before proceedings conducting, as well as compensation in the name of his right by validating a non- profit organization or association to entrust, which was created in accordance with Hungarian law and whose statutes recorded its goals are the public interest service, as well as the rights of those concerned and freedom in relation to personal data provided protection .

V.8 Other provisions

The Data Controller ̋ informs the Data Subject that in the event that the Data Controller receives this Information ́ V.1. - V.6. request according to point of its promoter reasonable doubt about his identity attacks, the Data Controller is the Data Subject of his identity to confirm necessary additional information available release you can claim. In the event that the Data Controller it is proven not to be way to the Affected to identify, the Data Manager ̋ is the person concerned of your request can refuse to fulfill it.

Budapest, February 5, 2024.