How long will my personal data be stored and when will it be deleted?
For the processing operations we carry out, we indicate how long the data is stored and when it is deleted or blocked. If no specific retention period is stated below, your personal data will be deleted or blocked as soon as the purpose or legal basis for storage no longer applies.
However, storage may go beyond the stated period in the event of a (threatened) legal dispute with you or other legal proceedings, or if storage is required by statutory regulations to which we as the controller are subject. Once the statutory retention period expires, the personal data will be blocked or deleted unless further storage is necessary and a legal basis exists for it.

How is my personal data protected against unauthorized access or misuse?
We use appropriate technical and organizational security measures to protect your data against accidental or deliberate manipulation, partial or total loss, destruction, or unauthorized access by third parties, taking into account the state of the art, implementation costs, and the nature, scope, context, and purposes of the processing, as well as the existing risks of a data breach (including its likelihood and effects) for the data subject. Our security measures are continuously improved in line with technological development.

Will my personal data be disclosed to external service providers (processors)?
As with any company, we use external domestic and foreign service providers to handle our business operations (e.g. in the areas of IT, logistics, telecommunications, sales, and marketing). They act only on our instructions and have been contractually obligated pursuant to Art. 28 GDPR to comply with data protection regulations.
If personal data is shared by us with our sister companies or received from them, this is done based on existing data processing agreements.

Will my personal data be transferred to countries outside the EU/EEA and under what conditions?
In the context of our business relationships, your personal data may be transferred to or disclosed to third parties, which may be located outside the European Economic Area (EEA), i.e. in third countries. Such processing is carried out solely for the performance of contractual and business obligations and to maintain your business relationship with us (legal basis is Art. 6 (1) (b) or (f) in conjunction with Art. 44 et seq. GDPR). We will inform you of the specific details of such transfers in the relevant sections below.
Some third countries have been confirmed by the European Commission as offering a level of data protection comparable to that of the EEA through adequacy decisions. In other third countries where personal data may be transferred, there may be no comprehensive legal framework ensuring a high level of data protection. In such cases, we ensure adequate protection through binding corporate rules, standard contractual clauses of the European Commission pursuant to Art. 46 (1), (2) (c) GDPR, certifications, or approved codes of conduct.

Will my personal data be used for automated decision-making or profiling?
We do not intend to use the personal data collected from you for any procedure involving automated decision-making (including profiling).

Am I required to provide my personal data?
We do not make the conclusion of contracts with us dependent on you providing personal data in advance. As a customer, you are generally under no legal or contractual obligation to provide us with personal data; however, we may be unable to provide certain services or only to a limited extent if you do not provide the necessary data. Where this is exceptionally the case with regard to the products we offer, we will inform you separately.

When must personal data be disclosed to authorities or other parties by law?
We may be subject to special legal or regulatory obligations to lawfully disclose personal data to third parties, in particular public authorities (Art. 6 (1) sentence 1 (c) GDPR).

What rights do I have regarding my personal data?
You can assert the following rights at any time using the contact details provided above. As a data subject, you have the right:
Pursuant to Art. 15 GDPR to obtain information about the personal data we process about you. In particular, you may request information on the purposes of processing, categories of data, categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of rights to rectification, erasure, restriction of processing, or objection, the existence of a right to lodge a complaint, the source of your data if not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information on its details.
Pursuant to Art. 16 GDPR to demand the immediate correction of inaccurate or completion of your personal data stored by us.
Pursuant to Art. 17 GDPR to request the erasure of your data stored by us, unless processing is required for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims.
Pursuant to Art. 18 GDPR to request the restriction of processing where the accuracy of the data is contested by you or processing is unlawful.
Pursuant to Art. 20 GDPR to receive your data that you have provided to us in a structured, commonly used, and machine-readable format or to request the transfer to another controller (“data portability”).
Pursuant to Art. 21 GDPR to object to processing if the processing is based on Art. 6 (1) sentence 1 (e) or (f) GDPR. This applies in particular where processing is not necessary for the performance of a contract with you. If your objection is not directed at direct marketing, we kindly ask that you explain why we should not process your data as we have done. In the case of a justified objection, we will review the situation and either stop or adjust the data processing or demonstrate our compelling legitimate grounds for continuing processing.
Pursuant to Art. 7 (3) GDPR to withdraw consent previously given – even before the GDPR came into force, i.e., before 25 May 2018 – at any time. This withdrawal means that we may no longer continue the data processing based on that consent in the future.
Pursuant to Art. 77 GDPR to lodge a complaint with a data protection supervisory authority about the processing of your personal data by our company, such as the authority responsible for us: Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH), 1055 Budapest, Falk Miksa utca 9–11, Hungary.

Changes to the privacy notice
We reserve the right to amend this privacy notice where necessary, for example to comply with new legal requirements, technical developments, or internal processes. Changes will be made in accordance with applicable data protection laws.
The current version will be published on our website. The date of the last update is provided at the beginning of this notice. We therefore recommend that you check this page regularly.
In the case of significant changes affecting your rights or the scope of processing, we will inform you separately. This may be via email or a notice on our website or within our applications. If required by law, we will request your renewed consent.
In the course of developments in data protection law, industry standards, or technical or organizational changes, our privacy notice is regularly reviewed and may be adjusted accordingly.

B. Visiting Websites

Last updated: 18 June 2025