Privacy Policy

[vc_row][vc_column][vc_tta_accordion active_section=”1″ collapsible_all=”true”][vc_tta_section title=”PRIVACY NOTICE on data processing in relation to ABT’s services” tab_id=”1745310472529-ce2fa804-c89d”][vc_column_text]

In effect since: 2018.06.25.

Last review: 2025.04.04.

 

1. Data controllers and contact details

Name: ABT Hungária Tanácsadó Kft.ABT Hungária Könyvvizsgáló Kft.

(hereinafter, together: „ABT Treuhand Csoport” or „ABT”)

Contact:

Headquarters E-mail address Phone number Data protection responsible
1037 Budapest, Montevideo u. 3/A. adatvedelem@abt.hu 06-1-4303400

Smohay Ferenc

ferenc.smohay@abt.hu

2. Data processors

Name Headquearters Contact Data processing activity
MediaCenter Hungary Kft. H-6001 Kecskemét, Sosztakovics u. 3. II./6.

E-mail address:

mediacenter@mediacenter.hu

Phone number:

+36 21 201 0505

Handles hosting for this website.
Collective Art Kft. H-1053 Budapest, Veres Pálné utca 13. fszt. 4.

E-mail address:

hello@collective.hu

Web developer, provides the technical background for the website.
MPC Hardver Kft. H-3300 Eger, Petőfi S. u. 19.

E-mail address:

laszlo.gillanyi@mpchardver.eu

Phone number:

+36 30 3 499 599

Provides IT support for ABT Treuhand.
Microsoft Ireland Operations Limited One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland

Phone number:

(+1) 425-882-8080

ABT Treuhand uses Microsoft’s mail system (Outlook).

3. Recipients

ABT does not, in principle, transfer personal data to third parties other than Data Processors.

Exceptions to this are when ABT needs to send an invoice containing personal data to the National Tax and Customs Administration of Hungary (hereinafter: NAV), or when ABT needs a power of attorney to provide its services and needs to transmit this power of attorney to the competent authority, bank – payroll, accounting – or to the NAV in the case of tax advice.

4. Processing of personal data

4.1. Contacting, enquiries and making an offer

Enquiries and requests for offers can be submitted to ABT via the contact details provided by ABT or via the contact form on the website. ABT requests the contact details and other offer-related information necessary for smooth communication and for establishing cooperation between the parties concerned. The submission of certain data (e.g. telephone number) is optional. ABT will prepare the offer for the contracting party in accordance with the requirements set out in the request for the offer. If this is necessary to prepare the offer, the ABT may also request additional information. The prepared proposal will be sent by ABT via the contact details provided by the contracting party.

You have the right to object to the processing of your personal data based on legitimate interests at any time on grounds relating to your particular situation.
Purpose of data processing Legal basis of data processing Scope of personal data Duration of data processing
Identifying the contacting person and the interested parties and assessing their needs.

legitimate interest of ABT: Promoting possible assignments and business relations

paragraph (f) of subsection (1) Article 6 of GDPR

·        Contact persons’ identification and contact data:

(e.g., name, e-mail address, phone number)

·        Information regarding the enquiry or the request of offer

(e.g. service of interest, message content, date of consultation)

·        Other optional data

(e.g. name of company, phone number)

The retention period is determined by taking into account the time needed to respond to the enquiry, to decide on the offer and to make an offer, and the timeliness of the request.
Preparing and sending a proposal for ABT’s services.

legitimate interest of ABT: maintaining and expanding its customer base

paragraph (f) of subsection (1) Article 6 of GDPR

·        Identification and contact details of the interested party

 

(e.g. name, e-mail address, telephone number, position)

 

·        Other personal data required to prepare and send the proposal

 

(e.g. in case of payroll services employment data)

For this purpose, the retention period will be determined by taking into account the validity of the offer and the decisions about it.
If an enquiry or request is received by the ABT via this website or e-mail, the following data processors are involved in the process:

MediaCenter Hungary Kft., Collective Art Kft., Microsoft Ireland Ltd, MPC Hardver Kft.

4.2. Contracting

ABT provides a wide range of services to its clients in a contractual relationship. When necessary for the performance of a particular service, in addition to the service contract, it also processes personal data related to the power of attorney (e.g. accounting, payroll, tax advice) or due diligence of the client (e.g. accounting, tax advice).

You have the right to object to the processing of your personal data based on legitimate interests at any time on grounds relating to your particular situation.
Purpose of data processing Legal basis of data processing Scope of personal data Duration of data processing
The conclusion of a valid contract between ABT and their customers, which facilitates their lawful performance.

·        In the case of a contract with a legal person:

·        Legitimate interest of ABT: To support contractual performance  

paragraph (f) of subsection (1) Article 6 of GDPR

·        Representative’s identification data

·        Contact person identification data (optional)

For this purpose, until the conclusion and duration of the contract.

·        For private persons, in the case of contracts with self-employed persons / contractors:

·          Performance of the contract

paragraph (b) of subsection (1) Article 6 of GDPR

·        Identifying data of the contracting Party

·        Contact details of the contracting party

Lawful preservation of contracts as accounting documents.

ABT’s legal obligation

paragraph (c) of subsection (1) Article 6 of GDPR

Act C of 2000 on Accounting Sections 166, 169

·        Identifying data of the Representatives, contracting party

·        Contact person identification and contact details

The retention period is determined on the basis of 8 years from the date of the accounts for the financial year.

Granting a lawful power of attorney.

 

Recipients: NAV/competent bank

legitimate interest of ABT: to support performance in accordance with the contract

paragraph (f) of subsection (1) Article 6 of GDPR

·        Identifying information of attorney and proxy

·        Identifying information of witnesses

·        Subject of the authorisation

For this purpose, the retention period is determined by the period of cooperation between ABT and their clients or the termination of the contract.
Customer identification and identity document verification.

ABT’s legal obligation

paragraph (c) of subsection (1) Article 6 of GDPR

Act LIII of 2017 on the Prevention and Combating of Money Laundering and Terrorist Financing Sections 7-14/A. and 57

·        Owner’s identification data

(e.g. name, place of birth, date, nationality, address, signature)

The retention period is determined by taking into account the 8 years from the termination of the business relationship or from the execution of the transaction order.
If a contract is negotiated and finalised by e-mail, the following data processors are involved in the process:

Microsoft Ireland Ltd, MPC Hardver Kft.

4.3. Maintaining contact

ABT cooperates and maintains contact with its clients throughout the performance of its services.

You have the right to object to the processing of your personal data based on legitimate interests at any time on grounds relating to your particular situation.
Purpose of data processing Legal basis of data processing Scope of personal data Duration of data processing
Ensuring the collection of information necessary for the provision of the service, conducting consultations.

legitimate interest of ABT: Ensuring fast and timely performance.

paragraph (f) of subsection (1) Article 6 of GDPR

·        Contact details of the contact persons

(e.g. name, e-mail address, phone number)

·        Content of the communication

The retention period is determined by the period of cooperation between ABT and their clients or the termination of the contract.
In case the parties maintain contact by e-mail, the following data processors are involved:
Microsoft Ireland Ltd, MPC Hardver Kft.

4.4. Performance

In order for ABT to provide the service to the client, it needs to process personal data. Consequently, it processes different personal data according to the different services it provides. This section should be read in conjunction with the content of the data processing contract concluded with ABT.

You have the right to object to the processing of your personal data based on legitimate interests at any time on grounds relating to your particular situation.
Purpose of data processing Legal basis of data processing Scope of personal data Duration of data processing
Obtaining the information needed to complete the assignment.

ABT’s legal obligation

paragraph (c) of subsection (1) Article 6 of GDPR

Audit:

Personal data relating to the provision of the service as described above and in the data processing contract between the parties.

The termination of the contract between the ABT and the customer is taken into account.

legitimate interest of ABT:

Carrying out the assignment at expert level

paragraph (f) of subsection (1) Article 6 of GDPR

Tax consulting / compliance, accounting, payroll services, risk and compliance, data privacy and HR services:

Personal data relating to the provision of the service as described above and in the data processing contract between the parties.

If the personal data required for the performance are received by ABT via e-mail, the following data processors are involved in the process:

 Microsoft Ireland Ltd, MPC Hardver Kft.

These data processors are in addition to the data processors identified in the data processing contract related to the service contract.

4.5. Billing / invoicing

ABT shall keep the proof of performance received from its customers after the performance of the services undertaken and shall issue an invoice for its activities. If the invoice concerns a private individual or sole trader, it also processes the personal data necessary for issuing the invoice.

You have the right to object to the processing of your personal data based on legitimate interests at any time on grounds relating to your particular situation.
Purpose of data processing Legal basis of data processing Scope of personal data Duration of data processing
Preparation of a certificate of completion, lawful invoicing of the services.

legitimate interest of ABT:

Documented evidence of completion

paragraph (f) of subsection (1) Article 6 of GDPR

·        Identification data of the person accepting the certificate of completion

·        Subject of the certificate of completion

For this purpose, it is determined by the issuing of the invoice.

Issuing invoices to individuals, sole traders.

Recipient: NAV

ABT’s legal obligation

paragraph (c) of subsection (1) Article 6 of GDPR

·        Invoice recipient’s identification data

·        Other data written on the invoice

It takes into account 8 years from the date of the accounts for the financial year.
If the confirmation of performance, invoices are transmitted by ABT via e-mail, the following data processors are involved in the process:

Microsoft Ireland Ltd, MPC Hardver Kft.

4.6. Lawful performance

You have the right to object to the processing of your personal data based on legitimate interests at any time on grounds relating to your particular situation.
Purpose of data processing Legal basis of data processing Scope of personal data Duration of data processing
Providing proof of lawful performance

legitimate interest of ABT:

Clarifying and preventing disputes about performance.

paragraph (f) of subsection (1) Article 6 of GDPR

·        Personal data related to the offer

·        Personal data relating to contracts, authorisations

·        Personal data processed in relation to the provision of the service

·        Personal data relating to contacts (identification data, content of relevant consultations)

·        Personal data included in the certificate of performance (identification data, content of the certificate of performance)

Determined by the enforceability of claims arising from the contract between ABT and the client.
If the personal data required for the performance are received by ABT via e-mail, the following data processors are involved in the process:

Microsoft Ireland Ltd, MPC Hardver Kft.

5. Data transfers outside the EU

ABT, in principle, does not transfer personal data outside the European Union.

However, as ABT uses the Microsoft Outlook mailing system, in the case of this service provider personal data may be transferred outside the European Union. In the case of such transfers, ABT must provide one of the safeguards set out in Chapter V of the GDPR to ensure adequate protection of personal data. For data transfers by Microsoft, depending on the specific location of the transfer, an adequacy decision or standard contractual clauses adopted by the Commission of the European Union will ensure adequate security of personal data.

6. Your Rights as a Data Subject

6.1. Right to information and access

You have the right to receive information whether ABT processes your personal data and if they do, about the relevant circumstances of the processing.

Such relevant information may be:

  • the type of data processed by ABT;
  • the purpose, duration, and legal basis for data processing;
  • the name and address of ABT as well as their activities related to data processing;
  • the identity of third parties to whom personal data are transferred and the purpose of such disclosures.

You have the right to access, obtain or request a copy of your personal data.  Exercising this right cannot adversely affect the rights and freedoms of others.

6.2. Right to rectification

You are entitled to request correction of inaccurate data and completion of incomplete data.

6.3. Right to erasure

You have the right to have ABT erase your personal data if one of the following conditions apply:

  • the data are no longer necessary in relation to the purposes for which they were collected or otherwise processed by ABT
  • you withdraw consent and there is no other legal ground for the processing
  • you object to the processing and ABT has no overriding legitimate grounds for the processing
  • the data have been unlawfully processed,
  • the data must be erased for compliance with a legal obligation.

In exceptional cases, your data cannot be deleted even if one of the above conditions is met. For example, if it is necessary to retain for the establishment, exercise, or defence of legal claims.

6.4. Right to restriction of processing

If you dispute the accuracy of your personal data, you have the right to request ABT to restrict the processing of your data until verification. If the data processing is unlawful or the storage period has expired, but you need them in order to enforce your legal rights, you may also request the restriction of processing instead of the erasure your data.

Restriction of processing means that ABT will only store your data. They will not change the data or perform any other processing activity. ABT may use your restricted data IF you consent to the processing, or it is necessary for the establishment, exercise, or defence of legal claims OR to protect the rights of another person.

6.5. Right to object

If the data processing is based on legitimate interest, You have the right to object to the processing of your personal data at any time on grounds relating to your particular situation. Unless ABT demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the visitor or the processing is necessary for the establishment, exercise or defence of legal claims the personal data will no longer be processed.

ABT may still process your personal data if:

  • there is a compelling legitimate interest,
  • it is necessary for the establishment, exercise, or defence of legal claims.

    6.6. Right to data portability

You have the right to receive the personal data concerning you that you have provided to the data controller in a structured, commonly used, machine-readable format and the right to transmit such data to another data controller without hindrance from the data controller to whom you have provided the personal data, IF the processing is based on your consent or on the performance of a contract (if you are a contracting party); and the processing is carried out by automated means.

When exercising your right to data portability, you have the right to request, where technically feasible, the direct transfer of personal data between controllers.

The right to data portability must be without prejudice to the provisions governing the right to erasure and must not adversely affect the rights and freedoms of others.

6.7. Fulfilling the data subjects’ requests

If you think that your personal data is not being processed in accordance with the applicable data protection requirements, you may request ABT to rectify it. ABT will respond to your request within a maximum of one month after it was received. If ABT is unable to comply with your request or more time is needed because of its complexity or, in the case of multiple requests, its volume, you will be informed within the one-month period. In such cases, the deadline may be extended, up to two months.

6.8. How to exercise your rights

You have the right to lodge a complaint with the competent data protection supervisory authority. In Hungary the authority is the Nemzeti Adatvédelmi és Információszabadság Hatóság (National Authority for Data Protection and Freedom of Information) or briefly ‘NAIH’. NAIH’s website: https://naih.hu/

Postal address E-mail / mailing address Telephone number

Falk Miksa street 9-11

1055 Budapest,

Hungary

ugyfelszolgalat@naih.hu

1363 Budapest, Pf.: 9.

+36 (30) 683-5969

+36 (30) 549-6838

If you believe that your rights have been violated, you also have the right to seek judicial remedy at a court of law, which falls within the jurisdiction of the Törvényszék (General Court). Upon the request, the action can be brought before the Court which is competent based on the domicile or the place of residence of the data subject (you). More information is available here: https://birosag.hu/en

[/vc_column_text][/vc_tta_section][vc_tta_section title=”PRIVACY NOTICE on data processing in relation to the website” tab_id=”1744904909176-bbfcb19b-25ae”][vc_column_text]

In effect since: 2018.06.25.

Last review: 2025.04.04.

 

1. Data controllers and contact details

Name: ABT Hungária Tanácsadó Kft., ABT Hungária Könyvvizsgáló Kft.

 (hereinafter, together: „ABT Treuhand Csoport” or „ABT”)

Contact:

Headquarters E-mail address Phone number Data protection responsible
1037 Budapest, Montevideo u. 3/A. adatvedelem@abt.hu 06-1-4303400

Smohay Ferenc

ferenc.smohay@abt.hu

2. Recipients

ABT does not transfer personal data to third parties other than Data Processors.

3. Data processors

Name Headquearters Contact Data processing activity
MediaCenter Hungary Kft. H-6001 Kecskemét, Sosztakovics u. 3. II./6.

E-mail address:

mediacenter@mediacenter.hu

Phone number:

+36 21 201 0505

Handles hosting for this website.
Collective Art Kft. H-1053 Budapest, Veres Pálné utca 13. fszt. 4.

E-mail address:

hello@collective.hu

Web developer, provides the technical background for the website.
MPC Hardver Kft. H-3300 Eger, Petőfi S. u. 19.

E-mail address:

laszlo.gillanyi@mpchardver.eu

Phone number:

+36 30 3 499 599

Provides IT support for ABT Treuhand.
Microsoft Ireland Operations Limited One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland

Phone number:

(+1) 425-882-8080

ABT Treuhand uses Microsoft’s mail system (Outlook).
The Rocket Science Group LLC 675 Ponce de Leon Ave NE, Suite 500, Atlanta, GA 30308 USA

Privacy contact:

https://mailchimp.com/privacy-rights/

It provides the MailChimp platform that ABT uses to send newsletters and other marketing content, event invitations.
Google Ireland Limited Google Building Gordon House, Barrow St, Dublin 4, Ireland

Phone number:

+353 1 436 1000

It provides Google Analytics for statistical analysis of the ABT website.

4. Processing of personal data

4.1. Contacting, enquiries

Enquiries and requests for offers can be submitted to ABT via the contact details provided by ABT or via the contact form on the website. ABT requests the contact details and other offer-related information necessary for smooth communication and for establishing cooperation between the parties concerned. The submission of certain data (e.g. telephone number) is optional.

You have the right to object to the processing of your personal data based on legitimate interests at any time on grounds relating to your particular situation.
Purpose of data processing Legal basis of data processing Scope of personal data Duration of data processing
Identifying the contacting person and the interested parties and assessing their needs.

legitimate interest of ABT: Promoting possible assignments and business relations

paragraph (f) of subsection (1) Article 6 of GDPR

·        Contact persons’ identification and contact data:

(e.g., name, e-mail address, phone number)

·        Information regarding the enquiry or the request of offer

(e.g. service of interest, message content, date of consultation)

·        Other optional data

(e.g. name of company, phone number)

The retention period is determined by taking into account the time needed to respond to the enquiry, to decide on the offer and to make an offer, and the timeliness of the request.
If an enquiry or request is received by the ABT via this website or e-mail, the following data processors are involved in the process:

MediaCenter Hungary Kft., Microsoft Ireland Ltd, MPC Hardver Kft.

4.2. Sending newsletters and other direct marketing messages

ABT regularly compiles newsletters on professional news and news related to its activities and services, which it sends to its subscribers and clients. In addition, ABT also sends festive greetings to existing clients on major holidays (e.g. Christmas).

You have the right to object to the processing of your personal data based on legitimate interests at any time on grounds relating to your particular situation.
Purpose of data processing Legal basis of data processing Scope of personal data Duration of data processing
To inform subscribers about the professional issues and articles that ABT considers important.

Consent of the data subject

paragraph (a) of subsection (1) Article 6 of GDPR

·     Identifying and contact data

(e.g. name, e-mail address)

 

 

The retention period shall be subject to the withdrawal of the data subject’s consent, but not more than 3 years from the date on which the consent was given.

After that period, the ABT will request separate consent.

Tracking the validity of the subscription to the newsletter, tracking the expiry of the consent given.

ABT’s legitimate interest: Pursuing a legitimate and practical newsletter sending practice

paragraph (f) of subsection (1) Article 6 of GDPR

·      Subscription data:

 

(e.g. date of subscription, IP address at the time of subscription)

 

·      Data relating to the sending and delivery of newsletters

 

(e.g. date and time of activity)

The retention period is determined by the time of subscription to the newsletter.
To inform subscribers about the professional issues and articles that ABT considers important.

ABT’s legitimate interest: To promote customer satisfaction, confidence and the possibility of new projects.

paragraph (f) of subsection (1) Article 6 of GDPR

·     Identifying and contact data

(e.g. name, e-mail address)

 

·        Contact details (contact type, source, language, message content)

The retention period is determined by the existence of the working relationship between the ABT and the client.
Sending holiday greetings to ABT clients.

ABT’s legitimate interest: Building good relations with clients

paragraph (f) of subsection (1) Article 6 of GDPR

The following data processors are involved in this process:

MediaCenter Hungary Kft., Collective Art Kft., Microsoft Ireland Ltd, The Rocket Science Group LLC, MPC Hardver Kft.

4.3. Social media presence

The website offers the possibility to click on the LinkedIn sign to redirect the visitor directly to the LinkedIn page, where the visitor can view and follow ABT’s LinkedIn page. ABT shares some of the content of its website (e.g. blog posts) on this page, where users of the social networking site can provide feedback or comments on the content.

LinkedIn’s data processing is governed by its own privacy policies, and ABT has no control over LinkedIn’s data processing. More detailed information on LinkedIn’s data processing can be found here: https://www.linkedin.com/legal/privacy-policy?trk=organization-guest_footer-privacy-policy

You have the right to object to the processing of your personal data based on legitimate interests at any time on grounds relating to your particular situation.
Purpose of data processing Legal basis of data processing Scope of personal data Duration of data processing
To publish and communicate widely information on the activities of the ABT and the professional articles of its employees.

ABT’s legitimate interest: Promoting ABT’s activities and services.

paragraph (f) of subsection (1) Article 6 of GDPR

·        LinkedIn profile identification data (e.g. public name, photo)

·        Reactions to shared content, comments

It is determined by the following criteria:

·        deletion of user’s reaction and comment

·        the existence of ABT’s LinkedIn page

 4.4. Cookies

ABT uses cookies to operate the abt.hu website. Cookies are variable files of letters and numbers that are stored on your computer or mobile device and are stored for a predetermined period of time. Cookies allow the website to remember your actions and personal preferences (such as your username, language, font size and other unique settings related to the website’s display) for a certain period of time, so that you do not have to re-enter them each time you visit our website or navigate from one page to another. ABT can also use cookies to gain an insight into visitors’ habits when using the website.

ABT uses cookies managed by Google Analytics to help measure website traffic and other web analytics data, but ABT has little control over Google’s processing of data.

ABT also uses Hotjar to help understand user activity. Like Google, these cookies contribute to the measurement of website traffic and other web analytics data.

In addition, ABT also uses marketing cookies from Meta Platforms, Inc. if you consent to the collection of data by ABT cookies for marketing purposes.

For more detailed information, please see the Cookie Notice.

You have the right to object to the processing of your personal data based on legitimate interests at any time on grounds relating to your particular situation.
Purpose of data processing Legal basis of data processing Scope of personal data Duration of data processing
Necessary cookies: to provide the technical support necessary for the smooth operation of the website.

ABT’s legitimate interest: the smooth running of the website

paragraph (f) of subsection (1) Article 6 of GDPR

·        Identification data

(e.g. visitor’s IP address, country of visit)

·        Information about the visitor’s cookie preferences

More detailed information can be found in section 3 of the Cookie Notice.
Preferences cookies (settings): to improve the user experience of the website.

Consent of the data subject

paragraph (a) of subsection (1) Article 6 of GDPR

·        Site-related settings

(e.g. language)

Statistics cookies (Google Analytics): analysing data on the website, monitoring the number of visits, improving the website.

·        Statistical identification data (separate ID)

·        Statistics related to your website visits (e.g. pages viewed, time spent, clicks, opens)

Marketing cookies: assessing advertising that is relevant to users, their interests. ·        Data on users’ activities and interests related to the website
The following data controller is involved in the process of using marketing cookies:
Meta Platforms Ireland Ltd.
The following data processors are involved in the process regarding cookies:
Google Ireland Ltd., Hotjar Ltd.

5. Data transfers outside the EU

ABT, in principle, does not transfer personal data outside the European Union.

However, as ABT uses service providers outside the EU personal data may be transferred outside the European Union. In the case of such transfers, ABT must provide one of the safeguards set out in Chapter V of the GDPR to ensure adequate protection of personal data. To this end, the ABT applies the following guarantees to service providers outside the European Union:

  • For data transfers by Microsoft, LinkedIn and MailChimp and also for Google and using Google Analytics, depending on the specific location of the transfer, an adequacy decision or standard contractual clauses adopted by the Commission of the European Union will ensure adequate security of personal data.
  • In the case of Hotjar, the standard contractual clauses ensure that your personal data is adequately protected.

6. Your Rights as a Data Subject

6.1. Right to information and access

You have the right to receive information whether ABT processes your personal data and if they do, about the relevant circumstances of the processing.

Such relevant information may be:

  • the type of data processed by ABT;
  • the purpose, duration, and legal basis for data processing;
  • the name and address of ABT as well as their activities related to data processing;
  • the identity of third parties to whom personal data are transferred and the purpose of such disclosures.

You have the right to access, obtain or request a copy of your personal data.  Exercising this right cannot adversely affect the rights and freedoms of others.

6.2. Right to rectification

You are entitled to request correction of inaccurate data and completion of incomplete data.

6.3. Right to erasure

You have the right to have ABT erase your personal data if one of the following conditions apply:

  • the data are no longer necessary in relation to the purposes for which they were collected or otherwise processed by ABT
  • you withdraw consent and there is no other legal ground for the processing
  • you object to the processing and ABT has no overriding legitimate grounds for the processing
  • the data have been unlawfully processed,
  • the data must be erased for compliance with a legal obligation.

In exceptional cases, your data cannot be deleted even if one of the above conditions is met. For example, if it is necessary to retain for the establishment, exercise, or defence of legal claims.

6.4. Right to restriction of processing

If you dispute the accuracy of your personal data, you have the right to request ABT to restrict the processing of your data until verification. If the data processing is unlawful or the storage period has expired, but you need them in order to enforce your legal rights, you may also request the restriction of processing instead of the erasure your data.

Restriction of processing means that ABT will only store your data. They will not change the data or perform any other processing activity. ABT may use your restricted data IF you consent to the processing, or it is necessary for the establishment, exercise, or defence of legal claims OR to protect the rights of another person.

6.5. Right to object

If the data processing is based on legitimate interest, You have the right to object to the processing of your personal data at any time on grounds relating to your particular situation. Unless ABT demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the visitor or the processing is necessary for the establishment, exercise or defence of legal claims the personal data will no longer be processed.

ABT may still process your personal data if:

  • there is a compelling legitimate interest,

it is necessary for the establishment, exercise, or defence of legal claims.

6.6. Right to data portability

You have the right to receive the personal data concerning you that you have provided to the data controller in a structured, commonly used, machine-readable format and the right to transmit such data to another data controller without hindrance from the data controller to whom you have provided the personal data, IF the processing is based on your consent or on the performance of a contract (if you are a contracting party); and the processing is carried out by automated means.

When exercising your right to data portability, you have the right to request, where technically feasible, the direct transfer of personal data between controllers.

The right to data portability must be without prejudice to the provisions governing the right to erasure and must not adversely affect the rights and freedoms of others.

6.7. Fulfilling the data subjects’ requests

If you think that your personal data is not being processed in accordance with the applicable data protection requirements, you may request ABT to rectify it. ABT will respond to your request within a maximum of one month after it was received. If ABT is unable to comply with your request or more time is needed because of its complexity or, in the case of multiple requests, its volume, you will be informed within the one-month period. In such cases, the deadline may be extended, up to two months.

6.8. How to exercise your rights

You have the right to lodge a complaint with the competent data protection supervisory authority. In Hungary the authority is the Nemzeti Adatvédelmi és Információszabadság Hatóság (National Authority for Data Protection and Freedom of Information) or briefly ‘NAIH’. NAIH’s website: https://naih.hu/

Postal address E-mail / mailing address Telephone number

Falk Miksa street 9-11

1055 Budapest,

Hungary

ugyfelszolgalat@naih.hu

1363 Budapest, Pf.: 9.

+36 (30) 683-5969

+36 (30) 549-6838

If you believe that your rights have been violated, you also have the right to seek judicial remedy at a court of law, which falls within the jurisdiction of the Törvényszék (General Court). Upon the request, the action can be brought before the Court which is competent based on the domicile or the place of residence of the data subject (you). More information is available here: https://birosag.hu/en

[/vc_column_text][/vc_tta_section][/vc_tta_accordion][/vc_column][/vc_row]