GDPR

1.
Parties state that during the conclusion and the performance of the present Contract they make available to each other

• in case of private person contracting party, the name, address, e-mail address, telephone number, invoice data, bank account number,
• in case of legal entity contracting party, name, e-mail address, telephone number, position of the legal representatives,
• and if necessary the data of contact person (name, e-mail address, telephone number, position).

Parties are aware that according to the effective legal regulations providing of the above personal data constitutes as data processing, during which data processing the party receiving the data shall be the “data controller” and the person whose data is provided shall be “data subject”. The data controller shall process the personal data of the data subject indicated in this contract on legitimate interest to perform the contract, fulfill the contractual purpose and keep business relationship.

2.
The Parties undertake that if the person indicated in the contract as a contact person is not a representative of the party providing the data, than the consent of data subject shall be obtained by the relevant contracting party providing the data. The party providing the data warrants that it has due authorization from the data subject to provide the relevant data in the present Contract and shall bear full liability for the same. Any damages resulting from the absence of the consent of the data subject shall be borne by the party obliged to obtain such consent.

3.
The Parties undertake that if the contact person or his or her personal data changes, the other party shall be notified immediately. Incorrect or altered data will be deleted immediately.

4.
Recipients of the Personal data are the employees and data processors of the parties fulfilling tasks connecting to the contract.

5.
Period of personal data storage: personal data necessary for proof of fulfillment is 5 years from the termination of the contract or the date of termination of representation of the relevant person, 8 years in the cases prescribed by accounting law, otherwise personal data shall be deleted immediately after termination of the contract or the date of termination of representation of the relevant person.

6.
Personal data may be transferred for the purpose of data processing to the accountants of the parties in order to fulfill taxation and bookkeeping obligations, and also to the Hungarian Post Office or to the courier for transport services and in case of official request to the relevant authorities.

The Parties undertake that they shall process the personal data in a manner that ensures appropriate security and confidentiality of the personal data, including for preventing unauthorized access to or use of personal data and the equipment used for the processing.

7.
Information on the rights of the data subjects and the data processors can be found in the Personal Data Protection Policies on the websites of the parties.