What is the purpose of this policy? This policy is adopted with the aim of providing essential information and guidance to individuals and representatives of legal entities using our services (hereinafter referred to as “Users”) in a concise, transparent, comprehensible, and easily accessible format, clearly and understandably, as well as assisting Users in exercising their rights listed in section 4. Our services are available on the website www.furreepet.com. The basis for our obligation to provide information is Article 12 of Regulation (EU) 2016/679 of the European Parliament and the Council (hereinafter referred to as “GDPR”), applicable from May 25, 2018, Section 16 of Act CXII of 2011 on the right to informational self-determination and freedom of information (hereinafter referred to as “Infotv.”), and Section 4 of Act CVIII of 2001 on certain issues related to electronic commerce services and information society services (Elkertv.). This policy is created in compliance with the GDPR, Infotv., and other relevant legal regulations concerning data processing. The list of legal regulations can be found in Annex 10.1, key definitions in Annex 10.2, and a detailed description of users’ rights in Annex 10.3 of this policy. In developing and applying this policy, we have acted in accordance with the recommendations of the National Authority for Data Protection and Freedom of Information regarding the requirements of prior information, and in the spirit of the accountability principle outlined in Article 5(2) of the GDPR. We also follow the practices of the European Union regarding personal data protection; accordingly, we incorporate the guidelines on transparency from the Article 29 Working Party of the European Commission into our data processing practices.
Data Controller Information Name: ProtectOne Limited Liability Company Headquarters: 1021 Budapest, Völgy utca 5/a Company registration number: 01-09-944010 Tax number: 22797933-2-41 Email address: [email protected]
Specific Data Processing Activities In this section, we detail the essential circumstances of specific data processing activities, which the GDPR and other sectoral legislation require from all data controllers.
1. Data Processing for Newsletter Subscription To provide up-to-date information to visitors of our website, it is possible to subscribe to our newsletter. The following information applies to data processing related to this:
Personal Data Processed and Purpose of Data Processing
Personal Data
Purpose of Data Processing
Legal Basis for Data Processing
Name
To address the User in our newsletter
User’s consent (Article 6(1)(a) GDPR)
Email address
To send the newsletter to the User’s email
User’s consent (Article 6(1)(a) GDPR)
Legal Basis for Data Processing The User’s consent (Article 6(1)(a) GDPR and Section 6(1) of Act XLVIII of 2008 on the basic conditions and certain limitations of economic advertising).
Duration of Data Processing We process the personal data provided until the consent is withdrawn. The User can withdraw their consent at any time by clicking on the “Unsubscribe” button in the newsletter. Withdrawal of consent does not affect the legality of data processing carried out based on the consent before its withdrawal.
Method of Data Processing Electronically.
2. Data Processing for Contact and Communication Through our website, Users can contact us for any purpose. Additionally, we process personal data of the representatives of our business partners during our work. The details of this data processing are as follows:
Personal Data Processed and Purpose of Data Processing
Personal Data
Purpose of Data Processing
Legal Basis for Data Processing
Name
Identification of the User or business partner’s representative
User’s consent (Article 6(1)(a) GDPR) or legitimate interest for business partner (Article 6(1)(f) GDPR)
Email address
Contact and communication with the User or business partner’s representative
User’s consent (Article 6(1)(a) GDPR) or legitimate interest for business partner (Article 6(1)(f) GDPR)
Phone number
Contact and communication with the User or business partner’s representative
User’s consent (Article 6(1)(a) GDPR) or legitimate interest for business partner (Article 6(1)(f) GDPR)
Legal Basis for Data Processing The User’s voluntary and explicit action when contacting us (making a phone call, sending an email) serves as consent for the purposes of processing personal data listed in section 3.2.1 (Article 6(1)(a) GDPR). If we use the User’s data for purposes other than the original collection, we will notify the User and obtain explicit consent, or provide an option to prohibit such use (see section 9.1). The personal data of the representatives of our business partners is processed based on the legitimate interests of the data controller and the business partner (Article 6(1)(f) GDPR). Both parties have a legitimate interest in ensuring effective business communication during the use of the Website and negotiations and providing information on any important circumstances related to the contract between the parties. No violation of the right to informational self-determination of the business partner’s representative is established, as their job or contractual duty is to facilitate communication between the parties and provide their personal data for this purpose. The business partner’s representative may object to this data processing.
Duration of Data Processing We process the personal data provided until consent is withdrawn. The User can withdraw their consent at any time. Withdrawal of consent does not affect the legality of data processing carried out based on the consent before its withdrawal. We retain the personal data of the representatives of our business partners as long as necessary for communication purposes and as long as relevant legal provisions allow (5 years from the fulfillment or termination of the contract according to Act V of 2013, or 8 years from invoice issuance according to Act C of 2000).
Method of Data Processing Electronically.
3. Data Processing Related to Orders It is possible to order various products through our website. We explain the data processing related to orders in this section:
Personal Data Processed and Purpose of Data Processing
Personal Data
Purpose of Data Processing
Legal Basis for Data Processing
Name
To identify the product orderer during the fulfillment of the order
Contract performance (Article 6(1)(b) GDPR) or legitimate interest for legal entity (Article 6(1)(f) GDPR)
Address (postal code, city, street, house number)
To send the ordered product by post to the given address
Contract performance (Article 6(1)(b) GDPR)
Phone number
To contact the orderer and inform them about the order details
Contract performance (Article 6(1)(b) GDPR) or legitimate interest for legal entity (Article 6(1)(f) GDPR)
Email address
To contact the orderer and inform them about the order details
Contract performance (Article 6(1)(b) GDPR) or legitimate interest for legal entity (Article 6(1)(f) GDPR)
Legal Basis for Data Processing Contract performance between the Data Controller and the User (Article 6(1)(b) GDPR). If the orderer is a legal entity, the legal basis for processing the personal data of their representative is the legitimate interest of the data controller and the orderer (Article 6(1)(f) GDPR). Both parties have a legitimate interest in ensuring effective communication during the ordering process and providing information on any significant circumstances related to the contract between the parties. The representative’s right to informational self-determination is not violated, as their job or contractual obligation is to facilitate communication between the parties and provide their personal data for this purpose.
Duration of Data Processing Accounting documents based on the contract are retained for 8 years (Section 169(1) of Act C of 2000, in conjunction with Section 166(6) of the same Act). Personal data not necessary for fulfilling accounting obligations, in accordance with Section 6:22(1) of Act V of 2013 on the Civil Code, are stored for 5 years after the fulfillment of the order for the aforementioned purposes.
Method of Data Processing Electronically.
Provision of Personal Data Since the personal data listed in this section is necessary to fulfill orders, providing the personal data is a precondition for concluding the contract.
4. Data Processing Related to Invoice Issuance
After fulfilling orders, we issue accounting documents in compliance with Act C of 2000 on Accounting (hereinafter referred to as “Sztv.”). The details of the related data processing are outlined below.
Personal Data Processed and Purpose of Data Processing
Personal Data
Purpose of Data Processing
Legal Basis for Data Processing
Name
Supporting the accounting of the order fulfillment (economic event)
Data processing based on legal regulation (Article 6(1)(c) GDPR, Info Act Section 5(1)(b), Sztv. Section 166(1)-(3))
Address / For sole proprietors: Headquarters (postal code, city, street name, house number)
Supporting the accounting of the order fulfillment (economic event)
Data processing based on legal regulation (Article 6(1)(c) GDPR, Info Act Section 5(1)(b), Sztv. Section 166(1)-(3))
Tax number for sole proprietors
Supporting the accounting of the order fulfillment (economic event)
Data processing based on legal regulation (Article 6(1)(c) GDPR, Info Act Section 5(1)(b), Sztv. Section 166(1)-(3))
Legal Basis for Data Processing Data processing based on legal regulation (Article 6(1)(c) GDPR in conjunction with Section 5(1)(b) of the Info Act and Sections 166(1)-(3) of Sztv.).
Duration of Data Processing We retain accounting documents for 8 years following their issuance (in accordance with Section 166(6) of Sztv., in conjunction with Section 169(1)).
Method of Data Processing Electronically. The accounting document issued electronically is stored in compliance with the regulations on digital archiving, ensuring that all data contained in the document can be reproduced without delay, continuously readable, and excludes any possibility of subsequent modification.
Provision of Personal Data The provision of the personal data listed in this section is mandatory by law, as we cannot issue accounting documents without it.
5. Data Processing Related to Complaint Handling
Users can contact us via email or phone for inquiries or to report complaints. The details of the related data processing are outlined below.
Personal Data Processed and Purpose of Data Processing
Personal Data
Purpose of Data Processing
Legal Basis for Data Processing
Name
Identifying the User
Data processing based on legal regulation (Article 6(1)(c) and (2) GDPR, Info Act Section 5(1)(b), Act CLV of 1997 on Consumer Protection)
Email address
Contacting and providing information to the User
Data processing based on legal regulation (Article 6(1)(c) and (2) GDPR, Info Act Section 5(1)(b), Act CLV of 1997 on Consumer Protection)
Phone number
Contacting and providing information to the User
Data processing based on legal regulation (Article 6(1)(c) and (2) GDPR, Info Act Section 5(1)(b), Act CLV of 1997 on Consumer Protection)
Legal Basis for Data Processing Data processing based on legal regulation (Article 6(1)(c) and (2) GDPR, in conjunction with Section 5(1)(b) of the Info Act and Act CLV of 1997 on Consumer Protection).
Duration of Data Processing We retain the data for 3 years from the receipt of the complaint, in accordance with Section 17/A(7) of Act CLV of 1997.
Method of Data Processing Electronically.
6. Data Processing Related to Warranty Claims
If a User submits a product warranty claim (based on statutory product or manufacturer warranty) due to a defect in the sold goods, we are required to record a report based on the procedural rules of Decree 19/2014. (IV. 29.) NGM. The details of the related data processing are outlined below.
Personal Data Processed and Purpose of Data Processing
Personal Data
Purpose of Data Processing
Legal Basis for Data Processing
Name
Identifying the User, recording the report
Data processing based on legal regulation (Article 6(1)(c) and (2) GDPR, Info Act Section 5(1)(b), NGM Decree Section 4(1))
Address
Identifying the User, recording the report
Data processing based on legal regulation (Article 6(1)(c) and (2) GDPR, Info Act Section 5(1)(b), NGM Decree Section 4(1))
Consent to data processing
Recording the report
Data processing based on legal regulation (Article 6(1)(c) and (2) GDPR, Info Act Section 5(1)(b), NGM Decree Section 4(1))
Legal Basis for Data Processing Data processing based on legal regulation (Article 6(1)(c) and (2) GDPR, in conjunction with Section 5(1)(b) of the Info Act and Section 4(1) of NGM Decree).
Duration of Data Processing We retain the report for 3 years from the date of issuance, in accordance with Section 4(1) and (6) of NGM Decree.
Method of Data Processing Electronically.
7. Data Processing Related to Registration
Users can register on our website to access various discounts. The details of the related data processing are outlined below.
Personal Data Processed and Purpose of Data Processing
Personal Data
Purpose of Data Processing
Legal Basis for Data Processing
Name
Identifying the User
Data processing based on legal regulation (Article 6(1)(c) GDPR and Section 5(1)(b) of the Info Act, Section 13/A(1) of the Electronic Commerce Act, and contract performance (Article 6(1)(b) GDPR))
Address
Providing additional information for orders
Data processing based on legal regulation (Article 6(1)(c) GDPR and Section 5(1)(b) of the Info Act, Section 13/A(1) of the Electronic Commerce Act, and contract performance (Article 6(1)(b) GDPR))
Email address
Contacting the User
Data processing based on legal regulation (Article 6(1)(c) GDPR and Section 5(1)(b) of the Info Act, Section 13/A(1) of the Electronic Commerce Act, and contract performance (Article 6(1)(b) GDPR))
Phone number
Contacting the User
Data processing based on legal regulation (Article 6(1)(c) GDPR and Section 5(1)(b) of the Info Act, Section 13/A(1) of the Electronic Commerce Act, and contract performance (Article 6(1)(b) GDPR))
Password
Performing technical operations
Data processing based on legal regulation (Article 6(1)(c) GDPR and Section 5(1)(b) of the Info Act, Section 13/A(1) of the Electronic Commerce Act, and contract performance (Article 6(1)(b) GDPR))
Legal Basis for Data Processing Data processing based on legal regulation (Article 6(1)(c) and (2) GDPR, in conjunction with Section 5(1)(b) of the Info Act and Section 13/A(1) of the Electronic Commerce Act). The data processing is necessary for the performance of the contract (terms and conditions) between the User and us (Article 6(1)(b) GDPR).
Duration of Data Processing Until the User requests the deletion of their data. If the User does not use their account, we will delete their profile 5 years after their last order.
Method of Data Processing Electronically.
4. What Rights Do Users Have?
We prioritize ensuring that our data processing meets the principles of fairness, legality, and transparency. In this section, we briefly outline the rights of data subjects, which are further detailed in Appendix 3 of this notice.
Users may request free information about the details of the processing of their personal data, access those data, and request a copy of the processed personal data. In cases specified by law, they may also request the rectification, deletion, restriction of the processing, or objection to the processing of such personal data. Users can send requests for information and other requests mentioned in this section to the contact details listed in section 2.
Right of Access Users can receive confirmation from us regarding the processing of their personal data and access those data, along with details about their processing. They are also entitled to a copy of the personal data we process.
Right to Rectification Upon request, we will correct inaccurate personal data related to the User without undue delay, and the User is entitled to request the completion of incomplete personal data, including through a supplementary statement.
Right to Erasure Users may request the deletion of their personal data if they are no longer necessary for the purposes for which they were collected, if they withdraw their consent, or if they object to the processing, or if the processing is unlawful.
Right to Be Forgotten Upon the User’s request, we will endeavor to inform any data controllers who have received or potentially accessed the User’s publicly disclosed personal data about the deletion request.
Right to Restriction of Processing Users may request that we restrict the processing of their data if the accuracy of the personal data is disputed, the processing is unlawful, or the User objects to the processing. Additionally, if the personal data are no longer needed for the purposes of processing, we will restrict further processing.
Right to Data Portability Users can receive their personal data, provided by them, in a structured, widely used, machine-readable format, and may also transfer these data to another data controller.
Right to Object Users have the right to object at any time, for reasons related to their particular situation, to the processing of their personal data based on legitimate interests (see sections 3.1 and 3.2). In such cases, we may no longer process the personal data unless we can demonstrate compelling legitimate grounds that override the User’s interests, rights, and freedoms or are necessary for the establishment, exercise, or defense of legal claims. In general, personal data will no longer be processed for this purpose following an objection.
Response to Requests We will investigate and make a decision regarding the request within the shortest possible time, but no later than 30 days, and 15 days in the case of objections. The User will be informed in writing about our decision. If we do not fulfill the User’s request, we will provide the factual and legal reasons for rejecting the request.
Legal Remedies We take the protection of personal data seriously and respect the User’s right to informational self-determination. Therefore, we strive to respond to all requests fairly and promptly. As such, we kindly ask Users to contact us with any complaints or concerns before resorting to legal or regulatory actions so we can resolve any issues as quickly as possible. If contacting us does not lead to a resolution, Users may:
Assert their rights before a court based on the Civil Code (Act V of 2013). The lawsuit can be filed before the court with jurisdiction over the User’s place of residence or domicile. A list of courts and their contact details can be found at: http://birosag.hu/torvenyszekek.
File a complaint with the National Authority for Data Protection and Freedom of Information (address: 1055 Budapest, Falk Miksa Street 9-11; postal address: 1363 Budapest, PO Box 9; phone: +36-1-391-1400; fax: +36-1-391-1410; email: [email protected]; website: https://naih.hu/).
5. Procedure for Exercising Rights
Notification of Recipients We will notify all recipients with whom the User’s personal data have been shared about the correction, deletion, or restriction of data processing, except where this proves impossible or requires disproportionate effort. At the User’s request, we will inform the User about these recipients.
Method and Deadline for Providing Information We will provide information regarding measures taken in response to requests under section 4 within one month from receiving the request, in electronic form unless otherwise requested. This period may be extended by a further two months, depending on the complexity and number of requests. If the deadline is extended, we will notify the User within one month of receiving the request, explaining the reasons for the delay. Upon request, information can also be provided verbally, provided the User verifies their identity by other means. If we do not take action in response to the request, we will inform the User within one month of receiving the request, explaining the reasons and informing the User of their right to lodge a complaint with the NAIH and seek a judicial remedy (section 4.9).
Verification In exceptional cases, if we have reasonable doubts about the identity of the individual submitting the request, we may ask for additional information to verify their identity. This measure is necessary to promote the confidentiality of data processing as outlined in Article 5(1)(f) of the GDPR, which aims to prevent unauthorized access to personal data.
Costs of Providing Information and Taking Action We provide information and take actions in response to requests under section 4 free of charge. However, if the User’s request is clearly unfounded or – particularly due to its repetitive nature – excessive, we may charge a reasonable fee considering the administrative costs of providing the requested information or taking the requested action, or we may refuse to act on the request.
6. Potential Recipients of Personal Data, Data Processors
In Relation to Website Operation The hosting provider has access to personal data provided during the use of the website, acting as a data processor.
4. Payment Processing Related to Orders The payment for an order can be made via the platform of the bank service provider, acting as a data processor. The details of the data processors are as follows:
5. Invoice Issuance In relation to invoicing, the data processor we use gains access to personal data provided by Users for this purpose. The details of the data processor are as follows:
7. Data Security Taking into account the state of the art, the costs of implementation, the nature, scope, context, and purposes of the processing, as well as the varying likelihood and severity of risks to the rights and freedoms of natural persons, we implement appropriate technical and organizational measures both at the time of determining the means of processing and during the processing itself. This is to ensure the effective implementation of data protection principles, such as data minimization, and to integrate the necessary safeguards into the processing to comply with GDPR requirements and protect the rights of data subjects.
Organizational Measures Access to our IT systems is granted with personal authorization. When assigning access rights, the “principle of necessary and sufficient rights” applies, meaning that employees can only use our IT systems and services to the extent necessary for their tasks, with appropriate permissions, and for the necessary duration. Access to IT systems and services is granted only to those who are not restricted due to security or other reasons (e.g., conflict of interest) and who have the necessary professional, business, and information security knowledge for safe use.
Technical Measures We ensure that our IT tools and software continuously comply with widely accepted technological solutions in the marketplace. During system development, we create systems that enable logging to monitor and track operations and detect incidents, such as unauthorized access. Our server is hosted on a dedicated server of a hosting provider, in a protected and enclosed environment. Following the relevant recommendations of the Hungarian National Authority for Data Protection and Freedom of Information (NAIH), we use the HTTPS protocol on the Website, which provides a higher level of data security compared to the HTTP protocol.
8. Cookies
To ensure the proper functioning of our website, we sometimes place small data files, called cookies, on the User’s computer device, similar to most modern websites.What is a Cookie? A cookie is a small text file that the website places on the User’s device (including mobile phones). Thanks to this, the website can “remember” the User’s settings (e.g., language used, font size, display, etc.), so these do not need to be reset every time the User visits our Website. The list of cookies used on the Website.
How to Manage Cookies Cookie files can be deleted (for detailed information, visit www.AllAboutCookies.org) or their placement can be blocked with most modern browsers. However, in this case, certain settings will need to be redone each time you visit our Website, and certain services may not work properly. Detailed information on deleting or blocking cookies can be found at www.AllAboutCookies.org (in English) and on the following links for your specific browser:
Firefox
Google Chrome
Bing
9. Additional Provisions
Data Processing for Different Purposes If we wish to use the provided data for a purpose other than the original purpose for which the data were collected, we will inform the User and obtain their explicit consent for this or allow them to prohibit the use.
Record-Keeping Obligation We maintain records of the data processing activities for which we are responsible (data processing activity records) in accordance with Article 30 of the GDPR.
Data Protection Incident A data protection incident refers to a breach of security that leads to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to personal data. In the event of a data protection incident, we are required to act in accordance with Articles 33 and 34 of the GDPR. We document data protection incidents, indicating the facts related to the incident, its effects, and the corrective actions taken.
Modification We reserve the right to unilaterally amend this Notice at any time. If the Notice is modified, we will retain previous versions of the document and, where possible and justified, draw the attention of data subjects to the modified provisions. Effective: 2024….. ProtectOne Kft. – Data Controller
10. Appendices
Appendix 1: Relevant Legislation The Notice was prepared with regard to the relevant applicable laws and important international recommendations, with particular emphasis on the following:
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (GDPR);
Act CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information (Infotv.);
Act V of 2013 on the Civil Code (Ptk.);
Act CXXX of 2016 on the Code of Civil Procedure (Pp.);
Act C of 2000 on Accounting (Accounting Act);
Act CLV of 1997 on Consumer Protection (Fgytv.);
Act CVIII of 2001 on Electronic Commerce and on Information Society Services (Elkertv.).
Appendix 2: Terms Related to Personal Data Processing
Data controller: The legal person that determines the purposes and means of processing personal data;
Data processing: Any operation or set of operations performed on personal data or sets of personal data, whether by automated or non-automated means, such as collection, recording, organization, structuring, storage, alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment, restriction, erasure, or destruction;
Data transfer: Making data available to a specific third party;
Data erasure: Making data unrecognizable in a way that it cannot be restored;
Data marking: Labeling data with an identifying marker to distinguish it;
Data processing limitation: Marking stored personal data to restrict its future processing;
Data destruction: The complete physical destruction of the data carrier containing the data;
Data processor: The legal person that processes personal data on behalf of the data controller;
Recipient: The natural or legal person, public authority, agency, or other body to whom the personal data are disclosed, regardless of whether it is a third party;
Cookie: A small packet of data (text file) sent by the web server and stored on the user’s computer for a certain period. Depending on its nature, the server can supplement the cookie with new data during subsequent visits, allowing the service provider to link the current visit with previous ones, but only regarding its content;
Data subject/User: An identified or identifiable natural person;
Third party: A natural or legal person, public authority, agency, or other body other than the data subject, data controller, data processor, or persons who, under the direct authority of the data controller or processor, are authorized to process personal data;
Consent of the data subject: Any freely given, specific, informed, and unambiguous indication of the data subject’s wishes by which they, by a statement or by a clear affirmative action, signify agreement to the processing of personal data relating to them;
IP address: In all networks using the TCP/IP protocol, servers have an IP address (identifier number) that allows identification of the machines on the network. Every computer connected to a network has an IP address, through which it can be identified;
Personal data: Any information relating to an identified or identifiable natural person;
Objection: A declaration by the data subject objecting to the processing of their personal data and requesting the termination of processing or the deletion of the processed data.
Appendix 3: Data Subject Rights
Access The User has the right to request access to their personal data processed by us by submitting a request through one of our contact methods. This includes receiving information on the following:
Whether their personal data is being processed;
The purposes of the data processing;
The categories of personal data concerned;
The recipients or categories of recipients to whom the personal data have been or will be disclosed;
The planned duration for storing personal data;
Their rights;
Legal remedies available;
Information about the data sources.
The User may also request a copy of their personal data being processed. In this case, the personal data will be provided in a structured, widely used, machine-readable format (PDF/XML) or in printed form. Requesting a copy is free of charge.
Rectification The User has the right to request the rectification of inaccurate personal data concerning them and the completion of incomplete data by submitting a request through our contact methods. If we do not have the necessary information to correct or complete the data, we may request supplementary information to verify the accuracy of the data. Until the rectification or completion is performed, we will restrict the processing of the concerned personal data, suspending any operations on the data—except for storage—temporarily.
Erasure The User has the right to request the erasure of their personal data processed by us if one of the following conditions applies:
We no longer need the data for the purposes for which it was collected;
The User questions the lawfulness of our processing of their data.
If we determine, upon the User’s request, that the personal data must be erased, we will cease processing and destroy the previously processed data. Additionally, the obligation to erase personal data may arise from the withdrawal of consent, the exercise of the right to object, or statutory requirements.
Restriction of Processing The User has the right to request the restriction of processing their personal data in the following cases:
They question the lawfulness of processing and request restriction instead of erasure;
We no longer need the data, but the User needs it to establish, exercise, or defend legal claims.
We will automatically restrict the processing of personal data if the User disputes its accuracy or exercises their right to object. In such cases, the restriction applies for the period necessary to verify the accuracy of the data or to determine whether the grounds for continuing the processing are valid. During the restriction, no data processing operations can be performed on the designated personal data, except for storage. The personal data may only be processed under the following circumstances:
With the User’s consent;
For establishing, exercising, or defending legal claims;
To protect the rights of another natural or legal person;
For reasons of important public interest.
Users will be notified in advance before the restriction is lifted.
Data Portability The User has the right to request the provision of their personal data processed by us for further use specified by the User. Additionally, the User may request the transfer of their personal data to another data controller specified by them. This right is limited to personal data provided by the User and processed for the fulfillment of a contract. Other data is not subject to portability. The personal data will be provided in a structured, widely used, machine-readable format (PDF/XML) or in printed form. We inform the User that exercising this right does not automatically result in the deletion of personal data from our systems. The User remains entitled to re-establish contact with us after the data transfer.
Objection The User has the right to object at any time to the processing of their personal data for the purposes specified in sections 3.1 and 3.2 of this Notice by submitting a request through our contact methods. In this case, we will examine whether the processing is justified by compelling legitimate grounds that override the User’s interests, rights, and freedoms, or if it is necessary for the establishment, exercise, or defense of legal claims. If we determine that such grounds exist, we will continue the processing of the personal data. Otherwise, the personal data will no longer be processed.
