EFFECTIVE: May 25, 2018

The proper operation of the website available under the domain name www.serco.hu (hereafter referred to as the "Website") requires the handling of personal data. This policy contains detailed information related to the handling of personal data. The use of the Website and the provision of personal data are voluntary, however, by using the Website, you agree to the treatment of your personal data as detailed in this policy.

The handling of personal data complies with the following laws:

• Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons concerning the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereafter referred to as "GDPR"), applicable from May 25, 2018;

• Act CXII of 2011 on the right to informational self-determination and freedom of information ("Infotv.").

We ensure the security of the personal data managed by us with appropriate technical and process control measures, especially against unauthorized access, transmission, public disclosure, deletion, or accidental destruction.

We will report any data breach, regardless of its scope, to both the data controller and the supervisory authority.

We regularly review our Data Management Policy to ensure it meets users' expectations and complies with current data protection and other legal requirements.

WHO IS THE DATA CONTROLLER?

The owner and operator of the Website is SERCO Informatika Zrt. (Company Registration Number: 01-10-141908, Headquarters: 1037 Budapest, Bécsi út 314., Tax Number: 27880056-2-41, Registering Authority: Metropolitan Court of Budapest - Company Registry Court, hereinafter referred to as “Data Controller”).

Our contact details are as follows:

Web: www.serco.hu

Address: 1037 Budapest, Bécsi út 314.

E-mail: info@serco.hu

Phone: +36 1 272 2140

WHAT PERSONAL DATA DO WE PROCESS?

• For users who generally browse our Website, we process the following data:

We process the IP address, geographical location, type of operating system, type of browser, cookies, and data related to the activities carried out on our Website.

• For general inquiries made through the Website, we process the following data:

There is no option for general-purpose contact on the website; you decide which contact method you use to get in touch with us and what personal data you provide to us. Naturally, we treat any personal data obtained in this manner according to the current regulations.

• For reporting issues through the Website, we process the following data:

For our customers, we provide an online platform for rapid and efficient troubleshooting. Using this service requires the following mandatory data: name, phone number, email address, type of malfunctioning device, and serial number, along with a brief description of the fault. It is your responsibility to ensure that the data provided is accurate.

• For applying to events organized through our Website, we process the following data:

If you apply for an event organized by us through the Website, the required data managed in connection with the application are your name, telephone number, email address, and company name. It is your responsibility to ensure that the data provided is accurate.

WHAT ARE THE PURPOSES FOR PROCESSING YOUR PERSONAL DATA?

The primary purpose of the Website is to present our products and services to both existing and potential clients.

Beyond this purpose, personal data recording and processing may also occur for:

• Registration for events organized by us.
• Facilitation of troubleshooting and service assistance.
• User-friendly operation and improvement of our Website.

The Purpose is always communicated in advance and clearly.

ON WHAT LEGAL BASIS DO WE PROCESS YOUR PERSONAL DATA?

In general, we process your personal data based on the consent you provide during browsing, contacting us, or registering for an event (Infotv. Section 5 Paragraph (1) a) / Data Protection Directive Article 7 a) / GDPR Article 6 (1) a). In certain cases, personal data may be processed on other legal bases, such as a legal obligation applicable to the Data Controller (Infotv. Section 6 Paragraph (1) a) / Data Protection Directive Article 7 c) / GDPR Article 6 (1) c), the legitimate interests of the Data Controller or a third party (Infotv. Section 6 Paragraph (1) b) / Data Protection Directive Article 7 f) / GDPR Article 6 (1) f), or the performance of a contract with the Data Controller (Infotv. Section 6 Paragraph (4) / Data Protection Directive Article 7 b) / GDPR Article 6 (1) b)).

The processing of personal data may also occur if the consent is withdrawn, but the processing of personal data is necessary to fulfill a legal obligation of the Data Controller, or to protect the legitimate interests of the Data Controller or a third party, in accordance with the conditions laid out in Infotv. Section 6 Paragraph (5). Personal data may be processed for the purposes of criminal investigation, national security, and defense if the relevant laws provide so. The organizations performing such tasks may have personal data transferred to them if the relevant laws provide for it.

WHO DO WE SHARE YOUR PERSONAL DATA WITH?

The technical maintenance of the Website is periodically performed by TEAC Kft. (1125 Budapest, Galgóczy u 9-11 www.teac.hu). Our partner does not create copies of your data or transfer it to third parties.

For the processing of the Website’s visitor statistics, we use Google Analytics, provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA www.google.com).

For the Website’s online advertising activities, we use the following services:

• Google AdWords, provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA google.com);
• Facebook Ads, provided by Facebook Ireland Ltd. (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland facebook.com),
• LinkedIn Ads, provided by LinkedIn Ireland (Wilton Plaza, Wilton Place, Dublin 2, Ireland linkedin.com).

In the case of registration for our events, we may transfer the data provided by you to third parties, such as the event venue, sponsors, or co-organizers, but only based on prior information, in order to inform them about the number of participants and their identities.

Our partners process your personal data as data controllers, in accordance with their data protection principles. Of course, even in this case, you can exercise your rights provided under the relevant laws.

HOW LONG DO WE PROCESS PERSONAL DATA?

We will process your personal data until you revoke your consent or request deletion of your data. In the absence of a revocation of consent or a deletion request, your data will be processed for a maximum period of 10 years, or if a contract results from the contact, until the expiration of the retention period applicable to the contract.

WHAT RIGHTS AND CLAIM ENFORCEMENT OPTIONS ARE AVAILABLE?

You have the right to:

• Access your personal data processed by us
• Request correction of your personal data
• Request deletion of your personal data
• Request restriction of processing of your personal data
• Withdraw your previously given consent to the processing of your personal data
• Object to the processing of your personal data
• Receive your personal data and transmit them to another controller

You can submit your request in writing either via email to info@serco.hu or by postal mail to our office. We will inform you of the action taken in response to your request without undue delay, but generally no later than 14 days from the receipt of the request.

If you disagree with our response or action, you have the right to file a complaint with the National Authority for Data Protection and Freedom of Information (address: 1125 Budapest, Szilágyi Erzsébet fasor 22/c; phone: +36-1-391-1400; email: ugyfelszolgalat@naih.hu) or to approach the courts.