October 20, 2025
1. Data controller details::
Name: EPDB Nyomtatási Központ Zrt. [EPDB Printing Center LLC]
Registered office: 1117 Budapest, Budafoki út 107-109.
Company registration number: 01-10-048079
Name of the court of registration: Company Court of the Capital City Court
Tax number: 24924243-2-43
E-mail: gdpr@epdb.hu
Data protection officer contact: gdpr@epdb.hu
2. Cookie management of the epdb.hu website
2.1 General information about cookies
Cookies are small data packages, text files, that are placed in the visitor’s browser or device when they visit a specific website or application. Cookies allow a given website to recognize the visitor the next time they visit, thereby providing security and convenience features and improving the user experience while browsing the site. We distinguish several types of cookies.
a) Essential session (session-id) cookies
These are essential for navigating the website, for the operation of key website functions, and for accessing protected content. These cookies do not collect information that could be used for marketing purposes or that would remember what other websites the visitor has visited.
b) Statistical cookies
These cookies are related to the performance and development of websites, improving the user experience, and allow the operator of the given website to collect data on how users use the given website. The information they collect typically relates to which part of the site the visitor clicked on, how many websites or pages they visited, how long each session was viewed, what error messages were received, etc. We also distinguish between persistent and session cookies among statistical cookies, depending on how long they are stored in the visitor’s browser or device. Statistical cookies are placed on the user’s devices while browsing a given website; they can be deleted later in the browser settings.
c) Advertising cookies
The purpose of these cookies is to display advertisements on websites that are relevant to the given visitor. These cookies collect information such as which page the visitor viewed, which part of the website they clicked on, how many websites they visited, in order to display content of interest to the visitor.
d) Social media cookies
The purpose of these cookies is to provide the visitor with social media services used on websites, for example when the visitor shares content from a website on Facebook, Twitter, or other social media service-related platforms, or connects their account with social content, or when content stored by the social media service provider appears on the site through plug-ins (additional programs) provided by the social media service provider. Social media providers can collect data through cookies about how the visitor uses the services provided by the social media provider and what content they share, all in order to display content of interest to the visitor.
e) Other third-party cookies
In addition to the above, operators of other services that are not in a contractual relationship with the operator of the given website may also place cookies on the given website, completely independently of its operator, for the benefit of their own operations. Such cookies should therefore be understood as cookies that belong to a domain other than the domain that appears in the browser address bar of the website visited by the user.
2.2 Cookie management on the epdb.hu website
2.2.1 Session cookies:
The epdb.hu website places the following session cookies on the visitor’s device:
| Name of the cookie used | What is it for? | Expiration |
| elementor | Used to display popups | until the end of the browsing session |
| wpEmojiSettingsSupports | This is an essential first-party cookie that supports emoji settings. | until the end of the browsing session |
| CookieConsent | Stores the user’s cookie settings for the given domain. | 365 days |
| 1.gif | Used to keep track of the number of sessions | until the end of the browsing session |
| csrftoken | A unique, randomly generated value associated with each authenticated form or request serves as a defense against CSRF (Cross-Site Request Forgery) attacks. | until the end of the browsing session |
| wp-wpml_current_language | Used to store the selected language | until the end of the browsing session |
2.2.2 Advertising cookies:
The epdb.hu website places the following advertising cookies on the visitor’s device, if the visitor consents to this:
| Name of the cookie used | What is it for? | Expiration |
| _ga | It registers a unique identifier that collects statistical data about the use of the website. | 730 days |
| _ga_# | Cookie used by Google Analytics to track the number and times of visits. | 730 days |
The individual code(s) stored in the Google Analytics cookie and the additional information derived from it are transferred to a third country outside the EEA (European Union member states and Norway, Lichtenstein, Iceland), the United States of America.
The above data transfer is based on Article 6(1), Point a) and Article 45 of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: General Data Protection Regulation). If the data subject consents to the placement of marketing cookies on their device, they acknowledge the fact of international data transfer to the United States of America. The data transfer takes place under the EU-US Data Privacy Framework, to which Google LLC. has joined and based on which the United States of America provides an adequate level of protection for the personal data of data subjects.
Detailed information about Google Analytics can be found at the following link: marketingplatform.google.com/about/analytics/terms/hu/
2.2.3 Other cookies:
| Name of the cookie used | What is it for? | Expiration |
| CrossConsent | It is used to link the cookies used by the www.cookiebot.com site to the epdb.hu site. The cookie management panel of the EPDB website was implemented on the epdb.hu website using Cookiebot. |
2.2.4 Third-party cookies embedded on the epdb.hu website
The Google Maps page embedded on the subpage that loads when you click on the “contact” tab of the website also uses cookies.
As a result, cookies from this site may also appear on the user’s device according to the cookie settings of the browser or the third-party website visited.
| google.com | We inform the data subjects that when you click on the “contact” tab on the EPDB Nyomtatási Központ Zrt. website, the embedded Google map that loads will place the following cookies. |
|
The cookie management of the epdb.hu website is implemented using Cookiebot, therefore the cookies of this website may also appear on the user’s device according to the cookie settings of the browser or the third-party website visited:
| cookiebot.com | If you navigate from epdb.hu to cookiebot.com and the CrossConsent cookie described above is placed, the following cookies used by cookiebot.com will be placed on the user’s device depending on the cookie settings used on cookiebot.com. |
|
When you open the website, the embedded Youtube video itself uses cookies.
| youtube.com | We inform the data subjects that when the EPDB Nyomtatási Központ Zrt. website is displayed, the embedded Youtube video places the following cookies. |
|
2.2.5 How can you manage cookies?
You can delete cookie files (detailed information: www.AllAboutCookies.org) or block their placement using the most commonly used browser. Please note that in this case, however, you will have to make certain settings again each time you use our website, and certain services will not necessarily function fully and smoothly.
Detailed information on deleting and blocking cookies can usually be found on the website www.AllAboutCookies.org (English) and the following links, depending on the browser used by the user:
3. Request for quotation
EPDB Nyomtatási Központ Zrt., as a service provider, provides the channels through which those interested in its services can contact it and request a quote. Interested parties can also do this on the epdb.hu website in the Contact menu, where they can request a quote for various printing activities by providing just a few details.
3.1 Legal basis for data management:
EPDB Nyomtatási Központ Zrt. processes the data of the natural persons concerned – including sole proprietors – who initiate contact on their own behalf for the purpose of preparing a contract for a business relationship – including requesting a quote – and, if the quote is accepted, for the purpose of concluding the contract, because it is necessary for the performance of these activities. [General Data Protection Regulation, Article 6(1), Point b)]
EPDB Nyomtatási Központ Zrt. has a legitimate economic interest in processing the data of persons initiating a request for quotation as contact persons of legal entities (e.g. companies), which is manifested in the fact that it can directly and effectively serve the interest of its potential customer regarding the order, thereby facilitating the establishment of a business relationship, since without this, contact and quotation could only be made through general contact details, which would make it difficult to deliver the quotation to the appropriate and competent person. [GDPR Article 6(1), Point f)]
The legal entity is obliged to ensure the appropriate legal basis for providing contact details to EPDB Nyomtatási Központ Zrt. in the legal relationship between the legal entity and its contact person.
3.2 The managed data:
| scope of managed data | purpose of processing the scope of data |
| name of the person initiating the request for quotation | to contact the data subject, to send an offer, to negotiate further terms of the contract if required, and to conclude and fulfill the contractötéséhez, teljesítéséhez |
| email address of the person initiating contact/quotation request | |
| telephone number of the person initiating the request for quotation | |
| contact name | to contact a legal entity, to send an offer, to negotiate additional terms of the contract if required, and to maintain contact necessary for the conclusion and performance of the contract |
| contact person e-mail address | |
| contact person telephone number | |
| name of the organization represented by the contact person | |
| personal data contained in the text of the request for quotation itself | to provide the offer, to negotiate additional terms of the contract if required, and to conclude and fulfill the contract |
3.3 Purpose of data processing:
The data is processed by EPDB Nyomtatási Központ Zrt. for the purpose of providing a price quote, negotiating the further terms of the contract based on it, concluding the contract, and fulfilling it.
3.4 Duration of data processing:
EPDB Nyomtatási Központ Zrt. processes the data of data subjects acting on their own behalf until the end of the 1st year following the conclusion of the consultation related to the request for quotation, if a price quote is not ultimately made as a result of the consultation between the parties. If EPDB Nyomtatási Központ Zrt. makes an offer, but the negotiation of the further terms of the contract does not begin, then the data will be processed until the end of the 3rd calendar year following the calendar year of the date of the offer, in the case of negotiation of the further terms of the contract – in the absence of a contract – until the end of the 3rd calendar year following the calendar year of the conclusion of the negotiation of the terms, and in the case of a contract – until the end of the 8th year following the accounting report following the calendar year of the termination of the contract, based on § 169, Paragraph 2 of Act C of 2000 on Accounting.
If a price quote is not ultimately made as a result of the negotiation between the parties, the data of the contact persons of legal entities will be processed by EPDB Nyomtatási Központ Zrt. until the end of the 1st year following the conclusion of the negotiation related to the price quote request. If EPDB Nyomtatási Központ Zrt. makes an offer, but the negotiation of the further terms of the contract does not begin, it will be handled until the end of the 3rd calendar year following the calendar year of the date of the offer, and in the event of the negotiation of the further terms of the contract – in the absence of a contract – until the end of the 3rd calendar year following the calendar year of the conclusion of the negotiation of the terms, and in the event of a contract being concluded, until the end of the 3rd calendar year following the calendar year of the conclusion of the contract. If the contact details of the contact person responsible for coordinating the request for quotation and contractual terms are recorded in the contract, then, given the nature of the contract as an accounting document, the data will be processed until the end of the 8th year following the accounting report following the calendar year of the termination of the contract, pursuant to § 169, Paragraph 2, of Act C of 2000 on Accounting.
3.5 Participants in the processing of data, recipients of the data:
The IT infrastructure, document management services and accounting administration for EPDB Nyomtatási Központ Zrt. are provided by Díjbeszedő Holding Zrt. (registered office: 1117 Budapest, Budafoki út 107-109. company registration number: 01-10-042094, mailing address: 1117 Budapest, Budafoki út 107-109., website: www.dbrt.hu, contact information for the data protection officer: gdpr@dbrt.hu) as data processor.
The data may also be transferred to Magyar Posta Zrt. (registered office: 1138 Budapest, Dunavirág utca 2-6., company registration number: Cg.01-10-042463, tax number: 10901232-4-44, mailing address: 1540 Budapest, website: www.posta.hu, contact information of its data protection officer: adatvedelem@posta.hu) if compliance, data protection and/or legal compliance support becomes necessary during the preparation of the contract.
4. Management of contact and representative data
4.1 What authorizes EPDB to process data?
The EPDB processes the data on the basis of Article 6(1)(f) of the General Data Protection Regulation, as it is necessary for the purposes of its legitimate interest to:
If a sole proprietor acts as a contracting party in his own name towards EPDB Nyomtatási Központ Zrt. or makes other legal declarations, EPDB Nyomtatási Központ Zrt. processes the relevant data of the natural person acting as a sole proprietor in the context of his economic activity for the purpose of preparing, concluding and then fulfilling the contract [Article 6 (b) of the General Data Protection Regulation] in accordance with Act CXV of 2009 on Sole Proprietors and Sole Companies (hereinafter: Sole Proprietors and Sole Companies Act)
If a natural person acting on behalf of, on behalf of or as a sole proprietor of a legal entity affiliated with EPDB Nyomtatási Központ Zrt. carries out his or her activities through an IT application provided by EPDB Nyomtatási Központ Zrt., EPDB Nyomtatási Központ Zrt. processes the data necessary for access based on its legally recognized legitimate interest in ensuring an appropriate level of security of the IT systems and the data processed through them. [General Data Protection Regulation, Article 6 (1) (f)]
4.2 What data do we process?
| Data name | Why? |
| name (birth name) [Companies Act § 24, 1. h)] |
|
| mother’s birth name [Companies Act § 24, 1. h)] |
|
| place of birth |
|
| date of birth [Companies Act § 24, 1. h)] |
|
| tax identification number [Companies Act § 24, 1. h)] |
|
| address [Companies Act § 24, 1. h)] |
|
| position of authorized representative [Companies Act § 24, 1. h)] | to prove the right to represent |
| date of establishment of the representation relationship [Companies Act § 24, 1. h)] |
|
| date of termination of the representation relationship [Companies Act § 24, 1. h)] |
|
| contact telephone number |
|
| e-mail address |
|
| signature | to prove the fact of making a commitment or declaration and its origin from the person entitled to representation |
| legal title of representation | to prove the right to represent |
| contact person’s duties, job title |
|
| tax number | for tax accounting related to a person acting as a sole proprietor, for fulfilling data reporting obligations towards the tax authority, for identifying the sole proprietor |
| the statistical code and registration number of the individual entrepreneur | to identify a sole proprietor |
| the sole proprietor’s main activity and areas of activity, its registered office, its location(s) or branch office | preparation of the contract or other legal statement, conclusion and performance of the contract |
| user ID (e.g. username) |
|
EPDB Nyomtatási Központ Zrt. informs the data subjects that their data – with the exception of natural persons acting as sole proprietors – was provided to EPDB Nyomtatási Központ Zrt. by their employer.
EPDB Nyomtatási Központ Zrt. informs the data subjects that the legal entity providing the data is obliged to ensure the appropriate legal basis for providing their data to EPDB Nyomtatási Központ Zrt. – with the exception of natural persons acting as sole proprietors – in the legal relationship between the legal entity providing the data and the relevant representative.
4.3 For what purpose does EPDB process data?
Purpose of data processing
EPDB Nyomtatási Központ Zrt. informs the data subjects that it monitors its internal operations, the employee’s work, and the regularity of the work – in accordance with § 11/A of Act I of 2012 on the Labor Code –, thus in cases where the monitoring extends to the work involving contact with the data subject, the data of the data subject will also be processed for the purpose of monitoring the employee’s work, including events, documents, and data recorded during contact with the data subject via e-mail or other electronic channels in connection with the work.
4.4 How long does EPDB Nyomtatási Központ Zrt. process data?
If the contact person or representative data is not indicated in a contract or other accounting document, the period for processing the contact person or representative data is 3 years from the termination of the contact person or representative right.
The data of a natural person acting as a sole proprietor is processed by EPDB Nyomtatási Központ Zrt. for 5 years – given that the underlying rule for concluding and fulfilling a contract or making other civil law legal statements is Act V of 2013 on the Civil Code – as the data subject can initiate a legal dispute in court in an enforceable manner during this period [Civil Code § 6:22]
If the contact person or representative details are indicated in a contract or other accounting document, the duration of the data processing – taking into account that the integrity of accounting documents must be ensured based on accounting rules – is the deadline for preserving the contract as an accounting document, i.e. 8 years from the year following the year of termination of the contract. [Act C of 2000 on Accounting, § 169, Paragraph 2]
In cases where – in accordance with § 11/A of Act I of 2012 on the Labor Code (hereinafter: Labor Code) – the data of the data subject are also processed for the purpose of monitoring the work involving contact with the data subject, the data will be processed by EPDB Nyomtatási Központ Zrt. for 3 years in accordance with § 286 of the Labor Code, since the findings of the monitoring related to the employee’s work cannot be proven without evidence containing this data.
4.5 To whom do we share your data (Who are the recipients of your data)?
The IT infrastructure, document management services and accounting administration for EPDB Nyomtatási Központ Zrt. are provided by Díjbeszedő Holding Zrt. (registered office: 1117 Budapest, Budafoki út 107-109. company registration number: 01-10-042094, mailing address: 1117 Budapest, Budafoki út 107-109., website: www.dbrt.hu, contact information for the data protection officer: gdpr@dbrt.hu) as data processor.
The data may also be transferred to Magyar Posta Zrt. (registered office: 1138 Budapest, Dunavirág utca 2-6., company registration number: Cg.01-10-042463, tax number: 10901232-4-44, mailing address: 1540 Budapest, website: www.posta.hu, contact information of its data protection officer: adatvedelem@posta.hu) if compliance, data protection and/or legal compliance support becomes necessary.
If the representative’s or contact person’s details are included in an accounting document, they may be forwarded to the auditor.
5. Requests to access data of public interest and made public in the public interest
5.1 Legal basis for data management:
EPDB Nyomtatási Központ Zrt. processes the personal data of the requester during public interest data requests because it is necessary for making it available based on the request for access to data of public interest and public interest as defined in § 26, Paragraph 1, of Act CXII of 2011 on the right to information self-determination and freedom of information.
[Article 6, Paragraph 1), Point e) of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: GDPR).
5.2 The managed data:
| scope of managed data | purpose of processing the scope of data |
name [Information Act, § 28, Paragraph 1 and § 29, Paragraph 1b] | for the purpose of identifying the data requester |
mailing address [Information Act, § 28, Paragraph 1 and § 29, Paragraph 1b] | for the purpose of contacting the data requester |
e-mail address [Information Act, § 28, Paragraph 1 and § 29, Paragraph 1b] | for the purpose of contacting the data requester |
telephone number [Information Act, § 28, Paragraph 1 and § 29, Paragraph 1b] | for the purpose of contacting the data requester |
| signature | in the case of a signed application, in order to avoid compromising the integrity of the application and to verify the applicant’s declaration |
5.3 Purpose of data processing
EPDB Nyomtatási Központ Zrt. processes the data for the purpose of fulfilling public interest data requests and for the purpose of notifying you of the cost reimbursement established for making copies, if necessary to achieve these purposes.
5.4 Duration of data processing:
EPDB Nyomtatási Központ Zrt. processes personal data for 1 year after the fulfillment of the public interest data request.
5.5 Participants in the processing of data, recipients of the data:
The IT infrastructure and document management services for EPDB Nyomtatási Központ Zrt. are provided by Díjbeszedő Holding Zrt. (registered office: 1117 Budapest, Budafoki út 107-109. company registration number: 01-10-042094, mailing address: 1117 Budapest, Budafoki út 107-109., website: www.dbrt.hu, contact information for the data protection officer: gdpr@dbrt.hu) as data processor.
The data will be forwarded to Magyar Posta Zrt. (registered office: 1138 Budapest, Dunavirág utca 2-6., company registration number: Cg.01-10-042463, tax number: 10901232-4-44, mailing address: 1540 Budapest, website: www.posta.hu, contact information of its data protection officer: adatvedelem@posta.hu) as an agent providing legal services, and the data may also be forwarded to it if compliance and/or data protection compliance support becomes necessary.
6. Rights of the data subject
EPDB Nyomtatási Központ Zrt. provides detailed information about the following data subject rights granted by the General Data Protection Regulation below:
6.1 Withdrawal of consent
When EPDB Nyomtatási Központ Zrt. processes personal data based on the data subject’s consent, the data subject has the right to withdraw their consent at any time without restriction. By doing so, the data subject expresses that he no longer wishes his data to be processed by EPDB Nyomtatási Központ Zrt. However, this does not affect the lawfulness of the data processing carried out before the withdrawal. As a consequence of the withdrawal of consent, EPDB Nyomtatási Központ Zrt. will delete the personal data processed based on the consent. Data will not be deleted unless the processing of the data is necessary for the following reasons:
The data subject may withdraw consent using the contact details provided in point 1.
6.2 Requesting access (information)
Data subjects may at any time request information about whether EPDB Nyomtatási Központ Zrt. processes their data, and if so, they may also receive access to it.
If the data subjects do not specifically indicate in their request what they are interested in regarding the processing of their data, then in addition to their data, we will provide information about the following:
In some cases – for example, due to the prevention of crimes or national security interests – EPDB Nyomtatási Központ Zrt. must refuse to provide information based on legal provisions.
6.3 Requesting correction (amendment) of data
The data subject may request the correction of his data. If EPDB Nyomtatási Központ Zrt. processes incorrect or inaccurate data, the data subject may request its modification and the processing of correct and accurate data.
The data subject must substantiate the truthfulness of the data requested to be modified and must also prove that he can request the modification of the data. This is the only way for EPDB Nyomtatási Központ Zrt. to judge whether the new data is real and, if so, whether it can modify the old one.
If it is unclear whether the processed data is correct or accurate, EPDB Nyomtatási Központ Zrt. will not correct the data, but will restrict it until the accuracy of the data is verified.
6.4 Requesting deletion of data
The data subject may request the deletion of his data.
In the case of data processing based on the consent of the data subject, EPDB Nyomtatási Központ Zrt. considers the deletion request as a withdrawal of consent and deletes the personal data. Data will not be deleted unless the processing of the data is necessary for the following reasons:
However, in the case of consent-based data processing, the data will definitely be deleted if EPDB Nyomtatási Központ Zrt. collects children’s data in connection with an online service offered to children. However, EPDB Nyomtatási Központ Zrt. does not provide such a service.
If the data subject has requested the deletion of his/her data in the case of data processing that is necessary for the performance of a task carried out in the public interest by EPDB Nyomtatási Központ Zrt. [Article 6(1), Point e) of the General Data Protection Regulation], or is based on the legitimate interests of EPDB Nyomtatási Központ Zrt. or a third party [Article 6(1), Point f) of the General Data Protection Regulation], then EPDB Nyomtatási Központ Zrt. will regard this deletion request as an objection to the data processing. If the objection is well-founded (there is no reason why the data must be processed), EPDB Nyomtatási Központ Zrt. will delete the data.
If the data is processed for the performance of a contract or for taking steps at the request of the data subject prior to the contract, for compliance with a legal obligation, or for the protection of the vital interests (e.g. life) of the data subject or a third party, then, regardless of the deletion request, EPDB Nyomtatási Központ Zrt. will delete the data when the personal data is no longer needed.
In other cases, EPDB Nyomtatási Központ Zrt. will delete the data if the unlawfulness of their processing is established or if Hungarian or EU law requires the deletion of the data.
EPDB Nyomtatási Központ Zrt. may not delete data that EPDB Nyomtatási Központ Zrt. is obliged to process due to a legal obligation or the performance of its public interest tasks, or based on public interest in the field of public health (e.g. to prevent an epidemic situation). Data must also be retained that is processed for scientific research or archival or statistical purposes or is necessary for the establishment, exercise or defense of legal claims.
6.5 Requesting restriction of data processing
The data subject may request that EPDB Nyomtatási Központ Zrt. restrict the processing of his data. In this case, EPDB Nyomtatási Központ Zrt. will not use the data of the data subject, it will only store it. The processing of the data subject is restricted by EPDB Nyomtatási Központ Zrt. if the data subject
EPDB Nyomtatási Központ Zrt. will inform the data subject in advance about the lifting of the restriction.
6.6 Objection to data processing
The data subject may also object to the processing of data concerning him. If this objection is well-founded, i.e. there is no compelling legitimate reason for processing the data, EPDB Nyomtatási Központ Zrt. will terminate the data processing and delete the data.
The data subject may object if the processing is necessary for the performance of a task carried out in the public interest by EPDB Nyomtatási Központ Zrt. [Article 6(1), Point e) of the General Data Protection Regulation], or if it is based on the legitimate interests of EPDB Nyomtatási Központ Zrt. or a third party [Article 6(1), Point f) of the General Data Protection Regulation].
In many cases – for example, when EPDB Nyomtatási Központ Zrt. collected the data with the voluntary consent of the data subject – the data subject’s objection is actually their request for the deletion of their data, only expressed as a protest.
If the data is processed for the performance of a contract or for taking steps at the request of the data subject prior to the contract, for compliance with a legal obligation, or for the protection of the vital interests (e.g. life) of the data subject or a third party, then, regardless of the objection, EPDB Nyomtatási Központ Zrt. will delete the data when the personal data is no longer needed.
EPDB Nyomtatási Központ Zrt. may not delete data that EPDB Nyomtatási Központ Zrt. is required to process due to a legal obligation or the performance of its public interest tasks or on the basis of public interest in the field of public health (epidemic situation), or which is necessary for the establishment, exercise or defense of legal claims.
6.7 Requesting human intervention in the case of automated decision-making
Data processing with automated decision-making means that an automation creates a result for the data subject based on the data provided and there is no part of the process where a human has a role in what will happen to the data subject based on his data. For example, his job application is automatically evaluated based on his data, and if it does not meet the predefined criteria, he automatically receives a rejection message.
In the case of such data processing, the data subject may request that a human review the decision when
If data processing through automated decision-making is required by law, human intervention cannot be requested.
6.8 Requesting data portability
The data subject may request that the data provided to EPDB Nyomtatási Központ Zrt. and managed in the IT system be released to him in electronic format so that he can transfer it to another data controller.
The data subject may request data portability in the case of processing based on consent [Article 6(1), Point a) of the General Data Protection Regulation], or necessary for the performance of a contract to which the data subject is a party, or necessary to take steps at the data subject’s request prior to entering into a contract [Article 6(1), Point b) of the General Data Protection Regulation].
Upon request, the EPDB Nyomtatási Központ Zrt. will provide the data in .xml or .csv format, depending on the functionality of the data management system.
If the data subject requests that EPDB Nyomtatási Központ Zrt. directly transmit his data to another data controller, EPDB Nyomtatási Központ Zrt. will examine whether it has an appropriate data connection that enables the secure and lawful transfer of the data, and if so, will transfer the data directly.
6.9 Submitting data subject requests:
You can report your request regarding personal data (withdrawal of consent, access (information), correction, restriction (blocking), deletion, objection, or data portability) at any time using the following contact details:
EPDB Nyomtatási Központ Zrt. may indicate different contact details in the information provided separately for each data processing operation, but regardless of this, it also receives requests and complaints from data subjects at the above contact details for all data processing operations.
EPDB Nyomtatási Központ Zrt. will respond to the data subject’s request without undue delay, but no later than 1 month from the date of submission of the request. If the request is very complex or a large number of requests are submitted, EPDB Nyomtatási Központ Zrt. is entitled to extend this deadline by 2 months, but we will notify the data subject within 1 month.
If for some reason we are unable to fulfill the data subject’s request, we will inform the data subject of the reasons within 1 month of submitting their request.
We inform data subjects that in the event of unfounded or regularly repeated, excessive requests for the same data, we may charge a fee for the fulfillment or refuse the request.
EPDB Nyomtatási Központ Zrt. informs the data subjects that if they indicate in their request for deletion, correction or restriction of data processing that EPDB Nyomtatási Központ Zrt. should inform them about those who have processed their data or to whom they have been transferred, then EPDB Nyomtatási Központ Zrt. will also inform the data subjects about these persons in its response to the fulfillment of their request.
7. Where can you turn to protect your rights?
If you find the way EPDB Nyomtatási Központ Zrt. handles your personal data offensive, we recommend that you first contact EPDB Nyomtatási Központ Zrt. with your complaint. We will always investigate your complaint and do our best to address it.
If, despite your complaint, you are still dissatisfied with the way EPDB Nyomtatási Központ Zrt. handles your data, or if you do not wish to file a complaint but would like to contact the authorities directly, you can file a complaint with the National Authority for Data Protection and Freedom of Information (address: 1055 Budapest, Falk Miksa utca 9-11. mailing address: 1363 Budapest, PO box: 9., e-mail: ugyfelszolgalat@naih.hu, website: www.naih.hu).
You also have the option to go to court to protect your data. In this case, you are free to decide whether to file your claim at the court of your place of residence (permanent address) or your place of stay (temporary address) (http://birosag.hu/torvenyszekek).
You can find the court of your place of residence or stay at http://birosag.hu/ugyfelkapcsolati-portal/birosag-kereso.
Szeretettel várunk a standunknál!