Privacy Policy

Skillbot AI Ltd. (hereinafter: Data Controller), as the operator of the Skillbot Chatmaster/Chatbot cloud-based, artificial intelligence process-support software (hereinafter: Software) available on the https://skillbot.eu website (hereinafter: Website), hereby publishes the information on data processing regarding the Website and the services related to the Software (hereinafter: Service).

Users using the Services of the Data Controller (hereinafter together: User) accept all terms and conditions included in this Privacy Policy (hereinafter: Privacy Policy) and therefore the User are requested to carefully read this Privacy Policy before providing personal data.

With regard to the use of the Service, two levels of Users can be distinguished: the User subscribing to the Service and paying a fee for the use of the Service (hereinafter: Subscriber), and the person invited by the Subscriber to use the Service (hereinafter: Invited User). If any provision of the Privacy Policy is applicable only to one level of the Users, the Service Provider shall indicate it separately with the appropriate name. If the text of a given provision or point uses the term ‘User’, the provision shall apply to both the Subscriber and the Invited User.

1.) Data Controller's data

The data controller is Skillbot AI Ltd.

Registered office: 1037 Budapest, Seregély utca 3-5.
E-mail address: support@skillbot.work
Company registration number: 01-09-425038
Tax number: 32456792-2-41

2.) Information about the data processing

a.) Registration and subscription

Processed data:

On the registration form of the Website, Users can enter their data in order to use the Services.

e-mail address;
password;
company name.

In case of subscription the Subscribes shall also provide the following data:

invoicing data;
payment data.

Purpose of data processing: To identify the Users and to provide the Service, so to conclude and to perform the contract, to invoice the fees arising from the contract and to enforce the related claims, to establish the User Account and to contact with the Users.

Duration of data processing: Data Controller processes the necessary data for 5 (five) years after the subscription ended in accordance with Section 6:22 of Act V of 2013 on the Civil Code in order to enforce the obligations and rights arising from the contract concluded between the User and the Data Controller. Furthermore, pursuant to Section 169 of Act C on Accounting (hereinafter: Accounting Act), the Data Controller shall retain the name and address of the User on the accounting document for 8 years, solely for the purpose of fulfilling the accounting obligation.

Legal basis of data processing: the performance of the contract concluded between the User and the Data Controller, the enforcement of the rights and obligations arising from the contract pursuant to Article 6 (1) b) of the Regulation of the European Parliament and of the Council (EU) 2016/679 (27 April 2016) on the Protection of Natural Persons with Regard to the Processing of Personal Data and on the Free Movement of Such Data, and repealing Directive 95/46/EC (hereinafter: GDPR). The legal basis for data processing related to an accounting document is the statutory provision ordering mandatory data processing, i.e., Section 169 of the Accounting Act.

In the case of a legal entity, the legal basis for processing the data of the specified contact person is the legitimate interest of the Data Controller in relation to the performance of the contract between the User and the Data Controller based on point f) of Article 6 (1) of the GDPR. In the opinion of the Data Controller, the contract cannot be fulfilled without processing of the contact person's data. In order to ensure the contact person's right to the protection of his personal data, the Data Controller uses the contact person's personal data exclusively for the purpose of maintaining contact with the User, provides him/her with adequate information on the circumstances of data processing in all cases, and also ensures him/her the rights specified by the GDPR and contained in point 4 of this Privacy Policy.

The Data Controller declares not processing, collecting or storing any card data required for the payment and not having access to such data in any manner when the payment is made with a credit card. The Data Controller declares that it is not responsible for the lawfulness of the processing of transaction data by Stripe (Stripe Payments Europe, Ltd.; https://stripe.com/en-hu/privacy; hereinafter: Service Provider), which provides the option to pay by credit card. The User can get information about the Service Provider's data processing on the Service Provider's website or through their other contact channels.

User Account

Following the successful registration, the system creates the user account of the User (hereinafter: User Account), containing the following data:

User's data provided during registration;
User's data related to the subscription.

Using the User Account the Subscriber:

modify the data provided during the registration
enter billing and payment information
subscribe to a package
switch from an existing package to another
buy credit and workstation
add an Invited User to the Service
terminate the contract/delete the User Account
change Software settings.

Using the User Account the Invited Subscriber:

modify or delete the data provided during the registration
delete the User Account
change Software settings.

The Service Provider provides certain functions of the User Account through the Stripe app. In these cases, the User will be redirected from the Software interface to the Stripe application interface, from which the given action can be performed. The Stripe acts as data processor appointed by the Data Controller.

b.) Newsletter

Processed data:

On the Website User can subscribe for newsletter of the Data Controller. In the course of subscription for the newsletter, the following personal data are processed by the Data Controller:

e-mail address;
nickname;
date of registration;
type of registration;
start date of subscription.

Purpose of data processing: to send an electronic newsletter and promotion messages on the products, offers, services, special offers, promotions and prize games related to the Data Controller and its activities to the e-mail address provided by the User.

Duration of data processing: data are processed until the User requests the erasure of the data or withdraws the consent to the processing of their personal data. User has the right to subscribe at any time.

Legal basis of data processing: voluntary and explicit consent of the User (given by clicking the checkbox to accept this Privacy Policy) pursuant to Article 6 (1) a) of GDPR.

c.) System Message

Processed data:

full name;
e-mail address;
nickname;
date of registration;
type of registration;
start date of subscription.

Purpose of data processing: in many cases, in relation to the Data Controller's services and the operation of the Website and the webshop, Data Controller may send information by e-mail to the User who previously purchased a product in the webshop, the content of which cannot be considered a marketing request (hereinafter: System Message). In a System Message, the Data Controller informs the User, for example, of changes related to the Website, the Software or the Services, maintenance related to the Website, the Software or the Services.

Legal basis of data processing: Legitimate interest pursuant to Article 6 (1) f) of GDPR. The Data Controller has performed the interest balancing test with regard to the data processing specified in this section, on the basis of which it has recognized that:

the Data Controller has, in its opinion, a legitimate interest to send System Messages to the User;
the purpose of data processing is to inform Users in a System Message about information related to the Software, the Website and the Services, and maintenance related to the Software, the Website or the Services;
the User's right to the protection of his personal data and privacy is proportionally limited by the legitimate interests of the Data Controller defined in this point and the data processing based on legitimate interests. From the point of view of its legitimate interest and data processing, the Data Controller has examined all the tools and options that can be taken into account in order to achieve the desired – and stated in this Privacy Policy – purpose and has deemed that the data processing activity regarding System Message can be considered the least restrictive solution possible and thus complies with the requirement of necessity and proportionality. In order to do this
- System Messages are sent to all Users only on limited occasions and in justified cases;
- according to the Data Controller's opinion, the User also has an interest in the information specified in the System Message reaching the User, since having this information allows him/her to use the Data Controller's services efficiently and with satisfaction, as well as to be informed of changes in a timely manner;
- the Data Controller complies with the legal obligations in all cases;
- the Data Controller ensures the Users under all circumstances to object to the use of their personal data for this purpose and to exercise the additional rights specified in this Privacy Policy;
- after the User's objection, the Data Controller will immediately delete his/her data from the relevant database and will no longer send him/her System Message

Based on the above, in the opinion of the Data Controller, sending System Message complies with the legal and official requirements for data processing based on legitimate interests.

Duration of data processing: as long as it is necessary to fulfill the purpose of data processing or until the User objects to the use of his/her data for such purpose. The User can object to data processing at any time with a statement in writing or by e-mail. In such a case, the Data Controller will immediately delete the relevant data of the objecting User from the relevant database, however, if the data are processed legally for other purposes the data will not be deleted.

Right to object: The User has the right to object at any time for reasons related to his own situation against the processing of his personal data arising from the legitimate interest of the Data Controller. In this case, the Data Controller may no longer process the personal data, unless the Data Controller proves that the data processing is justified by compelling legitimate reasons which take precedence over the interests, rights and freedoms of the User, or which are used to present, enforce or defend legal claims.

d.) Complaint handling

Processed data:

in case of a written complaint:
- name;
- postal address or e-mail address;
- subject and content of the complaint.
in the case of a verbal complaint or a verbal complaint communicated by telephone, if the complaint could not be remedied immediately, the Data Controller shall take a minute containing the following information:
- name;
- address;
- place, date, method, subject and content of the complaint;
- individual ID of the complaint.

Purpose of data processing: to handle complaints received by the Data Controller verbally, by phone, in writing and via e-mail, and to document the User's identity, the exact time of the complaint and the content of the complaint, as well as the Data Controller's information about the complaint for the purpose of retrieval.

Duration of data processing: the Data Controller is obliged to retain the report on the verbal complaint, the written complaint and the answer to it for 3 (three) years pursuant to Section 17/B of Act CLV of 1997 on Consumer Protection.

Legal basis of data processing: Section 17/B of the Act CLV of 1997 on Consumer Protection.

3.) Parties eligible for accessing personal data, data processing

The Data Controller and the Data Processor employed by it are entitled to have access to personal data in compliance with the provisions of effective laws and regulations.

The data are processed on contract with the Data Controller by the following data processors:

Hosting service provider:
Name: Google Cloud EMEA Limited
Address: Velasco, Clanwilliam Place, Dublin 2, Ireland
Tax number: IE3668997OH
Contact: https://about.google/contact-google/
The purpose of data processing is the hosting service required for the operation of the Website and the Software.

AI service provider:
Name: OpenAI OpCo, LLC
Website: https://openai.com/policies/privacy-policy
The purpose of data processing is to provide AI services.

Mail engine service provider:
Name: Mailchimp
Contact: https://mailchimp.com/contact/
The purpose of data processing is to provide the technical background for sending newsletter and System Message.
Transferred data: e-mail address, nickname, type and date of registration, start date of subscription.

Mail engine service provider:
Name: Mailgun
Contact: https://www.mailgun.com/contact/support/
The purpose of data processing is to provide the technical background for sending System Message.
Transferred data: e-mail address, name.

The Data Controller reserves the right to involve other data processors in data processing in the future, and to inform the Users about it by amending this Privacy Policy.

Without an expressed statutory provision, the Data Controller may transfer to third parties data suitable for personal identification only with the explicit consent of the particular user.

4.) User rights

Access to personal data

Upon the request of the User, the Data Controller shall provide information on whether or not their personal data are being processed by the Data Controller, and where that is the case, shall grant them access to the personal data, and shares the following information:

the purpose(s) of the processing;
the categories of personal data concerned;
the legal ground and recipient(s) in the event of transferring the personal data of the User;
the envisaged processing period;
the User's rights relating to the rectification, erasure and restriction of processing of the personal data, as well as the option to object to personal data processing;
the possibility of lodging a complaint with a supervisory Authority;
the data source;
relevant information on profiling;
the name, address of the processors and their activities related to data processing.

The Data Controller shall provide the User with a copy of the personal data undergoing processing free of charge. For any further copies requested by the User, the Data Controller may charge a reasonable fee based on administrative costs. Where the User makes the request by electronic means, the information shall be provided in a commonly used electronic form, unless otherwise requested by the data subject.

The Data Controller is obliged to provide the information at the request of the User in an intelligible form without undue delay, but no later than within one month from the submission of the request. The User may submit their request for access through the contact channels specified in Section 1.

Rectification of processed data

The User may request the Data Controller (at the contact details specified in Section 1) to rectify inaccurate personal data or the supplementation of incomplete data, taking into account the purpose of data processing. The Data Controller shall fulfil the rectification requirement without undue delay.

Erasure of processed data (right to be forgotten)

The User may request the Data Controller to erase their personal data without undue delay, the Data Controller shall be obliged to erase the personal data concerning the data subject without undue delay, if any of the following criteria is fulfilled:

the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
the User withdraws its consent and here is no other legal ground for the processing;
the User objects to the processing of your personal data;
the personal data have been unlawfully processed;
the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject;
the personal data obtained based on consent was collected with the provision of services relating to the information society to children.

Where the Data Controller has made the personal data public (made it available to a third party) and are obliged to erase them pursuant to the above, the Data Controller shall take into account the available technology and the cost of implementation, shall take reasonable steps to inform data controllers who are processing the affected personal data that the User has requested them to erase any links to, or copy or replication of those personal data, as well as to erase any duplicate copies.

Personal data are not required to be erased when data processing is necessary:

for exercising the right of freedom of expression and information;
for compliance with a legal obligation which requires processing of personal data by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
for reasons of public interest in the area of public health;
for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in so far as the right to erasure is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
for the establishment, exercise or defence of legal claims.

Restriction of processing

The User has the right to request the Data Controller to restrict the data processing instead of rectifying or erasing personal data if any of the following criteria applies:

the accuracy of the personal data is contested by the User, in which case the restriction applies for a period enabling the Data Controller to verify the accuracy of the personal data;
the processing is unlawful and the User opposes the erasure of the personal data and requests the restriction of their use instead;
the Data Controller no longer needs the personal data for the purposes of the processing, but they are required by the user for the establishment, exercise or defence of legal claims;
the User objected to data processing; in such cases the restriction shall only apply to the time period necessary to determine whether the legitimate reasons of the Data Controller override those of the data subject.

Where processing has been restricted, such personal data shall, with the exception of storage, only be processed with the User's consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

The Data Controller shall inform the User, at whose request the processing has been restricted, of the lifting of the processing restriction in advance.

Notification obligation regarding rectification or erasure of personal data or restriction of processing

The Data Controller communicates any rectification or erasure of personal data or restriction of processing carried out to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. At the request of the User, the Data Controller informs the User about these recipients.

Right to data portability

The User is entitled to receive the personal data concerning him / her provided to the Data Controller in a structured, widely used, machine-readable format and to transmit this data to another data controller. If requested by the User, the Data Controller will export the processed data in PDF and / or CSV format.

Right to objection

The User has the right to object to the processing of their personal data, if the data processing

is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller;
is necessary for the enforcement of the legitimate interests of the Data Controller or a third party.
is based on profiling.

In the event of the User's objection, the Data Controller shall abandon the processing of the personal data unless the Data Controller proves that the data processing is justified by compelling legitimate grounds which override the User’s interests, rights and freedoms, or are necessary for the establishment, exercise or defence of legal claims.

Measures of the Data Controller in case of the User's request

The Data Controller shall inform the User without undue delay, but no later than within one month from the receipt of the request, of the measures taken in relation to the access, rectification, erasure, restriction, objection or data portability request. This deadline may, however, be extended by two months if warranted by the complexity of the request or the number of requests. The Data Controller shall notify the User of any such extension within one month of receiving the request; such a notification shall include the reason of the extension. If the User submits the request via an electronic channel, the notification shall preferably be sent to them in an electronic format unless the data subject requests a different format.

If the Data Controller fails to act upon the User’s request they shall notify the User, without delay but no later than within one month of receiving the request, of the reasons of such a failure, and shall also inform the User that they may place a complaint at a supervisory authority, and may seek judicial legal remedy.

Upon the request of the User, the information, notifications and the measures taken on their request shall be provided free of charge. If the User’s request is clearly unfounded or excessive, in particular because of its repetitive nature, the Data Controller may, either charge a reasonable fee taking into account the administrative costs of providing the information or communication or taking the action requested or may refuse to take action in relation to the request. The burden of demonstrating the clearly unfounded or excessive nature of the request falls on the Data Controller.

5.) Managing and reporting of personal data breaches

All incidents are considered personal data breaches which result in the unauthorised processing or controlling of personal data, in particular unauthorised or accidental access, alteration, disclosure, erasure, loss or destruction of personal data processed, transferred, stored or processed by the Data Controller, or in its accidental destruction or damage.

he Data Controller is obliged to notify the NADPFI of the personal data breach without undue delay, but no later than 72 hours after the detection of the personal data breach, unless, the Data Controller can prove that the personal data breach is unlikely to pose a risk to the rights and freedoms of natural persons. Where such notification cannot be achieved within 72 hours, the reasons for the delay should accompany the notification and information may be provided in phases without undue further delay. The notification to NADPFI includes at least the following information:

the nature of the personal data breach, the number and categories of data subjects and personal data;
Title and contact information of the Data Controller;
the likely consequences arising from the personal data breach;
the measures taken or planned to manage, rectify or remedy the personal data breach.

The Data Controller shall inform the data subjects about the personal data breach via the Data Controller's website within 72 hours after having become aware of the data breach. The information shall include at least the data specified in this Section.

The Data Controller keeps a record of each personal data breach for controlling the measures taken in relation to the occurring incidents and for providing information to the data subjects. The records contain the following data:

the scope of the affected personal data;
the range and number of data subjects;
the date and time of the personal data breach;
the circumstances and effects of the personal data breach;
the measures taken for the prevention of the personal data breach.

The Data Controller keeps the data contained in the record for 5 years from the detection of a personal data breach.

6.) Data security

The Data Controller undertakes to ensure the security of data and takes all technical and organisational measures, puts into place the procedural rules that ensure the protection of all collected, stored and processed data, as well as preventing the destruction, unlawful use and unlawful alteration of data. The Data Controller also undertakes to call upon each third party to whom data are transferred or transmitted without the Users’ consent to comply with the data security requirements.

The Data Controller shall ensure that no unauthorised persons may access, disclose, transfer, modify or erase the processed data. The processed data may be accessed only by the Data Controller and its employees, as well as the Processor employed by them, and the Data Controller shall not transfer the data to any third party not authorised to have access to them.

The Controller shall take every possible effort to ensure data are not accidentally damaged or destroyed. The Data Controller requires all its employees taking part in data processing activities to assume the above obligations.

The User acknowledges and accepts that in case their personal data are provided on the website, full data protection cannot be guaranteed on the internet despite the fact that the Data Controller has up-to-date security equipment to prevent any unauthorised access to data or the detection thereof. If data are accessed without authorisation or data are obtained despite our efforts, the Data Controller shall not be held liable for the obtaining of data in such a manner or for any unauthorised access to them, or for any damage occurring at the User as a consequence thereof. In addition, the User may also supply personal data to third parties who may use them for unlawful purposes and in an unlawful manner.

7.) Law enforcement options

The Data Controller shall take all reasonable efforts to process personal data in compliance with the laws and regulations, however, if Users feel that this has not been complied with, they can write using the contact details indicated in Section 1.

If Users feel that their right to the protection of personal data has been violated, they can seek legal remedy in compliance with the applicable laws and regulations at the organizations that have jurisdiction, as

the Hungarian National Authority for Data Protection and Freedom of Information (1055 Budapest, Falk Miksa utca 9-11.; ugyfelszolgalat@naih.hu; www.naih.hu) or
in court.

The National Media and Infocommunications Authority is responsible for advertisements sent electronically, the detailed rules of which are contained in Act CXII of 2011 on the Right of Informational Self-determination and Freedom of Information and in Act CVIII of 2001 on Electronic Trading Services and Certain Issues Concerning Services in an Information Society.

8.) Cookie policy

a.) What is a cookie?

A cookie is a small data file that internet services store in the browser with the aim of saving certain settings, facilitating the use of the website and contributing to the collection of some relevant statistical information about users. An essential technology for the operation of an online service providing an efficient and modern user experience, which is supported by all browsers today.

b.) What is a cookie good for?

When a user revisits a website, the cookie allows the website to recognize the user's browser. Cookies can also store user settings (e.g. selected language) and other information. Among other things, they collect information about the user and his device, memorize the user's individual settings. Cookies generally facilitate the use of the website, help the website provide a real web experience for users and provide an effective source of information, and ensure that the website operator monitors the operation of the website, prevents abuse and ensures the smooth and appropriate quality of the website.
The user can delete the cookie from his computer or set his browser to prohibit the use of cookies. By prohibiting the use of cookies, the user acknowledges that the website does not function fully without cookies.

c.) What kind of information is collected?

By visiting the website and pressing the "Accept" button, the user consents to the operator's use of cookies managed by external service providers to record the data and information contained in this policy in connection with the website. The user also has the option to select the cookies/service providers whose use he/she wishes to consent to. User can change these settings at any time in the dedicated menu.
The user also has the option, when starting to use the website by clicking the "Reject all" button, to reject the use of all cookies, which are not essential for the operation of the website.

If the user does not explicitly provide personal data or information on the website, the operator will not collect or process any personal data about the user in a way that would allow the user to be personally identifiable. Such data is the data of the user's login computer, which is generated during the use of the website and which is recorded by the cookies used on the website as an automatic result of technical processes. The data that is automatically recorded is automatically logged by the system when you visit or exit the website, without the user's express statement or action.
These data are not linked to other user data, i.e. the user cannot be identified on the basis of this data. Such data may only be accessed by the operator or external service providers handling the cookies.

d.) What kind of cookies are used and what is the legal basis?

The legal basis for data processing related to the use of cookies is the consent of the user based on Article 6 (1) point a) of the GDPR in case of cookies for preferences, statistical and marketing purposes, and Article 6 (1) paragraph f) of the GDPR according to the legitimate interest necessary to ensure the operation of the website, in the case of essential cookies.

The following cookies are used on the website:

Essential cookies

These cookies help make the website easy to use by enabling basic functions such as page navigation and access to secure areas of the website. The website cannot function properly without these cookies.

Type	Description	Expiration date
XSRF-TOKEN	To provide the basic functions of the website To provide the secure operation of the website	End of session
frontend_session	To provide the basic functions of the website to store the user's session	End of session
cc_consent	To store the cookie level selected by the user	365 days
locale jwt tenant role uid fname nname avatar thread	To provide the basic functions of the website	365 days

Statistical cookies

By collecting and reporting data in an anonymous form, statistical cookies help the website owner to understand how visitors interact with the website. The purpose of Cookies is also to learn about the use of the website by the user (e.g. viewed pages, number of pages, navigation, session time, error messages, etc.) in order to enable the operator to further develop the website according to the needs of visitors and provide a high-quality, user-friendly experience.

Type	Service provider	Description	Expiration date
_ga_(container-id) _ga	Google Analytics cookies	To collect information about how the users use the website	2 years
_gid	Google Analytics cookie	To collect information about how the users use the website	24 hours
_gat	Google Analytics cookie	To collect information about how the users use the website	1 minute

The operator uses the services of the Google Analytics system in connection with the website. Cookies managed by Google Analytics help measure website visits and other web analytics data. The information collected by cookies is transferred to and stored on external servers operated by Google. Google primarily uses this information for the benefit of the Operator to monitor website visits and to analyze the activities performed on the website. Google is entitled to transfer this information to third parties if this is required by law. Google is also entitled to forward this data to third parties it uses to process the data. Google Analytics can provide detailed information on the handling of data by Google Analytics (http://www.google.com/analytics).
If the user does not want Google Analytics to measure the above data in the manner and for the purpose described, user shall install the blocking add-on in the browser.

Marketing cookies

Marketing cookies are used to track visitors' website activity. The purpose is for the operator to publish relevant ads for individual users and encourage them to be active, which makes the website even more valuable for content publishers and third-party advertisers.

Service Provider	Description	Name	Expirition date
Google Ads	To display relevant ads, to create and store identification	NID	6 months
		__gads	13 months
		FPAU _gcl_au FPGCLAW FPGCLGB _gcl_gb _gac_gb_(wpid) _gcl_aw Conversion	90 days
		ANID	24 months
		AID	540 days
		TAID	14 days
		RUL	12 months
		VISITOR_INFO1_LIVE__k VISITOR_INFO1_LIVE__default	3 months
Facebook	To display relevant ads, to create and store identification	fbc	90 days
		_fbp	12 months
		datr	2 years
		wd	6 days
		usida	End of session

The operator's ads are displayed on the websites of an external service provider (Google, Facebook). These external service providers use cookies to store the fact that the user has previously visited the operator's website, and based on this, display advertisements to the user in a personalized manner (i.e. engages in remarketing activities).

The data processing of the above-mentioned external service provider is governed by the data protection regulations defined by this service provider, and the operator assumes no responsibility for such data processing.

The cookie use of Google can be disabled at Ad settings (http://www.google.hu/policies/privacy/ads/). Users can block the cookie use of external service providers on the unsubscribe site of Network Advertising Initiative (http://www.networkadvertising.org/choices/) as well.

The privacy policy of Facebook is available on the following website: https://www.facebook.com/privacy/explanation

e.) How to disable the cookies?

If the user does not want the information described above to be collected in connection with the use of the website, he may disable the use of cookies in part or in full in the settings of the Internet browser or otherwise change the settings of cookie messages.

User can find information about the cookie settings of the most popular browsers at the links below:

f.) Third party cookies

The website may contain information, in particular advertisements, from third parties, advertising service providers who are not in connection with the website. These third parties may also place cookies, web beacons on a user's computer, or collect data using similar technologies in order to send an advertising message to the user in connection with their own services. In such cases, the data processing shall be governed by the data protection regulations set by these third parties and the operator shall not be liable for such data processing.

Other provisions

This Privacy Policy is governed by the Hungarian law, especially by the provisions of Act CXII of 2011 on the Right of Informational Self-determination and Freedom of Information and GDPR.

Budapest, 2024.09.10.