Porsche Hungaria Kft.

We appreciate your interest in our company and the brands we represent. The protection of your personal data is very important to us, which is why we provide detailed information below regarding our data processing activities. Porsche Hungaria Kft. (hereinafter: Porsche Hungaria) strictly complies with applicable data protection regulations when using and processing personal data. We process personal data only in accordance with the data protection laws in force at any given time; Porsche Hungaria is entitled to use personal and anonymous data to the extent permitted by applicable European Union and Hungarian law, while preserving your rights as described below.

This privacy and data processing notice describes in detail your rights and options regarding data processing, as well as Porsche Hungária’s obligations and measures related to data protection, and your obligations and rights regarding data processing.

When you contact us, you acknowledge that we will process certain personal data in accordance with this notice, depending on the nature of your contact.

If you use our website, please note that this privacy and data processing policy applies only to those websites and related subpages operated by Porsche Hungaria, and does not apply to websites controlled and operated by third parties. For websites controlled and operated by third parties, please review their privacy policies, as these websites are not under our control and Porsche Hungaria is not responsible for their content or data protection measures.

Brief Summary

Below is a brief summary of the key aspects of our data protection and data processing practices. Detailed information follows this summary.

The processing of your personal data is unavoidable if you wish to purchase a vehicle from Porsche Hungaria or use our services. Without processing your personal data, we cannot serve you. However, we may only use your data for certain purposes if you have expressly consented to such use. Such use includes, for example, use for marketing purposes.

Porsche Hungaria primarily processes only the data you have provided to Porsche Hungaria, or, to a lesser extent, data you have provided to one of our dealerships or service centers. This may occur when entering into a contract with Porsche Hungaria, or your data may be forwarded to us by one of our dealerships, or in cases where you have given your consent to one or more forms of data processing for marketing purposes.

We have summarized the personal data processed in each data processing case, along with its source, purpose, legal basis, and duration, in a table at the end of this notice.

If you no longer wish to consent to the processing of your data, you may withdraw your consent at any time using the methods described in this notice. You also have a number of other rights regarding your data; for example, you may request the rectification of your data, the restriction of data processing, and even that Porsche Hungaria transfer your data to another data controller.

Porsche Hungaria does not transfer your data to countries outside the European Union, but for certain activities, such as conducting marketing campaigns, it engages partners who require access to your data to perform their tasks. Porsche Hungaria assumes responsibility for the conduct of such data processors and does everything in its power to ensure that your data remains secure with its data processing partners. We have summarized the personal data processed in each data processing case, along with its source, purpose, legal basis, and duration, in a table at the end of this notice.

I. Who is the data controller?

The data controller is Porsche Hungaria (data protection registration number: 01527, hereinafter: Data Controller), the chief representative of the Audi, SEAT, ŠKODA, Volkswagen, and Volkswagen Commercial Vehicles, the domestic organizer of the Das WeltAuto program, and the organizer of the domestic dealer and service network (hereinafter: Network) for these brands.

Our contact information is as follows:

Address: 1139 Budapest, Fáy u. 27.

Email address: [email protected]

Data Protection Officer of the Data Controller: Zoltán Kovács (email address: [email protected]; phone: +36 1 451 5254).

II. What constitutes personal data, and what does data processing mean?

Personal data is any data or information that, on its own or in combination with other data or information, can be used to directly or indirectly identify a specific individual.

Your personal data primarily includes your name, address, place and date of birth, mother’s maiden name, and identification document numbers—these are known as personal identification data. However, any other data that, in combination with any of the above data and in light of that information, is capable of identifying you is also considered personal data. This may include, for example, your vehicle’s details.

Certain types of personal data enjoy special protection, such as health data. Porsche Hungaria does not process special categories of personal data.

Data processing refers to any operation performed on personal data, such as the collection, storage, use, organization, transmission, modification, combination with other data, erasure, or destruction of such data.

III. How do we protect personal data?

Porsche Hungaria takes all necessary measures to ensure the secure and undamaged processing of data by protecting the confidentiality, integrity, and availability of the data. In this context, confidentiality means that only those persons who are authorized to do so under this notice may access the data. Integrity means that personal data must be accurate and appropriate for the purposes of data processing. Availability means that authorized users can access the data when they need it for the purposes covered by their authorization.

Porsche Hungaria has implemented appropriate technical and organizational measures to protect your data, which safeguard your data against, among other things, loss, manipulation, or unauthorized access. We regularly review the measures taken and continuously update them in line with the current state of technology. If the security of your personal data is compromised and this is likely to result in a significant risk to your rights, we will notify you immediately, but in any case within 72 hours.

Porsche Hungaria continuously monitors, maintains, and updates the systems and software it uses for data processing.

IMPORTANT! Please note that you are responsible for the secure storage and confidentiality of the user data and passwords provided to you or communicated to you.

IV. What data do we collect and process?

We process personal data only in accordance with the data protection regulations in effect at any given time. When you contact us—for example, to request a quote, purchase a vehicle, or use a service; when you correspond with us; or when you fill out a form on our website—you acknowledge that we will process the data you provide during such contact for the purposes described in Section VII of this notice.

When you visit our websites, so-called cookies automatically collect personal data. Section VIII of this notice provides more details on this.

V. How long do we process and store personal data?

Porsche Hungaria processes personal data only for as long as the purpose of data processing exists or as long as required by law. Upon fulfillment of the purpose of data processing, or if the legal obligation ceases to apply, or if the data subject requests it, the relevant personal data will be deleted or anonymized. Porsche Hungaria reserves the right to cease data processing—with the exception of data necessary for the performance of the service—and to delete the data at an earlier date if the processing of the data is no longer necessary.

VI. To which third parties do we disclose personal data?

Porsche Hungaria does not transfer your personal data to countries outside the European Union, nor does it disclose personal data to third parties for their own business purposes (such as data mining or direct marketing companies). However, Porsche Hungaria may, for various reasons, be required to transfer certain of your data to various authorities or other data controllers or data processors.

VI.1. Disclosure to Authorities

Porsche Hungaria may be required by law or upon request from an authority to disclose certain data to the competent authorities (e.g., the police) . In the event of a data breach—that is, when data we process is accidentally or unlawfully destroyed, lost, altered, disclosed to a third party without authorization, or accessed by an unauthorized person—it may become necessary to transfer certain data to the data protection authority.

VI.2. Disclosure of Data to Network Members, Manufacturers, Lenders, and Insurers

If you inquire about a new Audi, SEAT, ŠKODA, Volkswagen, or Volkswagen Commercial Vehicles vehicle distributed by us, or a vehicle sold through the Das WeltAuto network, or if you reserve a vehicle online on our websites, or purchase such a vehicle from our partners, when using certain services, we will transfer your data to the Network member you have selected, and if necessary (for example, when claiming the manufacturer’s warranty), to the manufacturer of the respective brand. In this case, the brand dealership/service center or the manufacturer also becomes a controller of your data.

If you wish to purchase a vehicle with partial or full bank or lease financing and initiate the process through Porsche Hungaria, we will transfer the necessary data to the financing bank or leasing company you have designated. In this case, the relevant bank or leasing company will also become the controller of your data. Please note that in this case, you may obtain detailed information regarding the data processing by the relevant bank or leasing company directly from the bank or leasing company.

If you wish to purchase vehicle insurance through Porsche Hungaria when purchasing a vehicle, Porsche Hungaria will act as an agent for the insurer you select and will transfer your data to the insurer. In this case, the insurance company in question will be the controller of your data. Please note that in this case, you can obtain detailed information about the insurance company’s data processing directly from the insurance company.

If you use the Assistance service, our customer service department will forward any complaints you submit to Porsche Hungaria to the Hungarian Automobile Club for the purpose of handling the complaint.

VI.3. Transfer to Data Processors

In the course of processing personal data, Porsche Hungaria engages professional partners, known as data processors, who act on behalf of Porsche Hungaria.

The data processor is required to carry out its activities in accordance with the terms of the engagement and applicable legal regulations. Porsche Hungaria is liable to the data subject for any damage caused by the data processor.

We have carefully selected our data processing partners, who ensure, through appropriate technical and organizational measures, that the processing of your data complies with data protection regulations and that the protection of your rights is guaranteed. Partners may not use the personal data provided for their own business purposes, nor may they disclose the data to third parties.

Data processors may be engaged, for example, during customer satisfaction surveys or the execution of marketing campaigns (e.g., call centers, marketing agencies, or the provision of Mobility Guarantee services).

VII. What is the legal basis and purpose of our data processing?

The processing of personal data is based solely on Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (EU) 2016/679 (General Data Protection Regulation) and Act CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information (Infotv.),

(i) in connection with the preparation and performance of a contract you intend to conclude with us (for example, if you request a quote, purchase a vehicle, or use certain services we provide);

(ii) where Porsche Hungaria’s legitimate interests so require (for example, claims arising from or outside a contract, customer satisfaction surveys); or

(iii) if you have expressly consented to the processing of your data for one or more specific purposes and in a specific manner.

In addition to the above, Porsche Hungaria may also be required by law to process certain data or retain it for a specified period of time.

The following sections describe the cases, rules, and purposes of data processing conducted on various legal grounds, as well as the retention periods for the processed data.

VII.1. Data processing related to the preparation and performance of the contract

VII.1.1. Requests for quotes or general inquiries about products or services

If you request a quote or information in any form (by phone, email, by filling out an online form, or in person) regarding any product or service we offer, we will process the data you provide during the request for a quote or information.

The purpose of data processing is to respond to your inquiry or request.

Data retention period: unless you have consented to other types of data processing based on consent, we will store the data for the period necessary to process the quote request or other inquiry, but for no longer than 12 months.

VII.1.2. Vehicle Purchase/Warranty and Guarantee

If you purchase a vehicle from us or receive a vehicle for use from us under a specific contract, we will process the data provided in the vehicle purchase agreement or the contract governing its use (name, address, place and date of birth, mother’s name, personal ID number, phone number, email address), as well as the details of the purchased/used vehicle.

The purpose of data processing is to fulfill the contract entered into with you and for billing purposes.

Data retention period: unless you have consented to other types of data processing based on consent, we will store the data for the duration of the performance of the sales/other contract (including the period during which you may enforce your rights in the event of warranty services or defective performance), but for no longer than 13 years.

Please be advised that we are required to retain invoices and other accounting documents (including the data contained therein) in accordance with the provisions of applicable accounting laws (currently, we are required to retain them for a period not exceeding the end of the eighth year following the last day of the fiscal year in which the invoice was issued).

VII.1.3. Handling Customer Complaints

If you contact our technical customer service with a complaint, we will record your information (name, address, phone number, email address, vehicle details). If your complaint relates to the Assistance service, we will forward the complaint and your information to the Hungarian Automobile Club

The purpose of data processing is to handle the complaint.

Data retention period: the time required to handle the complaint and the statute of limitations for claims arising from the complaint.

VII.1.4. Manufacturer’s Certification

If you submit a request for certification (technical certificate, environmental classification certificate, certificate required for engine modification, Certificate of Conformity) to Porsche Hungaria, Porsche Hungaria will obtain the relevant certificate from the manufacturer. In doing so, our technical customer service department will record your identification and contact information (name, address, phone number, email address), as well as your ID number and the details of your vehicle.

The purpose of data processing is to obtain the data certification.

Data retention period: 10 years.

VII.1.5. Vehicle Pre-order

From time to time, brands belonging to the Volkswagen Group may offer the opportunity to pre-order certain vehicle models that are currently under development, not yet on the market, but scheduled for release in the near future. If you reserve a reservation number during the reservation process, in connection with the reservation and administration of the number, as well as the sharing of essential data and and to send you invitations to events and functions aimed at presenting the pre-registered vehicle model and providing information about it. Scope of personal data processed: name, address, email address, phone number.

Purpose of data processing: to provide you with the opportunity to purchase a vehicle at a later date based on your reservation, and to share information regarding the vehicle model currently under development.

Data retention period: 8 years following the refund of the reservation fee to you.

VII.1.5. Online Vehicle Reservation

On the websites of brands belonging to the Volkswagen Group, you have the option to reserve vehicles in stock at Porsche Hungaria or at members of the dealer network online. If you reserve a vehicle from inventory online, Porsche Hungaria will process your personal data in connection with the reservation and its administration.

If you reserve a vehicle from Porsche Hungaria’s inventory, Porsche Hungaria, or the dealership you selected during the reservation, will contact you shortly after the reservation using the contact information you provided to coordinate details regarding the vehicle sale and to prepare the sales contract. In order to facilitate contact and the completion of the vehicle sale, Porsche Hungaria will forward the personal data you provided during the reservation to the dealership you selected. With regard to the forwarded personal data, the dealership will act as an independent data controller.

If you reserve a vehicle from the inventory of a member of the dealer network, Porsche Hungaria will act as the data controller for the administration and management of the reservation; however, Porsche Hungaria will forward your personal data to the relevant dealership to facilitate the necessary communication regarding the sale of the vehicle. With regard to the transferred personal data, the dealership will act as an independent data controller.

Scope of personal data processed: name, address, email address, phone number.

Purpose of data processing: to facilitate the online reservation of a vehicle and to take the necessary steps for the sale of the vehicle (e.g., establishing contact, preparing the contract).

Data retention period: 8 years following the reservation.

VII.2. Data processing by Porsche Hungaria based on legitimate interests determined through a balancing of interests

In certain cases, the data subjects’ rights to data protection and to their personal data may appear to conflict with the legitimate interests of the data controllers. In such cases, data controllers may conclude, through a balancing of interests, that the data processing is necessary to pursue their legitimate interests. However, in such cases, the data controller is not entitled to process data beyond its legitimate interests or to engage in mass data processing.

The legitimate interest established through the balancing of interests can take many forms; below, we provide information on the most common types of such data processing.

VII.2.1. Recall Campaigns

During recall campaigns, Porsche Hungaria attempts to identify the owners of the affected vehicles based on the vehicle identification number (VIN). If you are the owner of such a vehicle but your data is not listed in Porsche Hungaria’s databases, Porsche Hungaria will obtain your data from the relevant authority (currently the State Secretariat for the Maintenance of Registers at the Ministry of the Interior).

The purpose of data processing is to identify and recall vehicles affected by a safety risk for your safety.

Data retention period: the statute of limitations for claims arising from the recall, but no longer than 10 years.

VII.2.2. Engine Replacement

In the event of an engine replacement, the old engine number is stamped into the new engine, which Porsche Hungaria is required by law to record, along with your name and address.

The basis for data processing is a legal obligation.

Data retention period: 10 years.

VII.2.3. Measuring Customer Satisfaction

We may contact customers who have purchased a new car, as well as those who have used repair or maintenance services in our brand service network, from time to time to assess their satisfaction with their vehicle and our services. From time to time, for this purpose, we may transfer your data within our group to the manufacturer of the respective brand, in which case the manufacturer becomes the controller of your data.

Az adatkezelés indoka a gépjárművek és szolgáltatások folyamatos fejlesztése, az ügyféligények jobb felmérése.

Az adatok megőrzésének időtartama: a megkereséstől számított 12 hónap.

VII.2.4. Szerződésen kívüli károkozás

Amennyiben valaki a velünk megkötött szerződéseihez nem kapcsolódóan okoz kárt vállalatunk számára, például, egy tesztvezetés során az ő hibájából kár keletkezik a tesztvezetésre átvett gépjárműben, vállalatunk a kárral kapcsolatos igényérvényesítés során kezelni fogja a károkozó adatait (név, lakcím, telefonszám, e-mail cím).

Az adatkezelés indoka a jogos igény érvényesítése.

Data retention period: the time necessary to assert a claim, the statute of limitations for the claim, or a maximum of five years from the date of becoming aware of the incident, whichever is longer.

VII.2.5. Passing on fines, requests from authorities

If you rent or take a vehicle for a test drive and commit a traffic violation or other infraction subject to a surcharge (e.g., parking without a ticket), we will pass on the imposed fine or surcharge to you. In this case, we will process the data you provided when signing the rental agreement or during the test drive (name, address) as necessary. If an incident occurs involving the vehicle that may qualify as an insurance claim, we will process the data you provided on the claim form and forward it to the insurance company.

The purpose of data processing is to enforce a legitimate claim.

Retention period for data: the time necessary to assert a claim, or the statute of limitations period for the claim (five years from the date the damage occurred), and we are required to retain invoices and other accounting documents (including the data contained therein) in accordance with the provisions of applicable accounting laws (currently up to the end of the eighth year following the last day of the fiscal year in which the invoice was issued).

If an official proceeding is initiated in connection with your use of the vehicle and the authority contacts Porsche Hungaria in this regard, we will provide the authority with the data requested (typically name, address, place and date of birth, and mother’s name).

VII.2.6. Exclusive Invitations to Key Clients, Partners, and Their Business Leaders and Contacts

Porsche Hungaria may contact the business leaders and contacts of its key existing and potential future clients and business partners from time to time to invite them to specific business or public events. For the purpose of such communications, we process the personal data (name, address, phone number, workplace, job title/position) of the business executives and contact persons of the relevant existing and potential future customers and business partners.

Reason for data processing: to contact the business leaders and contact persons of existing and potential future clients and business partners for the purpose of inviting them to exclusive events and functions.

Data retention period: in the case of an existing business relationship, for the duration of the customer relationship and for up to 1 year following its termination; in the case of a prospective business relationship, for up to 5 years following the initial contact.

VII.2.7. Photographs and video recordings taken at events

Porsche Hungaria takes photographs and videos at certain events it organizes (e.g., the annual Volkswagen meet). Porsche Hungaria retains the photographs and videos taken at these events and publishes them in printed publications and/or on Porsche Hungaria’s online platforms.

The purpose of data processing is to strengthen Porsche Hungaria’s image, brand, and recognition through marketing activities, including the taking and use of photographs and video recordings at events. Scope of personal data processed: the data subject’s likeness and voice.

Retention period for personal data: until the data subject objects.

VII.2.8. Szerződéses kapcsolattartók személyes adatainak a kezelése

A Porsche Hungaria az üzleti partnereivel kötött szerződésben, illetve annak teljesítése során megadott kapcsolattartók személyes adatait (tipikusan: név, munkahelyi cím, munkahelyi e-mail, munkahelyi telefonszám) kezeli.

Az adatkezelés célja a szerződés végrehajtása: a Porsche Hungaria a szerződéses partner által a szerződéssel összefüggésben megadott személyes adatokat kizárólag a Porsche Hungaria és a szerződéses partner közötti könnyített kapcsolatfenntartás érdekében, a szerződés teljesítése és a szerződés feltételeinek későbbi bizonyítása érdekében használja fel.

A személyes adatok megőrzésének ideje: a fenti cél megvalósulásáig, de legfeljebb a partnerrel kötött szerződés megszűnésétől számított 5 évig (amelyik a rövidebb).

VII.3. Data Processing Based on Explicit Consent

Porsche Hungaria processes your personal data (name, address, place and date of birth, phone number, email address) for automated decision-making and profiling, as well as for marketing purposes, such as promoting new product offers and special promotions, conducting market research, inviting you to test drives, and participating in sweepstakes and charity campaigns, exclusively within the scope to which you consented when completing the data processing consent form.

Within the scope of the above, the purpose of data processing is for Porsche Hungaria to

a.) exercise its rights and fulfill its obligations toward the customer or participant, as established by contract or law;

b.) ensure and verify high-quality service that meets quality standards for customers and prospects (with particular regard to warranty administration, recall campaigns, mystery shopping, and the CRM program);

c.) forward the test drivers’ data to the requesting authority (in particular, the authority conducting proceedings for traffic violations);

d.) conduct market research and direct marketing with respect to data subjects via electronic means and other methods, and send them informational materials and newsletters in the manner they have selected;

e.) continuously update the data subjects’ information already on file with Porsche Hungaria when contacting them in the future;

f.) maintain ongoing contact with the data subjects.

Data retention period: data requested and collected for business development purposes will be stored until the data processing consent is withdrawn, unless a different retention period is specified below.

VII.3.1. Automated Decision-Making and Profiling

With the data subject’s express and prior consent, Porsche Hungaria may send certain targeted communications to the data subject based on data available at Porsche Hungaria or lawfully obtained from other sources, through automated decision-making and as a result of profiling. Automated decision-making is carried out through filtering based on predefined criteria, in accordance with a profile determined based on previous data. Such data may include, among other things, information regarding the data subject’s personal characteristics (e.g., gender, age, place of residence, occupation, hobbies), living conditions (e.g., marital status and family situation, income), and usage habits. The purpose of profiling is to develop offers that best match the data subject’s usage habits and preferences.

The data subject may request further information at any time regarding the method of profiling, in particular regarding the data taken into account, the conclusions drawn from them, and the source of the data.

VII.3.2. New product offers, promotions, newsletters

If the data subject consents to Porsche Hungaria’s data processing for the purpose of sending information about new products, central service and parts promotions, newsletters, brand magazines, etc., Porsche Hungaria will process the data subject’s data separately for this purpose until the data subject withdraws their consent.

VII.3.4. Market Research

Porsche Hungaria maintains the personal data of data subjects on separate lists that cannot be linked to data processed for direct marketing purposes; these data subjects have given their consent solely for the purpose of being contacted (market research) to understand their consumer habits. Immediately following the market research, Porsche Hungaria separates the data subject’s name and address from the other research data and stores them separately in a manner that precludes the identification of the data subject and any association with their responses. Porsche Hungaria will only waive this separation with the data subject’s express consent.

VII.3.5. Test Drive

When you sign up for a test drive, we will record your name, phone number, and email address, and forward this information to the dealership you have selected.

If you pick up a vehicle from Porsche Hungaria for a test drive, in addition to the information listed above, we will record your ID card number, driver’s license number, place and date of birth, and your mother’s name. We also require this data to pursue our legitimate interests (for details on the grounds and duration of retention, see Section VII.2.5 of this notice).

VII.3.6. Sweepstakes

When you enter a specific prize draw, Porsche Hungaria processes the personal data specified in the rules of the draw for the purposes of conducting the draw and awarding prizes. In the absence of any other valid consent to data processing, Porsche Hungaria will delete the participants’ data after the prize draw has been conducted. Porsche Hungaria retains the winners’ data for the duration of the statute of limitations regarding obligations under laws related to the enforcement of claims concerning prizes, as well as those related to taxation and the supervision of games of chance, and deletes it thereafter.VII.3.7. Charity Campaigns

Data collected and processed specifically for the purposes of individual charity campaigns will be deleted by Porsche Hungaria following the completion of the charity campaign, in the absence of any other general consent to data processing.

VII.3.8. Waiting List for Vehicle Reservations

In the case of vehicle reservations as described in Section VII.1.5, Porsche Hungaria may offer interested parties the opportunity to reserve vehicles at a later date should any become available due to cancellations after the initial allocation of vehicles for reservation has been exhausted. In such cases, interested parties may sign up for the waiting list associated with the reservation of the specific vehicle model; Porsche Hungaria will process the personal data provided at the time of registration solely for the purpose of maintaining the waiting list and notifying the individuals concerned when the opportunity to reserve becomes available.

Porsche Hungaria will delete the personal data processed in connection with the waiting list registration within 90 days of the reservation period closing.

VIII. What are cookies and social media plugins, and what are they used for?

Our websites automatically collect data through the use of so-called cookies. A cookie is a small text file that stores internet settings. Almost every website uses this technology.

When you visit the website for the first time, the cookie is automatically downloaded from your browser. The next time you access the website from the same device, the cookie—and the information it contains—is either sent back to the website that created it (a so-called first-party cookie) or sent to another website associated with it (a so-called third-party cookie). This allows the website to recognize that the page was opened using that browser and, in some cases, to adjust the content displayed.

You can find more information about the cookies used on our websites via the links provided on each website.

IX. Who is authorized to access the data we process about you?

The processed data may be accessed by authorized employees of Porsche Hungaria and by the staff of the data processors specified in this notice, to the extent necessary for the performance of their duties.

X. What are your rights regarding the processing of your personal data?

The data subject has the right at any time to:

a.) request information about the processing of their personal data,

b.) request the correction of their personal data,

c.) request the restriction of the processing of their personal data (withdraw their consent to certain data processing activities or change the requested method of contact),

d.) request the erasure of your personal data (withdraw your consent to data processing in its entirety),

e.) request the transfer of your personal data to another data controller (data portability).

The data subject may exercise the rights listed above by submitting a statement addressed to the contact person at Porsche Hungaria, either via email to [email protected] or by mail to the address 1139 Budapest, Fáy u. 27.

The data subject may request information from Porsche Hungaria regarding the processing of their personal data. Porsche Hungaria will respond in writing within 30 days. The information is provided free of charge if the data subject has not yet submitted a request for information regarding the same area to Porsche Hungaria in the current year. Otherwise, the information will be provided upon reimbursement of the costs incurred.

The data subject may request that Porsche Hungaria correct the data it processes, specifying the correct information. Porsche Hungaria will make the correction in its records and notify the data subject that this has been done.

The data subject may, at any time and without restriction or obligation to pay a fee, withdraw their previously given consent to data processing in writing, in whole or in part, without providing a reason. Upon receiving notification of the withdrawal of consent, Porsche Hungaria shall immediately ensure the cessation of data processing, permanently delete the personal data affected by the withdrawal from its records, instruct the data processor and any persons involved in data transfers to delete such data, and comply with its statutory record-keeping obligations. An exception to this applies to personal data which, as described above, Porsche Hungaria may process without further separate consent for the purpose of fulfilling a legal obligation applicable to it or based on a legitimate interest determined through a balancing of interests, as well as after the data subject has withdrawn their consent.

The data subject may request Porsche Hungaria, in writing or by other means, to transfer the data processed by Porsche Hungaria to a third-party data controller designated by the data subject (data portability). Porsche Hungaria shall transfer the data within 30 days of receiving the request, delete the transferred data from its records, and notify the data subject thereof.

XI. What should you do if you have a complaint?

Data subjects may file a complaint regarding data processing with Porsche Hungaria’s Data Protection Officer at any time. The contact information for the Data Controller’s Data Protection Officer is as follows: Zoltán Kovács (email address: [email protected], phone: +36 1 451 5254). The Data Protection Officer will investigate complaints received within 30 days of receipt, take appropriate action as necessary, and notify the data subject of the results of the investigation and the measures taken.

If the data subject disagrees with the results of Porsche Hungaria’s investigation or the measures taken, or otherwise believes that their rights have been infringed in connection with the processing of their personal data, they may submit a complaint to the National Authority for Data Protection and Freedom of Information (mailing address: 1363 Budapest, P.O. Box 9; address: 1055 Budapest, Falk Miksa utca 9-11; phone: +36 (1) 391-1400; fax: +36 (1) 391-1410; email: [email protected]; website: http://naih.hu) or to the competent court (including the court with jurisdiction over your place of residence).

In all cases, we recommend that you send your complaint or inquiry directly to Porsche Hungaria using one of the contact details provided above so that Porsche Hungaria can resolve any issues as quickly as possible.

March 2021

Porsche Hungaria Kereskedelmi Korlátolt Felelősségű Társaság

Version: 2021/GDPR06