Protection of Personal Data

In case you visit the website www.budget.hu and use its functions or contact Otokoc Hungary Autókölcsönző és Szolgáltató Korlátolt Felelősségű Társaság („Otokoc” or „Controller”) it is necessary for Otokoc to process your personal data.

In this Privacy Policy you will find information about

• what are your right in relation with our data processing activities,
• why, on what legal basis and for how long we process your personal data,
• to whom we transfer your personal data.

1. The controller, contact details and data transfer outside the EU

The controller who processes your personal data is:

Otokoc Hungary Autókölcsönző és Szolgáltató Korlátolt Felelősségű Társaság
address: 1134 Budapest, Kassák Lajos utca 19-25.
Contact in relation with data protection:
cs@budget.hu

We inform you that the internal IT-system of our Company and our website is maintained by our Mother Company Otokoc Otomotiv Ticaret Ve Sanayi Anonim Sirketi having its registered seat in Turkey (Aydınevler Mah. Respect Cad. No: 60 Küçükyalı, Maltepe/İstanbul; website: otokocotomotiv.com.tr). The appropriate safeguard of the data transfer to Otokoc Otomotiv Ticaret Ve Sanayi Anonim Sirketi is that in the joint controllers’ agreement concluded with our mother company we use standard data protection clauses adopted by the European Commission based on Commission Implementing Decision (EU) 2021/914 of 4 June 2021 on standard contractual clauses for the transfer of personal data to third countries pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council and Article 29(7) of Regulation (EU) 2018/1725 of the European Parliament and of the Council. In addition to this the Turkish data protection law (Law No 6698 On The Protection Of Personal Data) ensures protection of personal data. The essence of the joint controllers’ agreement concluded with our mother company is that you are being informed by the Controller about the data processing and primarily you can enforce your data protection related rights towards our Company.

Accordingly we inform you that in this case your personal data may be accessible by and transferred to our Mother Company Otokoc Otomotiv Ticaret Ve Sanayi Anonim Sirketi as recipients outside the territory of the European Union.
 

2. Purpose and legal ground of data processing

Purpose of data processing: keeping contact, if you contact us on the webpage or request an offer through the webpage or via electronic communication; processing your data to the extent as necessary for the performance of a contract concluded with your or to take steps prior entering into the contract; for your notification about current information, products, news about us, as well as sending informative articles and materials, provided that your rights set forth under the applicable legislation shall remain reserved.

Legal ground: Article 6 (1) a) and b), Article 28, Article 46 (1) and (2) c) of GDPR (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016); Section 5 (1) b), Section 10.(1) a) of (Hungarian) Act CXII of 2011 on the Right of Informational Self-Determination and on Freedom of Information (Hungarian Privacy Act).
 

3. Your rights in relation with our data processing activities

3.1. Access: You have the right to obtain confirmation from us as to whether or not your personal data is being processed. You can request information about the purposes of processing, what personal data is processed, who can receive your personal data and how long we store it.

3.2. Rectification: In case your personal data is incorrect or incomplete, you can request us to correct your inaccurate personal data and to complete your incomplete personal data.

3.3. Restriction: You may request the restriction of processing of your personal data if

• you have contested the accuracy of such data, for a period which is necessary for us to verify the accuracy of the data,
• the processing has been unlawful, but you do not want your data to be erased,
• we no longer need the data, but it is necessary for you for the establishment, exercise or defense of legal claims,
• you have objected to the processing, for the period of the verification whether our legitimate interest overrides your interests.

3.4. Withdrawal of consent: In case the legal basis of the processing was your consent, you have the right to withdraw your consent at any time. Please note that the withdrawal of your consent does not affect the lawfulness of processing before the withdrawal.

3.5. Objection: You can any time object to the processing of your personal data if the legal basis of the processing was the legitimate interest of the Company. You can find information about it in section 2. of this notice.

3.6. Erasure: You can request us to delete your personal data if

• the processing of your data is no longer necessary for the purposes for which we have collected or processed your data,
• you have withdrawn your consent and there is no other legal basis for the processing,
• you object to the processing, and there is no overriding legitimate grounds for the processing,
• we have unlawfully processed your personal data.

3.7. Data portability: In case the legal basis of the processing is your consent or the contract concluded by you, you have the right to receive your personal data that you provided to us in a structured, commonly used and machine-readable format, or to transmit those to another controller or request us to directly transfer the data to another controller.

3.8. Right to compensation: You may request compensation for the damage arising from the unlawful processing of your personal data

3.9. Complaint: In case you experience any problems in relation with our data processing practices, you have the right to lodge a complaint with the National Authority for Data Protection and Freedom of Information (1055 Budapest, Falk Miksa utca 9-11. Hungary; https://naih.hu/). Further you are entitled to bring an action before the competent court.

4. Contacting

• Why do we process your data?
  We process your personal data for the purpose of keeping contact, if you contact us on the webpage or request an offer through the webpage or via electronic communication or if you contact our employees or consultants in this matter
• What is the legal basis of processing?
  We process your contact data based on your consent
• Are you obliged to provide your data?
  You are not obliged to provide your data. In case you do not provide your data, we cannot keep contact with you.
• Which categories of data do we process?
  Your name / company name, tax number, name of representative, e-mail address, phone number, the content of your message
• How long do we store your data?
  We store the data provided in relation with requesting offer until 6 months as of the contacting
• To whom do we transfer your data?
  We may transfer your personal data in relation with the above purpose to the below persons: the company who operates our CRM system as data processor, our mother company being a joint controller who operates our ERP system

5. Booking and vehicle lease contracts

• Why do we process your data?
  We process your personal data for the purpose to provide you with an offer for car rental, to record your data in our ERP system, to keep contact with you
• What is the legal basis of processing?
  We process your data since it is necessary for the performance of a contract concluded with your or to take steps prior entering into the contract
• Are you obliged to provide your data?
  The provision of the data is the condition of the conclusion of the car rental contract and the use of the car. In case you do not provide your data, you will not be able to use the car.
• Which categories of data do we process?
  Your name / company name, tax number, name of representative, e-mail address, phone number, your payment data, your data recorded in the vehicle lease contract
• How long do we store your data?
  We store the data provided until 2 years as of the booking, in case the car rental contract is concluded until 5 years as of the termination of the contract or if it is longer for the retention period provided by the relevant bookkeeping / tax laws.
• To whom do we transfer your data?
  We may transfer your personal data in relation with the above purpose to the below persons: our mother company being a joint controller who operates our ERP system

6. Newsletters and advertising materials

• Why do we process your data?
  For your notification about current information, products, news about us, as well as sending informative articles and materials.
• What is the legal basis of processing?
  We process your contact data based on your consent.
• Are you obliged to provide your data?
  Your name / company name, tax number,name of representative, e-mail address, phone number, your payment data, your data recorded in the vehicle lease contract
• Which categories of data do we process?
  Your name / company name, tax number, name of representative, e-mail address, phone number, your payment data, your data recorded in the vehicle lease contract
• How long do we store your data?
  We will send our newsletters and promotional material to you as long as you have the need for it. If you do not want to receive any more newsletters (ads), you can unsubscribe at any time and, if you change your mind, you can subscribe again at any time. When unsubscribing, we shall not send any more emails to you and shall erase your personal data. Please note that the withdrawal of your consent does not affect the lawfulness of processing before the withdrawal.
• How can you unsubscribe from our newsletters
  - by clicking on the link located at the bottom of our newsletter email; - by sending an email to customer.service@budget.hu requesting to be unsubscribed; or - by sending a letter to Otokoc Hungary Kft. H-1134 Budapest, Kassák Lajos utca 19-25. requesting to be unsubscribed.
• To whom do we transfer your data?
  We may transfer your personal data in relation with the above purpose to the below persons: our mother company being a joint controller who operates our ERP system

  7. Other, cookies

• What other data do we process on the webpage?
  During the operation of the webpage, we collect further data from you which are not necessarily suitable for your identification (eg. IP address, the time of visit, the type of the operation system of your computer etc.) We use webanalytics services on out webpage (Google Analytics)
• Use of cookies
  We place on your device a small piece of data called cookie and retrieves it during a later visit. Cookies are various information packages sent by the browser which is placed on the device of the user and is stored for a defined period of time. The usage of cookies provides the possibility to retrieve certain data of the user and track his Internet usage. With the help of cookies, the preferences, internet usage customs and webpage visit history of the user may be identified.
• Why do we use cookies?
  Some of the cookies we use is necessary for the operation of our webpage, eg. identifies the user’s browser session, prevents CSRF attacks. Further we use cookies for statistical and marketing purposes. For the usage of some of the cookies your consent is required which you can give when you start to use the functions of our webpage. You can delete the cookies in your browser under Settings/ Privacy and security.
• How long do we store the data?
  The cookies having a definite storage period (persistent cookies) are stored until deletion but at latest until their validity period.
• Identification of the cookies we use

  Name	Validity	Type
  _RequestVerificationToken	session	Necessary for the operation of the webpage
  ASP.NET_SessionID	session	Necessary for the operation of the webpage
  _ga	2 years	Statistical
  _gat	1 day	Statistical
  _gid	1 day	Statistical
  collect	session	Statistical
  _fbp	1 day	Marketing
  fr	3 months	Marketing
  NID	6 months	Marketing
  tr	session	Marketing