Protection of Personal Data

In case you visit the webpage https://budget.hu/en and use its functions or contact Otokoc Hungary Autókölcsönző és Szolgáltató Korlátolt Felelősségű Társaság („Otokoc” or „Controller”) it is necessary for Otokoc to process your personal data.

In this Privacy Policy you will find information about what are your right in relation with our data processing activities, why, on what legal basis and for how long we process your personal data, to whom we transfer your personal data.

The controller, contact details and data transfer outside the EU The controller who processes your personal data is: Otokoc Hungary Autókölcsönző és Szolgáltató Korlátolt Felelősségű Társaság Address: 1134 Budapest, Kassák Lajos utca 19-25. Contact person in relation with data protection: Kolozsi Viktor Email: cs@budget.hu

We inform you that the webpage is maintained by our Mother Company Otokoc Otomotiv Ticaret Ve Sanayi Anonim Sirketi having its registered seat in Turkey. The appropriate safeguard of the data transfer to Otokoc Otomotiv Ticaret Ve Sanayi Anonim Sirketi is that in the joint controllers’ agreement concluded with our mother company we use GDPR clauses adopted by the Commission. The essence of the joint controllers’ agreement concluded with our mother company is that you are being informed by the Controller about the data processing and primarily you can enforce your data protection related rights towards our Company.

We inform you that in certain cases in relation with the provision of our services your personal data may be accessible by and transferred to recipients outside the territory of the European Union, especially to the members of our company group and the Budget Group. We only transfer your personal data outside the European Union if (a) the recipient is located in a country, regarding which the Commission has decided that he ensures an adequate level of protection; or (b) the recipient located in the Unites States registered himself under the EU-US Privacy Shield; or (c) we concluded a contract with the recipient which contains the standard data protection clauses adopted by the Commission.

WHAT ARE YOUR RIGHTS IN RELATION WITH OUR DATA PROCESSING ACTIVITIES?

• Access
  You have the right to obtain confirmation from us as to whether or not your personal data is being processed. You can request information about the purposes of processing, what personal data is processed, who can receive your personal data and how long we store it.
• RectificationIn case your personal data is incorrect or incomplete, you can request us to correct your inaccurate personal data and to complete your incomplete personal data.
• Restriction
  You may request the restriction of processing of your personal data if you have contested the accuracy of such data, for a period which is necessary for us to verify the accuracy of the data, the processing has been unlawful, but you do not want your data to be erased, we no longer need the data, but it is necessary for you for the establishment, exercise or defence of legal claims, you have objected to the processing, for the period of the verification whether our legitimate interest overrides your interests.
• Withdrawal of consent
  In case the legal basis of the processing was your consent, your have the right to withdraw your consent at any time. Please note that the withdrawal of your consent does not affect the lawfulness of processing before the withdrawal.
• Objection
  You can any time object to the processing of your personal data if the legal basis of the processing was the legitimate interest of the Company. You can find information about it in the “What is the legal basis for processing?” section of this notice.
• Erasure
  You can request us to delete your personal data if the processing of your data is no longer necessary for the purposes for which we have collected or processed your data, you have withdrawn your consent and there is no other legal basis for the processing, you object to the processing, and there is no overriding legitimate grounds for the processing, we have unlawfully processed your personal data.
• Data portability
  In case the legal basis of the processing is your consent or the contract concluded by you, you have the right to receive your personal data that you provided to us in a structured, commonly used and machine-readable format, or to transmit those to another controller or request us to directly transfer the data to another controller.
• Complaint
  In case you experience any problems in relation with our data processing practices, you have the right to lodge a complaint with the National Data Protection and Information Freedom Authority (1125 Budapest, Szilágyi Erzsébet fasor 22/C.; https://naih.hu/). Further you are entitled to bring an action before the competent court.

CONTACTING

• Why do we process your data?
  We process your personal data for the purpose of keeping contact, if you contact us on the webpage or request an offer through the webpage.
• What is the legal basis of processing?
  We process your contact data based on your consent
• Are you obliged to provide your data?
  You are not obliged to provide your data. In case you do not provide your data, we cannot keep contact with you.
• Which categories of data do we process?
  Your name, e-mail address, the content of your message.
• How long do we store your data?
  We store the data provided in relation with requesting offer until 6 months as of the contacting
• To whom do we transfer your data?
  We may transfer your personal data in relation with the above purpose to the below persons:
  o the company who operates our CRM system as data processor,
  o our mother company being a joint controller who operates our ERP system

BOOKING

• Why do we process your data?
  We process your personal data for the purpose to provide you with an offer for car rental, to record your data in our ERP system, to keep contact with you
• What is the legal basis of processing?
  We process your data since it is necessary for the performance of a contract concluded with your or to take steps prior entering into the contract
• Are you obliged to provide your data?
  The provision of the data is the condition of the conclusion of the car rental contract and the use of the car. In case you do not provide your data, you will not be able to use the car.
• Which categories of data do we process?
  Your name, address, phone number, e-mail address, flight number, bank card data, pick up and return date of the car
• How long do we store your data?
  We store the data provided until 2 years as of the booking, in case the car rental contract is concluded until 5 years as of the termination of the contract or if it is longer for the retention period provided by the relevant bookkeeping / tax laws.
• To whom do we transfer your data?
  We may transfer your personal data in relation with the above purpose to the below persons:
  o our mother company being a joint controller who operates our ERP system

OTHER, COOKIES

• What other data do we process on the webpage?
  During the operation of the webpage, we collect further data from you which are not necessarily suitable for your identification (eg. IP address, the time of visit, the type of the operation system of your computer etc.) We use webanalytics services on our webpage (Google Analytics)
• Use of cookies
  We place on your device a small piece of data called cookie and retrieves it during a later visit. Cookies are various information packages sent by the browser which is placed on the device of the user and is stored for a defined period of time. The usage of cookies provides the possibility to retrieve certain data of the user and track his Internet usage. With the help of cookies, the preferences, internet usage customs and webpage visit history of the user may be identified.
• Why do we use cookies?
  Some of the cookies we use is necessary for the operation of our webpage, eg. identifies the user’s browser session, prevents CSRF attacks. Further we use cookies for statistical and marketing purposes. For the usage of some of the cookies your consent is required which you can give when you start to use the functions of our webpage. You can delete the cookies in your browser under Settings/ Privacy and security.
• How long do we store the data?
  The cookies having a definite storage period (persistent cookies) are stored until deletion but at latest until their validity period.
• Identification of the cookies we use

  NAME	VALIDITY	TYPE
  _RequestVerificationToken	Session	Necessary for the operation of the webpage
  ASP.NET_SessionID	Session	Necessary for the operation of the webpage
  _ga	2 years	Statistical
  _gat	1 day	Statistical
  _gid	1 day	Statistical
  collect	Session	Statistical
  _fbp	1 day	Marketing
  fr	3 months	Marketing
  NID	6 months	Marketing
  tr	Session	Marketing