______________________________________________________

Privacy Policy

of

UDEMX Szoftverfejlesztő és Tanácsadó

Korlátolt Felelősségű Társaság

______________________________________________________


  1. Preamble:

UDEMX Szoftverfejlesztő és Tanácsadó Korlátolt Felelősségű Társaság (registered seat: 6720 Szeged, Dugonics tér 11, III. floor, door 26; company registration number: Cg.06-09-022329), as the data controller (UDEMX or Data Controller), processes personal data for the purpose of operating the StafétApp application (StafétApp).

UDEMX intends to fully comply with the legal requirements for the processing of personal data, in particular with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council (the Regulation or GDPR).

This Privacy Policy has been prepared on the basis of the Regulation and in accordance with Act CXII of 2011 on the Right of Informational Self-Determination and Freedom of Information (Infotv.).

Name and contact details of the data controller, service provider:

Company name:

UDEMX Kft.

Registered seat:

Dugonics tér 11. 3/26. HU-6720 Szeged

Tax number:

14801213-2-06

Website:

https://udemx.eu/ 

Postal address:

Dugonics tér 11. 3/26. HU-6720 Szeged

E-mail:

[email protected] 

Telephone:

+36302980415 +36202890888

  1. Explanatory provisions:

  1. Principles of data management

The Data Controller declares that the personal data shall be processed in accordance with the provisions of this Privacy Policy and shall be in compliance with the GDPR, the Infotv. and any other applicable legislation, particularly to the content of this Clause:

The processing of personal data must be lawful, fair and transparent for the data subject.

Personal data shall be collected only for specified, explicit, legitimate and a priori disclosed purposes.

The purposes for which personal data are processed must be adequate, relevant and limited to what is necessary.

Personal data must be accurate and up-to-date. Inaccurate personal data must be deleted without delay.

Personal data must be stored in a form which permits identification of data subjects for no longer than is necessary. Personal data may be stored for longer periods only if the storage is for archiving purposes in the public interest, scientific and historical research purposes or statistical purposes.

Personal data must be processed in a way to ensure adequate security of personal data, including protection against unauthorised or unlawful processing, accidental loss, destruction or damage, by using appropriate technical or organisational measures.

The principles of data protection shall apply to any information relating to an identified or identifiable natural person.

  1. Important data management information

The purposes, legal basis, data subjects and duration of each processing operation carried out by UDEMX are indicated separately in the activities. The rights of data subjects are detailed below in this Clause, as they are the same for all processing activities.

The data subject may withdraw his or her consent to the processing at any time by sending an e-mail to the contact e-mail address. In the event of withdrawal of the user's consent to the processing of personal data, the Controller will no longer make StafétApp available.

The Data Controller and its employees and processors are entitled to access the data.

The user, as a data subject, may request the Controller to access, rectify, erase or restrict the processing of personal data relating to him or her and may object to the processing of such personal data and the data subject's right to data portability.

The data subject may withdraw his or her consent to the processing at any time, but this shall not affect the lawfulness of the processing carried out on the basis of the consent prior to its withdrawal.

The data subject may exercise the right to lodge a complaint with the supervisory authority.

The data subject shall have the right to obtain from the controller, upon his or her request, the erasure without undue delay of inaccurate personal data relating to him or her and the controller shall be obliged to erase without undue delay personal data relating to him or her, unless there is another legal basis for the processing.

Amendments or deletion of personal data may be initiated by e-mail, telephone or letter to the contact details given above.

It is important to emphasise that the withdrawal of the right to data processing by the data subject does not terminate the data subject's obligation to pay UDEMX. The fact of non-payment is in itself a ground for processing the data of the data subject, as it is related to his/her default of payment to UDEMX. The processing is a condition for the use of StafétApp.

  1. Account registration

A prerequisite for using StafétApp is that the data subject registers an online user account (User Account) on the UDEMX interface, which can be accessed through StafétApp as a user interface. In relation to the User Account, UDEMX carries out the following data processing activities. It is important to note that the deletion of the StafétApp does not automatically entail the deletion of the User Account, therefore the data subject shall communicate the request for deletion of the User Account separately to UDEMX at the following email: [email protected] The deletion request shall be executed by UDEMX within 5 days of its receipt. Once the request for deletion has been executed, the data of the User Account will not be accessible to the data subject but will be processed by UDEMX in accordance with this notice until the end of the 6th year following the deletion, after which they will be permanently and irreversibly deleted.

Purpose

Access to the User Account is possible via StafétApp as a user interface, so the User Profile is intended to act as an underlying backend to the services provided by UDEMX.

Controlled data

Name, e-mail, distance to be covered in the race, optionally the expected pace.

Legal ground

Pursuant to Article 6(1)(b) of GDPR, necessary for the performance of the contract with the data subject.

Scope of data subjects

All persons downloading and using StafétApp participating in the race.

Duration of the data management

Until the end of the 6th year after the end of the use of the User Profile, or until the end of the limitation period for claims and the obligation to account and keep records.

Data storage subsequently deletion

Until the end of the 6th year after the end of the use of the User Profile, or until the end of the limitation period for claims and the obligation to account and keep records.

Data controller

UDEMX

Data processor

N/A        

Data transmission

N/A

Persons entitled to access the data

The Data Controller and its contractors.

Data storage

Electronic

Profiling

Applicable

Automated decision-making

N/A

Scope of the data concerned by the management, processing and transfer in the case of Balatonman Triatlon Kft. and VProfil

In connection with VProfile, UDEMX acts as data processor with Balatonman Triathlon Kft. in relation to the user data.

  1. Use of StafétApp

Subsequently to the registration of the User Account done by the data subject, the use of StafétApp application is possible online - Apple AppStore, Google Play Store - after downloading and accepting the relevant license agreement. The StafétApp is available free of charge and in a paid version, as well.

UDEMX keeps an electronic record of the persons using the StafétApp application and the teams formed by them in order to inform each team member. For the free version of StafétApp, the position of the person who is currently completing the race distance is displayed afterwards - not in real time – to his / her team members after he / she has checked in on the stage he / she has just completed. In the paid version of StafétApp, the position of the person completing the race course is visible in "real time" to the other team members of that competitor.

With StafétApp, UDEMX aims to increase the personal safety of the competitors in a given race by offering the possibility to determine the position of the team member completing the distance with approximate accuracy, even in the free version. The paid version, by comparison, provides an accurate location of the athlete completing the distance.

In addition to the personal safety aspects, StafétApp provides team members with a faster, more accurate and more timely changeover of the team member following the competitor who has completed the distance at the transition points at each stage.

UDEMX processes the following data of the users concerned as follows:

Purpose

The aim of StafétApp is to increase the personal safety of contenders and to enable faster, more accurate and more timely planning of the changeover of the team member following the contender who has completed the distance.

Controlled data

Name, e-mail, distance to be covered in the race, optionally the expected pace.

Legal ground

Pursuant to Article 6(1)(b) of GDPR, necessary for the performance of the contract with the data subject.

Scope of data subjects

All persons downloading and using StafétApp participating in the race.

Duration of the data management

Until the end of the 6th year after the end of the use of the User Profile, or until the end of the limitation period for claims and the obligation to account and keep records.

Data storage subsequently deletion

Until the end of the 6th year after the end of the use of the User Profile, or until the end of the limitation period for claims and the obligation to account and keep records.

Data controller

UDEMX

Data processor

N/A        

Data transmission

N/A

Persons entitled to access the data

The Data Controller and its contractors.

Data storage

Electronic

Profiling

Applicable

Automated decision-making

N/A

Scope of the data concerned by the management, processing and transfer in the case of Balatonman Triatlon Kft. and VProfil

In connection with VProfile, UDEMX acts as data processor with Balatonman Triathlon Kft. in relation to the name, email of the user data.

  1. Location services

The paid version of StafétApp allows users to see their teammates' current geographical position in "real time" during the race. The positioning services described in this Clause apply only to the paid version of StafétApp.

Purpose

The aim of StafétApp's positioning service is to increase the personal safety of contenders and to provide a faster, more accurate and more timely changeover of the team member following the contender at the transition points, compared to the free version.

Controlled data

Name, e-mail, distance to be covered in the race, optionally the expected pace.

Legal ground

Pursuant to Article 6(1)(b) of GDPR, necessary for the performance of the contract with the data subject.

Scope of data subjects

All persons downloading and using the pay-version of StafétApp participating in the race.

Duration of the data management

Until the end of the 6th year after the end of the use of the User Profile, or until the end of the limitation period for claims and the obligation to account and keep records.

Data storage subsequently deletion

Until the end of the 6th year after the end of the use of the User Profile, or until the end of the limitation period for claims and the obligation to account and keep records.

Data controller

Balatonman Triatlon Kft.

Data processor

UDEMX

Data transmission

UDEMX

Persons entitled to access the data

UDEMX, Balatonman Triatlon Kft. and their contributors

Data storage

Electronic

Profiling

Applicable

Automated decision-making

N/A

Scope of the data concerned by the management, processing and transfer in the case of Balatonman Triatlon Kft. and VProfil

In connection with VProfile, UDEMX acts as data processor with Balatonman Triathlon Kft. in relation to the email, name of the user data.

  1. Contact

The following data of registered data subjects are processed by UDEMX for the purpose of contacting them:

Purpose

Contact, sending of notices in relation to the future updates of StafétApp.

Controlled data

Name, e-mail.

Legal ground

Pursuant to Article 6(1)(b) of GDPR, necessary for the performance of the contract with the data subject.

Scope of data subjects

All persons downloading and using StafétApp participating in the race.

Duration of the data management

Until the end of the 6th year after the end of the use of the User Account, or until the end of the limitation period for claims and the obligation to account and keep records.

Data storage subsequently deletion

Until the end of the 6th year after the end of the use of the User Account, or until the end of the limitation period for claims and the obligation to account and keep records.

Data controller

UDEMX

Data processor

N/A

Data transmission

N/A

Persons entitled to access the data

UDEMX and its contributors

Data storage

Electronic

Profiling

N/A

Automated decision-making

N/A

  1. Providing payment receipt

Company name:

Billingo Technologies Zártkörűen Működő Részvénytársaság

Registered seat:

Árbóc utca 6., HU-1133 Budapest

Telephone:

+36-1/500-9491

E-mail:

[email protected]

UDEMX is obliged to issue receipts to the users of the pay-version of StafétApp, on the basis of which UDEMX shall use the services of Billingo Technologies Zártkörűen Működő Részvénytársaság (registered seat: Árbóc utca 6., HU-1133 Budapest; company registration number: Cg. 01-10-140802), the company that operates the invoicing software, WISK-Kontó Kft Korlátolt Felelősségű Társaság (registered seat: Hollán Ernő utca 31. fszt. 3., HU-1136 Budapest; company registration number: Cg. 01-09-670902), the company, which provides accountancy services and Magyar Bankholding Zrt., which handles banking operations, which are considered as data controllers in their own right.

The electronic storage of the data required for the receipt is: https://www.billingo.hu/adatkezelesi-tajekoztato

UDEMX will process the following personal data of the user concerned who uses StafétApp for the purposes of receipting:

Purpose

Compliance with the accounting rules.

Controlled data

Name, amount paid.

Legal ground

Pursuant to Article 6(1)(c) of GDPR, necessary for compliance with a legal obligation to which the controller is subject.

Scope of data subjects

All persons downloading and using the pay-version of StafétApp participating in the race.

Duration of the data management

After the lapse of the 8th year as from the issuance.

Data storage subsequently deletion

Until the end of the 6th year after the end of the use of the User Account, or until the end of the limitation period for claims and the obligation to account and keep records.

Data controller

UDEMX

Data processor

Billingo Technologies Zártkörűen Működő Részvénytársaság; Magyar Bankholding Zrt.

Data transmission

Billingo Technologies Zártkörűen Működő Részvénytársaság; Magyar Bankholding Zrt.

Persons entitled to access the data

UDEMX and the data processors

Data storage

Electronic

Profiling

N/A

Automated decision-making

N/A

  1. Accountancy

Company name:

WISK-Kontó Kft

Registered seat:

Hollán Ernő utca 31. fszt. 3., HU-1136 Budapest

Telephone:

(+36 1) 316 2459

E-mail:

[email protected]

UDEMX can meet its obligation to file tax returns and pay tax on the basis of the accounting receipts paid by the data subject using the paid version of StafétApp by sending the tax returns prepared by the accounting service provider to the tax authority and meeting its tax payment obligations on the basis of the returns. Only UDEMX staff and, in accordance with their own privacy policy, the service provider's staff have access to the data, and all are responsible for the security of the data.

Purpose

Compliance with the accounting and tax obligations.

Controlled data

Name, amount paid, bank account and the bank of the data subject.

Legal ground

Pursuant to Article 6(1)(c) of GDPR, necessary for compliance with a legal obligation to which the controller is subject.

Scope of data subjects

All persons downloading and using the pay-version of StafétApp participating in the race.

Duration of the data management

After the lapse of the 8th year as from the issuance.

Data storage subsequently deletion

Until the end of the 6th year after the end of the use of the User Account, or until the end of the limitation period for claims and the obligation to account and keep records.

Data controller

UDEMX

Data processor

WISK-Kontó Kft.

Data transmission

WISK-Kontó Kft.

Persons entitled to access the data

UDEMX and the data processors

Data storage

Electronic

Profiling

N/A

Automated decision-making

N/A

  1. Audit

Name:

Krisztina Oszkó

Registered seat:

Köztársaság útja 33. 3/1, HU-2800 Tatabánya

Telephone:

-

E-mail:

-

Payment transactions made by data subjects using the paid version of StafétApp may be subject to scrutiny by the UDEMX auditor for public interest protection reasons.

Purpose

A fair presentation of the financial situation of UDEMX.

Controlled data

Name, amount paid, bank account and the bank of the data subject.

Legal ground

Pursuant to Article 6(1)(c) of GDPR, necessary for compliance with a legal obligation to which the controller is subject.

Scope of data subjects

All persons downloading and using the pay-version of StafétApp participating in the race.

Duration of the data management

After the lapse of the 8th year as from the issuance.

Data storage subsequently deletion

Until the end of the 6th year after the end of the use of the User Account, or until the end of the limitation period for claims and the obligation to account and keep records.

Data controller

UDEMX

Data processor

Krisztina Oszkó, auditor

Data transmission

to Krisztina Oszkó, auditor

Persons entitled to access the data

UDEMX and the data processors

Data storage

Electronic

Profiling

N/A

Automated decision-making

N/A

  1. Payment operations

Company name:

OTP Mobil Kft.

Registered seat:

Hungária körút 17-19., HU-1143 Budapest

Telephone:

06 1 3666 611

06 70 3666 611

06 30 3666 611

06 20 3666 611

E-mail:

[email protected]

By accepting this Policy, the User acknowledges that the following personal data stored by UDEMX as the data controller in the stafetapp.eu user database will be transferred to OTP Mobil Kft. as the data processor.

The nature and purpose of the data processing activities carried out by the data processor can be found in the SimplePay Data Processing Information Notice at the following link: http://simplepay.hu/vasarlo-aff 

Purpose

Ensuring the flow of funds affected by the Data Controller.

Controlled data

E-mail address of the data subject

Legal ground

Pursuant to Article 6(1)(c) of GDPR, necessary for compliance with a legal obligation to which the controller is subject.

Scope of data subjects

All persons downloading and using the pay-version of StafétApp participating in the race.

Duration of the data management

Until the end of UDEMX operations. The data will be deleted by the payment service provider after 10 years.

Data storage subsequently deletion

Until the end of UDEMX operations. The data will be deleted by the payment service provider after 10 years.

Data controller

UDEMX

Data processor

OTP Mobil Kft.

Data transmission

to OTP Mobil Kft.

Persons entitled to access the data

UDEMX and its contributors; the data processor and its contributors

Data storage

Electronic

Profiling

N/A

Automated decision-making

N/A

  1. Payment services

Company name:

Magyar Bankholding Zrt.

Registered seat:

Kassák Lajos utca 18., HU-1134 Budapest

Telephone:

-

E-mail:

https://www.budapestbank.hu/info/elerhetoseg/irjon-nekunk-konkret-kerdes.php 

Payment transactions made by the data subject using the pay-version of StafétApp shall be processed by the payment systems provided by the payment service provider under this point in relation to his UDEMX payment accounts. The data may only be accessed by employees of UDEMX or, in accordance with their own data management information, by employees of the payment service provider, and each of them is responsible for the secure handling of the data.

Purpose

Ensuring the flow of funds affected by the Data Controller.

Controlled data

E-mail address of the data subject

Legal ground

Pursuant to Article 6(1)(c) of GDPR, necessary for compliance with a legal obligation to which the controller is subject.

Scope of data subjects

All persons downloading and using the pay-version of StafétApp participating in the race.

Duration of the data management

Until the end of UDEMX operations. The data will be deleted by the payment service provider after 10 years.

Data storage subsequently deletion

Until the end of UDEMX operations. The data will be deleted by the payment service provider after 10 years.

Data controller

UDEMX

Data processor

Magyar Bankholding Zrt.

Data transmission

to Magyar Bankholding Zrt.

Persons entitled to access the data

UDEMX and its contributors; the data processor and its contributors

Data storage

Electronic

Profiling

N/A

Automated decision-making

N/A

  1. Receivables management

Cégnév:

Spránitz Law Firm

Székhely:

Andrássy út 7. II. em. 5., HU-1061 Budapest

Telefon:

+36 30 692 8608

E-mail:

https://www.andrassy7.hu 

Should the data subject use the pay-version of StafétApp does not pay for the services provided by UDEMX, UDEMX will seek external assistance to recover the outstanding amount. Access to the data will be limited to the staff of the Data Controller and, in accordance with their own data management information, to the staff of the service provider, and each of them will be responsible for the secure handling of the data.

Purpose

Recovery of the fee for the pay-version of StafétApp.

Controlled data

E-mail address of the data subject

Legal ground

Pursuant to Article 6(1)(b) of GDPR, necessary for the performance of the contract with the data subject.

Scope of data subjects

All persons downloading and using the pay-version of StafétApp participating in the race.

Duration of the data management

Until the end of UDEMX operations. The data will be deleted by the legal service provider after 6 years.

Data storage subsequently deletion

Until the end of UDEMX operations. The data will be deleted by the legal service provider after 6 years.

Data controller

UDEMX

Data processor

Spránitz Law Firm

Data transmission

to Spránitz Law Firm

Persons entitled to access the data

UDEMX and its contributors; the data processor and its contributors

Data storage

Electronic

Profiling

N/A

Automated decision-making

N/A

  1. Rights is relation to data processing

The right to request information

The data subject may request information from the Data Controller, through the contact details provided, about the data subject's data, the legal basis for the data processing, the purpose of the data processing, the source of the data and the duration of the processing. Upon the data subject's request, the Controller shall send information without undue delay, but within 30 days at the latest, to the e-mail address provided by the data subject. 

The right to rectification

The data subject may request the Data Controller to amend any of his or her data through the contact details provided. The Data Controller shall take action on the data subject's request without undue delay, but within 30 days at the latest, by sending information to the e-mail address provided by the data subject.

 

The right to erasure

The data subject may request the erasure of his or her data by contacting the Data Controller via the contact details provided. Upon the data subject's request, the Data Controller shall do so without undue delay, but within 30 days at the latest, and shall send information to the e-mail address provided by the data subject.

 

The right to blocking

The data subject may request the blocking of his or her data by the Data Controller through the contact details provided. The blocking shall last as long as the storage of the data is necessary for the reason indicated by the data subject. At the request of the data subject, the Controller shall do so without undue delay, but within a maximum of 30 days, and shall inform the data subject by e-mail to the e-mail address provided by the data subject.

 

The right to protest

The data subject may object to the processing of his or her personal data using the contact details provided. The Data Controller shall examine the objection within the shortest possible time from the date of the request, but not later than 15 days, and shall decide whether the objection is justified and inform the data subject of its decision by e-mail.

 

Enforcement possibilities in relation to data processing

In the event of unlawful processing by the data subject, notify the Data Controller so that the lawful situation can be rectified within a short period of time.

Should the data subject considers that the lawful situation cannot be restored, he or she should notify the authority using the following contact details:

National Authority for Data Protection and Freedom of Information

Postal address: PO Box 5., HU-1530 Budapest

Address: Szilágyi Erzsébet fasor 22/c., HU-1125 Budapest

Phone: +36 (1) 391-1400

Fax: +36 (1) 391-1410

E-mail: ugyfelszolgalat (at) naih.hu

URL https://naih.hu

coordinates: É 47°30'56''; K 18°59'57''

  1. Legal ground of data management

  1. Miscellaneous

With respect to the data transferred within the scope of this Privacy Policy, the data controllers in their own right are individually responsible for the personal data processing they carry out on behalf of UDEMX.

This privacy notice is to be valid from 31 March 2023 until withdrawal.

UDEMX reserves the right to unilaterally modify this Privacy Policy at any time, with prior notice to the data subjects. Data subjects are to be informed by means of a notice on [https://stafetapp.eu/support] at latest one calendar day prior to the modification.