This policy informs you, as a visitor to our website and user of our services, about our company's data management and data protection rules.

1. What principles do we follow during data processing?

Our company adheres to the following principles during data processing:

• We process personal data lawfully, fairly, and in a transparent manner for you.
• We collect personal data only for specified, explicit, and legitimate purposes, and we do not process them in a manner incompatible with these purposes.
• The personal data we collect and process are adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed.
• Our company takes all reasonable steps to ensure that the data we process are accurate and, where necessary, kept up to date; inaccurate personal data are erased or rectified without delay.
• We store personal data in a form that allows your identification only for the period necessary to achieve the purposes for which the personal data are processed.
• We ensure appropriate security of personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, using appropriate technical and organizational measures.

Our company processes your personal data:

• Based on your prior informed and voluntary consent, and only to the extent necessary and always for a specific purpose, i.e., we collect, record, organize, store, and use them.
• In some cases, the processing of your data is based on legal requirements and is mandatory; in such cases, we will draw your attention to this fact separately.
• In certain cases, our company or a third party has a legitimate interest in processing your personal data, for example, for the operation, development, and security of our website.

2. Who are we?

Company Name: Tomorrow Build Kft.
Registered Office: 1188 Budapest, Tiszavirág utca 47.
Website: tomorrowbuild.hu
Email Address: info@tomorrowbuild.hu
Tax Number: 27560758-2-43

Our company is not obliged to appoint a Data Protection Officer under Article 37 of the GDPR.

Our company's hosting provider:

Hosting Provider Name: Websupport Magyarország Kft.

Hosting Provider Registered Office: H-1119 Budapest, Fehérvári út 97-99.

Hosting Provider Website: www.mhosting.hu

Hosting Provider Email Address: info@mhosting.hu

hould we change the scope of our data processors, we will update this policy accordingly.

Data we process:

We only request personal data from our website visitors if they wish to register, log in, or participate in a prize game.

We cannot link the personal data provided during registration or when using our marketing services, and identifying our visitors is generally not our goal.

For questions related to data processing, you can request further information via email at info@tomorrowbuild.hu or by postal address. We will send our reply within 15 days (but no later than 1 month) to the contact details you provided.

3. What are cookies and how do we handle them?

Cookies are small data files (hereinafter: cookies) that are placed on your computer via the website when you use it, by being saved and stored by your internet browser. Most commonly used internet browsers (Chrome, Firefox, etc.) accept and allow the downloading and use of cookies by default, but it is up to you whether you reject or disable them by modifying your browser settings, or you can also delete cookies already stored on your computer. More detailed information on the use of cookies is provided in the "Help" menu of each browser.

There are certain cookies that do not require your prior consent. Our website provides brief information about these at the beginning of your first visit, such as session cookies for authentication, multimedia playback, load balancing, customizing the user interface, and user-centric security cookies.

For cookies requiring consent – if data processing begins with visiting the page – our company informs you at the start of your first visit and requests your consent.

Our company does not use or permit cookies that allow third parties to collect data without your consent.

Acceptance of cookies is not mandatory, but our company is not responsible if our website does not function as expected due to the lack of cookie enablement.

What cookies do we use?

You can read more about third-party cookies on this page. 

4. What else should you know about our data processing related to our website?

You voluntarily provide us with personal data during registration and contact with our company. Therefore, please pay close attention to the truthfulness, correctness, and accuracy of your data when disclosing them, as you are responsible for these. Incorrect, inaccurate, or incomplete data may hinder the use of our services.

If you provide personal data of another person, we assume that you have the necessary authorization to do so.

You can withdraw your consent to data processing at any time free of charge by:

• deleting your registration,
• withdrawing your consent to data processing, or
• withdrawing your consent to the processing or use of any data that is mandatory during registration, or by requesting its blocking.

We undertake to register the withdrawal of consent within a 30-day deadline for technical reasons. However, please note that for the purpose of fulfilling our legal obligations or asserting our legitimate interests, we may process certain data even after the withdrawal of consent.

In case of using misleading personal data, or if any of our visitors commits a crime or attacks our company's system, we will immediately delete their data simultaneously with the termination of the given visitor's registration, and – if necessary – retain them for the duration of the determination of civil liability or the conduct of criminal proceedings.

5. Other data processing matters

We may transfer your data only within the limits specified by law, and in the case of our data processors, we ensure through contractual terms that they cannot use your personal data for purposes contrary to your consent. Further information can be found in point 2.

Our company does not transfer data abroad.

Courts, prosecutors, and other authorities (e.g., police, tax authorities, National Authority for Data Protection and Freedom of Information) may contact our company for information, data disclosure, or document provision. In these cases, we must fulfill our data provision obligation, but only to the extent strictly necessary to achieve the purpose of the request.

Our collaborators and employees involved in our company's data processing and/or data processing are entitled to access your personal data to a predetermined extent – under the obligation of confidentiality.

We protect your personal data with appropriate technical and other measures, and we ensure the security and availability of the data, as well as protect them from unauthorized access, alteration, damage, disclosure, and any other unauthorized use.

Within the framework of organizational measures, we control physical access to our buildings, continuously train our employees, and keep paper-based documents protected and locked away. Within the framework of technical measures, we use encryption, password protection, and antivirus software. However, please note that data transfer over the internet cannot be considered a completely secure data transfer. Our company does everything possible to make the processes as secure as possible, but we cannot take full responsibility for data transfer via our website. Nevertheless, with regard to data received by our company, we adhere to strict regulations to ensure the security of your data and prevent unauthorized access.

Regarding security issues, we ask for your help in carefully safeguarding your access password to our website and not sharing this password with anyone.

6. What are your rights and remedies?

Regarding data processing, you can:

• equest information,
• request the rectification, modification, or supplementation of your personal data processed by us,
• object to data processing and request the deletion or blocking of your data (except for mandatory data processing),
• seek legal remedy before a court,
• lodge a complaint with the supervisory authority or initiate proceedings (https://www.naih.hu/panasz-vagy-kozerdeku-bejelentes-a-panasztorveny-szerint).

Supervisory Authority: National Authority for Data Protection and Freedom of Information (NAIH)

• Registered Office: 1055 Budapest, Falk Miksa utca 9-11.
  Falk Miksa utca 9-11.
• Mailing Address: 1363 Budapest, Pf.: 9.
• Phone: +36 (1) 391-1400
• Fax: +36 (1) 391-1410
• Email: ugyfelszolgalat@naih.hu

Website: https://naih.hu/

Upon your request, we will provide information about your data processed by us – or by our commissioned data processor – regarding:

• your data,
• its source,
• the purpose and legal basis of the data processing,
• its duration, and if this is not possible, the criteria for determining this duration,
• the name, address, and data processing activities of our data processors,
• the circumstances and effects of data protection incidents, and the measures taken to prevent and mitigate them, and
• the legal basis and recipient of data transfers if your personal data are transferred.

We will provide our information within 15 days (but no later than 1 month) from the submission of the request. The information is free of charge unless you have already submitted an information request concerning the same data category in the current year. We will refund the fee you have already paid if we have processed the data unlawfully or if the information request led to rectification. We can only refuse to provide information in cases specified by law, by indicating the legal provision, and by informing you about the possibility of judicial remedy or turning to the Authority.

Our company will notify you, and all those to whom the data was previously forwarded for data processing purposes, about the rectification, blocking, marking, and deletion of personal data, unless the omission of the notification does not harm your legitimate interests.

If we do not fulfill your request for rectification, blocking, or deletion, we will inform you in writing or – with your consent – electronically within 15 days (but no later than 1 month) of receiving the request, stating the reasons for our refusal and informing you about the possibility of judicial remedy and turning to the Authority.

If you object to the processing of your personal data, we will examine the objection within 15 days (but no later than 1 month) from the submission of the request and inform you in writing of our decision. If we have decided that your objection is justified, we will terminate the data processing – including further data collection and data transfer – and block the data. We will also notify all those to whom the personal data affected by the objection was previously transferred, and who are obliged to take measures to enforce the right to object, about the objection and the measures taken based on it.

We will refuse to fulfill the request if we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims. If you do not agree with our decision, or if we fail to meet the deadline, you can turn to a court within 30 days of the communication of the decision or the last day of the deadline.

Data protection lawsuits fall under the jurisdiction of the regional court, and the lawsuit can be initiated before the regional court corresponding to the data subject's place of residence or habitual abode, at their choice. A foreign citizen may also lodge a complaint with the supervisory authority competent for their place of residence.

We kindly ask you to contact our company before turning to the supervisory authority or a court with your complaint – for consultation and a quicker resolution of the problem.

7. What are the main applicable laws governing our activities?

• Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data (GDPR)
• Act CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information (Info TV.)
• Act V of 2013 on the Civil Code (Ptk.)
• Act CVIII of 2001 on certain issues of electronic commerce services and information society services (Eker TV.)
• Act C of 2003 on electronic communications (Ehtv.)
• Act CLV of 1997 on consumer protection (Fogyv TV.)
• Act CLXV of 2013 on complaints and public interest disclosures (Pktv.)
• Act XLVIII of 2008 on the basic conditions and certain limitations of economic advertising activities (Grtv.)

8. Modification of the Privacy Policy

Our company reserves the right to modify this Privacy Policy, and will inform data subjects appropriately about any changes. Information regarding data processing will be published on the website: https://www.tomorrowbuild.hu/en/privacy-policy for further details.