Dare Studio.

1. General

In connection with the data management of Dare Studio Betéti Társaság (hereinafter: Data Controller) concerning personal data, Act CXII of 2011 on the right to information self-determination and freedom of information Act and Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 (=GDPR), we provide the following detailed information:

The Data Controller manages the processing of personal data for the purpose and in the manner detailed in each section, in full compliance with the requirements of the legislation in force at any given time, in accordance with the Data Controller's objectives, operational, regulatory and technological measures to ensure and enforce these rights.

2. Name and contact details of the Data Controller

Company Name: Dare Studio Betéti Társaság
Registered Office Address: 1063 Budapest, Szinyei Merse u. 10. as. 2.
Company Registration Number: 01-06-794168
Tax number: 26625407-1-42
Representative: István Zámbó, Managing Director
Privacy Officer: István Zámbó, Managing Director
Email cím: hello@dare.hu

3. Definitions

Personal Data: any information relating to an identified or identifiable natural person ("Data Subject"); identifies a natural person who, directly or indirectly, in particular by reference to an identifier such as name, number, location, online identifier or one or more factors relating to the physical, physiological, genetic, mental, economic, cultural or social identity of the natural person identifiable.

Data Management: any operation or set of operations on personal data or data files, whether automated or non-automated, such as collecting, recording, organizing, segmenting, storing, transforming or altering, querying, viewing, using, communicating, transmitting, distributing or otherwise making available harmonization or interconnection, restriction, deletion or destruction.

Data Controller: a natural or legal person, public authority, agency or any other body which alone or jointly with others determines the purposes and means of the processing of personal data; where the purposes and means of the processing are defined by EU or Member State law, the controller or the specific criteria for the designation of the controller may also be determined by EU or Member State law.

Data Processor: a natural or legal person, public authority, agency or any other body which processes personal data on behalf of the controller.

Data Subject 's Consent: a voluntary, specific and well-informed and clear statement of the data subject's intention to indicate his or her consent to the processing of personal data concerning him or her by means of a statement or an act which unequivocally expresses the confirmation.

Data Subject: a natural person identified or identifiable on the basis of any information.

Third Party: a natural or legal person, public authority, agency or any other body other than the data subject, the controller, the processor or persons who have been authorized to process personal data under the direct control of the data controller or data processor.

Recipient: the natural or legal person, public authority, agency or any other body to whom or with which the personal data are disclosed, whether a third party or not. Public authorities that may have access to personal data in the context of an individual investigation in accordance with EU or Member State law shall not be considered as recipients; the processing of such data by those public authorities must comply with the applicable data protection rules in accordance with the purposes of the processing.

‍

4. The purpose of data management and the scope of personal data processed

4.1. Personal information related to contact

‍
Scope of personal data managed:
Personal data provided on the www.dare.hu website, provided at any of the contact details of Dare Studio Bt., In particular:
- Name
- Mailing Address
- E-mail Address
- Phone Number
In addition, any personal data provided by the data subject during the contact.
Purpose of data management:
General contact so that the data subject can request specific information or action from the Data Controller.
Legal basis for data management:
Voluntary consent of the data subject by contact. (See paragraph 5.a)
Duration of data management:
Until the date of withdrawal of the data management consent.

4.2. Management of applications and CVs sent to the Data Controller

‍
Scope of personal data managed:
Personal data provided on the www.dare.hu website, provided at any of the contact details of Dare Studio Bt., In particular:
- Name
- Place and Time of Birth
- Mailing and Living Address
- E-mail Address
- Phone Number
- Educational attainment
In addition, any personal data provided by the data subject during the contact.
Purpose of data management:
General contact so that the data subject can request specific information or action from the Data Controller.
Legal basis for data management:
Voluntary consent of the data subject by contact. (See paragraph 5.a)

Duration of data management:
- In the case of CVs, applications, portfolios and motivation letters received for the job advertised by the Data Controller until the date of filling the position.
- In the case of CVs, applications, portfolios and motivation letters voluntarily submitted by the Data Subject for work not advertised by the Data Controller, the Data Controller declares to the Data Subject whether he / she consents to the data processing by the Data Controller. In this case, the Data Controller shall keep the documents containing the personal data received by him / her for 1 year or until the date of revocation of the data management consent.

‍

4.3. Newsletters

‍

‍Scope of personal data managed:
Personal data provided on the www.dare.hu website when subscribing to our newsletter, including but not limited to:

• Name
• E-mail Address
• Phone Number
• Company Name

Purpose of data management:
The data collected is used for the purpose of sending newsletters, updates, and promotional offers, including the delivery of our comprehensive Investment Guide in PDF format upon subscription. This ensures that the data subject receives relevant content and valuable insights from Data Controller.

Legal basis for data management:
The legal basis for processing the personal data of the data subject is their voluntary consent provided at the time of subscribing to the newsletter. (See paragraph 5.a)

Duration of data management:
Personal data will be managed until the data subject withdraws their consent to the newsletter subscription, either by unsubscribing via the provided link in each newsletter or by contacting Data Controller directly to request removal.

5. Legal basis for data management

‍a. The data subject has consented to the processing of his or her personal data for one or more specific purposes.
b. Data processing is necessary for the performance of a contract in which the data subject is one of the parties or to take steps at the request of the data subject prior to the conclusion of the contract.
c. Data processing is necessary to fulfill the legal obligation of the data controller.
d. The processing is necessary to protect the vital interests of the data subject or of another natural person.
e. The processing is necessary to safeguard the legitimate interests of the controller or of a third party, unless those interests take precedence over the interests or fundamental rights and freedoms of the data subject which require the protection of personal data, in particular if the child concerned.

6. Rights of the Data Subject

The Data Subject may exercise, inter alia, the rights described below in relation to the personal data managed by the Data Controller.

a. Transparent information

The Data Controller shall provide information on its data management activities to the data subject in a concise, transparent, comprehensible and easily accessible form, clearly and comprehensibly worded, at the request of the data subject.

The Data Controller shall provide the requested information in writing as soon as possible after the submission of the data subject's request, and no later than within 30 days from the receipt of the request.

b. Right of access

The data subject shall have the right to receive feedback from the controller as to whether the processing of his or her personal data is in progress and, if such processing is in progress, the right to have access to the personal data and the following information:

- what personal data,
- what legal basis,
- for what data processing purpose,
- how long
it handles and provide information on the recipients to whom the personal data have been or will be communicated.

c. Right to rectification

The data subject shall have the right, at his request, to have inaccurate personal data concerning him rectified without undue delay. Taking into account the purpose of the data processing, the data subject has the right to request that the incomplete personal data be supplemented, inter alia, by means of a supplementary statement.

d. Right of cancellation

The data subject shall have the right, at the request of the controller, to delete personal data concerning him or her without undue delay, and the controller shall delete personal data concerning him or her without undue delay if one of the following reasons exists:
- personal data are no longer required for the purpose for which they were collected or otherwise processed;
- the data subject withdraws his or her consent on which the processing is based and there is no other legal basis for the processing;
- the data subject objects to the processing and there is no overriding legitimate reason for the processing;
- personal data have been processed unlawfully;
- personal data must be deleted in order to comply with a legal obligation imposed on the controller by applicable EU or Member State law.

e. Right to restrict data processing

The data subject shall have the right, at the request of the controller, to restrict the processing if one of the following is met:
- the data subject disputes the accuracy of the personal data, in which case the restriction applies to the period of time that allows the controller to verify the accuracy of the personal data;
- the processing is unlawful and the data subject opposes the deletion of the data and instead requests that their use be restricted;
- the controller no longer needs the personal data for the purpose of data processing, but the data subject requests them in order to make, enforce or protect legal claims.

f. The right to data portability

The data subject shall have the right to receive personal data concerning him or her made available to a controller in a structured, widely used machine-readable format and to transfer such data to another controller without being hindered by the controller whose provided the personal data to him.

g. Right to protest

The data subject has the right to object to the processing of his / her personal data at any time for reasons related to his / her situation, if in his / her opinion the data controller would not properly process his / her personal data in connection with the purpose stated in this data management information. In that case, the controller may not further process the personal data unless the controller demonstrates that the processing is justified by compelling legitimate reasons which take precedence over the interests, rights and freedoms of the data subject or which are necessary to bring, assert or defend legal claims are related.

7. Data Protection

In order to preserve the confidentiality of personal data stored in electronic form at the Data Controller, we protect the data against unauthorized access, accidental destruction, damage or modification by taking the necessary precautions (password protected, backing up, etc.). We do not pass on personal data to third parties, except in the mandatory cases required by law. Data stored on paper is stored in a way that prevents unauthorized access and ensures the preservation of documents.

8. Cookie Policy

What are cookies? This Cookie Policy explains what cookies are and how we use them, the types of cookies we use i.e, the information we collect using cookies and how that information is used, and how to manage the cookie settings.

Cookies are small text files that are used to store small pieces of information. They are stored on your device when the website is loaded on your browser. These cookies help us make the website function properly, make it more secure, provide better user experience, and understand how the website performs and to analyze what works and where it needs improvement.

How do we use cookies? As most of the online services, our website uses first-party and third-party cookies for several purposes. First-party cookies are mostly necessary for the website to function the right way, and they do not collect any of your personally identifiable data.

The third-party cookies used on our website are mainly for understanding how the website performs, how you interact with our website, keeping our services secure, providing advertisements that are relevant to you, and all in all providing you with a better and improved user experience and help speed up your future interactions with our website.

You can change your cookie preferences any time by clicking the link below. This will let you revisit the cookie consent banner and change your preferences or withdraw your consent right away.

In addition to this, different browsers provide different methods to block and delete cookies used by websites. You can change the settings of your browser to block/delete the cookies. Listed below are the links to the support documents on how to manage and delete cookies from the major web browsers.

Chrome: https://support.google.com/accounts/answer/32050

Safari: https://support.apple.com/en-in/guide/safari/sfri11471/mac

Firefox: https://support.mozilla.org/en-US/kb/clear-cookies-and-site-data-firefox?redirectslug=delete-cookies-remove-info-websites-stored&redirectlocale=en-US

Internet Explorer: https://support.microsoft.com/en-us/topic/how-to-delete-cookie-files-in-internet-explorer-bca9446f-d873-78de-77ba-d42645fa52fc

Microsoft Edge: https://support.microsoft.com/en-us/windows/manage-cookies-in-microsoft-edge-view-allow-block-delete-and-use-168dab11-0753-043d-7c16-ede5947fc64d

If you are using any other web browser, please visit your browser’s official support documents.

‍9. Enforcement

In the event of unlawful data processing, the data subject may initiate legal proceedings against the Data Controller. The trial of the lawsuit falls within the jurisdiction of the Metropolitan Court. The lawsuit may, at your option, be brought before the court of your place of residence. You can file a complaint or complaint with the National Authority for Data Protection and Freedom of Information (www.naih.hu, 1055 Budapest, Falk Miksa utca 9-11, phone: + 36-1-391-1400, e-mail: ugyfelszolgalat@naih.hu), indicating that the processing of personal data has been infringed or is in imminent danger.

10. Final Provisions

a. In case of a request from an authority or another organization based on a legal obligation, the Data Controller may be obliged to provide data or may be obliged to do so. In such cases, the Data Controller shall endeavor to release only as much and such personal data as is absolutely necessary for the obligation to release the data.

b. With regard to issues not regulated in this prospectus, the data processing is indicated by the CXII of 2011 on the right to information self-determination and freedom of information Act and the Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016.

c. Dare Studio Bt. reserves the right to amend the data management information. Amendments to the prospectus will be published on our website, and any amendments will only be effective after publication.

This privacy statement is effective January 01, 2023.

January 01, 2023. Budapest