Data privacy notice

July 2021

We (meaning the specific company identified as being the operator of the website that directed you to this Privacy Notice) believe that protecting the security and privacy of your personal data is important. This Privacy Notice explains how we collect, store, use, disclose and transfer (hereinafter “process”) your personal data. The personal data that we collect about you depends on the context of your interactions with us, the products. services and features that you use, your location, and applicable law.

1. Processing of personal data related to your use of our websites, applications and online services

Categories of personal data processed, purpose of the processing

When visiting our websites or using our applications, or online services (each an “Online Offering”), we process information which you have actively and voluntarily provided about yourself, or which has been generated by us in connection with your use of the Online Offerings, and includes the following categories of personal data:

· Your contact information, including name, e-mail address, telephone number;

· Further personal data that you provide by filling in forms in our Online Offerings;

· Information submitted as part of a support request, survey or comment or forum post; and

· Information on your interaction with the Online Offering, including your device and user identifier, information on your operating system, sites and services accessed during your visit, the date and time of each visitor request.

We process your personal data for the following purposes:

· To provide the Online Offering’s services and functions which includes creating and administering your online account, updating, securing, and troubleshooting, providing support, as well as improving and developing our Online Offerings;

· To bill your use of the Online Offering;

· To verify your identity;

· To answer and fulfill your requests or instructions;

· To process your order or to provide you with access to specific information or offers;

· To contact you with information and offers concerning our products and services, to send you further marketing information or to contact you in the context of customer satisfaction surveys as explained in Section 3; and

· As reasonably necessary to enforce the Online Offering’s terms, to establish or preserve a legal claim or defense, to prevent fraud or other illegal activities, including attacks on our information technology systems.

Cookies

Our Online Offerings may use cookies, i.e., small files containing certain information that are stored on your device. If used by us without your consent, these cookies are strictly necessary to provide certain functionalities of an Online Offering to you or to provide you with a service that you requested via the Online Offering. Other cookies (e.g., cookies for marketing purposes) will only be used if you have given your consent.

Online Offerings provided by your organization

Our Online Offerings may be provided to you for your use by the organization to which you belong, such as our enterprise customers. If your organization provides you with access to an Online Offering, our processing of personal data provided by or collected from you or your organization in connection with the Online Offering’s content is performed under the direction of your organization and is subject to a data processing agreement between your organization and us. In such instance, your organization is responsible for any personal data contained in such content and you should direct any questions about how personal data contained in such content is used to your organization.

Links to other websites

This Privacy Notice applies only to Online Offerings that link to this Privacy Notice and not to other websites or applications of our affiliates that have their own Privacy Notice or which are operated by third parties. This Privacy Notice also does not apply in situations where we only process information on behalf of our Business Partners, e.g., when we act as a web hosting or cloud provider. We may provide links to other websites and applications which we believe may be of interest to you. We are not responsible for the privacy practices of such other websites or applications.

2. Processing of Personal data related to your business relationship with us

Categories of personal data processed and purpose of the processing

In the context of the business relationship with us, we may process the following categories of personal data of consumers and contact persons at (prospective) customers, suppliers, vendors and partners (each a “Business Partner”):

· Contact information, such as full name, job position, work address, work telephone number, work mobile phone number, work fax number and work email address;

· Payment data, such as data necessary for processing payments and fraud prevention, including credit/debit card numbers, security code numbers and other related billing information;

· Further information necessarily processed in a project or contractual relationship with us or voluntarily provided by the Business Partner, such as personal data relating to orders placed, payments made, requests, and project milestones;

· Personal data collected from publicly available resources (including business and employment oriented social networks and websites), integrity data bases and credit agencies; and

· If legally required for Business Partner compliance screenings: date of birth, ID numbers, identity cards and information about relevant and significant litigation or other legal proceedings against Business Partners.

We may process the personal data for the following purposes:

· Communicating with Business Partners about our products, services and projects, e.g. by responding to inquiries or requests or providing you with information about purchased products;

· Planning, performing and managing the (contractual) relationship with Business Partners; e.g. by performing transactions and orders of products or services, processing payments, performing accounting, auditing, billing and collection activities, arranging shipments and deliveries, facilitating repairs and providing support services;

· Administrating and performing market analysis, sweepstakes, contests, or other customer activities or events;

· Contacting you with information and offers concerning our products and services, sending you further marketing messages and conducting customer satisfaction surveys as explained in Section 3;

· Maintaining and protecting the security of our products, services and websites, preventing and detecting security threats, fraud or other criminal or malicious activities;

· Ensuring compliance with legal obligations (such as record keeping obligations), export control and customs, Business Partner compliance screening obligations (to prevent white-collar or money laundering crimes), and our policies or industry standards; and

· Solving disputes, enforce our contractual agreements and to establish, exercise or defend legal claims.

3. Processing of personal data for customer satisfaction surveys and for direct marketing

Where and as permitted under applicable law, we may process your contact information for direct marketing purposes (e.g. trade show invitations, newsletters with further information and offers concerning our products and services) and to carry out customer satisfactions surveys, in each case also by e-mail. You may object to the processing of your contact data for these purposes at any time by writing to _sales_HU@evosoft.com or by using the opt-out mechanism provided in the respective communication you received.

4. Transfer and disclosure of personal data

We may transfer your personal data to:

· other affiliated companies or third parties - e.g. sales partners or suppliers - in connection with your use of the Online Offerings or our business relationship with you;

· third parties which provide IT services to us and which process such data only for the purpose of such services (e.g., hosting or IT maintenance and support services); and

· third parties in connection with complying with legal obligations or establishing, exercising or defending rights or claims (e.g., for court and arbitration proceedings, to regulators, law enforcement and government authorities, to attorneys and consultants).

The recipients of your personal data may be located outside of the country in which you reside. Personal data published by you on Online Offerings (such as chat rooms or forums) may be globally accessible to other registered user of the respective Online Offering.

5. Retention Periods

Unless indicated otherwise at the time of the collection of your personal data (e.g. within a form completed by you), we erase your personal data if the retention of that personal data is no longer necessary for the purposes for which they were collected or otherwise processed, or to comply with legal obligations (such as retention obligations under tax or commercial laws).

6. Your rights

The data protection laws in the jurisdiction in which you reside may entitle you to specific rights in relation to your personal data.

In particular, and subject to the legal requirements, you may be entitled to

· Obtain from us confirmation as to whether or not personal data concerning you are being processed, and where that is the case, access to the personal data;

· Obtain from us the correction of inaccurate personal data concerning you;

· Obtain from us the erasure of your personal data;

· Obtain from us restriction of processing regarding your personal data;

· Data portability concerning personal data, which you actively provided; and;

· Object, on grounds relating to your particular situation, to further processing of personal data concerning you.

7. Security

To protect your personal data against accidental or unlawful destruction, loss, use, or alteration and against unauthorized disclosure or access, we use adequate physical, technical and organizational security measures.

8. Data Privacy Contact

Our Data Privacy Organization provides support with any data privacy related questions, comments, concerns or complaints or in case you wish to exercise any of your data privacy related rights. The Data Privacy Organization may be contacted at adatvedelem_hu@evosoft.com.

The Data Privacy Organization will always use reasonable efforts to address and settle any requests or complaints you bring to its attention. Besides contacting the Data Privacy Organization, you always have the right to approach the competent data protection authority with your request or complaint.

9. Processing under the EU’s General Data Protection Regulation: controller, legal basis for the processing and international transfers

This section applies and provides you with further information if your personal data is processed by one of our companies located in the European Economic Area.

Data Controller

The specific company identified on this page as being the operator of this website is the data controller in the meaning of the General Data Protection Regulation for the processing activities described in this Privacy Notice.

In the course of our business relationship with you, we may share Business Partner contact information with affiliated Siemens companies. We and these Siemens companies are jointly responsible for the proper protection of your personal data (Art. 26 General Data Protection Regulation). To allow you to effectively exercise your data subject rights in the context of this joint controllership, we entered into an agreement with these Siemens companies granting you the right to centrally exercise your data subject rights under section 6 of this Privacy Notice against Siemens Aktiengesellschaft, Germany.

To exercise your rights, you may reach out to: adatvedelem_hu@evosoft.com

Legal basis of the processing

The General Data Protection Regulation requires us to provide you with information on the legal basis of the processing of your personal data.

The legal basis for our processing data about you is that such processing is necessary for the purposes of

· exercising our rights and performing our obligations under any contract we make with you (Article 6 (1) (b) General Data Protection Regulation) (“Contract Performance”);

· Compliance with our legal obligations (Article 6 (1) (c) General Data Protection Regulation) (“Compliance with Legal Obligations”); and/or

· Legitimate interests pursued by us (Article 6 (1) (f) General Data Protection Regulation) (“Legitimate Interest”). Generally, the legitimate interest pursued by us in relation to our use of your personal data is the efficient performance or management of (i) your use of the Online Offerings, and/or (ii) our business relationship with you. Where the below table states that we rely on our legitimate interest for a given purpose, we are of the opinion that our legitimate interest is not overridden by your interests and rights or freedoms, given (i) the regular reviews and related documentation of the processing activities described herein, (ii) the protection of your personal data by our data privacy processes, including our Binding Corporate Rules on the Protection of Personal Data, (iii) the transparency we provide on the processing activity, and (iv) the rights you have in relation to the processing activity. If you wish to obtain further information on this balancing test approach, please contact our Data Privacy Organization at: adatvedelem_hu@evosoft.com.

In some cases, we may ask if you consent to the relevant use of your personal data. In such cases, the legal basis for us processing that data about you may (in addition or instead) be that you have consented (Article 6 (1) (a) General Data Protection Regulation) (“Consent”).

Processing of personal data in the context of Online Offerings - Purpose and Legal Basis

To provide the Online Offering’s services and functions which includes creating and administering your online account, updating, securing, and troubleshooting, providing support, as well as improving and developing our Online Offerings

· Contract Performance (Article 6 (1) (b) General Data Protection Regulation)