PRIVACY POLICY

 …in which we inform you, as a visitor to our website and a user of our services, about the data management and data protection rules of our company.

1. What principles do we follow during our data processing? Our Company follows the following principles during its data processing:

• We process personal data lawfully, fairly, and in a transparent manner for you.

• We collect personal data only for specified, explicit, and legitimate purposes and do not process them in a manner that is incompatible with those purposes.

• The personal data we collect and process are adequate, relevant, and limited to what is necessary in relation to the purposes of the data processing.

• Our Company takes every reasonable step to ensure that the data we process is accurate and, where necessary, kept up to date; we erase or rectify inaccurate personal data without delay.

• We store personal data in a form which permits your identification for no longer than is necessary to achieve the purposes of the processing of personal data.

• By applying appropriate technical and organizational measures, we ensure the appropriate security of personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage.

Our Company processes your personal data:

• Based on your prior informed and voluntary consent, and only to the necessary extent and in all cases bound to a specific purpose, i.e., we collect, record, organize, store, and use it.

• In some cases, the processing of your data is based on legal regulations and is mandatory; in such cases, we will specifically draw your attention to this fact.

• In certain cases, our Company or a third party has a legitimate interest in the processing of your personal data, such as the operation, development, and security of our website.

2. Who are we? Company name: Hypermore Co., Ltd. Registered office: 98/109 Moo 6, Kathu, Kathu District, Phuket 83120, Thailand Website: https://lasercleanglobal.com Postal address: 98/109 Moo 6, Kathu, Kathu District, Phuket 83120, Thailand E-mail address: info@lasercleanglobal.hu Tax number: 0835569001371 Company registration number: 0835569001371

Based on Article 37 of the GDPR, our Company is not obliged to appoint a data protection officer.

Our Company’s hosting provider:

• Hosting provider’s name: Rackhost Zrt.

• Hosting provider’s registered office: 6722 Szeged, Tisza Lajos körút 41.

• Hosting provider’s website: www.rackhost.hu

• Hosting provider’s email address: info@rackhost.hu

During data processing, in order to provide high-quality service to our clients, our Company utilizes the following data processors:

• Data processor (1): Dr. Juhász András Dániel

• Address (1): 98/109 Moo 6, Kathu, Kathu District, Phuket 83120, Thailand

• Areas of responsibility (1): All activities

Should we modify the scope of our data processors, we will reflect the changes in this notice.

The data we process: We only ask for personal data from the visitors of our website if they wish to register, log in, or participate in a prize game. We cannot connect the personal data provided in connection with registration or the use of our marketing services, and fundamentally, identifying our visitors is not our goal. If you have questions regarding data processing, you can request further information via the info@lasercleanglobal.hu e-mail address or by postal mail; we will send our reply to the contact details you provided within 15 days (but no later than 1 month).

3. What are cookies and how do we handle them? Cookies are small data files (hereinafter: cookies) that are placed on your computer through the use of the website, saved and stored by your internet browser. Most commonly used internet browsers (Chrome, Firefox, etc.) accept and enable the download and use of cookies by default, but it is up to you to refuse or disable them by modifying your browser settings, and you can also delete the cookies already stored on your computer. More information on the use of cookies can be found in the „help” menu of each browser.

There are cookies that do not require your prior consent. Our website provides a brief notice about these when you begin your first visit; these include, for example, authentication cookies, multimedia player cookies, load balancing cookies, session cookies helping to customize the user interface, and user-centric security cookies. For cookies requiring consent—provided the data processing begins by merely visiting the site—our Company informs you and requests your consent at the start of your first visit. Our Company does not use or permit cookies that allow third parties to collect data without your consent. Accepting cookies is not mandatory, however, our Company assumes no responsibility if, in the absence of enabling cookies, our website does not function as expected.

What cookies do we use?

• Name: _ga

  • Provider: lasercleanglobal.com

  • Purpose: Registers a unique ID that generates statistical data on how the visitor uses the website.

  • Expiration: 2 years

  • Type: HTTP

• Name: _gat

  • Provider: lasercleanglobal.com

  • Purpose: Stores the throttle request rate used by Google Analytics.

  • Expiration: Session

  • Type: HTTP

• Name: _gid

  • Provider: lasercleanglobal.com

  • Purpose: Registers a unique ID that generates statistical data on how the visitor uses the website.

  • Expiration: Session

  • Type: HTTP

• Name: _fbp

  • Provider: lasercleanglobal.com

  • Purpose: Used by Facebook to deliver a series of advertisement products for a third party (e.g., real-time advertisements).

  • Expiration: 3 months

  • Type: HTTP

• Name: fr

  • Provider: facebook.com

  • Purpose: Through this cookie, Facebook offers a series of advertising products (e.g., real-time bidding from third-party advertisers).

  • Expiration: 3 months

  • Type: HTTP

You can read more details about third-party cookies on this page.

4. What else do you need to know about our website’s data processing? You provide your personal data to us voluntarily during registration and when communicating with our Company, therefore we ask that when providing your data, you pay careful attention to their truthfulness, correctness, and accuracy, as you are responsible for them. Incorrect, inaccurate, or incomplete data may be an obstacle to using our services. If you do not provide your own personal data, but that of another person, we presume that you have the necessary authorization to do so. You may withdraw your consent to data processing free of charge at any time by:

• canceling your registration,

• withdrawing your consent to data processing, or

• withdrawing or requesting the blocking of consent for the processing or use of any data that must necessarily be filled out during registration.

We undertake the registration of the withdrawal of consent with a 30-day deadline for technical reasons, however, please note that we may continue to process certain data after the withdrawal of consent in order to fulfill our legal obligations or to enforce our legitimate interests. In the event of using deceptive personal data, or if any of our visitors commits a crime or attacks our Company’s system, we will immediately delete their data simultaneously with the termination of that visitor’s registration, and—if necessary—we will retain them for the duration of establishing civil liability or conducting criminal proceedings.

5. What should you know about our data processing for direct marketing and newsletter purposes? By making a statement during registration, or later modifying your personal data stored on the newsletter and/or direct marketing registration interface (i.e., by clearly expressing your intention to consent), you can give your consent to the use of your personal data for marketing purposes. In this case—until the withdrawal of consent—we will also process your data for the purpose of sending direct marketing and/or newsletters, and we will send you advertising and other mailings, as well as information and offers, and/or forward newsletters to you (Section 6 of the Grtv.). You may give your consent to direct marketing and newsletters together or separately, and you may withdraw it/them free of charge and at any time. Cancellation of registration is in all cases considered a withdrawal of consent. We do not interpret the withdrawal of consent to data processing for direct marketing and/or newsletter purposes simultaneously as the withdrawal of consent to data processing regarding our website. We undertake the registration of the withdrawal or cancellation of individual consents with a 15-day deadline for technical reasons.

6. What should you know about prize games? Our Company may organize prize games on a campaign basis, the specific conditions of which are contained in a separate regulation. The regulation for the current promotion can always be found on the opening page of our website, via a centrally located link.

7. Other data processing questions We may only transfer your data within the framework defined by law, and in the case of our data processors, we ensure by stipulating contractual conditions that they cannot use your personal data for purposes contrary to your consent. Further information is found in Section 2. Our Company does not transfer data abroad. The court, the prosecutor’s office, and other authorities (e.g., police, tax office, National Authority for Data Protection and Freedom of Information) may contact our Company to provide information, disclose data, or make documents available. In these cases, we must fulfill our data provision obligation, but only to the extent strictly necessary to achieve the purpose of the request. Contributors and employees participating in our Company’s data processing and/or data handling are entitled to know your personal data to a predetermined extent, subject to an obligation of confidentiality. We protect your personal data with appropriate technical and other measures, ensure the security and availability of the data, and protect them from unauthorized access, alteration, damage, disclosure, and any other unauthorized use. Within the framework of organizational measures, we control physical access in our buildings, continuously train our employees, and keep paper-based documents securely locked away. Within the framework of technical measures, we use encryption, password protection, and anti-virus software. However, please note that data transmission over the internet cannot be considered completely secure. Our Company does everything possible to make the processes as secure as possible, but we cannot assume full responsibility for data transmission via our website; however, regarding the data received by our Company, we observe strict regulations to ensure the security of your data and prevent unlawful access. Regarding security issues, we ask for your help in carefully keeping your access password for our website safe and not sharing this password with anyone.

8. What are your rights and legal remedies? Regarding data processing, you may:

• request information,

• request the rectification, modification, or completion of your personal data managed by us,

• object to the data processing and request the deletion and blocking of your data (except for mandatory data processing),

• seek judicial remedy in court,

• file a complaint or initiate proceedings with the supervisory authority.

Supervisory Authority: National Authority for Data Protection and Freedom of Information (NAIH)

• Headquarters: 1055 Budapest, Falk Miksa utca 9-11.

• Mailing address: 1363 Budapest, Pf.: 9.

• Phone: +36 (1) 391-1400

• Fax: +36 (1) 391-1410

• E-mail: ugyfelszolgalat@naih.hu

• Website: https://naih.hu/

At your request, we provide information about your data processed by us, or processed by us or our mandated data processor:

• about the data itself,

• their source,

• the purpose and legal basis of data processing,

• its duration, or if this is not possible, the criteria used to determine that duration,

• the names, addresses, and data processing-related activities of our data processors,

• the circumstances, effects, and measures taken to avert and prevent data breaches, and

• in the event of the transfer of your personal data, the legal basis and recipient of the data transfer.

We will provide our information within 15 days (but no later than 1 month) from the submission of the request. The information is free of charge, except if you have already submitted an information request to us regarding the same scope of data in the current year. We will refund the cost reimbursement already paid by you in the event that the data was processed unlawfully or the request for information led to a rectification. We may only refuse information in cases provided for by law, by indicating the legal provision and providing information on the possibility of judicial remedy or turning to the Authority. Our Company shall notify you, and all those to whom the data was previously transmitted for data processing purposes, of the rectification, blocking, marking, and deletion of personal data, except if the failure to notify does not infringe upon your legitimate interests. If we do not fulfill your request for rectification, blocking, or deletion, within 15 days (but no later than 1 month) following the receipt of the request, we will communicate the reasons for our refusal in writing or—with your consent—electronically, and inform you of the possibility of judicial remedy and turning to the Authority. If you object to the processing of your personal data, we will examine the objection within 15 days (but no later than 1 month) from the submission of the request, and we will inform you of our decision in writing. If we have decided that your objection is well-founded, we will terminate the data processing—including further data collection and data transmission—and block the data, as well as notify all those to whom the personal data affected by the objection was previously transmitted of the objection and the measures taken based on it, and who are obliged to take action to enforce the right of objection. We will refuse to fulfill the request if we prove that the data processing is justified by compelling legitimate grounds that override your interests, rights, and freedoms, or which are related to the establishment, exercise, or defense of legal claims. If you disagree with our decision, or if we miss the deadline, you may turn to the court within 30 days from the communication of the decision or the last day of the deadline. Adjudication of data protection lawsuits falls within the jurisdiction of the regional court (törvényszék); at the choice of the data subject, the lawsuit may also be brought before the regional court of the data subject’s permanent or habitual residence. A foreign citizen may also file a complaint with the competent supervisory authority according to their place of residence. We ask you to please contact our Company before turning to the supervisory authority or the court with your complaint, in order to consult and resolve the arisen problem as quickly as possible.

9. What are the main governing laws for our activities?

• Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data (GDPR)

• Act CXII of 2011 on the Right of Informational Self-Determination and on Freedom of Information (Info Act)

• Act V of 2013 on the Civil Code (Civil Code)

• Act CVIII of 2001 on certain issues of electronic commerce services and information society services (E-commerce Act)

• Act C of 2003 on Electronic Communications (Ehtv.)

• Act CLV of 1997 on Consumer Protection (Consumer Protection Act)

• Act CLXV of 2013 on Complaints and Public Interest Disclosures (Complaints Act)

• Act XLVIII of 2008 on the Basic Requirements and Certain Restrictions of Commercial Advertising Activities (Grtv.)

10. Modification of the Privacy Policy Our Company reserves the right to modify this Privacy Policy, about which it will adequately inform the concerned parties. Information regarding data processing is published on the lasercleanglobal.com website.