Nextum Audit Zrt. (hereinafter referred to as “Nextum”) processes the personal data of those who contact the company with requests for quotes via the www.nextum.hu/ajanlatkeres interface (hereinafter referred to as the “Request for Quote Interface”), as follows: You can contact the Company as controller with your queries by sending an email to .

Data subjects

The processing of personal data relating to inquiries received through the online interface refers to the personal data of individuals who submit inquiries through the Request for Quote Interface.

Scope of personal data

Nextum processes the following personal data of the parties requesting quotes in connection with the processing of requests for quotes received via the online interface:

• full name
• contact details (email, telephone number)
• name of the company for which the quote is requested.

Source of personal data

Nextum collects the personal data subject to the data processing related to requests for quotes received through the online interface from the data subjects. Personal data are received at the email address when requests for quotes are submitted via the Request for Quote Interface. Senior executives are responsible for the primary filtering of requests for quotes (e.g. for conflict of interest), as well as the processing, and compiling into an appropriate database of personal data

Legal ground for data processing

Nextum processes data related to requests for quotes received through the online interface on the basis of the informed consent of the data subject (party requesting a quote). Such consent covers the processing of the request for quote and, as a special option, may also cover data processing related to sending subsequent specific business proposals (Article 6 (1) (a) GDPR).

In the event of a successful quoting process, the personal data previously provided will be processed by Nextum as personal data of the contact person in order to pursue its legitimate interests (conclusion and performance of the agency contract) (Article 6 (1) (f) GDPR).

Purpose of data processing

Nextum processes the above personal data for the purpose of establishing an agency relationship with a potential client represented by the party requesting a quote for audit and related services. With the explicit consent of the party requesting a quote, it may also process their personal data for the purpose of sending direct business proposals.

Duration

Nextum will process the personal data of the data subject in accordance with the legal ground and for the business purposes indicated above until the quoting process is successfully completed, i.e. until the conclusion of an agency contract between Nextum and the entity represented by the party requesting a quote (after which it will be processed as contact personal data).

If the quoting process is not successful after the request for a quote, Nextum will erase the personal data, although the corporate name will be stored in a manner not connected to personal data, for the purpose of name verification necessary in the case of a possible subsequent request for a quote.

Nextum will store the personal data of the party requesting the quote, irrespective of the outcome of the quoting process, on the basis of the explicit and specific consent of the party requesting the quote, for the purpose of direct business proposals until the explicit withdrawal of such consent.

Erasure

The data subject may request Nextum to erase the personal data previously provided by the data subject for the purpose of a request for a quote from its databases at any time without giving reasons by sending an email to or a letter by post to Nextum. Nextum will send a confirmation email immediately, or within 30 days at the latest, and will permanently erase the personal data of the data subject from its databases. Nextum will consider the message with the above subject matter as a withdrawal of the consent given during the request for a quote and, vice versa, the declaration of withdrawal of consent will be considered as a request to erase personal data.

If the quoting process is not successful after the request for a quote, Nextum will erase the personal data, although the corporate name will be stored in a manner not connected to personal data, for the purpose of name verification necessary in the case of a possible subsequent request for a quote.

Access

By sending a request to the email address , parties requesting a quote have the right to ask Nextum at any time for information on what personal data are processed, on what legal ground, and for what purpose.

Data security measures

Nextum applies the following technical and organisational measures to protect the personal data of the parties requesting quotes against unauthorised access, accidental loss, destruction or damage:

• access to the personal data of the parties requesting quotes and to the email address is confined to senior management;
• Nextum’s computers are protected by unique identifiers and passwords; Nextum applies strict and continuously monitored access restrictions to files and emails containing the data of the parties requesting quotes;
• physical servers storing files are located in secure off-site locations in Hungary;
• Nextum does not use external service providers when making quotes; therefore, the personal data of the parties requesting quotes will not be transferred to any third parties outside the organisation and can only be accessed by processors.

Data transfer(s)

Nextum does not use external service providers when making proposals; therefore, the personal data sent to the address will not be transferred and can only be accessed by processors.

Processor(s)

Websupport Magyarország Kft (1132 Budapest, Victor Hugo utca 18-22.; Company Register No.: 01-09-381419) as hosting provider, Professional IT Kft (registered office: 1107 Budapest, Baross utca 4. Building C Groundfloor; Company Register No.: 01-09-353262) as systems administrator, and Gábor Ferenczi, sole trader (2016 Leányfalu, Ravasz püspök utca 20.; Sole Trader’s Registration No.: 51043973) as partner in charge of website development and operation are considered to be processors.