Virtual Gozsdu Hotlap Verseny

Controller (the Organiser)

Gozsdu Club Korlátolt Felelősségű Társaság (Gozsdu Club Kft.)

Registered office and postal address

1072 Budapest, Dob utca 16. IV. ép. I. em. 4. ajtó

Company registration number

01-09-300131 (Court of Registration of the Budapest-Capital Regional Court)

Tax number

25986417-2-42

E-mail

info@virtualgozsdu.hu

Phone

+36 70 425 9770

Competition venue

Virtual Gozsdu simulator and VR arena, 1075 Budapest, Madách tér 13. (Gozsdu Udvar)

Website

virtualgozsdu.hu

Data protection officer

None designated (see section 1)

Effective

From 1 October 2026; extended to the Rally Alsace competition from 16 October 2026

1. Scope of this Privacy Notice

In this Privacy Notice, Gozsdu Club Kft. (the Organiser), as controller, explains how it processes the personal data of those taking part (participants) in the ‘Virtual Gozsdu Hotlap Competition’ (the competition), held at the Virtual Gozsdu venue between 1 and 15 October 2026 (the Monza competition) and between 16 October and 15 November 2026 (the Rally Alsace competition) — this notice applies to each competition separately, and deadlines run from the close of the competition concerned: what data it records, what it uses the data for, who has access to it, how long it keeps it and what rights participants have. This Privacy Notice also covers anyone who submits comments, questions or data protection requests in connection with the competition, as well as the legal representatives of participants under 18 (see section 16).

This Privacy Notice is the ‘Virtual Gozsdu Hotlap Competition – Privacy Notice’ referred to in section 12 of the Competition Rules, and it has been prepared on the basis of Article 13 GDPR. The Competition Rules are available at virtualgozsdu.hu/hotlap/szabalyzat. This Privacy Notice applies only to processing connected with the competition; it does not apply to processing connected with the use of other Virtual Gozsdu services (such as using the simulators) or with general visits to the website.

Legislation referred to:

GDPR

Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation)

Infotv.

Act CXII of 2011 on Informational Self-Determination and Freedom of Information

Ptk.

Act V of 2013 on the Civil Code

Sztv.

Act C of 2000 on Accounting

The Organiser has not designated a data protection officer, as it is not among the controllers required to designate one under Article 37(1) GDPR. In data protection matters, the Organiser can be contacted using the contact details above.

2. Where does the data come from?

Entries are accepted only in person, at the venue: there is no option to enter online, and no paper entry form is completed. The participant gives their details orally at the desk to a member of the Organiser’s staff, who records them in the Organiser’s own electronic register – on the password-protected, non-public administration interface of the virtualgozsdu.hu website, over an encrypted (HTTPS) connection.

The lap time is measured by the game running on the designated simulator, and the lap data is recorded by a member of the Organiser’s staff. To verify a lap, the staff member checks the game’s display, results log and in-game data on site (Competition Rules, section 6); the Organiser does not keep screenshots or results logs in a form that can be linked to a participant. If a participant makes another attempt later, the staff member looks them up in the register by their driver name and makes sure that it is the same person (for example, by checking that the e-mail address given earlier matches).

The Organiser does not collect data about participants from any other source.

3. What data does the Organiser process?

For each participant, the Organiser records only the following data in its register:

• Driver name (nickname) – mandatory: chosen by the participant, and this is what appears on the public leaderboard. It must be unique within the competition; the system ignores differences in upper and lower case, accents, spaces and punctuation, so, for example, ‘Rally Ace’ and ‘rallyace’ count as the same name.
• Full name – mandatory: needed to identify the participant (including on repeat attempts), to check for conflicts of interest under section 4 of the Competition Rules (the Organiser, those involved in running the competition and their close relatives may not compete for the prize) and, if the participant wins, to hand over the prize.
• E-mail address – mandatory: the Organiser uses it to notify the winner. As a general rule, an e-mail address belongs to one participant, but a shared (for example, family) e-mail address may be given for more than one participant; in that case, messages sent to the address may also be seen by its other users.
• Phone number – optional: an additional means of contact in case the participant wins (see section 8). The Organiser does not ask participants under 18 for it (see section 16).
• Internal note – if the Organiser records one: a short note, for example about the participant’s result. It may not contain information about age or a legal representative’s consent, or about health or any other special category of personal data. It is visible only to users with full (owner) or hotlap manager permissions.
• The time the entry was recorded and the staff member who recorded it.

For each attempt (lap by lap), the Organiser records the following (together, the lap data):

• The lap time, to the thousandth of a second.
• The date and time the lap was completed; where lap times are equal, the participant who set the time earlier is ranked higher (Competition Rules, section 8).
• Whether the lap is valid and, if it has been invalidated, the reason (for example, cutting the track).
• The staff member who recorded or modified the lap, and the time of recording and of modification.

The Organiser does not record in its register the participant’s age, date of birth or home address, nor whether the participant is under 18 or whether their legal representative has consented to their participation. It does not ask for consent for marketing purposes, does not process special categories of personal data (Article 9 GDPR), and no photographs or video recordings are added to the register.

The Organiser uses the data only for the purposes set out in sections 5–10 and 16 – not for marketing, for sending newsletters or for any other purpose – and does not send automated e-mails to participants.

4. What is publicly visible?

The live leaderboard is available at virtualgozsdu.hu/hotlap/ranglista and updates automatically. It shows only the position, the driver name, the best valid lap time and the gap to the leader; the public data feed that serves the leaderboard also contains only this data. The Organiser may also show the leaderboard in full-screen view on a display at the venue.

The driver name and lap time of the participant in the lead are shown on the virtualgozsdu.hu home page during the competition, and on the Hotlap page (virtualgozsdu.hu/hotlap) during and after the competition; the Hotlap page also shows the number of participants.

The participant’s full name, e-mail address and phone number are not public, and neither is the time at which they completed their laps. The Organiser does not publish any participant’s full name, portrait, photograph or video recording anywhere – not even the winner’s.

After the competition closes, the leaderboard and the Hotlap page show the final results, again with driver names only. Once the next competition starts, the leaderboard, the display at the venue, the home page and the Hotlap page show the new competition; the final results of the closed competition – with the same data – remain available at virtualgozsdu.hu/hotlap/eredmenyek. Twelve months after the close of the competition, the results are removed from the public pages as well and are kept only in the internal register (see section 9).

The public data can be viewed by anyone and may also be recorded by third parties (for example, internet search engines) beyond the Organiser’s control.

5. Entry and running of the competition

Purpose

Recording the entry; identifying the participant, including on repeat attempts; checking the conditions of participation; recording, verifying and invalidating laps; determining the ranking and the winner (Competition Rules, sections 4–8)

Data processed

Driver name, full name, e-mail address, internal note, the time the entry was recorded and the staff member who recorded it, lap data (see section 3)

Legal basis

Performance of a contract, Article 6(1)(b) GDPR: by entering, the participant – or, for a participant under 14, their legal representative on their behalf – accepts the Competition Rules, and the processing is necessary for the performance of the legal relationship thus created

Duration

The Organiser deletes the full name, e-mail address and internal note no later than the 60th day after the close of the competition (14 December 2026 for the Monza competition, 14 January 2027 for the Rally Alsace competition), except for the data of the winner and of any participants who may take the winner’s place (see section 7); sections 6 and 9 apply to the other data

6. Public leaderboard and final results

The data shown publicly is described in section 4.

Purpose

Continuous public reporting of the standings and publication of the final results, which also makes it possible to submit comments on the results (Competition Rules, sections 8 and 11)

Data processed

Position, driver name, best valid lap time, gap to the leader; on the home page and the Hotlap page, the driver name and lap time of the participant in the lead

Legal basis

Performance of a contract, Article 6(1)(b) GDPR

Duration

During the competition and until the final results are published, then until the deadline for comments (3 working days) has passed or until any comments received have been decided on

After the comment period, the final results remain public as follows:

Purpose

Continued public display of the final results

Data processed

Position, driver name, best valid lap time, gap to the leader; on the Results page (virtualgozsdu.hu/hotlap/eredmenyek), the driver names and lap times of the top three

Legal basis

The Organiser’s legitimate interest, Article 6(1)(f) GDPR

Legitimate interest

Transparency and subsequent public verifiability of the results of a performance-based competition and of the selection of the winner

Duration

For 12 months after the close of the competition (until 15 October 2027 for the Monza competition, until 15 November 2027 for the Rally Alsace competition)

This continued display affects the participant’s interests only slightly, as only the driver name they chose and the result they achieved are visible. The participant may object to it (see section 17); in that case, the Organiser replaces their driver name with a neutral designation.

7. Notifying the winner and handing over the prize

The Organiser notifies the winner by e-mail or – if the participant has provided a phone number – by phone within 3 working days of the final results being determined. If the winner does not respond, or does not provide the details required for collecting the prize, within 10 calendar days of the notification, the Organiser may declare the participant who set the next best valid lap time the winner and notify them in the same way; if necessary, this may be repeated several times (Competition Rules, section 10).

Purpose

Notifying the winner (or, where necessary, the participant taking the winner’s place), receiving their response, arranging collection and handing over the prize

Data processed

Driver name, full name, e-mail address, phone number (if provided by the participant), position and lap time, the agreed time of collection, correspondence with participants notified as winners

Legal basis

Performance of a contract, Article 6(1)(b) GDPR (Competition Rules, section 10); for the phone number, the participant’s consent (see section 8)

Duration

Until the prize is handed over or the handover definitively fails; the Organiser then deletes the full name, contact details, internal note and correspondence, unless they are needed because of a pending comment or legal dispute – in which case, until it is closed

When handing over the prize, the Organiser may verify the winner’s identity by asking them to present an identity document; it does not make a copy of the document or record its details.

The Organiser may prepare an acknowledgement of receipt for the handover of the prize (Competition Rules, section 10). If one is prepared, the Organiser processes its data as follows:

Purpose

Proving the handover of the prize and supporting the accounting records

Data processed

The winner’s full name, the name of the prize, the time of the handover, the winner’s signature

Legal basis

If the document is an accounting document: compliance with a legal obligation, Article 6(1)(c) GDPR and Section 169(2) of the Sztv.; otherwise, the Organiser’s legitimate interest, Article 6(1)(f) GDPR

Legitimate interest

Proving that the Organiser handed over the prize in accordance with the Competition Rules

Duration

If it is an accounting document, 8 years (Section 169(2) of the Sztv.); otherwise, 5 years from the handover, the general limitation period for civil-law claims (Section 6:22(1) of the Ptk.)

8. Phone number (provided voluntarily)

Purpose

An additional means of contact regarding the prize: reaching the winner more quickly and arranging collection

Data processed

Phone number

Legal basis

The participant’s consent, Article 6(1)(a) GDPR; the participant gives consent by voluntarily providing the phone number

Duration

Until consent is withdrawn, but no later than the 60th day after the close of the competition (14 December 2026 for the Monza competition, 14 January 2027 for the Rally Alsace competition); for the winner and any participants who may take the winner’s place, no later than the handover of the prize or the definitive failure of the handover

Providing a phone number is not a condition of participation; without it, the Organiser notifies the winner by e-mail. The Organiser does not ask participants under 18 for a phone number (see section 16). Consent may be withdrawn at any time, without giving reasons, by e-mail, by post or in person at the venue; in that case, the Organiser deletes the phone number without delay and from then on keeps in contact with the participant by e-mail. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal (Article 7(3) GDPR), nor does it affect participation in the competition.

At entry, the phone number is typed in by a staff member authorised to record lap times; however, once it has been recorded, such staff members can no longer see it, and it is accessible only to users with full (owner) or hotlap manager permissions.

9. Keeping the results after the competition

Once the full name, e-mail address, phone number and internal note have been deleted, only the driver name, the time the entry was recorded and who recorded it, and the lap data remain in the internal register as the results of the competition; no full name or contact details are linked to them any longer.

Purpose

Documenting the results of the competition; the establishment, exercise or defence of legal claims relating to the competition and the award of the prize

Data processed

Driver name, the time the entry was recorded and the staff member who recorded it, lap data (see section 3)

Legal basis

The Organiser’s legitimate interest, Article 6(1)(f) GDPR

Legitimate interest

Being able to prove, in any dispute concerning the results or the prize, that the ranking and the winner were determined in accordance with the Competition Rules

Duration

5 years from the close of the competition, the general limitation period for civil-law claims (Section 6:22(1) of the Ptk.); after that, the Organiser deletes the data

The participant may also object to this processing (see section 17). In that case, the Organiser replaces their driver name with a neutral designation, so that the result is kept without the driver name, full name or contact details; from then on, it keeps the lap data solely for the establishment, exercise or defence of legal claims relating to the results (Article 21(1) GDPR).

10. Comments, questions and data protection requests

Purpose

Investigating and answering comments on the results (Competition Rules, section 8), questions about the competition and requests under section 17

Data processed

The sender’s name, driver name (if given), contact details (e-mail address, or postal address in the case of a letter), and the content of the submission and of the reply

Legal basis

Comments and questions from participants, and questions from people intending to enter: performance of a contract or, prior to entering into a contract, taking steps at the request of the data subject, Article 6(1)(b) GDPR; questions from other persons: the Organiser’s legitimate interest, Article 6(1)(f) GDPR; fulfilling data protection requests: compliance with a legal obligation, Article 6(1)(c) GDPR (Articles 12–22 GDPR); keeping data protection requests and the replies: the Organiser’s legitimate interest, Article 6(1)(f) GDPR

Legitimate interest

Answering enquiries relating to the competition; proving that the Organiser dealt with data protection requests properly

Duration

Correspondence concerning comments and questions: no later than the 60th day after the close of the competition (14 December 2026 for the Monza competition, 14 January 2027 for the Rally Alsace competition), or, in matters still pending at that time or opened later, until the matter is closed; data protection requests and the replies to them: 5 years from the reply (Section 6:22(1) of the Ptk.)

11. Is providing the data mandatory?

No law requires the data to be provided. Providing the driver name, full name and e-mail address is a condition of entry, that is, of the legal relationship under the Competition Rules coming into existence: without them, the entry cannot be recorded, the participant cannot be identified and, if they win, cannot be notified, so it is not possible to take part in the competition without providing them. Providing a phone number is voluntary; not providing one does not affect participation or the chances of winning. Recording the lap data is an inherent part of taking part in the competition.

12. Who has access to the data?

Only persons authorised by the Organiser have access to the data, using a personal, password-protected user account with permissions tailored to their tasks:

• Staff authorised to record lap times (hotlap recorder permission; for example, desk staff) can add participants, record lap times, and invalidate or reinstate a lap, stating the reason. When a new participant enters, they type in the details given by the participant, including the e-mail address and phone number. Once these have been recorded, they can see the driver name, the full name, the time of entry and the lap data, and the e-mail address only partially masked (for example, ko•••@gmail.com), but not the phone number or the internal note. They cannot correct, delete or export participants’ data or lap times.
• Users with full (owner) permissions and staff with hotlap manager permissions can see all the data and can correct and delete it; they may save the leaderboard, together with the contact details, to a file (CSV) in order to contact the winner, and they carry out the deletion of personal data (see section 13). The same deletion deadlines apply to the downloaded file as to the register.

The website, the database and the virtualgozsdu.hu mail server (info@virtualgozsdu.hu, sending and receiving e-mails) run on a virtual server provided by Rackhost Zrt., so participants’ data is also stored on this server. By providing the server, Rackhost Zrt. acts as a processor and may not use the stored data for its own purposes. The system administrator who operates the server and the software may access the stored data to the extent necessary for maintenance, troubleshooting and backups; they may process the data only in accordance with the Organiser’s instructions and may not use it for their own purposes.

Processor

Rackhost Zrt. (hosting and server provider in Hungary)

Address

6722 Szeged, Tisza Lajos körút 41.

Contact

info@rackhost.hu · www.rackhost.hu

Activity

Providing the virtual server that runs the website, the database and the mail server

Participants’ data is not disclosed to any external e-mail, customer management or analytics service, and the Organiser does not transfer the data listed in section 3 to any country outside the European Economic Area or to any international organisation. If the acknowledgement of receipt is an accounting document, it may also be seen by the person or organisation that keeps the Organiser’s accounts (see section 7). At the request of a court, an authority or another body entitled to make such a request by law, the Organiser may – on the basis of its legal obligation – disclose the data necessary to comply with the request. The public data listed in section 4 can be seen by anyone.

13. Retention periods and deletion

Summary of retention periods (details are set out in sections 5–10 and 16):

Name and contact details

Full name, e-mail address, phone number and internal note: until the 60th day after the close of the competition (14 December 2026 for the Monza competition, 14 January 2027 for the Rally Alsace competition) at the latest

The winner’s data

The above data of the winner and of any participants who may take the winner’s place, and correspondence with them: until the prize is handed over or the handover definitively fails

Phone number

Until consent is withdrawn, but no later than the deadlines above

Public results

For 12 months after the close of the competition, on the Results page (until 15 October 2027 for the Monza competition, until 15 November 2027 for the Rally Alsace competition)

Internal results

Driver name, the time the entry was recorded and who recorded it, lap data: 5 years from the close of the competition

Acknowledgement of receipt

8 years if it is an accounting document, otherwise 5 years from the handover

Correspondence

Comments and questions: no later than the 60th day after the close of the competition (14 December 2026 for the Monza competition, 14 January 2027 for the Rally Alsace competition), or, in matters still pending at that time or opened later, until the matter is closed

Data protection requests

The request and the reply: 5 years from the reply

Backups

Deleted data may remain in the server’s backups until the backups are replaced, and is removed from them within 30 days of deletion at the latest

The 60-day deadline covers the determination of the final results, the comment period, the notification of the winner and the 10-calendar-day response period, including, where necessary, the notification of participants taking the winner’s place.

The Organiser carries out the deletion using the register’s ‘Delete personal data’ function, which permanently deletes the full name, e-mail address, phone number and internal note of every participant in the competition. The data of the winner and of any participants who may take the winner’s place may be exempted until the prize is handed over; after the handover, the Organiser deletes their data too. The driver name and the lap data are kept as the results of the competition (see section 9).

Until the final results have been determined, a participant may ask the Organiser to delete them from the register together with all their laps; this amounts to withdrawing from the competition. After the final results have been determined, the Organiser fulfils a request for erasure by deleting the participant’s remaining full name, contact details and any internal note relating to them, and replacing their driver name with a neutral designation; the lap data is kept under this designation as part of the final results.

14. Data security

In accordance with Article 32 GDPR, the Organiser protects the security of the data by technical and organisational measures proportionate to the risks, in particular:

• The website and the register are accessible only over an encrypted (HTTPS) connection.
• The register can be accessed only with a personal, password-protected user account, and after repeated failed login attempts the system temporarily blocks further attempts.
• Permissions are tied to roles: once data has been recorded, staff authorised to record lap times can see only the data they need for their tasks (see section 12).
• The system logs which staff member added or modified a lap, and when.
• The database cannot be accessed directly from the internet.
• Only the data listed in section 4 is included on the public leaderboard and in the data feed that serves it.
• No paper register of entries is kept.

In the event of a personal data breach, the Organiser acts in accordance with Articles 33 and 34 GDPR: it records the breach; if the breach is likely to result in a risk to the rights and freedoms of participants, it notifies the supervisory authority (NAIH) without undue delay and, where feasible, no later than 72 hours after becoming aware of it; and if the breach is likely to result in a high risk, it also informs the participants concerned without undue delay.

15. Automated decision-making and profiling

The Organiser does not take any decision based solely on automated processing, including profiling (Article 22 GDPR). The system generates the order of the leaderboard from the valid lap times recorded, but the laps are recorded and checked by the Organiser’s staff, who invalidate them where necessary; the Organiser checks and finalises the final results, and the participant may submit comments on them (Competition Rules, sections 3 and 6–8).

16. Participants under 18

A person under 18 may take part in the competition only with the consent of their legal representative (usually a parent); for a participant under 14, the entry and the acceptance of the Competition Rules are made by their legal representative on their behalf (Competition Rules, section 4). A member of the Organiser’s staff checks at the venue, at the time of entry, that consent has been given, and the Organiser may ask for proof of it if necessary. Proof may be provided, for example, by the legal representative being present in person or by a written statement from them; the staff member only views the written statement, does not make a copy of it, and the Organiser does not keep it. The Organiser does not record the participant’s age or the consent in its register.

This consent relates to taking part in the competition; it does not change the legal basis for the processing (see sections 5–10), and the Organiser processes the data of a participant under 18 in the same way as that of other participants, except that it does not ask for or record their phone number and, if they win, notifies them by e-mail.

If a participant under 18 wins, the Organiser may also arrange the handover of the prize with their legal representative. In that case, it processes the legal representative’s name, contact details and – if they also sign the acknowledgement of receipt – signature on the basis of its legitimate interest in proving that the prize was lawfully handed over (Article 6(1)(f) GDPR) or, in the case of an accounting document, on the basis of its legal obligation (Article 6(1)(c) GDPR), for the period set out in section 7.

The rights of a participant under 18 described in section 17 may also be exercised by their legal representative.

17. Participants’ rights

The participant – and any other data subject covered by this Privacy Notice (see section 1) – may exercise the following rights in relation to the processing of their personal data:

• Access (Article 15 GDPR): they may ask whether the Organiser processes their personal data and, if so, which data, for what purpose, for how long and to whom it is disclosed; they may also request a copy of their data.
• Rectification (Article 16 GDPR): they may ask for inaccurate data (for example, a mistyped e-mail address) to be corrected and for incomplete data to be completed.
• Erasure (Article 17 GDPR): they may request the erasure of their data; the consequences of erasure are described in section 13. If the winner asks for their contact details to be erased before the prize is handed over, the handover may fail. The Organiser does not erase data whose processing is necessary for compliance with a legal obligation (for example, retaining an accounting document) or for the establishment, exercise or defence of legal claims (Article 17(3)(b) and (e) GDPR).
• Restriction of processing (Article 18 GDPR): they may ask the Organiser not to process their data other than by storing it, for example while the Organiser is considering their challenge to the accuracy of the data or their objection, or where the Organiser no longer needs the data but the participant requires it for the establishment, exercise or defence of their legal claims.
• Data portability (Article 20 GDPR): they may receive the data they have provided, where it is processed by automated means on the basis of a contract or consent, in a structured, commonly used and machine-readable format, and may ask for it to be transmitted directly to another controller where this is technically feasible.
• Objection (Article 21 GDPR): they may object at any time, on grounds relating to their particular situation, to processing based on legitimate interests (sections 6, 7, 9, 10 and 16). In that case, the Organiser no longer processes the data – for example, it replaces the driver name with a neutral designation – unless the processing is justified by compelling legitimate grounds that override the participant’s interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims.
• Withdrawal of consent (Article 7(3) GDPR): they may withdraw their consent to the processing of their phone number at any time (see section 8).

On request, the Organiser provides information on the outcome of the balancing of interests carried out for processing based on legitimate interests.

Requests may be submitted by e-mail to info@virtualgozsdu.hu, by letter sent to the Organiser’s registered office (1072 Budapest, Dob utca 16. IV. ép. I. em. 4. ajtó), or in person at the venue during opening hours (1075 Budapest, Madách tér 13.).

The Organiser informs the requester of the action taken on the request without undue delay and in any event within one month of receipt of the request. This period may be extended by two further months, taking into account the complexity of the request or the number of requests; the Organiser informs the requester of any such extension, together with the reasons for it, within the one-month period. If the Organiser does not take action on the request, it informs the requester, within one month, of the reasons for not taking action and of the possibility of lodging a complaint and seeking a judicial remedy (Article 12(3) and (4) GDPR).

Information and action are provided free of charge. Where a request is manifestly unfounded or excessive, in particular because of its repetitive character, the Organiser may charge a reasonable fee or refuse to act on the request (Article 12(5) GDPR). If the Organiser has reasonable doubts concerning the requester’s identity, it may request additional information necessary to confirm their identity (Article 12(6) GDPR); it is therefore advisable to send requests from the e-mail address given at entry.

18. Complaints and judicial remedies

If the participant considers that the processing of their personal data infringes the GDPR, they may lodge a complaint with a supervisory authority (Article 77 GDPR), in particular in the Member State of their habitual residence, place of work or place of the alleged infringement. Before lodging a complaint, it is worth contacting the Organiser so that it can remedy the problem quickly. The Hungarian supervisory authority:

Authority

Hungarian National Authority for Data Protection and Freedom of Information (Nemzeti Adatvédelmi és Információszabadság Hatóság, NAIH)

Address

1055 Budapest, Falk Miksa utca 9–11.

Postal address

1363 Budapest, Pf. 9.

Phone

+36 (1) 391-1400

E-mail

ugyfelszolgalat@naih.hu

Website

www.naih.hu

The participant may also go to court – regardless of whether they have lodged a complaint – if they consider that the Organiser or the processor is processing their personal data in breach of the law (Article 79 GDPR, Section 23 of the Infotv.). Such proceedings fall within the competence of the regional court (törvényszék); at the participant’s choice, the proceedings may also be brought before the regional court having jurisdiction over their place of residence or place of stay.

19. Effective date and amendments

This notice is effective from 1 October 2026; the version extended to the Rally Alsace competition is effective from 16 October 2026. Its provisions apply for the entire duration of the processing operations it describes. The Privacy Notice can also be consulted at the venue before entry.

The Organiser may amend this Privacy Notice, in particular if the circumstances of the processing change; the version in force at any given time is available at virtualgozsdu.hu/hotlap/adatkezeles. The Organiser uses data already recorded for a new purpose only if that purpose is compatible with the original purpose or there is a separate legal basis for it (Article 6(4) GDPR), and it informs participants of this in advance (Article 13(3) GDPR); even then, it does not use the data for marketing purposes.

An English translation of this Privacy Notice is available on the English version of the website; in case of any discrepancy, the Hungarian version prevails.