Privacy noticeon data processing regarding the notification of illegal content
Vodafone Hungary Ltd. (headquarters: 1112 Budapest, Boldizsár utca 2., company registration number:01-10-044159, hereinafter referred to as Vodafone) hereby provides information on the processing ofpersonal data related to the notification of illegal content in connection with digital services in order tocomply with its obligation under the General Data Protection Regulation of the European Union ("GDPR").
Vodafone is a data controller pursuant to Article 4. (7) of the GDPR. Vodafone has appointed a Data
Protection Officer, who can be contacted at dpo-hu@vodafone.com.
Description of data processing
Vodafone operates an illegal content notification system based on its legal obligation under Article 16. ofRegulation (EU) 2022/2065 of the European Parliament and of the Council on a Single Market For Digital
Services and Article 3. (1) of Act CIV of 2023 on certain provisions of online intermediary services, in thecontext of which individuals or entities can notify illegal content by electronis means. The legal basis for theprocessing of the data is Article 6 (1) (c) GDPR.
Anyone can notify illegal content via the email address (jogellenestartalom@vodafone.com) indicated in
the notice published on the Vodafone website (https://www.vodafone.hu/english/reporting-illegalcontent) . In the notification, the notifying party can provide his/her name, e-mail address and other contact
details. The provision of personal data is not mandatory and the notification can be made anonymously,
however, if the notifying party does not provide personal data, Vodafone will not be able to provide
information related to the investigation of the notification.
Vodafone processes the personal data provided by the notifying party for the purposes of receiving andinvestigating notifications, taking action in relation to the illegal content and informing the notifying partner
thereof. Vodafone will process the personal data provided to it until the successful conclusion of the action
taken in connection with the investigation of the illegal content, after which Vodafone will delete these data.
Data subject rights of the notifying party
The notifying parties can exercise their right of access under the GDPR at any time and have the right torequest the rectification, erasure or restriction of processing of their data. The GDPR does not provide datasubjects with the right to data portability because of the legal basis of the data processing.
If a notifying party provides personal data relating to another natural person, Vodafone is not obliged toinform the data subject pursuant to Article 14. (5) (c) GDPR, given that the obtaining or disclosure of thepersonal data is required by EU law applicable to Vodafone as data controller.
Vodafone does not transfer the processed personal data to third countries or international organisations,nor does Vodafone carry out automated decision-making on them.
In addition, the data subjects have the right to appeal to the supervisory authority designated according to
Vodafone’s headquarters, to the National Authority for Data Protection and Freedom of Information or tothe competent court in their place of residence or stay.
17 February 2024
Vodafone Hungary Ltd.

C2 General