Privacy Policy

Effective: May 2, 2026

Website: www.kosecurity.hu

The purpose of this privacy notice is to provide visitors to the K.O. Team Security & Investigate Kft. website,
prospective clients, and customers with clear information about what personal data the company processes,
for what purposes, on what legal basis, for how long, and what rights data subjects have.

The processing of personal data is carried out in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council, also known as the GDPR,
and the relevant Hungarian data protection laws.

---

1. Information about the Data Controller

Name of the data controller: K.O. Team Security & Investigate Kft.

Full company name: K.O. Team Security & Investigate Limited Liability Company

Headquarters: 2340 Kiskunlacháza, Strandi út 12.

Company Registration Number: 13-09-246629

Tax ID: 33031615-1-13

Website: www.kosecurity.hu

Email: 7koseckft7@gmail.com

Phone: +36 70 197 7777

The data controller is responsible for processing the personal data provided through the website.

2. In what situations do we process personal data?

When using this website, personal data may be processed, in particular, in the following cases:

• When using the contact form,
• When sending an email,
• If you contact us by phone,
• When using an AI-based customer support chatbot,
• When requesting a quote,
• in the event of a preliminary presentation of the case,
• when measuring website traffic,
• when cookies are used.

3. Contact Us and Request a Quote

If you contact us through our website, request a quote, or send us an email at
, we may process the following data:

• name,
• email address,
• phone number,
• a brief description of the case,
• other information you voluntarily provide,
• the files, photos, and documents you sent,
• the date of contact.

Purpose of data processing:
establishing contact, submitting a quote, gaining a preliminary understanding of the matter, responding to inquiries, scheduling appointments,
preparing for the service.

Legal basis for data processing:
the data subject’s voluntary consent, as well as the preparation of a contract.
If an inquiry leads to the conclusion of a contract, data processing may also be necessary for the performance of the contract.

Duration of data processing:
We retain inquiries from interested parties for up to 1 year, unless such inquiries result in an order, a contract,
a legal dispute, or another legally relevant matter. In such cases, we process the data in accordance with the applicable statutory
retention periods and statutes of limitations.

4. Using an AI chatbot / customer service assistant

The website may feature an AI-powered customer service assistant that helps visitors navigate
the company's services.

When using the chatbot, the following data may be processed:

• messages entered by the visitor,
• name, phone number, email address, if the visitor voluntarily provides them,
• a brief description of the case,
• technical specifications,
• chat history.

Important warning:
Please do not provide your password, ID number, address card information,
bank account number, credit card information, login credentials, or particularly sensitive personal data to the chatbot.

Purpose of data processing:
customer support, preliminary customer assessment, guidance on services, and preparation for contact.

Legal basis for data processing:
the data subject’s consent, as well as the data controller’s legitimate interest in ensuring the operation of customer service.

Data Processor:
A third-party service, such as Chatbase, may be used to operate the chatbot.

Duration of data processing:
We retain chatbot conversations for up to 12 months, unless the nature of the matter
requires a longer retention period, such as for the conclusion of a contract, a legal dispute, or an assignment.

5. Email Communication

If you contact us by email, we will process the personal data contained in that email.

The data processed may include:

• name,
• email address,
• phone number,
• the content of the email,
• attachments,
• Documents related to the case.

Purpose of data processing:
responding to inquiries, handling administrative matters, providing quotes, maintaining contact, and preparing for or providing services.

Legal basis for data processing:
the data subject’s consent, preparation for a contract, performance of a contract, or legitimate interest.

Duration of data processing:
up to 1 year in the case of general inquiries. In the case of a mandate or a legally relevant matter, in accordance with the statutory
retention periods and statutes of limitations.

6. Contact by Phone

If you contact us by phone, we may process the information you voluntarily provide.

The data processed may include:

• name,
• phone number,
• brief description of the case,
• scheduled time,
• Further steps that need to be taken.

Purpose of data processing:
maintaining contact, preliminary assessment of the case, scheduling appointments.

Legal basis for data processing:
the data subject’s consent or the preparation of a contract.

7. Data Processing in Connection with a Contractual Relationship

If the inquiry results in a specific order or contract, data processing may extend to
the data and documents necessary for the fulfillment of the order.

The data processed may include:

• customer name,
• contact information,
• billing information,
• documents related to the case,
• statements,
• contracts,
• payment information,
• documents generated during administrative procedures,
• any other information necessary to complete the matter.

Purpose of data processing:
performance of a contract, billing, maintaining contact, compliance with legal obligations,
possible enforcement of claims.

Legal basis for data processing:
performance of a contract, compliance with a legal obligation, and the legitimate interests of the data controller.

Duration of data processing:
We retain accounting documents in accordance with current accounting regulations.
We handle other contractual and case-related documents based on the statute of limitations and the nature of the specific case.

8. Use of Cookies

This website may use cookies. Cookies are small data files stored in your browser,
that help the website function, ensure its security, or measure its traffic.

Cookies can be:

• essential cookies,
• statistical cookies,
• marketing cookies,
• cookies placed by third parties.

Essential cookies are necessary for the website to function. Cookies used for statistical and marketing purposes on
generally require prior consent.

Visitors can delete or restrict cookies at any time in their browser settings.

9. Using Google Analytics

In the future, this website may use Google Analytics to measure traffic
and to improve the website.

Purpose of data processing:
statistical analysis, measuring website performance, and understanding visitor behavior.

The data processed may include:

• IP address,
• browser data,
• device data,
• date of visit,
• pages visited,
• clicks,
• sources of revenue.

Legal basis for data processing:
the data subject’s consent.

Google Analytics can only be loaded if the visitor has given consent via this cookie management interface.
Without consent, tracking codes for statistical and marketing purposes cannot be activated.

10. Data Processors

In the course of operating the website and providing services, the data controller may engage data processors.

These may include, in particular:

Web Hosting Provider:
the website's current web hosting provider

Website operator/developer:
the data controller or its designated website administrator

AI chatbot provider:
Chatbase

Analytics provider:
Google Ireland Limited / Google LLC, if Google Analytics is in use.

Email provider:
Gmail / Google service or the current email provider

Data processors may process personal data exclusively in accordance with the data controller’s instructions and to the extent necessary to provide the service
.

11. Data Transfer to a Third Country

Some service providers, such as Chatbase or Google, may also use servers or subcontractors located outside the European Union
.

In such cases, the data transfer takes place subject to appropriate safeguards, such as a data processing agreement,
general terms and conditions, or another lawful data transfer mechanism.

12. Data Security

The data controller implements appropriate technical and organizational measures to
ensure the security of personal data.

As part of this effort, we strive to:

• only authorized persons should have access to the data,
• to ensure that unauthorized persons cannot access the data,
• the data cannot be modified or deleted without authorization,
• electronic systems are adequately protected,
• We treat the documents provided by our clients as confidential.

13. Handling of Particularly Sensitive Data

Please do not send particularly sensitive
information via our website, chatbot, or contact form, unless it is absolutely necessary for our initial understanding of your case.

Examples of particularly sensitive data include:

• health data,
• criminal record data,
• information from an identification document,
• bank account information,
• credit card information,
• password,
• login credentials,
• information regarding special personal circumstances.

If such data is nevertheless submitted, we will handle it with the utmost care at
, only to the extent necessary for handling the matter.

14. Rights of Data Subjects

You have the right to:

• request information about the processing of your personal data,
• request access to your personal data,
• request the correction of inaccurate information,
• request that your data be deleted,
• request the restriction of data processing,
• object to the processing of your personal data,
• in the case of data processing based on consent, withdraws their consent,
• file a complaint with the supervisory authority,
• Take the matter to court.

Data subjects may exercise their rights by contacting the data controller at the following contact information:

Email: 7koseckft7@gmail.com
Phone: +36 70 197 7777

15. How to File a Complaint

If you feel that your personal data is not being handled properly, you may file a complaint at
with the National Authority for Data Protection and Freedom of Information.

National Authority for Data Protection and Freedom of Information
Headquarters: 1055 Budapest, Falk Miksa Street 9-11.
Mailing Address: 1363 Budapest, P.O. Box 9.
Email: ugyfelszolgalat@naih.hu
Website: www.naih.hu

16. Amendments to the Prospectus

The data controller reserves the right to amend this privacy notice, particularly
if the website’s operation changes, a new service is introduced, a new data processor is engaged,
or there is a change in the law.

The current privacy policy is available on the www.kosecurity.hu website.