PRIVACY POLICY

The present Privacy Policy (“Privacy Policy”) describes the data processing of the benchmarck software LynxBenchAI („Software”) owned by TechnoLynx Kft. (seat: H-1173 Budapest, Pesti út 91-105. A. lház. Fsz. 1. ajtó; registration number: Cg.01-09-349717; represented by: Balázs Keszthelyi managing director solely, “TechnoLynx”), especially the characteristics of data collection, storage and use. The present Privacy Policy covers currently only the Personal Edition of the Software (“Personal Edition”).

This Privacy Policy is effective from 22th July 2026. TechnoLynx keeps the current version of the Privacy Policy permanently available on the website of LynxBenchAI at https://www.technolynx.com/lynxbench-ai/privacy-policy/ ( “Website”).

The Privacy Policy has been prepared in line with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (“GDPR”), with due consideration of the provisions of Act CXII of 2011 on Informational Self-determination and Freedom of Information ( “Privacy Act”). The definitions of this Privacy Policy are the same as the ones set out in Article 4 of the GDPR, also supplemented by certain points of the interpretative provisions mentioned in Article 3 of the Privacy Act. The provisions of GDPR, and where it is prohibited by the Privacy Act, alternatively, the provisions of Privacy Act shall be applicable in issues not regulated in this Privacy Policy.

TechnoLynx places special importance on the secure handling of personal data of their clients and visitors of the Website. TechnoLynx is entitled to prepare an extract from the content of this Privacy Policy in connection with each data processing and may also ensure that the Data Subjects by signing the extract document declare that they have read and acknowledged the contents of the extract.

TechnoLynx reserves the right to amend this Privacy Policy. If the amendment affects the use of personal data provided by the Data Subject, TechnoLynx shall inform the Data Subject of the changes in an appropriate form described in the present Privacy Policy and in the End-User License Agreement ( “EULA”) If the details of the data processing also change due to the amendment of the Privacy Policy, TechnoLynx will separately request the consent of the Data Subject.

Please read this Privacy Policy carefully and only engage the services available on the Website if you agree with the following.

1. Principles relating to processing of personal data

TechnoLynx – while providing its services – pays particular attention to personal data protection, complies with the mandatory legal provisions, and processes data in a secure and fair manner.

TechnoLynx processes personal data as set out in in the present Privacy Policy. TechnoLynx shall treat the personal data disclosed to it confidentially, shall take into account the principles of legality, due process and transparency under the GDPR, and shall treat personal data purpose-bound, with the principle of data saving in mind. TechnoLynx shall also comply with the principle of limited storing, protect the confidentiality and integrity of personal data, and consider the principle of accuracy under the GDPR.

TechnoLynx ensures the security of the data, and takes the necessary technical and organizational measures, also implements the procedural rules that are needed to enforce the provisions laid down in GDPR, the Privacy Act and the data and confidentiality rules provided in other legislation. TechnoLynx protects personal data from unauthorized access, modification, transmission, publication; unauthorized or accidental deletion and destruction; damages and also from becoming inaccessible as a result of changes in the technologies used.

TechnoLynx protects data files that are processed electronically in various registers, by ensuring that they are stored in different registers, and cannot be directly interconnected and associated with the Data Subject, unless it is permitted by law.

2. Data Processing regarding the Software

Based on the EULA of the Software, TechnoLynx does not collect any personal data in connection with the use of the Software or in connection with the functioning of the Software. The Personal Edition of the Software will collect only performance metrics, hardware and system data, and test metadata, and will upload these results to TechnoLynx’s cloud infrastructure for aggregation into public leaderboards and reports. By using the Personal Edition, Licensee gives TechnoLynx explicit consent to collect, manage, store, and publicly disclose such benchmarking data and results. TechnoLynx may, at its discretion, rate or curate published, but in general, all data submitted through Personal Edition will be visible to the public.

TechnoLynx hereby declares that none of the above mentioned data is regarded as a personal data as none of these data as an acquired information is related to an identified or identifiable natural person and no natural person can be identified by TechnoLynx by using the Personal Edition.

TechnoLynx processes only the following data in connection with the Software:

3. Contact

TechnoLynx provides opportunity to contact them during the Website after clicking on the “Contact” link on the Website.

Purpose of the processing	Manage and answer contact requests.
Categories of personal data concerned	Data Subject’s name, TechnoLynx name, e-mail address and message to TechnoLynx.
Data Subjects	Persons contacting TechnoLynx through the Website.
Legal basis for the processing	The legal basis for data processing is the Data Subject’s consent under Article 6 (1) (a) of the GDPR.
Period of storage	Until the Data Subject’s consent is withdrawn.
Method of the processing	Electronic.
Source of the personal data	Data collected from the Data Subject
Automated decision-making and profiling	TechnoLynx does not use automated decision-making and does not perform profiling.
Who has access to the personal data?	Responsible employees and possible data processors of TechnoLynx. The current list of data processors of TechnoLynx is listed in Section 4 of this Privacy Policy.
Data transfer to third countries or international organisations	There is no data transfer to third countries or international organisations.

4. Record-keeping relating to the exercise of rights of the Data Subjects

Purpose of the processing	Processing regarding the record-keeping relating to the exercise of rights of the Data Subjects under the GDPR.
Categories of personal data concerned	Applicant’s name, place and date of birth, mother’s maiden name, address, mailing address, request for the exercise of a Data Subject’s right under the GDPR.
Data Subjects	Data Subjects exercising their rights under the GDPR.
Legal basis for the processing	Legal obligation based on Article 6 (1) point (c) of the GDPR and TechnoLynx’s legitimate interest based on Article 6(1) point (f) of the GDPR.
Period of storage	5 years from the assessment of the application.
Method of the processing	On paper and/or electronic form.
Source of the personal data	Data collected from the Data Subject.
Possible consequence of failure to provide data	If the Data Subject does not provide the data, TechnoLynx will not be able to meet the requirements of the GDPR.
Automated decision-making and profiling	TechnoLynx does not use automated decision-making and does not perform profiling.
Who has access to the personal data?	Responsible employees and possible data processors of TechnoLynx. The current list of data processors of TechnoLynx is listed in Section 4 of this Privacy Policy.
Data transfer to third countries or international organisations	There is no data transfer to third countries or international organisations.

5. Cookies

The cookies in connection with the Personal Edition are available at the Website in a separate cookie policy.

6. Data processors

The data processors do not make decisions independently, they shall act in compliance with the contract concluded with TechnoLynx and with the instructions received from TechnoLynx. Data processors record, manage and process the personal data transmitted to them by TechnoLynx in accordance with the provisions of GDPR. Data processors can access, and process personal data provided by the Data Subjects during the period specified in the present Privacy Policy regarding the individual purposes of data processing. TechnoLynx transmits data to the following data processing companies regarding the data processing mentioned in the present Privacy Policy:

Data Processor Category	Aim of the Data Processing	Name	Seat	Registry number
Host	Hosting services	Amazon Web Services EMEA SARL	38 Avenue John F. Kennedy, L-1855, Luxembourg	B186284 (RCS Luxembourg)

Where additional third-party service providers are used for operational functions (such as email hosting or IT infrastructure), such providers act as data processors under applicable data processing agreements and in accordance with GDPR requirements.

7. Rights of Data Subjects

Data Subject is entitled to exercise the following rights by sending a request to TechnoLynx’s e-mail address at [email protected] :

right to information and access
right to rectification
right to erasure (‘right to be forgotten’)
right to restriction of processing
right to object and automated individual decision making
right to data portability
right to withdraw consent

In case of execution of the Data Subject’s request, TechnoLynx identifies the Data Subject in accordance with the present Privacy Policy, and TechnoLynx complies with the Data Subject’s request only after the identification has been conducted.

If the Data Subject’s request was not prepared in accordance with the present Privacy Policy and TechnoLynx has not been able to identify the Data Subject, TechnoLynx notifies the applicant of the deficiencies, which if the Data Subject fails to comply with, TechnoLynx will be unable respond to the request.

The time elapsed between the request to provide the necessary personal data/carry out the missing activity requested by TechnoLynx to the provision of the personal data, does not count towards the deadline for responding to the request.

TechnoLynx informs all recipients of any rectification, erasure or restriction of processing with whom personal data have been shared with, unless this proves to be impossible or involves a disproportionate effort. Upon request, TechnoLynx informs the Data Subject of these recipients.

8. Right to information and access

According to Article 13 of GDPR, TechnoLynx - in case personal data relating to a Data Subject are collected from the Data Subject - shall, at the time when personal data are obtained, provide the Data Subject with all of the following information:

the purposes of the processing;
the categories of personal data concerned;
the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations;
where possible, the planned period for which the personal data will be stored or if not possible, the criteria used to determine that period;
right to request from TechnoLynx rectification or erasure of personal data or restriction of processing of personal data concerning the Data Subject or to object to such processing;
the right to file a complaint with the Hungarian Authority for Data Protection and Freedom of Information (NAIH);
the right to seek judicial remedies;
if the personal data are not collected from the Data Subject, any available information regarding their source;
the existence of automated decision-making, including profiling, the significance and the planned consequences of such processing for the Data Subject;
appropriate measures taken in case data are transferred to third countries or international organizations Data Subject has the right to obtain a copy of the personal data undergoing such processing.

TechnoLynx shall provide information on what action he took upon a request from the Data Subject within one month from the date of receipt.

TechnoLynx may charge a reasonable fee based on administrative costs according to Article 12 of GDPR.

9. Right to rectification

Data Subject has the right to obtain from TechnoLynx the rectification of inaccurate personal data concerning them, without undue delay. Taking into account the purpose of the processing, the Data Subject has the right to request the completion of his or her incomplete data, even by means of a supplementary declaration.

10. Right to erasure (‘right to be forgotten’)

The Data Subject has the right to request from TechnoLynx the erasure of the Data Subject’s personal data and TechnoLynx is obliged to erase such personal data, without undue delay. In such cases TechnoLynx will not be able to further provide the Data Subject with the services of TechnoLynx. The Data Subject has the right to request erasure if one of the following applies:

the personal data is no longer necessary for the purpose that TechnoLynx collected it for;
the Data Subject withdrew their consent to the processing activities and there is no other legal basis for processing applies;
the Data Subject objects to the processing pursuant to Article 21(1) of GDPR and there are no overriding legitimate grounds for the processing, or the Data Subject objects to the processing pursuant to Article 21(2) of GDPR;
their personal data is being unlawfully processed;
EU or member state law oblige TechnoLynx to erase Data Subject’s personal data to comply with a legal obligation;

the personal data have been collected in relation to the offer of information society services referred to in Article 8 of GDPR.

11. Right to restriction of processing

The Data Subject may have the right to request from TechnoLynx a restriction of processing his or her personal data if one of the following grounds applies:

the Data Subject contest the accuracy of the personal data of TechnoLynx’s process about the Data Subject; TechnoLynx must restrict processing the contested data until they can verify the accuracy of Data Subject’s personal data;
TechnoLynx is unlawfully processing the Data Subject’s personal data.
TechnoLynx no longer need to process the Data Subject’s personal data but the Data Subject needs the personal data for the establishment, exercise or defense of legal claims;
the Data Subject has objected to processing pursuant to Article 21 of GDPR pending the verification whether the legitimate grounds of the controller override those of the Data Subject.

In case of the restriction is justified, personal data shall, with the exception of storage, only be processed

if the Data Subject consented to it;
for the establishment, exercise or defense of legal claims;
for the protection of the rights of another natural or legal person, or
for reasons of important public interest of the European Union or of a Member State.

If the processing of the Data Subject’s personal data has been restricted, Data Subject will be informed before the restriction of processing is lifted.

12. Right to object and automated individual decision making

The Data Subject shall have the right to object, if processing his or her data is based on:

the public interest or in the exercise of official authority vested in TechnoLynx according to Article 6(1) point (e) of the GDPR;
purposes of the legitimate interests pursued by TechnoLynx or by a third party according to Article 6(1) point (f) of the GDPR.

TechnoLynx shall no longer process the personal data unless there is compelling legitimate grounds for the processing which override the interests, rights and freedoms of the Data Subject or for the establishment, exercise or defense of legal claims.

13. Right to data portability

The Data Subject shall have the right to receive the personal data concerning him or her, which he or she provided to TechnoLynx, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without obstruction from TechnoLynx, where:

the processing is based on the Data Subject’s consent or the processing is necessary for TechnoLynx to perform a contract with the Data Subject; and
the processing is carried out by automated means.

Where processing is based on consent, the Data Subject shall have the right to withdraw his or her consent at any time. Regarding this, TechnoLynx informs the Data Subject that they may continue to process the Data Subject’s personal data for the purpose of fulfilling his legal obligation or validating his legitimate interests even after the consent is given by the Data Subject has been withdrawn, if the enforcement of the interest is proportionate to the restriction of the right to the protection of personal data.

15. Legal remedies

TechnoLynx shall reimburse the damage caused to others by the unlawful processing of the Data Subject’s data or the violation of the data security requirements, TechnoLynx shall also reimburse the grievance award for the infringements of personality rights caused by TechnoLynx or the data processor. TechnoLynx shall be exempted from liability for the damage caused and from the obligation to pay grievance award if TechnoLynx proves that TechnoLynx is not liable in any way for the event giving rise to the damage.

If the Data Subject feels that the processing of their personal data have breached the provisions of GDPR, the Data Subject is entitled to contact TechnoLynx directly at the following e-mail address: [email protected] in order to eliminate the violation against them.

The Data Subject is also entitled to file a complaint with the Hungarian Authority for Data Protection and Freedom of Information (Nemzeti Adatvédelmi és Információszabadság Hatóság; “NAIH”, H-1055, Hungary, Budapest, Falk Miksa utca 9-11; postal address: H-1363 Budapest, Pf. 9. phone: +36-1 391-1400; fax: +36-1 391-1410; e-mail: [email protected]).

The Data Subject to protect their data has the right to initiate proceedings before the court, which proceeds under priority. The Data Subjects can choose whether the action shall be brought before the district court in whose area of competence the Data Subject’s place of residence is located or before the district court in whose area of competence the Data Subject’s habitual residence is located (http://birosag.hu/torvenyszekek). The competent district court can be found on this site: http://birosag.hu/ugyfelkapcsolati-portal/birosag-kereso