contracted to undertake data processing. 10. A Decision made on the Grounds of Automated Data Processing Section 11 (1) A decision based on the evaluation of the personal characteristics of the data subject exclusively by means of automated data processing can only be made, should the decision a. Have been made when the given contract was concluded or during its performance on condition that the data subject initiated this, or b. this have been authorised by relevant legislation which also specifies measures protecting the rightful interests of the data subject. (2) Pursuant to their request, the data subject must be notified of the method applied and its key components in the case of decisions made by means of automated data processing and the data subject must be ensured the opportunity to present their position. 11. Personal Data Control in Scientific Research Section 12 (1) Personal data recorded for scientific research purposes can only be used for scientific research. (2) Linking the personal data to the data subject – as soon as the objective of the research permits – must be definitively blocked. Data that can be used to identify specific or identifiable individuals must also be stored separately until this is completed. This data can only be linked to other data should this be required for the purpose of the research. (3) The organisation or individual conducting the scientific research is only entitled to disclose the personal data should a. the data subject consent to this, or b. this be required to present the results of research conducted in connection with historical events. 12. Use of Personal Data for Statistical Purposes Section 13 (1) Unless otherwise regulated by law, the Hungarian Statistical Office may receive personal data that can be used for individual identification controlled within the framework of mandatory control for statistical purposes and is entitled to control these in accordance with the mode defined under the relevant legislation. (2) Unless otherwise regulated by law, personal data recorded, received or processed for statistical purposes may only be used for statistical purposes. Regulations pertaining to the control of personal data for statistical purposes are defined in separate legislation. 13. Rights of Data Subjects and their Enforcement Section 14 The data subject may request the following from the controller: a. information on the control of personal data, b. correction of personal data, and c. deletion, blocking of personal data, with the exception of mandatory control. Section 15 (1) Pursuant to the request of the data subject, the controller is entitled to provide information on the subject’s data they control, as well as the data processed by the data processor they contracted, their sources, the objective of the control, its legal grounds and duration, the name and address of the