PRIVACY NOTICE FOR ONE-TIME CUSTOMERS
1. PRIVACY NOTICE FOR ONE-TIME CUSTOMERS
You are considered a data subject for the purposes of data protection regulations and I hereby inform you of the following pursuant to Article 13 of the GDPR:
1. Data controllers
Section 1 (1) Data management is carried out by the following data controller (hereinafter referred to as: data controller):
Name of the data controller: Contact information of the data controller: Contact information of the data controller's representative:
Pálinka Company Ltd. 1146 Budapest, Abonyi u. 27. afszt. 2. [email protected]
(2) The data controller shall not appoint a data protection officer.
2. Certain data processing operations
Section 2 (1) In the case of certain data processing operations
a) the data processed by the data controller,
b) the purpose of data processing,
c) the legal basis for data processing,
d) the duration of data processing,
defined in the table below:
Data Purpose of data processing Legal basis for data processing Legal basis in case of legal obligation Duration of data processing
Name is necessary to identify the guest for the performance of the contract [GDPR Article 6 (1) point b)] until the claim becomes statute-barred
Issuance of a name invoice is necessary to fulfill a legal obligation on the controller [GDPR Article 6 (1) point c)] VAT Act Section 169 until the right to assess the tax expires
Issuance of an invoice is necessary to fulfill a legal obligation on the controller [Article 6 (1) point c) of the GDPR] Section 169 of the VAT Act until the right to assess the tax expires
Address delivery necessary for the performance of the contract [GDPR Article 6 (1) point b)] until the claim becomes statute-barred
Telephone number required for the performance of the delivery contract [GDPR Article 6 (1) point b)] until the claim becomes statute-barred
Issuance of a tax invoice is necessary to fulfill the legal obligation of the data controller [GDPR Article 6 (1) point c)] VAT Act Section 169 until the right to assess the tax expires
Email address for contact with the guest; information, including forwarding of the ticket, is necessary for the performance of the contract [GDPR. Article 6 (1) point b)] until the claim becomes statute-barred
(2) Providing your name, address, tax number (if any), and email address is mandatory and is a condition for providing the service; if not provided, the contract will not be concluded.
(3) The possible categories of recipients and potential recipients during data processing are:
(4) In addition to the above, the data controller uses cookies as set out in the cookie policy and also uses the services of Google Analytics.
3. Rights of the data subject
Section 3 (1) You have the following rights:
1. You may request access to your personal data from the data controller: based on this right, the data controller will inform you about the specific personal data processed about you (e.g. instead of place and time of birth: Budapest, 2000.01.01.)
2. You can request correction of data: if the data is inaccurate for any reason, you can indicate this and the data controller will correct the data.
3. You may request the deletion of your data or restriction of its processing: this can be done if the data processing was based on consent and you withdraw it, or if the data processing period has expired and the data controller has not fulfilled its intended deletion obligation.
4. If the basis for any data processing is the legitimate interest of the data controller, you may object to the processing of such personal data. Following the objection, the data controller will consider whether there is an interest that overrides your freedom and will decide accordingly.
5. You have the right to data portability. Based on this right, the data controller is obliged to provide you with the data processed about you – in a widely used format – so that you can make it available to another data controller.
6. If the data processing is based on consent, you have the right to withdraw your consent at any time, which does not affect the lawfulness of the data processing carried out on the basis of consent before the withdrawal.
7. You have the right to lodge a complaint with a supervisory authority. The contact details of the supervisory authority are as follows:
NATIONAL DATA PROTECTION AND FREEDOM OF INFORMATION AUTHORITY
Postal address: 1530 Budapest, P.O. Box: 5.
Address: 1125 Budapest, Szilágyi Erzsébet fasor 22/c
Phone: +36 (1) 391-1400
Fax: +36 (1) 391-1410
Email: [email protected]
URL http://naih.hu
(2) The provision of personal data is based on a legal or contractual obligation pursuant to Section 2 and is a prerequisite for concluding a contract pursuant to Section 2(2), and you are not obliged to provide the personal data as specified therein, but failure to provide the data may result in possible consequences pursuant to Section 2(2).
(3) There shall be no:
a) for data transfer to country III,
b) automated decision-making.