NTAK registration number: MA20000389
Birki-Szabó Helga, tax registered private individual (hereinafter referred to as the "Data Controller") as the operator of the website available under the domain names www.vaskutifahaz.hu and vendeghazamatraban.hu (hereinafter referred to as the "Website") hereby publishes information on the data processing carried out in the context of the Website and the services related to the Website.
By accessing the Website, users (hereinafter referred to as the "User") accept all the terms and conditions set out in this Privacy Policy (hereinafter referred to as the "Policy"), and are therefore kindly requested to read this Policy carefully before using the Website.
1. Name and contact details of the Data Controller
Name of the data controller: Helga Birki-Szabó is an individual with a tax number (hereinafter: Data Controller).
Address of the data controller: 4026 Debrecen Csokonai utca 12-14.
Mailing address of the data controller: 4026 Debrecen Csokonai utca 12-14.
E-mail of the Data Controller címe:vaskutifahaz@gmail.hu
Phone number of the controller: +36 70 3665 441
2. Legal background, legal basis, purpose of the processing of personal data on the website, personal data processed and the duration of the processing.
2.1 Information on the use of cookies
About cookies:
The Data Controller uses so-called cookies when you visit the website. The cookie is a set of information consisting of letters and numbers that our website sends to your browser in order to save certain settings, facilitate the use of our website and help us to collect some relevant statistical information about our visitors. The Data Controller states that the cookies it uses do not involve the processing of personal data.
The main characteristics of the cookies used by the website:
When using the website, your IP address, the start and end time of the visit, and in some cases – depending on the settings of your computer – the type of browser and operating system are recorded. This data is automatically logged by the system.
The data manager anonymously records the address of the referring website, the address of the page visited after leaving the page, and the IP address of unregistered visitors.
The option to disable cookies:
You can delete the cookies used by the Data Controller at any time through your browser. For more information, please click on the links below:
Internet Explorer
Firefox
Chrome
Safari
If you do not wish to receive cookies from the Data Controller, certain elements and features of the website may not be available to you.
2.2 Processing of data related to the request for proposal
Legal background and legal basis for processing:
The legal basis for data processing is the provisions of Act CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information (Infotv.). In accordance with Article 5 (1) (a) of the Freedom of Information Act.
The purpose of data processing:
The purpose of the processing of the data is to enable us to provide an appropriate and accurate response to the request for a quote based on the Customer's prior request.
The scope of the data processed:
The request for an offer requires the provision of the following personal data:
Name of Guest/Contracting Party,
telephone number,
e-mail address
Country
Duration of data processing:
Personal data will be processed until the consent is withdrawn.
2.3 Processing of data relating to ordering, invoicing and NTAK
Legal background and legal basis for processing:
The background for data processing is provided by the provisions of Act CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information (Infotv.) and Act C of 2000 on Accounting (Sztv.). In accordance with Section 5 (1) (a) of the Data Protection Act, the processing of personal data is based on your consent and, in the event of withdrawal of consent, on the fulfilment of the legal obligation of the Data Controller under Section 6 (5) (a) of the Data Protection Act.
Purpose of processing:
To issue invoices in accordance with the law and to fulfil the obligation to keep accounting records. Pursuant to Article 169 (1) to (2) of the Act, companies must keep accounting documents that directly and indirectly support the accounting.
The scope of the data processed:
Scope of data processed:
Name of Guest/Contracting Party,
Address (registered office),
telephone number,
e-mail address,
Place of birth,
date of birth
The Data Controller issues an electronic invoice which is sent to the Guest by e-mail. The following data are required to issue the invoice:
Name of Guest/Contracting Party,
Address (registered office),
e-mail address
Duration of data processing:
Invoices issued must be retained for 8 years from the date of issue, pursuant to Section 169 (2) of the Public Finance Act. Please be informed that if you withdraw your consent to the issuing of an invoice, the Data Controller is entitled to retain your personal data obtained during the issuing of the invoice for 8 years pursuant to Article 6(5)(a) of the Information Act.
2.4. Data processing in connection with contacting
Legal background and legal basis for processing:
The legal basis for data processing is the provisions of Act CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information (Infotv.). In accordance with Article 5 (1) (a) of the Freedom of Information Act.
Purpose of processing:
The purpose of processing the data is to answer your question.
Scope of the data processed:
When contacting us, you are required to provide your name and contact details (name, e-mail address, telephone number).
Duration of data processing:
Messages sent during the contact will be stored indefinitely, but you have the possibility to request the deletion of the personal data provided during the contact at any time.
2.5 Other data processing
If the Data Controller intends to carry out further processing, it will provide prior information on the relevant circumstances of the processing (legal background and legal basis of the processing, purpose of the processing, scope of the data processed, duration of the processing).
You are informed that the Data Controller must comply with written requests for data from public authorities based on a legal mandate. The Data Controller shall keep a record of the data transfers in accordance with Article 15 (2)-(3) of the Data Protection Act (to which authority, what personal data, on what legal basis, when the Data Controller transferred the data), the content of which the Data Controller shall provide information on request, unless the provision of information is excluded by law.
3. On the use of data processors and their activities in relation to data processing
The Data Controller shall be entitled to access personal data in accordance with applicable law.
The processing of the data is carried out by the Data Controller without the assistance of a Data Processor. The Data Controller reserves the right to involve processors in the future, which it will inform Users of by amending this Notice. In the absence of an express legal provision, the Data Controller shall only disclose personally identifiable data to third parties with the express consent of the User concerned.
You voluntarily provide us with personal data when registering or contacting our Company, and we therefore ask you to gradually ensure the truthfulness, accuracy and correctness of your data when providing it, as you are responsible for it. Incorrect, inaccurate or incomplete data may prevent you from using our services.
If you do not provide your own personal data but that of another person, we will assume that you have the necessary authorisation to do so. Where you provide personal data other than your own, it is the responsibility of the data provider to obtain the consent of the data subject.
4. Data security measures
The Data Controller declares that it has implemented appropriate security measures to protect personal data against unauthorised access, alteration, disclosure, transmission, disclosure, erasure or destruction, accidental destruction or accidental damage and against inaccessibility resulting from changes in the technology used.
5. Your rights in relation to data processing
For the duration of the processing, you have the right to:
the right to be informed,
the right to rectification of the data,
the right to obtain information, the right to rectify the data, the right to erasure,
the right to obtain the erasure of data,
the right to object.
You may request information from the Controller about the processing of your personal data within the period of processing. The Data Controller shall inform you in writing, in an intelligible form, of the data processed, the purposes, legal basis and duration of the processing, as well as, where the data have been further processed, the persons to whom and for what purposes the data are or have been disclosed, as soon as possible after the request, but not later than 30 days from the date of the request.
You may request the Controller to correct your personal data within the period of processing. The Controller shall comply with your request within 8 days at the latest.
You have the possibility to request the erasure of your personal data, which the Controller will comply with within 8 days at the latest. The right of erasure does not apply if the Controller is obliged by law to continue to store the data or if the Controller is entitled to continue to process the personal data in accordance with Article 6(5) of the Infotv.
You may object to the processing of your personal data if
the processing or transfer of the personal data is necessary solely for compliance with a legal obligation to which the Controller is subject or for the purposes of the legitimate interests pursued by the Controller, the recipient or a third party, except in the case of mandatory processing and in the case provided for in Article 6(5) of the GDPR;
the personal data are used or transmitted, without your consent, for direct marketing, public opinion polling or scientific research purposes.
The Data Controller shall examine the objection within the shortest possible time from the date of the request, but not later than 15 days, and shall decide whether the objection is justified and inform you in writing of its decision.
6. Legal remedies
If you believe that the Data Controller has violated a legal provision on data processing or has failed to comply with a request, you may initiate an investigation procedure with the National Authority for Data Protection and Freedom of Information (address: 1530 Budapest, PO Box 5, e-mail: ugyfelszolgalat@naih.hu).
You are also informed that you may take legal action against the Data Controller in case of violation of the legal provisions on data processing or if the Data Controller has not complied with any of your requests.
7. Amendment of the Privacy Notice The Controller reserves the right to amend this Privacy Notice. By using the website after the amendment comes into force, you accept the amended privacy notice. The Data Controller shall ensure that the previous version of the text is also available on the website in the event of an amendment.
English 
Hungarian