DATA MANAGEMENT NOTICE
GastroSol Digital kft. obtains your consent in accordance with the policies and technical specifications of the IAB Europe Transparency & Consent Framework. It uses the Consent Management Platform n°92.
Pursuant to Regulation 2016/679 (hereinafter referred to as GDPR) of the European Parliament and of the Council (EU), this Data Management Notice (hereinafter referred to as the Notice) serves to inform the data subject (hereinafter referred to as the Data Subject) regarding the processing of personal data (hereinafter referred to as the Personal Data) in relation to the hellobuda.hu website operated by GastroSol Digital kft.
Data Controller and Contact Information
Company Name of Data Controller: GastroSol Digital kft. (hereinafter referred to as Data Controller)
Registered Office: Bécsi út 267, Budapest, Hungary
Business Premises: Bécsi út 267, Budapest, Hungary
Postal Address: Bécsi út 267, Budapest, Hungary
Management of Data Subject's Data
2.1. Affected Parties
The Data Controller processes the personal data of the following natural persons (hereinafter referred to as the Data Subject): visitors to the website and subscribers to the newsletter.
2.2. Categories of Personal Data Managed
The Data Controller processes the following categories of the Data Subject's personal data:
(i) Names and surnames
(ii) E-mail addresses
(iii) Telephone numbers
(iv) Billing addresses
2.3. Purpose, Legal Basis, and Duration of Data Management
The purpose of data processing includes maintaining contact with the Data Subject, identification, potentially entering into contracts, and enhancing service quality. The legal basis for data processing encompasses the preparation and execution of a contract, legitimate interest, legal obligations, or the consent of the Data Subject. Personal Data is retained for a period of two years from the date of consent provision.
2.3.1. Contract Preparation and Execution
Personal Data processing is crucial for both the preparation and execution of service contracts.
2.3.2. Legal Obligation Fulfillment
Personal data is processed to fulfill legal obligations for eight years, as mandated by applicable laws, including but not limited to, those related to accounting and financial reporting.
2.3.3. Legitimate Interest
The Data Controller processes Personal Data based on legitimate interests for a period of eight years, provided that such processing does not infringe on the rights and freedoms of the Data Subject.
2.3.4. Consent
Processing of Personal Data may also be based on the explicit consent of the Data Subject, which can be withdrawn at any time without affecting the legality of processing based on consent before its withdrawal.
2.3.5. Legal Claims
Personal Data may be retained for up to five years post-contract termination or failure to enter into a contract to manage, enforce, or defend legal claims.
2.4. Automated Decision-Making and Profiling
The Data Controller does not engage in automated decision-making or profiling.
Recipients of Personal Data
The Data Controller may share Personal Data with entities providing accounting and hosting services, to the extent necessary.
Rights of the Data Subject
The Data Subject is entitled to various rights, including the right to access, rectify, erase, restrict processing, object to processing, and data portability concerning their Personal Data.
4.1. Right of Access
The Data Subject has the right to obtain confirmation and access to their Personal Data and related information.
4.2. Right to Rectification
The Data Subject can request the correction or completion of inaccurate or incomplete Personal Data.
4.3. Right to Erasure ("Right to be Forgotten")
Under certain conditions, the Data Subject may request the deletion of their Personal Data.
4.4. Right to Restrict Processing
The Data Subject may request the restriction of processing under specific circumstances.
4.5. Right to Object
The Data Subject has the right to object to the processing of their Personal Data based on legitimate interests, including direct marketing purposes.
4.6. Right to Data Portability
The Data Subject has the right to receive their Personal Data in a structured, commonly used format and transmit it to another controller.
4.7. Legal Remedies
The Data Subject has the right to lodge complaints with the supervisory authority or seek judicial remedy if they believe their data protection rights have been violated.
Other Provisions
The Data Controller reserves the right to request additional information to confirm the identity of the Data Subject making a request under this Notice. The Data Controller may update this Notice at any time, with changes being communicated to the Data Subject in advance.
Budapest, 02.23.2024.
GastroSol Digital kft.
Represented by: Forgács Dávid, Managing Director