Privacy Policy

We respect your privacy - https://www.thingstodoinbudapest.agency/

The protection of your privacy throughout the course of processing personal data as well as the security of all business data are important concerns to us. We process personal data that was gathered during your visit of our Online Offers confidentially and only in accordance with statutory regulations.

Controller

Blue Media Studio SRL. is the controller responsible for the processing of your data; exceptions are outlined in this data protection notice. 

Our contact details are as follows: 

 

Blue Media Studio SRL. 

Address: 535100 Baile Tusnad, Strada Ciucas nr. 44

email: bluemediastudiosrl@gmail.com

 

Controlling is also being narrowly managed by the Service Hub of all services - Eurama Kft. Heir contacts are as follows:

 

Eurama Idegenforgalmi Kft., 1052 Budapest, Apáczai Csere János utca 12-14

email: tour@eurama.hu

 

Area of validity, scope of the Policy 

 

The scope and general provisions of this Policy apply to all processing of personal data by the Data Controller and to all its employees.

The legitimacy of the processing of personal data is to be evaluated on the basis of the REGULATION 2016/679 of the European Union (GDPR) and Act CXII of 2011 on the Right of Informational Self Determination and on Freedom of Information (Privacy Act) as well as on the basis of other legislative provisions (e.g. Act I of 2012 on the Labour Code).

 

Principles

Personal data consists of all information related to an identified or identifiable natural person, this includes, e.g. names, addresses, phone numbers, email addresses, contractual master data, contract accounting and payment data, which is an expression of a person's identity.

We collect, process and use personal data (including IP addresses) only when there is either a statutory legal basis to do so or if you have given your consent to the processing or use of personal data concerning this matter, e.g. by means of registration. Our company process personal data in accordance with data protection principles (e.g. purpose limitation, data minimisation) and applicable legislation (e.g. GDPR, Infotv.).

 

 

 

 

 

Processing purposes, processed categories of data, legal basis, retention periods

 

We as well our service providers process your personal data according the follows:

 

Processing purpose

Application for service

Legal basis

Entering in a contract GDPR Art. 6. b)

Categories of personal data

Identification data (e.g. name, in some cases place of stay in Budapest for pickup), Contact details (e.g. email, phone number)

Retention periods

until service date, but no later than 3 months

 

Processing purpose

Ticket selling service

Legal basis

Performance of a contract GDPR Art. 6. b), Data subject’s consent GDPR Art. 6. a)

Categories of personal data

Identification data (e.g. name, place of stay in Budapest), Contact details (e.g. email, phone number)

 

Processing purpose

Communication with the data subject - in case changes accur in service

Legal basis

Performance of a contract GDPR Art. 6. b)

Categories of personal data

Identification data (e.g. name), Contact details (e.g. email, phone number)

Retention periods

until the delivery of the test results, but no later than 3 months

 

Processing purpose

Invoicing

Legal basis

Legal obligation GDPR Art. 6. c)

Categories of personal data

Identification data (e.g. name, Billing address, VAT number - if applies)

Retention periods

8 years after billing

 

Processing purpose

Resolving service disruptions/security issues

Legal basis

Legitimate interest GDPR Art. 6. f)

Categories of personal data

Identification data (e.g. name, telephone number), Billing address

Retention periods

30 days 

 

Source of personal data

 

In case of private order the personal data comes directly and voluntarily from the data subject. In case of a company order the source of the data is the company as an independent data controller.

 

Service providers (general)

 

We involve external service providers with tasks such as web hosting, contract management, payment handling, ticketing and data hosting.  The initial website hosted on WIX.com is collecting only email address if the visitor is subscribing for later newsletter/events updates. We have chosen those service providers carefully and monitor them on a regular basis, especially regarding their diligent handling of and protection of the data that they store. All service providers are obliged to maintain confidentiality and to comply with the statutory provisions.

The below mentioned service providers act as our data processors:

 

Hosting: 

Wix.com, 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel

 

Payment service providers

 

We involve external payment service providers. Depending on the type of payment method you choose during the ordering process, we transfer the data used for the processing of payments (e.g. bank account or credit card data) to the financial institution charged with the payment or to payment service providers commissioned by us. Payment service providers also collect and process such data as controllers. In that case (payment service providers are data controllers) the data protection notice or privacy policy of the respective payment service provider applies.

 

Data transfer to other controllers

 

Principally, your personal data is forwarded to other controllers only if required for the fulfillment of a contractual obligation, or if we ourselves, or a third party, have a legitimate interest in the data transfer, or if you have given your consent. Particulars on the legal basis and the recipients or categories of recipients can be found in the Section – Processing purposes, processed categories of data, legal basis, retention periods.

Additionally, data may be transferred to other controllers when we are obliged to do so due to statutory regulations or enforceable administrative or judicial orders.

 

We redirect you to the third party ticketing portal provider:

 

ticketinghub.com, is a site operated by TicketingHub Ltd.

TicketingHub limited company registered in England and Wales under company number 08049536 and have our registered office at SUITE 5, 10 CHURCHILL SQUARE, WEST MALLING, ME19 4YU.

TicketingHub Privacy Policy: https://www.ticketinghub.com/legal/privacy-policy

 

All the personal data is later processed by Eurama Kft. The company dealing and accumulating all different services available on https://www.thingstodoinbudapest.agency/ website

 

Transfer to recipients outside the EEA

We might transfer personal data to recipients located outside the EEA into so-called third countries. 

In such cases, prior to the transfer we ensure that either the data recipient provides an appropriate level of data protection or that you have consented to the transfer.

External links

 

Our Website may contain links to internet pages of third parties, in particular providers who are not related to us. Upon clicking on the link, we have no influence on the collecting, processing and use of personal data possibly transmitted by clicking on the link to the third party (such as the IP address or the URL of the site on which the link is located) as the conduct of third parties is naturally beyond our control. We do not assume responsibility for the processing of personal data by third parties

Security 

Our employees and the companies providing services on our behalf, are obliged to confidentiality and to compliance with the applicable data protection laws.

We take all necessary technical and organizational measures to ensure an appropriate level of security and to protect your data that are administrated by us especially from the risks of unintended or unlawful destruction, manipulation, loss, change or unauthorized disclosure or unauthorized access. Our security measures are, pursuant to technological progress, constantly being improved.

Cookies

 

The website does not use cookies.

Data subject rights

 

To enforce your rights, please use the details provided in the Data controller section. In doing so, please ensure that an unambiguous identification of your person is possible.

 

Right to information and access: You have the right to obtain confirmation from us about whether or not your personal data is being processed, and, if this is the case, access to your personal data. 

 

Right to correction and deletion: You have the right to obtain the rectification of inaccurate personal data concerning yourself without undue delay from us. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement. This does not apply to data which is necessary for billing or accounting purposes or which is subject to a statutory retention period. If access to such data is not required, however, its processing is restricted (see the following).

 

Restriction of processing: You have the right to demand for    – as far as statutory requirements are fulfilled – restriction of the processing of your data.

 

Objection to data processing based on the legal basis of “legitimate interest”: In addition, you have the right to object to the processing of your personal data at any time, insofar as this is based on “legitimate interest”. We will then terminate the processing of your data, unless we demonstrate compelling legitimate grounds according to legal requirements which override your rights.

 

Withdrawal of consent: In case you consented to the processing of your data, you have the right to revoke this consent at any time with effect for the future. The lawfulness of data processing prior to your withdrawal remains unchanged.

 

Data portability: If the data processing is based on your Consent or the performance of a contract, you are entitled to receive data that you have provided to us in a structured, commonly used and machine-readable format or – if technically feasible – to demand that we transfer those data to a third party.

 

Right of complaint with supervisory authority (as all the services are being operated in Hungary): You have the right to lodge a complaint with a supervisory authority. You can appeal to the supervisory authority which is responsible for your place of residence or your state of residency or to the supervisory authority responsible for us. This is:

 

National Authority for Data Protection and Freedom of Information

H-1125 Budapest

Falk Miksa utca 9-11.

Hungary

 

Telefon: + 36 1 391 1400

Telefax: + 36 1 391 1410

E-Mail: privacy@naih.hu

Homepage: http://www.naih.hu

 

Contact

 

If you wish to contact us, or enforce your rights please find us at the address stated in the "Controller" section. 

 

Date 15-3-2024.