Testtől Lélekig Kft. July 2024

The following Privacy Notice aims to inform you about the data processing operations performed by Testtől Lélekig Kft. (registered office: 1067 Budapest, Eötvös Street 51, 4th floor, 1st, company registration number: 01 09 396767, tax number: 24887315-2-42) in connection with the operation of its website budalaszlo.hu, its various programs, consultations, other services, and the sending of newsletters, in compliance with the provisions of the European Parliament and Council Regulation (EU) 2016/679 (April 27, 2016) on the protection of individuals about the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation – GDPR), as well as the applicable Hungarian laws.

For the operation of the website, the provision of services, and the sending of newsletters, Testtől Lélekig Kft. is considered the data controller (hereinafter referred to as the Data Controller). The contact details of the Data Controller are info@drlaszlobuda.com

In its data processing activities, the Data Controller complies with the provisions of the applicable laws and fully respects individuals’ fundamental rights and privacy, with particular attention to the requirements of the General Data Protection Regulation.

1. Individual Consultations and Contact Inquiries

The Data Controller allows individuals to sign up for consultations and make contact inquiries through the www.drlaszlobuda.com website. (purpose of data processing)

To achieve this data processing purpose, the Data Controller uses the following data provided by you:

1. For signing up for individual consultations: name, email, salutation, phone number, personal message;
2. For individual consultations: name, address, billing information, payment method;
3. Other data the user provides via the website (contact menu) or other means (e.g., email): name, email, salutation, personal message.

For the data processing activities specified in points 1 and 3, the legal basis is your consent (Article 6(1)(a) of the Regulation), which you provide when signing up or making contact. Data related to signing up for individual consultations (point 1) will be deleted at the end of the consultation year. In contrast, data provided during contact inquiries will be deleted at the end of the year following the conclution of your inquiry or request.

Data related to tax obligations (point 2) will be stored for eight years after the end of the individual consultation, in compliance with the accounting obligations specified in Section 169 of Act C of 2000.

Your feedback will be published anonymously (only displaying your first name) on the Data Controller’s website, so it will not be considered personal data processing.

If you do not provide your data, we cannot provide you with the sign-up, participation, consultation, or contact inquiry services. Data related to sign-up will only be forwarded to other service providers involved in the program or service (e.g., accommodation) if necessary.

2. Newsletter Subscription and Sending Newsletters

The Data Controller offers individuals the opportunity to subscribe to its newsletter using the “Subscribe to Newsletter” function. The subscription option always includes information about the main features of data processing.

The newsletters provided by the Data Controller contain helpful, interesting, and valuable information and program recommendations. The content is not personalized. For the purpose of sending newsletters, the Data Controller processes only the data prescribed by law (Advertising Act, Section 6): name, email address, and subscription date.

Your data will be used solely to send you our newsletter. The Data Controller will not transfer the processed data to other data controllers.

Data processing is based on your voluntarily provided consent (the legal basis for data processing) authorizing us to send newsletters. Upon withdrawing your consent or using the unsubscribe function in the newsletter, your data will be deleted immediately (duration of data processing).

In June 2022 and every two years after that, we review the accuracy of our data and delete inactive (e.g., not opened any of our newsletters) or non-functioning (bounced emails) email addresses – even without your cancellation.

3. Data Processing Related to Purchases in the Webshop on https://drlaszlobuda.com

To fulfill your purchase in the Webshop on the website, we use your data (purpose of data processing). When you make a purchase, you enter into a contract with us by accepting our General Terms and Conditions (GTC), in which we commit to processing the data provided during the purchase solely to fulfil the purchase.

To ensure smooth processing of your purchase, we process the following data:

• Personal data provided during the order (name, email address, phone number),
• Identification data related to the purchased product,
• Order ID, date,
• Data provided in connection with billing,
• Discount-related data,
• Data provided regarding the payment method,
• Other information provided by you,
• Fulfillment of warranty claims and complaint handling.

We process the above data to fulfill the contract (General Terms and Conditions—GTC) based on Article 6(1)(b) of the Regulation. The contract is concluded by your acceptance of the GTC during the purchase process. If you do not provide your data or provide it incorrectly, we will not be able to ensure the purchase process or the fulfillment of the purchase for you.

Data related to tax obligations will be stored for eight years after the completion of the purchase, in compliance with the accounting obligations specified in Sections 169(1)-(2) of Act C of 2000. When enforcing your warranty claims, your data will be processed to fulfill the GTC (based on Article 6(1)(b) of the Regulation) and for compliance with the relevant legal requirements (e.g., Decree 19/2014 (IV. 29.) NGM, Government Decree 270/2020 (VI. 12.)) based on Article 6(1)(c) of the Regulation. If your complaint does not fall within the scope of warranties, your data will be deleted 30 days after the case is closed.

If you choose card payment, the payment service provider OTP Mobil Kft. (Simple Pay) will be provided with the data necessary to facilitate the security of the payment service (name, email address, phone number). The nature and purpose of the data processing activities performed by the data processor are detailed in the SimplePay Privacy Policy, available at http://simplepay.hu/vasarlo-aff.

4. Data Security Provisions

We acknowledge the importance of the security of your personal and business data. Therefore, the Data Controller requests data only through encrypted channels during its data processing activities, ensuring that all data traffic and communication are conducted through encrypted channels. The data provided is stored by the Data Controller with appropriate security measures, minimizing the risk of potential security incidents. Only data necessary for data processing is requested.

The Data Controller stores the processed data in the IT system provided by its contractual data processing partners, Netlight Consulting Software Development and Services Ltd. (registered office: 1148 Budapest, Bánki Donát Street 12/B, 1st floor, 9) and on the hosting provided by Tárhely.Eu Ltd. (registered office: Budapest, 1097, Könyves Kálmán Blvd. 12-14) within the European Union. Our contractual partner, Gábor Kanyó (sole trader, 6000 Kecskemét, Horog Street 2) provides general system support and operational advice.

5. Your Rights

You can exercise your rights under the law by contacting info@drlaszlobuda.com which includes, within the framework of the law:

• Request access to your data and a copy of it (Article 15),
• Request information about the main characteristics  of data processing (purpose, scope of processed data, involved data processors, duration of data processing) (Article 15),
• Withdraw your consent at any time (Article 7(3)),
• Request the rectification of inaccurate personal data or the completion of incomplete personal data without undue delay (Article 16),
• Request the deletion of your data without undue delay (Article 17) if:

• The personal data is no longer needed for the purposes specified in points 1 and 2 (providing professional materials, sending newsletters);

• You withdraw your consent, and there is no other legal basis for further data processing;

• You object to the sending of newsletters;

• Your data was processed unlawfully;

• Data cannot be deleted if necessary for asserting, exercising, or defending legal claims.
• In some instances, request the restriction of data processing (Article 18),
• Request the data you provided to be received in a widely used, machine-readable format or to be directly transferred to another data controller (Article 20),
• Object to the sending of newsletters – after the objection, your data cannot be processed for this purpose (Article 21(2)-(3)),
• Initiate proceedings with the supervisory authority of your place of residence, workplace, or the location of the alleged infringement (Article 77). Hungary’s supervisory authority is the National Authority for Data Protection and Freedom of Information. (Budapest, 1055, Budapest, Falk Miksa Street 9-11., ügyfelszolgalat@naih.hu)

In case of a violation, you also have the option to initiate litigation against the data controller or data processor before the court of the Member State where the data controller or data processor is located, or before the competent court of your place of residence.

Upon your inquiry, we will respond with the requested information within a maximum of 30 days, following identification, using the provided contact details.