Privacy notice

The controller

Name

Komáromy Pékség Élelmiszeripari Korlátolt Felelősségű Társaság (short name: Komáromy Pékség Kft.)

Registered office and postal address

8315 Gyenesdiás, Strand utca 5.

Company registration number

Cg. 20-09-064835

Tax number

12600470-2-20

Registry court

Zalaegerszegi Törvényszék Cégbírósága (Court of Registration of the Zalaegerszeg Regional Court)

Phone

+36 83 316 168

Email

info@komaromypekseg.hu

Website

komaromypekseg.hu

Definitions

personal data

any information relating to an identified or identifiable natural person (data subject); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, a number, location data or an online identifier;

processing

any operation performed on personal data, whether or not by automated means, in particular collection, recording, storage, retrieval, consultation, use, disclosure, transmission, restriction, erasure or destruction;

controller

the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data;

processor

a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;

recipient

a natural or legal person, public authority, agency or another body to which the personal data are disclosed, whether a third party or not;

third party

a natural or legal person, public authority, agency or body other than the data subject, the controller, the processor and the persons who, under the direct authority of the controller or processor, are authorised to process personal data;

consent of the data subject

any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;

personal data breach

a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.

Principles of processing

Lawfulness, fairness and transparency

We process the data lawfully, fairly and in a way that is transparent to you.

Purpose limitation

We collect data only for specified, explicit and legitimate purposes and do not process them in a manner incompatible with those purposes.

Data minimisation

We process only data that are necessary for the purpose, adequate for it and relevant.

Accuracy

The data must be accurate and, where necessary, kept up to date; we rectify or erase inaccurate data without delay.

Storage limitation

We keep the data in a form that permits your identification only for as long as is necessary for the purpose.

Integrity and confidentiality

We protect the data with appropriate technical and organisational measures against unauthorised or unlawful processing and against accidental loss, destruction or damage.

Accountability

The bakery is responsible for complying with these principles and is able to demonstrate compliance.

Contacting us by email

Data processed

What you give in the message: typically your name, your email address (as the sender of the message), your phone number if you give it, the subject and your message. For a partner or catering enquiry, also what you tell us about the request, for example the name of the company or the accommodation, the town, the products requested, the quantity and frequency, the start date or the details of the event.

Purpose of processing

Answering your enquiry, preparing the offer requested and keeping in contact while the matter is dealt with.

Legal basis of processing

Your consent (Article 6(1)(a) GDPR); for a request for an offer, steps taken at your request prior to entering into a contract (Article 6(1)(b) GDPR).

Duration of processing

One year from the closing of the enquiry, unless the law requires longer retention (for example because a contract results from the enquiry): in that case, for the period the law requires.

Who may see the data

The bakery’s staff who handle the enquiry, and the bakery’s email provider, on whose server the mailbox runs (processor): Media Center Hungary Kft., 6000 Kecskemét, Sosztakovics utca 3. II/6., company registration number: Cg. 03-09-114492. We pass the data to a third party only if the law obliges us to.

How the data are stored

Electronically, in the bakery’s mailbox.

Contacting us by phone

The website’s hosting

Data processed

The IP address, the time of the request, the address of the page requested and the browser type.

Purpose of processing

Serving the website, its smooth operation and its security.

Legal basis of processing

The bakery’s legitimate interest in operating the website securely (Article 6(1)(f) GDPR).

Duration of processing

According to the hosting provider’s rules, for as long as is necessary to operate and secure the service.

Processor

Replit, Inc., 1001 E Hillsdale Blvd, Foster City, CA 94404, United States of America; privacy notice: replit.com/privacy

Transfer to a third country

Replit, Inc. is a company operating in the United States of America and, according to its privacy notice, runs its services mainly there, so these data may be transferred to the United States, outside the European Economic Area. The transfer is based on the standard data protection clauses adopted by the European Commission, contained in Replit’s data processing agreement (replit.com/dpa) (Article 46(2)(c) GDPR).

Service providers we use

The website’s hosting

Replit, Inc. (United States of America), processor; details: The website’s hosting.

Email

Media Center Hungary Kft. (Kecskemét), provider of the bakery’s mailbox, processor; details: Contacting us by email.

Google Search Console

A Google tool in which we see how the website appears in Google Search (aggregated data, for example how often a page appeared in the results and how often it was clicked). The website loads nothing from it, and we collect no personal data about our visitors through it.

Cookies and data stored in the browser

External sites

Automated decision-making and profiling

Data security

Personal data breach

Your rights

Access

You can ask whether we process personal data concerning you and, if so, which data, for what purpose, for how long and to whom we have passed them; you can also ask for a copy of the data (Article 15 GDPR).

Rectification

You can ask for inaccurate data to be rectified and incomplete data to be completed (Article 16 GDPR).

Erasure

You can ask for your data to be erased, for example if they are no longer needed or you have withdrawn your consent; a legal obligation may prevent erasure (Article 17 GDPR).

Restriction of processing

You can ask us only to store your data – for example until their accuracy has been checked – and not to carry out any other operation on them (Article 18 GDPR).

Data portability

You can receive the data we process by automated means on the basis of your consent or a contract in a structured, commonly used and machine-readable format, and ask us – where technically feasible – to transmit them to another controller (Article 20 GDPR).

Objection

You can object at any time, on grounds relating to your particular situation, to processing based on legitimate interest (the hosting’s logging) (Article 21 GDPR).

Withdrawal of consent

You can withdraw your consent at any time; this does not affect the lawfulness of processing carried out before the withdrawal (Article 7(3) GDPR).

How to exercise your rights

Remedies

Name

Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH; Hungarian National Authority for Data Protection and Freedom of Information)

Head office

1055 Budapest, Falk Miksa utca 9–11.

Postal address

1363 Budapest, Pf. 9.

Phone

+36 1 391 1400

Email

ugyfelszolgalat@naih.hu

Website

naih.hu

Children

Changes to this notice