Close
Introduction
Főnix Rendezvényszervező Közhasznú Nonprofit Kft. (4026 Debrecen, Hunyadi Street 1-3, hereinafter referred to as the “Service Provider”), as the data controller, acknowledges that the contents of this privacy notice are binding upon it. It undertakes to ensure that all data processing related to its activities complies with the requirements set forth in this policy and in applicable laws.
Főnix Rendezvényszervező Közhasznú Nonprofit Kft. is committed to protecting the personal data of its clients and partners, and considers respecting its clients’ right to information to be of the utmost importance.
Főnix Rendezvényszervező Közhasznú Nonprofit Kft. treats the personal data of its clients and partners as confidential and takes all necessary technical, organizational, and security measures to ensure the security of that data.
1. Name and contact information of the data controller
Name of the data controller: Főnix Rendezvényszervező Közhasznú Nonprofit Kft.
Mailing address of the data controller: 4026 Debrecen, Hunyadi Street 1-3.
Email address of the data controller: info@fonixinfo.hu
2. Purpose, Legal Basis, and Duration of Data Processing, as well as the Scope of Personal Data
Data processing in connection with the activities of Főnix Rendezvényszervező Közhasznú Nonprofit Kft. is based on voluntary consent. In certain cases, however, the processing, storage, and transfer of certain categories of data provided are required by law, in which case we will notify users separately.
We draw the attention of data providers to the fact that if they are not providing their own personal data, it is the data provider’s responsibility to obtain the consent of the data subject.
This privacy notice of Főnix Rendezvényszervező Közhasznú Nonprofit Kft. is in accordance with applicable data protection laws, in particular the following:
2.1. Ticket Sales
Purpose of data processing: Issuing invoices to customers
Legal basis for data processing: The provisions of Act CXII of 2011 (Infotv.) and Act C of 2000 on Accounting (Sztv.)
Types of personal data processed: customer’s name and address
Duration of data processing: 8 years
Legal basis for data transfer: data processing is necessary for the performance of a contract (Article 6(1)(b) of the GDPR)
2.2. Events
The Visitor acknowledges that at the free events organized by Főnix Rendezvényszervező Közhasznú Nonprofit Kft., video and audio recordings of the event may be made, in which the Visitor may appear. By participating in a free event, the Visitor acknowledges that video and audio recordings may be made of them, which Főnix Rendezvényszervező Közhasznú Nonprofit Kft. may use, reproduce, publish, and distribute without further compensation.
Legal basis for data processing: the data subject’s voluntary consent by participating in the event
Type of personal data processed: Visitors’ image and audio recordings
Duration of data processing: until the data subject withdraws their consent
3. Electronic Surveillance System
Buildings operated by Főnix Rendezvényszervező Közhasznú Nonprofit Kft. are equipped with an electronic surveillance and recording system, as part of which cameras have been installed. The exact locations of the cameras and the names of the monitored areas can be found on the information board located at the reception desk of Főnix Rendezvényszervező Közhasznú Nonprofit Kft.
Data Controller:
Purpose of data processing: to prevent and detect violations of the law, apprehend perpetrators, and provide evidence of such violations in order to protect human life, physical integrity, and property; to identify individuals entering the premises without authorization, to record the fact of their entry, documenting the activities of unauthorized occupants, and investigating the circumstances of any workplace or other accidents that may occur.
Legal basis for data processing: for guests, the data subject’s consent upon entering the building; for employees, Section 11 of Act I of 2012 on the Labor Code (Mt.), as well as the GDPR. Article 6(1)(f), as Főnix Rendezvényszervező Közhasznú Nonprofit Kft. has a legitimate interest in protecting its property.
Types of personal data processed: the facial images of persons entering the building as seen in the video recordings, as well as other personal data recorded by the surveillance system.
Duration of data processing: three business days if the data is not used (Section 31(3)(c) of the Labor Code)
Use of Recordings
The following are authorized to view the live feed from the cameras: employees of Főnix Rendezvényszervező Közhasznú Nonprofit Kft.
The following are authorized to view the camera recordings: employees of Főnix Rendezvényszervező Közhasznú Nonprofit Kft.
The following are authorized to save camera recordings to storage media: Főnix Rendezvényszervező Közhasznú Nonprofit Kft.
Authorized persons may access the stored recordings from the video surveillance and recording system operated by Főnix Rendezvényszervező Közhasznú Nonprofit Kft. solely for the purpose of proving violations committed against human life, physical integrity, or property, and for the purpose of identifying the perpetrator. Any data subject whose rights or legitimate interests are affected by the recording may, upon demonstrating such rights or legitimate interests, request that the data controller not destroy or delete the recording until a court or authority issues a request, but for no longer than 30 days. A person appearing in the recording may request information about the recording made of them by the electronic surveillance system, request a copy of the recording, or, if another person also appears in the recording, gain access to the recording. The data subject may request the deletion of the recording made of them, the modification of data related to the recording, or may object to the data processing.
The data controller shall record in a log any access to the recorded footage, including the name of the person who accessed it, the reason for accessing the data, and the time of access.
Data transfer: in the event of administrative or criminal proceedings, to the authorities and courts conducting such proceedings.
Scope of data transferred: recordings made by the camera system that contain relevant information.
Legal basis for data transfers: Section 71(1), Section 151(2)(a), and Section 171(2) of the Criminal Procedure Code, as well as Section 75(1)(a) and Section 78(3) of the Act on the Protection of Personal Data.
4. The legal framework, legal basis, and purpose of data processing on the website; the scope of the personal data processed; and the duration of data processing
Information Regarding the Use of Cookies
What is a cookie?
A cookie is a packet of alphanumeric information with variable content sent by a web server, which is stored on the user’s computer for a predetermined period of time. The use of cookies makes it possible to retrieve certain data about a visitor and to track their internet usage. Thus, cookies can be used to precisely determine a user’s areas of interest, internet usage habits, and website visit history. Since cookies function as a kind of tag that allows a website to recognize a returning visitor, they can also be used to store the username and password valid for that particular site.
If, during a website visit, the user’s browser sends back a cookie previously saved to the hard drive, the provider that sent the cookie can link the current visit to previous ones; however, since cookies are tied to the domain, the provider can do so only with respect to its own content. Cookies themselves are not capable of identifying the user; they are only capable of recognizing the visitor’s computer.
The legal framework and legal basis for cookies:
The legal basis for data processing is provided by the provisions of Act CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information (Infotv.) and Act CVIII of 2001 on Certain Issues Related to Electronic Commerce Services and Information Society Services. The legal basis for data processing is your consent, in accordance with Section 5(1)(a) of the Infotv.
Key features of the cookies used by this website:
_ga, _gid, _gat: Google Analytics tracking cookies
5. Data Processing Related to Orders and Billing
Legal Background and Legal Basis for Data Processing:
The legal framework for data processing is provided by the provisions of Act CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information (Infotv.) and Act C of 2000 on Accounting (Sztv.). The legal basis for data processing is your consent in accordance with Section 5(1)(a) of the Infotv., and—in the event that you withdraw your consent—the fulfillment of the legal obligation imposed on the Data Controller under Section 6(5)(a) of the Infotv., as set forth in the Sztv.
Purpose of data processing: To issue invoices in compliance with the law and to fulfill the obligation to retain accounting documents. Pursuant to Sections 169(1) and (2) of the Accounting Act, business entities must retain accounting documents that directly or indirectly support their bookkeeping records.
Scope of processed data: name, address, email address, phone number.
Duration of data processing: Pursuant to Section 169(2) of the Accounting Act, issued invoices must be retained for 8 years from the date of issuance. Please be advised that if you withdraw your consent to the issuance of the invoice, the Data Controller is entitled, pursuant to Section 6(5)(a) of the Information Act, to retain your personal data obtained during the issuance of the invoice for 8 years.
Possible consequences of failing to provide the data: failure to purchase a ticket.
6. Data Processing Related to the Sending of Newsletters
Legal Background and Legal Basis for Data Processing: The legal framework for data processing is provided by Act CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information (Infotv.) and Act XLVIII of 2008 on the Fundamental Conditions and Certain Restrictions of Commercial Advertising Activities (Grt.). The legal basis for data processing is your consent, in accordance with Section 5(1)(a) of the Infotv. and Sections 6(1)-(2) of the Grt.
Purpose of data processing: The purpose of data processing is to keep you informed about the latest and best offers and promotions.
Scope of data processed: name, address, email address, ZIP code
Duration of data processing: until the data subject withdraws their consent
7. Data Processing Related to Accounting
Name of the Data Controller: Főnix Rendezvényszervező Közhasznú Nonprofit Kft.
Mailing address of the Data Controller: 4026 Debrecen, Hunyadi Street 1-3.
Email address of the Data Controller: info@fonixinfo.hu
The Data Processor assists in the bookkeeping of accounting documents based on a written contract concluded with the Data Controller. In doing so, the Data Processor processes the data subject’s name and address to the extent necessary for accounting records, for the period specified in Section 169(2) of the Accounting Act, and deletes the data immediately thereafter.
8. Marketing Database
Főnix Rendezvényszervező Közhasznú Nonprofit Kft. processes the data of individuals who have given their consent to be contacted for direct marketing purposes.
Purpose of data processing: building a database for business purposes; sending email newsletters containing commercial advertisements to data subjects; creating personalized offers using online analytical data; and forwarding offers from the data controllers and their partners.
Only individuals who have reached the age of 16 may consent to direct marketing communications.
Legal basis for data processing: the data subject’s voluntary consent, Section 6(5) of the Grt.
Scope of processed data: identification number, name, address, email address, phone number, consent given for direct marketing communications, as well as analytical data stored by the system regarding sign-ups and sign-offs, the sending, delivery, and opening of messages, and the data subjects’ online activity (e.g., date and time of events, content viewed, computer IP address, reason for undeliverability, purchasing habits, demographic data, and transaction data).
Duration of data processing: until the data subject withdraws their consent.
Possible consequences of failing to provide data: the data subject will not be informed of offers from the data controllers and their partners.
You may request the withdrawal of your consent to receive direct marketing messages and the deletion or modification of your personal data using the following contact information:
by email at info@fonixinfo.hu, or
by mail addressed to Főnix Rendezvényszervező Közhasznú Nonprofit Kft., 4026 Debrecen, Hunyadi Street 1-3.
Főnix Rendezvényszervező Közhasznú Nonprofit Kft. uses Google Analytics servers as an external service provider to independently measure and audit website traffic and other web analytics data.
9. Data Security Measures
The Data Controller declares that it has implemented appropriate security measures to protect personal data against unauthorized access, alteration, disclosure, deletion, or destruction, as well as against accidental loss or damage, and against becoming inaccessible due to changes in the technology used.
10. Your Rights Regarding Data Processing
During the period of data processing, you have the following rights: You may request information from the Data Controller regarding the processing of your personal data during the period of data processing. The Data Controller will, as soon as possible after the request is submitted, but no later than 30 days, provide you with information in writing and in an easily understandable form regarding the data being processed, the purpose of data processing, its legal basis, and its duration; furthermore—if the data has been transferred—regarding who receives or has received the data and for what purpose.
You may request that the Data Controller correct your personal data at any time during the period of data processing. The Data Controller will comply with your request within 15 days at the latest.
You have the right to request the erasure of your personal data, to which the Data Controller will comply within 15 days at the latest. The right to erasure does not apply if the Data Controller is required by law to continue storing the data, nor does it apply if, in accordance with Section 6(5) of the Information Act, the Data Controller is entitled to continue processing the personal data (for example, in connection with billing).
You may request that the Data Controller block your personal data if the permanent erasure of such data would infringe upon your legitimate interests. Personal data blocked in this manner may be processed only for as long as the purpose that precluded the erasure of the personal data remains in effect.
You may object to the processing of your personal data if the processing or transfer of personal data is necessary solely to fulfill a legal obligation applicable to the Data Controller or to pursue the legitimate interests of the Data Controller, the data recipient, or a third party, except in cases of mandatory data processing and in the cases specified in Section 6(5) of the Information Act; if the use or transfer of personal data—without your consent—is for the purposes of direct marketing, public opinion polling, or scientific research.
The Data Controller will review the objection as soon as possible after the request is submitted, but no later than 15 days, make a decision on its merits, and notify you of its decision in writing. If the Data Controller does not comply with the data subject’s request for rectification, blocking, or erasure, it shall, within 30 days of receiving the request, provide the factual and legal grounds for rejecting the request for rectification, blocking, or erasure in writing or, with the data subject’s consent, electronically.
If you believe that the Data Controller has violated any statutory provision regarding data processing or has failed to comply with a request of yours, you may initiate an investigation by the National Authority for Data Protection and Freedom of Information to put an end to the alleged unlawful data processing (mailing address: 1530 Budapest, P.O. Box 5, email: ugyfelszolgalat@naih.hu).
We also inform you that in the event of a violation of the statutory provisions governing data processing, or if the Data Controller has failed to comply with any of your requests, you may bring a lawsuit against the Data Controller.
11. Right to Information
At the request of the data subject, Főnix Rendezvényszervező Közhasznú Nonprofit Kft. will take appropriate measures to ensure that data subjects receive all information regarding the processing of personal data as referred to in Articles 13 and 14 of the GDPR, as well as all information specified in Articles 15–22 and 34, in a concise, transparent, intelligible, and easily accessible form, using clear and plain language
12. The Data Subject’s Right of Access
The data subject has the right to receive confirmation from the data controller as to whether his or her personal data are being processed, and if such processing is taking place, the data subject has the right to access the personal data and related information.
13. Right to Rectification
Főnix Rendezvényszervező Közhasznú Nonprofit Kft. will rectify personal data if it does not correspond to reality and the company has access to personal data that does correspond to reality.
14. Right to Erasure
The data subject is entitled to have Főnix Rendezvényszervező Közhasznú Nonprofit Kft. erase personal data concerning him or her upon request and without undue delay if any of the following grounds apply:
– the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
– the data subject withdraws the consent on which the processing is based, and there is no other legal basis for the processing;
– the data subject objects to the processing, and there are no legitimate grounds for the processing that override the data subject’s interests;
– the personal data has been processed unlawfully;
– the personal data must be erased to comply with a legal obligation under Union or Member State law to which the data controller is subject;
– the personal data were collected in connection with the offering of information society services.
Erasure of the data may not be requested if the processing is necessary: for the exercise of the right to freedom of expression and the right to information; to comply with a legal obligation under Union or Member State law to which the data controller is subject, or to perform a task carried out in the public interest or in the exercise of official authority vested in the data controller; for reasons of public interest in the area of public health, or for archiving, scientific, and historical research purposes, or for statistical purposes; or for the establishment, exercise, or defense of legal claims
15. The Right to Restriction of Data Processing
At the request of the data subject, Főnix Rendezvényszervező Közhasznú Nonprofit Kft. shall restrict data processing if any of the following conditions are met:
– the data subject contests the accuracy of the personal data; in this case, the restriction applies for the period necessary to verify the accuracy of the personal data.
– the data processing is unlawful, and the data subject opposes the erasure of the data and instead requests the restriction of its use.
– the data controller no longer needs the personal data for the purposes of data processing, but the data subject requires it for the establishment, exercise, or defense of legal claims.
– the data subject has objected to the data processing.
If data processing is subject to restriction, personal data may be processed—with the exception of storage—only with the data subject’s consent, or for the purpose of asserting, exercising, or defending legal claims, or to protect the rights of another natural or legal person, or for reasons of substantial public interest of the Union or of a Member State.
Főnix Rendezvényszervező Közhasznú Nonprofit Kft. shall inform the data subject in advance of the lifting of the restriction on data processing.
16. Right to Data Portability
The data subject has the right to receive the personal data concerning him or her, which he or she has provided to the data controller, in a structured, commonly used, and machine-readable format, and to transmit that data to another data controller.
17. Right to Object
The data subject has the right to object at any time, on grounds relating to his or her particular situation, to the processing of his or her personal data that is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller, or to the processing necessary to pursue the legitimate interests of the data controller or a third party.
18. Right to Withdraw Consent
The data subject has the right to withdraw their consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent prior to the withdrawal.
19. Right to Seek Redress Before a Court
In the event of a violation of their rights, the data subject may bring a claim against the data controller before the court with jurisdiction over the defendant’s registered office or the data subject’s place of residence (at the data subject’s discretion). The court shall hear the case on an expedited basis. Lawsuits filed in connection with the protection of personal data are exempt from court fees.
20. Proceedings Before the Data Protection Authority
Complaints may be filed with the National Authority for Data Protection and Freedom of Information: Name: National Authority for Data Protection and Freedom of Information; Registered Office: 1125 Budapest, Szilágyi Erzsébet fasor 22/C.
21. Amendments to the Privacy Policy
The Data Controller reserves the right to amend this Privacy Policy.
Valid from: May 25, 2018
