Játszóház Sárvár

This Privacy Policy aims to ensure that data subjects receive appropriate information regarding the data processing carried out by Trio Játszóház Kft. (hereinafter: "Data Controller") in accordance with data protection rules and can exercise their legal rights.

Data Controller:

The current details of the Data Controller are as follows:

• Name: Trio Játszóház Kft.
• Headquarters: 9600 Sárvár, Munkácsy Mihály utca 7
• Registration Number: 18 09 115490
• Tax Number: 32175231-1-18
• Represented by: Zsolt Balázs Varga
• E-mail: info@jatszohazsarvar.hu

Your data is processed based on Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), as well as Act CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information (Infotv.).

Scope of Processed Personal Data, Purpose, Duration, and Legal Basis of Data Processing

Purpose of Data Processing: Contacting

Visitors can contact the Data Controller through the website by writing to the e-mail address provided in the "Contact" menu or by filling out the contact form.

Data subject: the sender of the message

Scope of processed data: name, e-mail address, phone number, the message, and its subject

Legal basis for data processing: the consent of the data subject

Purpose of data processing: contacting the data controller

Data processing platform: electronic

Persons authorized to access the data: Data Controller and internal staff members whose job responsibilities involve access to and processing of the data.

Data transfer: The Data Controller does not transfer personal data to third parties, with the exception of data provision based on legal obligations (e.g., court, investigative authority, prosecutor's office, etc.).

Deadline for data deletion: Until the withdrawal of consent, or if necessary for the enforcement of a claim, for 5 years (statute of limitations under the Civil Code); otherwise, for 30 days following the receipt of the message.

Possible consequences of failing to provide data: failure of successful communication

Purpose of Data Processing: Data processed in connection with visiting the website

Purpose of Data Processing: "Cookies" used on the website

When a visitor visits the website at https://jatszohazsarvar.hu/, a small file called a "cookie" is placed on their computer, which may serve various purposes.

Some "cookies" we use are essential for the proper functioning of the site ("session cookies"), while others collect information regarding the use of the website (cookies required for statistics) to make the site more convenient and useful. Some "cookies" are temporary and disappear when the browser is closed, while persistent versions remain on your computer for a longer period.

The legal basis for processing cookies necessary for the website's operation is the legitimate interest of the Data Controller, for which a balancing test has been conducted.

"Session Cookies"

"Session cookies" are necessary for browsing the website and using basic functions; among other things, they allow the site to remember operations performed by the visitor on a given page, function, or service. Without session cookies, the smooth use of the website cannot be guaranteed. Their validity period covers the duration of the visit; "cookies" are automatically deleted at the end of the session or upon closing the browser.

Ensuring the proper session of the website is carried out in accordance with current legislation.

The "session cookies" used by the website are as follows:

"Cookies required for statistics"

We strive to fill the website with content preferred by visitors; for this, we need to generate statistics on visiting habits.

The website uses the following cookies for statistics:

"Cookies required for marketing activities"

The purpose of "cookies required for marketing activities" is to select advertisements that are most interesting or relevant to our visitors and display them on our website. We can also measure the performance of our campaigns with these.

When visiting the website, the Data Controller's specific "Cookie Policy" is available via the link in the pop-up window.

Purpose of Data Processing: Navigation to social media platforms

If you are logged into your account on a selected social network simultaneously, your visit will be associated with your user account at the time of your presence.

Links to Facebook and Instagram are indicated by icons operated by Meta Platforms Ireland Limited (Headquarters: 4 Grand Canal Square Grand Canal Harbour Dublin 662881), located in the top right corner of our page:

• a small letter "f" in a frame;
• a camera icon.

Further information on the use and data processing rules of Facebook and Instagram:
https://www.facebook.com/privacy/explanation
https://privacycenter.instagram.com/policy

The link to Twitter is indicated by a bird icon operated by Twitter, Inc (Headquarters: 1355 Market Street, San Francisco, CA, US), located in the top right corner of our page.
Further information on Twitter's use and data processing rules:
https://twitter.com/en/privacy

The link to LinkedIn is indicated by an "in" text in a frame operated by Microsoft Corporation (Headquarters: 605 W Maude Ave, Sunnyvale, CA 94085, USA), located in the top right corner of our page.
Further information on LinkedIn's use and data processing rules:
https://www.linkedin.com/legal/privacy-policy

Rights of Data Subjects:

Data subjects may at any time request information in writing from the Data Controller regarding the handling of their processed personal data, indicate requests for deletion or modification, and withdraw previously given consent via the provided contact details.
The data subject may not exercise the right to deletion in cases of data processing required by law.

Content of the right to information: Upon request, the Data Controller shall provide the data subject with the information listed in Articles 13 and 14 of the GDPR regarding the processing of personal data, as well as information under Articles 15-22 and 34 in a concise, intelligible form.

Content of the right of access: Upon inquiry, the Data Controller shall provide information on whether data processing concerning the data subject is underway. If processing is underway, the data subject is entitled to access the following:

1. personal data concerning them;
2. purpose(s) of data processing;
3. categories of personal data concerned;
4. persons to whom the data has been or will be disclosed;
5. duration of data storage;
6. right to rectification, deletion, and restriction of processing;
7. right to lodge a complaint with a court or supervisory authority;
8. source of the processed data;
9. transfer of processed data to a third country or international organization.

In case of a data request as above, the Data Controller shall issue a copy of the processed data corresponding to the request. The deadline for issuing requested data is 30 days from receipt. If necessary, this period may be extended by two additional months. The obligation to provide information can be ensured by operating a secure online system.

Right to rectification: The data subject may request the correction of inaccurate personal data concerning them.

Right to deletion: If any of the following reasons exist, the Data Controller shall delete the data concerning the data subject as soon as possible, but no later than 5 business days:

1. the data were processed unlawfully;
2. the data are no longer necessary for the original purpose;
3. the data subject withdraws consent, and there is no other legal basis for processing;
4. the data were collected in connection with the offer of information society services;
5. the data must be deleted to comply with a legal obligation.

The Data Controller cannot perform the deletion if processing is necessary for:

1. compliance with a legal obligation;
2. exercising the right of freedom of expression and information;
3. reasons of public interest;
4. archiving, scientific, research, or statistical purposes;
5. establishment, exercise, or defense of legal claims.
   

Right to restriction of processing: If any of the following reasons exist, the Data Controller shall restrict processing at the data subject's request:

1. the accuracy of the data is contested (restriction applies for the period of verification);
2. processing is unlawful, but the data subject opposes deletion and requests restriction instead;
3. the data are no longer needed for processing, but the data subject requires them for legal claims;

If a restriction is introduced, such data shall only be processed (except for storage) with:

1. the data subject's consent;
2. for legal claims;
3. for the protection of the rights of another person;
4. for reasons of important public interest.

Right to withdrawal: The data subject is entitled to withdraw their consent in writing at any time. In such cases, the Data Controller shall immediately and permanently delete all data processed, unless further storage is required by law or necessary for legal claims. The withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.

Right to data portability: The data subject is entitled to receive the personal data concerning them in a structured, commonly used, and machine-readable format and have it transmitted to another controller. The request shall be fulfilled within 30 days.

Please be informed that the Data Controller employs solutions providing a level of security appropriate to the current state of technology to protect electronically processed data.

Complaints regarding data processing can be addressed directly to the National Authority for Data Protection and Freedom of Information (Address: 1055 Budapest, Falk Miksa u. 9-11.; phone: +36-1-391-1400; e-mail: ugyfelszolgalat@naih.hu; website: www.naih.hu).

In case of infringement of rights, the data subject may turn to a court against the data controller. The court acts in an expedited manner. The lawsuit may also be initiated before the tribunal competent according to the data subject's place of residence or stay.

20.02.2023.