Privacy Policy | InnerAxis

Privacy Notice

The purpose of this privacy notice is to explain in detail how personal data is processed in connection with the services, website(s) and other communications operated by Nabozny Natasa Viktória (hereinafter: the Service Provider).

Details of the Data Controller

Name: Natasa Viktória Nábozny
Registered office: 2890 Tata, 3 Boglárka Street.
Email: naboznymetodus@gmail.com
Telephone number: +36 20 264 8875
Registration number: 55053015
Tax number: 56411173-1-31

The scope of personal data processed The Service Provider may process the following personal data:

Full name
Email address
Telephone number
Address (for billing purposes)
Birth details (e.g. for numerological or astrological analysis) • Information relating to health (data shared during therapy or coaching sessions)
Additional details provided during online registration
Personal details, educational qualifications (for registration of training in the FAR system)

The legal basis for data processing The legal basis for data processing is Article 6(1)(a), (b) and (c) of the General Data Protection Regulation (GDPR):

Consent given by the data subject (e.g. subscribing to a newsletter, registering) • Performance of a contract (e.g. coaching, therapy, mediation)
Compliance with statutory obligations (e.g. invoicing, the FAR system)

The purpose of data processing

Provision of services (one-to-one sessions, online or face-to-face coaching, therapy, mediation)
Keeping in touch
Managing appointments
Invoicing
Ensuring access to online systems (e.g. video and written content)
Managing content available to registered users
Sending out a newsletter, provided the user has given their consent (upon registration, they are automatically subscribed to the newsletter, from which they may unsubscribe at any time) • Course registration for courses subject to notification

Data transfer; disclosure of data to third parties The Service Provider shall not disclose personal data to third parties, unless:

the data subject gives their prior consent to this
in order to comply with a legal obligation • in the case of tax and accounting services (e.g. bookkeeper)

Retention period for data

The Service Provider shall process the data until the purpose of data processing ceases to apply, or until the data is erased at the request of the data subject.
The Service Provider retains data relating to invoicing for 8 years, in accordance with the relevant legal provisions.

The rights of data subjects Data subjects are entitled to:

to access their personal data,
to request that they be corrected,
to request that they be deleted,
to restrict data processing,
to object to the processing of personal data,
withdrawal of consent,
to lodge a complaint with the NAIH (National Authority for Data Protection and Freedom of Information)

Managing cookies

The Service Provider’s website may use cookies to ensure the website functions properly, to enhance security and to improve the user experience. Detailed information on how cookies work, the different types of cookies and the relevant settings is available on the website.

Information on the use of cookies

What is a cookie?

The Data Controller uses so-called cookies when you visit the website. A cookie is a piece of information consisting of letters and numbers that our website sends to your browser for the purpose of saving certain settings, facilitate the use of our website and assist us in collecting some relevant statistical information about our visitors.

Some cookies do not contain personal information and cannot be used to identify individual users; however, some contain a unique identifier – a secret, randomly generated sequence of numbers – which is stored on your device, thereby ensuring that you can be identified. The duration of each cookie is set out in the relevant description for that cookie.

The legal framework and legal basis for cookies:

We generally distinguish between three types of cookies: essential cookies, which are necessary for the Website to function properly; and cookies used for statistical and marketing purposes.

The legal basis for data processing, pursuant to Article 6(1)(a) of the Regulation, is your consent in the case of cookies used for statistical and marketing purposes, and, in accordance with Article 6(1)(f) of the Regulation, the legitimate interest necessary to ensure the functioning of the Website, in the case of cookies necessary for its operation.

The main characteristics of the cookies used by the website:

Cookies essential for the website to function:

If you do not accept the use of these cookies, certain features may not be available to you.

Cookies that are strictly necessary for the website to function: These cookies are essential for using the website and enable you to use its basic functions. Without them, many of the site’s features will not be

is available to you. The lifetime of these types of cookies is limited strictly to the duration of the session.

Session cookie: These cookies store the visitor’s location, browser language and payment currency; they remain active until the browser is closed, or for a maximum of 2 hours.

Mobile version, design cookie: It detects the device the visitor is using and switches to full-screen view on mobile devices. It is valid for 365 days.

Cookie acceptance cookie: When you arrive on the site, you accept the statement regarding the storage of cookies in the pop-up window. They remain stored for 365 days.

previousURL Saves the page you previously visited. Cookie lifetime: the duration of the session.

CookiesOK Consent to the use of cookies. The cookie is valid for 1 week. Cookies used for statistical purposes:

Google Analytics cookie: Google Analytics is Google’s analytics tool, which helps website and app owners gain a more accurate picture of their visitors„ activities. The service may use cookies to collect information and generate reports based on statistical data regarding website usage, without individually identifying visitors to Google. The main cookie used by Google Analytics is the ”__ga’ cookie. In addition to generating reports based on website usage statistics, Google Analytics – together with some of the advertising cookies described above – can also be used to display more relevant adverts in Google products (such as Google Search) and across the internet.

Cookies used to improve the user experience: These cookies collect information about the user’s use of the website, such as which pages they visit most frequently or what error messages they receive from the website. These cookies do not collect any information that identifies the visitor; in other words, they work with entirely general, anonymous information. We use the data obtained from these cookies to improve the website’s performance. The lifespan of this type of cookie is limited strictly to the duration of the session.

Cookies used for marketing purposes:

Google AdWords cookie When someone visits our website, the visitor’s cookie ID is added to the remarketing list. Google uses cookies – such as the NID and SID cookies – in Google products, for example to personalise the adverts displayed in Google Search. These cookies are used, for example, to remember your most recent searches, your previous interactions with adverts from specific advertisers or with search results, and your visits to advertisers’ websites. The AdWords conversion tracking feature uses cookies. Cookies are stored on the user’s computer to track sales and other conversions resulting from an advert when the user clicks on an advert. Some common uses of cookies include: selecting adverts based on what is relevant to a particular user, refining reports on campaign performance, and avoiding the display of adverts that the user has already viewed.

Remarketing cookies: Ads may appear when previous visitors or users browse other websites on the Google Display Network or search for terms related to your products or services

Facebook pixel (Facebook cookie) The Facebook pixel is a piece of code that enables the website to generate reports on conversions, create target audiences, and provide the website owner with detailed analytics on how visitors use the site. Using the Facebook pixel, you can display personalised offers and adverts to website visitors on the Facebook platform. You can read Facebook’s Privacy Policy here: https://www.facebook.com/privacy/explanation

Other cookies:

MailerLite cookies Dealing with pop-up windows.

You can find further information on deleting cookies via the links below:

Internet Explorer: http://windows.microsoft.com/en-us/internet explorer/delete-manage-cookies#ie=ie-11
Firefox: https://support.mozilla.org/en-US/kb/cookies-information websites-store-on-your-computer
Mozilla: https://support.mozilla.org/hu/kb/weboldalak-altal-elhelyezett sutik-torlese-szamito
Safari: https://support.apple.com/guide/safari/manage-cookies-and website-data-sfri11471/mac
Chrome: https://support.google.com/chrome/answer/95647 • Edge: https://support.microsoft.com/hu-hu/help/4027947/microsoft-edge delete-cookies

Data processed for the purposes of concluding and fulfilling contracts

Several instances of data processing may occur in connection with the conclusion and performance of the contract. Please note that data processing relating to the handling of complaints and warranty claims will only take place if you exercise any of the rights mentioned.

If you do not make any purchases via the online shop, but are simply a visitor to the online shop, the information set out under ‘Data processing for marketing purposes’ may apply to you, provided that you give us your consent for marketing purposes.

Data processing carried out for the purposes of concluding and fulfilling contracts: in more detail:

Contact us

For example, if you contact us via email, the enquiry form or by telephone with a question regarding a service or product. You are not required to contact us in advance; you can place an order via the online shop at any time without doing so.

Data processed

You can get in touch by sending an email to the Seller’s email address. The data processed consists of the details you provide when you get in touch.

Duration of data processing

We will only process the data until the contact has been concluded.

The legal basis for data processing

Your voluntary consent, which you provide to the Data Controller when you contact us. [Data processing pursuant to Article 6(1)(a) of the Regulation]

Order processing

Data processing activities are necessary during the processing of orders in order to fulfil the contract.

Data processed

In the course of data processing, the Data Controller processes your name, address, telephone number, email address, the details of the Goods purchased or the workshop/online course material, the IP address associated with the order and the date of purchase.

If you have placed an order via the online shop, the processing of your personal data and the provision of such data are essential for the performance of the contract.

Duration of data processing

We retain the data for 5 years, in accordance with the limitation period under civil law.

The legal basis for data processing

Performance of the contract. [Data processing pursuant to Article 6(1)(b) of the Regulation]

Issuing the invoice

The data processing is carried out for the purpose of issuing invoices in accordance with the law and fulfilling the obligation to retain accounting documents. Pursuant to Sections 169(1) and (2) of the Accounting Act, business entities must retain accounting documents that directly or indirectly support their accounting records.

Data processed

Name, address, email address, telephone number.

Duration of data processing

In accordance with Section 169(2) of the Accounting Act, invoices must be retained for 8 years from the date of issue.

The legal basis for data processing

Pursuant to Section 159(1) of Act CXXVII of 2007 on Value Added Tax, pursuant to Section 159(1) of Act CXXVII of 2007 on Value Added Tax, the issue of an invoice is mandatory and, pursuant to Section 169(2) of Act C of 2000 on Accounting, it must be retained for 8 years [Data processing in accordance with Article 6(1)(c) of the Regulation].

Handling warranty and guarantee claims

We must handle warranty and guarantee claims in accordance with the provisions of Decree No. 19/2014 (29 April) of the Ministry for National Economy (NGM), which also sets out how we are to handle your claim.

Data processed

When handling warranty and guarantee claims, we must proceed in accordance with the provisions of NGM Decree No. 19/2014 (29 April).

Under the terms of the regulation, we are obliged to draw up a report on any warranty or guarantee claim submitted to us, in which we shall record:

your name, address and a statement confirming that you consent to the processing of your personal data recorded in the minutes in accordance with the provisions of the Regulation,
the description and purchase price of the movable property sold under the contract concluded between you and us,
the date of performance of the contract,
the date on which the fault was reported,
a description of the fault,
the right you wish to exercise on the basis of a warranty or guarantee claim, and
the method of settling a warranty or guarantee claim, or the grounds for rejecting the claim or the right sought to be enforced on the basis thereof.

If we take delivery of the Goods purchased from you, we must issue a receipt of delivery, which must state

your name and address,
the data required to identify the item,
the date of receipt of the item, and
the time when you can collect the repaired item.

Duration of data processing

The business is obliged to retain the record of a consumer’s warranty or guarantee claim for three years from the date it was drawn up, and to produce it at the request of the supervisory authority.

The legal basis for data processing

The legal basis for data processing is Decree No. 19/2014 (29 April) [Section 4(1) and Section 6(1)] [Data processing pursuant to Article 6(1)(c) of the Regulation].

Handling other consumer protection complaints

The data processing takes place for the purpose of handling consumer protection complaints. If you have lodged a complaint with us, data processing and the provision of data are essential.

Data processed

Customer’s name, telephone number, email address, details of the complaint.

Duration of data processing

We retain consumer protection complaints for 3 years in accordance with the Consumer Protection Act.

The legal basis for data processing

Whether or not you choose to lodge a complaint with us is entirely at your discretion; however, should you do so, we are obliged to retain the complaint for a period of three years in accordance with Section 17/A(7) of Act CLV of 1997 on Consumer Protection [Data processing in accordance with Article 6(1)(c) of the Regulation].

Data processed in connection with the verification of consent

When you register, place an order or subscribe to a newsletter, the IT system stores the IT data relating to your consent for the purposes of future verification.

Data processed

The date of consent and the IP address concerned.

Duration of data processing

Due to legal requirements, it must be possible to provide evidence of consent at a later date; therefore, the data will be retained for the limitation period following the cessation of data processing.

The legal basis for data processing

Article 7(1) of the Regulation lays down this obligation. [Data processing pursuant to Article 6(1)(c) of the Regulation]

Data processing for marketing purposes

Data processing in connection with the sending of newsletters

The data processing is carried out for the purpose of sending out newsletters.

Data processed

Name, email address.

Duration of data processing

Until the data subject withdraws their consent.

The legal basis for data processing

Your voluntary consent, which you provide to the Data Controller by subscribing to the newsletter [data processing pursuant to Article 6(1)(a) of the Regulation]

Remarketing

Data processing, such as remarketing activities, is carried out using cookies.

Data processed

Data processed by the cookies specified in the cookie policy.

Duration of data processing

The data retention period for this cookie; further information is available here:

Google’s general cookie policy:

https://www.google.com/policies/technologies/types/

Google Analytics information sheet:

https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie usage?hl=hu

Facebook information sheet:

https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen

The retention period for this cookie; further information is available here:

Google general cookie

information leaflet: https://www.google.com/policies/technologies/types/

Google Analytics

information leaflet: https://developers.google.com/analytics/devguides/collection/analytic sjs/cookie-usage?hl=hu

The legal basis for data processing

Your voluntary consent, which you provide to the Data Controller by using the website [data processing pursuant to Article 6(1)(a) of the Regulation].

Further data processing operations

Should the Data Controller wish to carry out further data processing, it shall provide prior information on the essential circumstances of the data processing (the legal framework and legal basis for the data processing, the purpose of the data processing, the scope of the data processed, the duration of the data processing).

Recipients of personal data

Data processing for the storage of personal data by Sonrisa Informatikai Kft.

Address: 1022 Budapest, 3–5 Bég Street, 1st floor, flat 108.

Name of contact person: Dániel Erdudac

Contact email address: daniel.erdudac@sonrisa.com Contact telephone number: +381604460555

Company registration number: 0109 877659

Tax registration number: 13873222-2-41

The Data Processor stores personal data in accordance with the contract concluded with the Data Controller. The Data Processor is not authorised to access personal data.

Data processing activities relating to the sending of newsletters Name of the company operating the newsletter distribution system: MailerLite Limited

Registered office of the company operating the newsletter distribution system: Ground Floor, 71 Lower Baggot Street, Dublin 2, D02 P593, Ireland

Telephone number of the company operating the newsletter distribution system:

Email address of the company operating the newsletter distribution system: info@mailerlite.com Website of a company operating a newsletter distribution system: mailerlite.com

The Data Processor assists in the sending of newsletters pursuant to a contract concluded with the Data Controller. In doing so, the Data Processor processes the data subject’s name and email address to the extent necessary for sending the newsletters.

Data processing activities relating to the sending of newsletters Name of the company operating the newsletter distribution system: ITACWT Limited

Registered office of the company operating the newsletter distribution system: 3 Cruise Park Rise, Tyrrelstown, Dublin 15, Ireland

Telephone number of the company operating the newsletter distribution system:

Email address of the company operating the newsletter distribution system: support@systeme.io Website of a company operating a newsletter distribution system: systeme.io

Data processing relating to invoicing

Name of the data processor: KBOSS.hu Kft. (Számlázz.hu) Registered office of the data processor: 1031 Budapest, 7 Záhony Street. Data processor’s email address: info@szamlazz.hu

The data processor’s website: www.szamlazz.hu

The Data Processor assists in the recording of accounting documents in accordance with the contract concluded with the Data Controller. In doing so, the Data Processor processes the data subject’s name and address to the extent necessary for the accounting records, for the period specified in Section 169(2) of the Accounting Act, after which it deletes the data.

Data processing in connection with the operation of a CRM system

Name of the data processor: Netlight Consulting Ltd.

The data processor’s registered office: 1148 Budapest, Bánki Donát Street

The data processor’s telephone number:

The data processor’s email address: hello@salesform.hu

The data processor’s website: www.salesform.hu

The Data Processor assists in the recording of orders in accordance with the contract concluded with the Data Controller. In doing so, the Data Processor processes the data subject’s name, address, telephone number, and the number and date of orders within the limitation period under civil law.

Data processing in relation to online payments

Name of the data controller: OTP Mobil Service Provider Ltd.

The data controller’s registered office: 1143 Budapest, Hungária krt. 17–19. The data controller’s telephone number: +36 1/20/30/70 3-666-611

The data controller’s email address: ugyfelszolgalat@simple.hu

The data controller’s website: https://simple.hu/impresszum/

The payment service provider assists in the processing of online payments pursuant to a contract concluded with the Data Controller; to this end, data is transferred to the online payment service provider during the purchasing process. In doing so, the online payment service provider processes the data subject’s billing name and address, as well as the order number and date, in accordance with its own data processing policies.

The purpose of the data transfer is to provide the online payment service provider with the transaction data required for the payment transaction relating to the purchase and initiated with that provider.

Legal basis for the data transfer: pursuant to Article 6(1)(b) of the Regulation, the performance of the contract concluded between you and the Data Controller, which includes payment by the customer; and, in the case of online payment, the data transfer referred to in this clause is necessary for the payment to be made

Name of the data controller: Stripe Payments Europe, Limited

The data controller’s registered office: 1 Grand Canal Street, Lower Grand Canal Dock, Dublin D02 H210, Ireland

The data controller’s telephone number:

The data controller’s email address:

The data controller’s website: stripe.com

OTP Simple data transfer

The Buyer acknowledges that their personal data relating to the purchase, which is stored by the Seller (as data controller) in the Website’s user database, will be transferred to OTP Mobil Kft. as the data processor.

The nature and purpose of the data processing activities carried out by the data processor can be viewed in the SimplePay Privacy Notice at the following link: http://simplepay.hu/vasarlo-aff

Your rights in relation to data processing

During the period in which your personal data is processed, you have the following rights in accordance with the provisions of the Regulation:

the right to withdraw consent
access to personal data and information relating to data processing
right to rectification
restriction of data processing,
the right to erasure
the right to protest
the right to portability.

If you wish to exercise your rights, this will involve your identification, and the Data Controller will need to communicate with you. Therefore, in order to verify your identity, you will be required to provide personal data (though such verification may only be based on data which the Data Controller already processes about you), and your complaint regarding data processing will be available in the Data Controller’s email account within the timeframe specified in this notice within the timeframe specified in relation to complaints. If you were a customer of ours and wish to identify yourself for the purposes of complaint handling or warranty claims, please also provide your order reference number for identification purposes. We can use this to identify you as a customer.

The Data Controller shall respond to complaints relating to data processing within 30 days at the latest.

The right to withdraw consent

You are entitled to withdraw your consent to the processing of your data at any time; in such cases, we will delete the data provided from our systems. Please note, however, that in the case of an order that has not yet been fulfilled, withdrawal may result in us being unable to complete the delivery to you. Furthermore, if the purchase has already been made, in accordance with accounting regulations, we cannot delete invoicing-related data from our systems; furthermore, if you have an outstanding debt to us, we may continue to process your data even after you have withdrawn your consent, based on our legitimate interest in debt recovery.

Access to personal data

You have the right to receive confirmation from the Data Controller as to whether your personal data is being processed, and if it is, you have the right to:

to be granted access to the personal data processed and
The Data Controller shall provide the following information:

o the purposes of data processing;

o the categories of personal data processed about you;

o information on the recipients or categories of recipients to whom the Data Controller has disclosed or will disclose personal data;

o the envisaged period for which the personal data will be stored, or, where this is not possible, the criteria used to determine that period; o your right to request that the Data Controller rectify or erase personal data relating to you, or

restrictions on the processing of such personal data, and, where the processing is based on legitimate interests, you may object to the processing of such personal data;

o the right to lodge a complaint with the supervisory authority; o if the data was not collected from you, any available information regarding its source;

o the fact that automated decision-making is used (where such a process is applied), including profiling, as well as, at least in these cases, the logic applied and comprehensible information regarding the significance of such data processing and the likely consequences for you.

The purpose of exercising this right may be to establish and verify the lawfulness of data processing; therefore, in the event of repeated requests for information, the Data Controller may charge a reasonable fee in return for providing the information.

The Data Controller ensures access to personal data by sending you the personal data and information being processed via email once your identity has been verified. If you are a registered user, we will grant you access so that, by logging into your user account, you can view and check the personal data we hold about you.

Please specify in your request whether you are seeking access to your personal data or information regarding the processing of your data.

Right to rectification

You have the right to request that the Data Controller rectify any inaccurate personal data relating to you without delay.

Right to restriction of processing

You have the right to request that the Data Controller restrict the processing of your data if any of the following conditions are met:

If you contest the accuracy of the personal data, the restriction shall apply for a period enabling the Data Controller to verify the accuracy of the personal data; if the correct data can be established immediately, the restriction shall not apply;
the processing of your data is unlawful, but you object to the erasure of the data for any reason (for example, because the data is important to you for the purposes of establishing, exercising or defending legal claims), and therefore you do not request the erasure of the data, but instead request that its use be restricted;
the Data Controller no longer requires the personal data for the specified purpose of data processing, but you require it for the purpose of establishing, exercising or defending legal claims; or
You have objected to the processing of your data, but the Data Controller’s legitimate interests may also justify the processing; in this case, until it is determined whether the Data Controller’s legitimate interests take precedence over your legitimate interests, the processing must be restricted.

Where data processing is subject to restriction, such personal data may, with the exception of storage, only be processed with the data subject’s consent, or for the purpose of establishing, or to protect the rights of another natural or legal person, or for reasons of substantial public interest of the Union or of a Member State.

The data controller will inform you in advance (at least 3 working days before the restriction is lifted) of the lifting of the restriction on data processing.

Right to erasure – right to be forgotten

You have the right to have the Data Controller erase your personal data without undue delay if any of the following grounds apply:

the personal data are no longer necessary for the purpose for which the Data Controller collected or otherwise processed them;
You withdraw your consent and there is no other legal basis for the processing of your data; • You object to the processing of your data on the basis of a legitimate interest, and there is no overriding legitimate ground (i.e. legitimate interest) for the processing, • the Data Controller processed personal data unlawfully and this was established on the basis of the complaint,
Personal data must be erased in order to comply with a legal obligation laid down in Union or Member State law applicable to the Data Controller.

If the Data Controller has disclosed personal data processed about you on any lawful ground and is obliged to erase it for any of the reasons set out above, it shall, taking into account the available technology and the costs of implementation, take all steps reasonably expected of it – including technical measures – to inform other data controllers processing the data, that you have requested the deletion of links to the personal data in question or of copies or duplicates of such personal data.

The right to erasure does not apply where the processing is necessary:

for the purpose of exercising the freedom of expression and the right to information;
compliance with an obligation under EU or Member State law applicable to the data controller which requires the processing of personal data (an example of this is data processing carried out in the context of invoicing, as the retention of invoices is required by law), or for the purposes of carrying out a task carried out in the public interest or in the exercise of official authority vested in the data controller;
to raise, enforce or defend legal claims (e.g. if the Data Controller has a claim against you which has not yet been settled, or if a consumer or data protection complaint is being dealt with).

The right to protest

You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data on the basis of a legitimate interest. In this

In such cases, the Data Controller may no longer process the personal data, unless it can demonstrate that the processing is justified by compelling legitimate grounds, which take precedence over your interests, rights and freedoms, or which relate to the establishment, exercise or defence of legal claims.

Where personal data is processed for the purposes of direct marketing, you have the right to object at any time to the processing of your personal data for this purpose, including profiling, insofar as it is related to direct marketing. If you object to the processing of your personal data for the purposes of direct marketing, your personal data may no longer be processed for that purpose.

The right to portability

Where data processing is carried out by automated means, or where data processing is based on your voluntary consent, you have the right to request that the Data Controller provide you with the data you have supplied to the Data Controller, which the Data Controller will make available to you in xml, JSON or CSV format, provided this is technically feasible; you may also request that the Data Controller transmit the data in this format to another data controller.

Automated decision-making

You have the right not to be subject to a decision based solely on automated processing (including profiling) which produces legal effects concerning you or similarly significantly affects you. In such cases, the Data Controller is obliged to take appropriate measures to protect the data subject’s rights, freedoms and legitimate interests, including, at a minimum, the data subject’s right to request human intervention from the Data Controller, to express their point of view, and to object to the decision.

The above shall not apply where the decision:

it is necessary for the conclusion or performance of a contract between you and the data controller;
the processing is permitted by Union or Member State law applicable to the data controller, which safeguards your rights and freedoms, as well as the legitimate

also lays down appropriate measures to safeguard its interests; or

is based on your express consent.

Data security measures

The Data Controller declares that it has implemented appropriate security measures to protect personal data against unauthorised access, alteration, transmission, disclosure, erasure or destruction, as well as against accidental loss or damage, and against becoming inaccessible as a result of changes in the technology used.

The Data Controller shall do everything in its power, within the limits of its organisational and technical capabilities, to ensure that its data processors also implement appropriate data security measures when processing your personal data.

Remedies

If you believe that the Data Controller has breached any statutory provision relating to data processing, or has failed to comply with a request you have made, you may initiate an investigation by the National Authority for Data Protection and Freedom of Information in order to put an end to the alleged unlawful data processing (postal address: 1363 Budapest, PO Box 9, email: ugyfelszolgalat@naih.hu, telephone numbers: +36 (30) 683-5969, +36 (30) 549-6838; +36 (1) 391 1400).

We would also like to inform you that, in the event of a breach of the statutory provisions governing data processing, or if the Data Controller has failed to comply with any of your requests, you may bring a civil action against the Data Controller before a court.

Amendments to the Privacy Notice

The Data Controller reserves the right to amend this privacy notice in a manner that does not affect the purpose or legal basis of data processing. By using the website after such amendments come into effect, you accept the amended privacy notice.

If the Data Controller intends to carry out further processing of the collected data for a purpose other than that for which it was originally collected, it shall inform you, prior to such further processing, of the purpose of the data processing and provide you with the following information:

the period for which personal data will be stored, or, where this is not possible, the criteria used to determine that period; • your right to request from the Data Controller access to your personal data, the rectification or erasure of such data, or the restriction of its processing, and, in the case of data processing based on legitimate interests, to object to the processing of your personal data, and, in the case of data processing based on consent or a contractual relationship, you may request that your right to data portability be ensured;
in the case of data processing based on consent, that you may withdraw your consent at any time,
the right to lodge a complaint with the supervisory authority; • whether the provision of personal data is required by law or under a contractual obligation, or whether it is a prerequisite for entering into a contract, and whether you are obliged to provide the personal data, as well as the possible consequences of failing to provide such data;
the fact that automated decision-making is taking place (where such a process is used), including profiling, and, at least in those cases, the logic applied and comprehensible information regarding the significance of such data processing and the likely consequences for you.

Data processing may only commence after this; if the legal basis for data processing is consent, you must give your consent to the data processing in addition to being provided with the relevant information.

This document contains all relevant information regarding data processing in connection with the operation of the online shop, in accordance with the European Union’s General Data Protection Regulation No 2016/679 (hereinafter: the Regulation. GDPR) and Act CXII of 2011 (hereinafter: the Information Act).

Effective: Tata, 29 June 2025.

Privacy Notice

Privacy Notice

A meditation gift for you