General information
The Csíkszerda Kortárs Közösségi Egyesület (Company Registration Number: 07-02-0003014, Registered Office: 1063 Budapest HU, Szív Street 42. IV/1., Tax No.: 18747791-1-42, hereinafter referred to as the Data Controller) processes the personal data of customers in connection with its online ticketing activities.
The name of the Data Controller: Csíkszerda Kortárs Közösségi Egyesület
Address of the Data Controller: 1063 Budapest HU, Szív Street 42. IV/1.
Contact details of the Data Controller: egyesulet@csikszerda.hu
Legal basis of processing: Act CXII of 2011 on the right to informational self-determination and freedom of information Section 5 (1) a) Consent of the data subject.
The Data Controller only processes personal data that is essential for the achievement of the purpose of data processing and is suitable for achieving the purpose. Personal data is processed only to the extent and for the period necessary to achieve the purpose.
By approving a purchase, the user gives their consent to the processing of their personal data that they have voluntarily provided.
Involvement of third parties
The Data Controller uses various third party service providers (delivery / online payment / billing partners) to operate its IT system, fulfill orders and settle accounts. The Data Controller is not responsible for the data management practices of such external parties.
The person (hereinafter referred to as User) who uses the services of ticket.csikszerda.hu (hereinafter referred to as Webshop) acknowledges that the following personal data stored by the Data Controller in the user database of the Webshop will be transferred as necessary to:
Stripe Inc. (registered office: 1138 Budapest HU, Dunavirág Street 2-6.)
The transferred data include: name, e-mail address, billing data (billing name, tax number, billing address)
The purpose of the data transfer: to provide customer service assistance to users, to confirm transactions and to perform fraud monitoring for the protection of users by Stripe Inc.
Stripe Inc. is a contracted partner of the Data Controller, the banking data of the User used by them is not stored in the Data Controller’s system. Our partner will ensure the proper handling and security of this data in accordance with the statement at the following link: https://stripe.com/en-hu/privacy
For KBOSS.hu Kereskedelmi és Szolgáltató Kft. (2000 Szentendre HU, Táltos Street 22/b.)
The scope of the data transmitted: name, e-mail address, billing data (billing name, tax number, billing address)
The transferred data include: name, e-mail address, billing data (billing name, tax number, billing address)
The purpose of the data transfer: preparation / accounting / delivery of electronic invoices for completed transactions, customer service assistance.
KBOSS.hu Kereskedelmi és Szolgáltató Kft. is a contracted partner of the Data Controller, and the proper handling and security of our users’ data is ensured in accordance with the Privacy Policy available at the following link: https://www.szamlazz.hu/szamla/adatvedelem
Duration of data processing
Personal data stored by the Data Controller will be deleted within 90 days after the event.
The “.log” files generated during the collection of automatically logged data will be deleted after five (5) years from their creation. If necessary due to a dispute related to the Service, individual invoices and .log files may also be retained after the time limits set forth herein, but no later than the final resolution of the dispute.
With regard to the storage and use of “cookies”, the User acknowledges and consents to the use of these files by the Data Controller’s system and to the linking of these files with the User’s identification data. The User may disable or delete them, but in this case browsing the web interface will be more difficult.
Rights of the User in the data processing
During the period of data processing, the User has the following rights:
- the right to information,
- the right to rectification of data,
- the right to object.
The User may request information from the Data Controller about the processing of his/her personal data within the period of data processing at the e-mail address egyesulet@csikszerda.hu. The Data Controller shall inform the User in writing, in an intelligible form, of the data processed, the purposes, legal basis and duration of the processing, as well as where the data have been transmitted, the persons who have received or receive the data and the purposes for which the data were received, within the shortest possible period of time from the date of the request, but not later than within 25 days.
The User may request the Data Controller to rectify his/her personal data within the period of processing. The Controller shall comply with the request within 15 days at the latest.
The User may object to the processing of his/her personal data,
- if the processing or transfer of the personal data is necessary solely for compliance with a legal obligation to which the Data Controller is subject or for the purposes of the legitimate interests pursued by the Data Controller, the data importer or a third party, except in the case of mandatory processing and in the case specified in Section 6(5) of the Information Act;
- if the personal data is used or transmitted without the consent of the User for direct marketing, public opinion polling or scientific research.
The Data Controller shall examine the objection within the shortest possible time from the submission of the request, but not later than 15 days, shall decide on its validity and shall inform the User in writing of its decision. If the data controller does not comply with the user’s request for rectification, blocking or erasure, they shall, within 25 days of receipt of the request, communicate in writing or, with the data subject’s consent, by electronic means, the factual and legal grounds for refusing the request for rectification, blocking or erasure.
Legal remedies
If the User considers that the Data Controller has violated a legal provision applicable to data processing or has failed to comply with a request, the User may initiate an investigation procedure with the National Authority for Data Protection and Freedom of Information (postal address: 1530 Budapest HU, PO Box 5, e-mail: ugyfelszolgalat@naih.hu) in order to terminate the alleged unlawful processing.
You are also informed that you may take legal action against the Data Controller in case of violation of the legal provisions on data processing or if the Data Controller has not complied with any of your requests.
Amendments to the Data Protection Notice
The Data Controller reserves the right to amend this privacy policy. By using the Website after the amendment has come into force, the User accepts the amended privacy policy.