Privacy notice

This document contains the Dear Bdpst Ltd. as the operator of the dearbudapest.hu website (hereinafter: Data Controller) to the catering service users (hereinafter: Contact) regarding the processing of the personal data provided.

How to contact us:

Address: 1076 Budapest, Garay utca 22.

E-mail: info@dearbudapest.hu

Phone: +36 70 579 0908

This Privacy Notice has been drawn up in accordance with the rules of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Regulation (EC) No 95/46/EC (General Data Protection Regulation) (hereinafter the Regulation).

1. Scope of data processed, legal basis, purpose and duration of processing

1.1. Data processed for the performance of the contract

Description of the processing scope, the purpose of the processing and the data processed

If you place an order on our website, we need to process your name, shipping and billing address and email address in order to fulfil the order.

When you place an order, we will send you information about the order to your email address, if required for the order, we will deliver to the delivery address and invoice you based on the information you provide.

In order to deliver your order to your home, we must share your delivery address with our courier, who is bound by confidentiality.

Legal basis for processing

The legal basis for the processing is the performance of the contract concluded with you as a customer, pursuant to Article 6(1)(b) of the Regulation.

In the case of the invoice, the issuing of the invoice is a legal obligation pursuant to Article 159 (1) of the VAT Act (Act CXXVII of 2007) and its storage for 8 years pursuant to Article 169 (1) of the Accounting Act (Act C of 2000), thus the legal basis for the processing of the invoice is Article 6 (1) (c) of the Regulation.

Providing your data is a condition for the conclusion of the contract and is essential for the completion of the purchase.

Duration of data processing

Your data will be stored until the expiry of the limitation period under civil law (Ptk. 6:22 (1) 5 years), but we must keep the data on the invoice for 8 years in accordance with the provisions of the Accounting Act.

1.2. Sending newsletters

Description of the processing scope, the purpose of the processing and the data processed

If you subscribe to our newsletter, we will use your email address and name to send you direct marketing emails until you withdraw your consent. You also agree to receive our current menu, offers and products.

Legal basis for processing

The legal basis for processing is your consent pursuant to Article 6(1)(a) of the Regulation.

Duration of data processing

Your data will be processed until your consent is withdrawn.

1.3. Data processed in the context of handling complaints, withdrawals and warranty claims

Description of the processing scope, the purpose of the processing and the data processed

If we carry out any administration in relation to the product you have purchased or handle your complaint, we will also process personal data in the course of this administration. We will process your name, contact details (email address, telephone number, postal address) and your complaint in connection with the complaint.

The purpose of data processing is to handle complaints in accordance with Article 17/A of Act CLV of 1997 on Consumer Protection.

Legal basis for processing

The legal basis for the processing is the fulfilment of the obligations provided for in Article 6 (1) (c) of the Regulation pursuant to Article 17/A of Act CLV of 1997 on Consumer Protection.

Duration of data processing

According to the Consumer Protection Act, we must keep the data for 5 years after the complaint has been made.

1.4. Registration

Description of the processing scope, the purpose of the processing and the data processed

We provide a registration option on the website to make order tracking more transparent for customers. However, registration is not a prerequisite to purchase, and you can still make purchases without registering.

Your username, email address and password are processed for registration purposes and your orders are linked to your customer account.

Legal basis for processing

The legal basis for processing is your consent pursuant to Article 6(1)(a) of the Regulation.

Duration of data processing

The data processed for registration purposes will be processed until the registration is cancelled.

1.5. Contact us menu item

Description of the processing scope, the purpose of the processing and the data processed

On our website, we give you the opportunity to contact us directly by filling in and submitting the contact form. In the form you will be asked to enter your name, email address and message.

Legal basis for processing

The legal basis for processing is your consent pursuant to Article 6(1)(a) of the Regulation.

Duration of data processing

Your data will be kept public for as long as we process your contact request.

2. Data processors

In processing the data, we use the services of Webonic Kft. (headquarters: 8000 Székesfehérvár Budai út 9-11., email: support@webonic.hu) as a data processor, who provides the hosting service.

The Rocket Science Group LLC, the operator of the Mailchimp newsletter service (https://mailchimp.com/contact/, The Rocket Science Group is a member of the Privacy Shield, for more information) is the technical service provider involved in the processing of the data when sending direct marketing emails: https://www.privacyshield.gov/list) we use.

For billing purposes we use the service of the samlazz.hu website, which is provided by KBOSS.hu Kft. (info@szamlazz.hu,1031 Budapest, Záhony utca 7/C.).

3. Cookie management

Some parts of the www.dearbudapest.hu website use small data files ("cookies") to identify you. By visiting the website and using certain of its functions, the Data Subject gives his or her consent to the storage of these cookies on his or her computer and to their access by www.dearbudapest.hu as data controller.

You can use your browser program to set and block cookie-related activity. Please note, however, that in the latter case, without the use of cookies, you may not be able to use all the services of the website.

The service provider, as a technical intermediary, may ensure that third parties cooperating with the service provider, in particular Google Inc., store cookies during the visit of the websites, if the Data Subject has previously visited the website of the service provider and may display an advertisement to the Data Subject on this basis.

You are the only person who can delete the cookie from your computer, or you can set your browser to refuse the use of cookies. In addition, Google will ensure that the user can opt out of being served ads by Google on the page (http://www.google.hu/policies/technologies/ads/), you can disable cookies set by Google. By disabling or deleting cookies, the use of the websites may become less convenient for the Data Subject.

What are cookies and how do we handle them?

Cookies are small data files (hereinafter "cookies") that are transferred to your computer through the use of the website by your website by being saved and stored by your internet browser.

General functions of cookies:

  • collect information about visitors and their devices;
  • remember visitors' individual preferences, which are used, for example, when making online transactions, so they do not need to be re-entered;
  • make the website easier to use;
  • provide a quality user experience.

In order to provide a personalised service, a small piece of data called a cookie is placed on the user's computer and read back during a subsequent visit. When the browser returns a previously saved cookie, the cookie provider has the possibility to link the user's current visit to previous visits, but only in relation to its own content.

Most of the most commonly used internet browsers (Chrome, Firefox, Edge, Explorer, Opera, Safari, etc.) accept and allow the download and use of cookies by default, but it is up to you to modify your browser settings to refuse or block them, or to delete cookies already stored on your computer.

For more information on the use of cookies, please see the "help" section of each browser.

Disable cookies for each browser:

4. Your rights in relation to data processing

During the period of processing, you have the following rights under the Regulation:

  • access to personal data and information on data management,
  • right to rectification
  • restriction of processing,
  • the right to erasure,
  • the right to portability,
  • the right to protest,
  • the right to withdraw consent.

If you wish to exercise your rights, this will involve identifying yourself and we will need to communicate with you. You will therefore be required to provide personal data in order to be identified (but identification will only be based on data that we already hold about you) and your complaints about our processing will be available in our email account for the period of time specified in this notice in relation to complaints.

We will respond to complaints about data processing within 30 days at the latest.

4.1. Right to withdraw consent

You have the right to withdraw your consent to data processing at any time, in which case the data will be deleted from our systems.

4.2 Access to personal data and information.

You have the right to receive feedback on whether your personal data is being processed and, if it is, you have the right to:

  • have access to the personal data processed; and
  • the following information:
    • the purposes of the processing;
    • the categories of personal data processed about you;
    • information about the recipients or categories of recipients to whom or with whom we have disclosed or will disclose the personal data;
    • the envisaged period of storage of the personal data or, if this is not possible, the criteria for determining that period;
    • your right to request the rectification, erasure or restriction of the processing of personal data concerning you and to object to the processing of such personal data where there is a legitimate interest in the processing;
    • the right to lodge a complaint with a supervisory authority;
    • if the data was not collected from you, any available information about its source;
    • the fact of automated decision-making (where such a process is used), including profiling, and, at least in these cases, clear information about the logic used and the significance and likely consequences for you of such processing.

The purpose of exercising the right may be to ascertain and verify the lawfulness of the processing, and we may charge a reasonable fee for providing the information in exchange for repeated requests for information.

We ensure access to your personal data by sending you an email with the personal data and information we process after you have identified yourself.

Please indicate in your request whether you want access to your personal data or information about data management.

4.3 Right to rectification.

You have the right to have inaccurate personal data about you corrected without delay at your request.

4.4 Right to restriction of processing.

You have the right to request that we restrict processing if one of the following conditions is met:

  • You contest the accuracy of the personal data, in which case the restriction applies for the period of time that allows us to verify the accuracy of the personal data, if verification is not necessary, no restriction will be applied;
  • the processing is unlawful and you object to the deletion of the data and instead request the restriction of their use;
  • we no longer need the personal data for the purposes for which we are processing them, but you need them for the establishment, exercise or defence of legal claims; or
  • You have objected to the processing, but we may also have a legitimate interest in the processing, in which case, until it is determined whether our legitimate grounds override your legitimate grounds, the processing must be restricted.

If the processing is restricted, such personal data may be processed, except for storage, only with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for important public interests of the Union or of a Member State.

You will be informed in advance (at least 3 working days before the restriction is lifted).

4.5 Right to erasure - right to be forgotten.

You have the right to have your personal data deleted without undue delay if one of the following grounds applies:

  • the personal data are no longer necessary for the purposes for which they were collected or processed;
  • You withdraw your consent and there is no other legal basis for the processing;
  • You object to processing based on legitimate interest and there is no overriding legitimate ground (i.e. legitimate interest) for processing,
  • the personal data were unlawfully processed and this was established on the basis of the complaint,
  • personal data must be erased in order to comply with a legal obligation under EU or Member State law applicable to us.

If we have disclosed personal data we hold about you for any lawful reason and we are required to delete it for any of the reasons set out above, we will take reasonable steps, including technical measures, taking into account the available technology and the cost of doing so, to inform other data controllers that you have requested that links to or copies of your personal data in question be deleted. As a general rule, your personal data will not be disclosed.

Erasure does not apply where the processing is necessary:

  • to exercise the right to freedom of expression and information;
  • to comply with an obligation under EU or Member State law that requires the processing of personal data (such as processing in the context of invoicing, where the storage of the invoice is required by law) or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
  • to bring, enforce or defend legal claims (e.g. if we have a claim against you and you have not yet satisfied it, or if you are the subject of a consumer or data management complaint).

4.6. Right to object

You have the right to object to the processing of your personal data based on legitimate interests at any time on grounds relating to your particular situation. In such a case, we may no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

4.7. Right to portability

If the processing is necessary for the performance of a contract, or if the processing is based on your voluntary consent, you have the right to request that the data you have provided to us is provided to you in a machine-readable format, which we will make available to you in xml, JSON or csv format. Where technically feasible, you may request that we transfer the data in this format to another controller.

4.8. Remedies

If you believe that we have violated a legal provision on data processing or have failed to comply with a request, you may initiate an investigation procedure with the National Authority for Data Protection and Freedom of Information (postal address: 1530 Budapest, PO Box 5, e-mail: ugyfelszolgalat@naih.hu) to stop the alleged unlawful processing.

You should also be aware that you can also bring a civil action in court.

5. Data security

In the operation of our IT systems, we use the necessary access control, internal organisation and technical solutions to ensure that your data cannot be accessed by unauthorised persons, and that unauthorised persons cannot delete, remove or modify your data. Data protection and data security requirements are also enforced with respect to our data processors in relation to the data transferred.

We keep records of any data breaches and, if necessary, we will inform you of any incidents that occur.

6. Other provisions

We reserve the right to amend this privacy notice in a way that does not affect the purpose and legal basis of the processing.

If, however, we intend to carry out further processing of the data collected for purposes other than those for which they were collected, we will inform you of the purposes of the processing and the following information before carrying out the further processing:

  • the duration of the storage of personal data or, where this is not possible, the criteria for determining that duration;
  • the right to request access to, rectification, erasure or restriction of processing of personal data concerning you and, in the case of processing based on legitimate interest, to object to the processing of personal data and, in the case of processing based on consent or a contractual relationship, to request the right to data portability;
  • in the case of processing based on consent, that you may withdraw your consent at any time,
  • the right to lodge a complaint with a supervisory authority;
  • whether the provision of the personal data is based on a legal or contractual obligation or is a precondition for entering into a contract, whether you are obliged to provide the personal data and the possible consequences of not providing the data;
  • the fact of automated decision-making (where such a process is used), including profiling, and, at least in these cases, clear information about the logic used and the significance and likely consequences for you of such processing.

Processing may only start after the information has been provided. Furthermore, if the legal basis for the processing is consent, you must consent to the processing in addition to being informed.

This Privacy Notice is valid from 24.09.2019.