PRIVACY NOTICE

on

data processing activities of personal data of customers

effective date: 1 September 2023

Content and purpose of this Privacy Notice

This Privacy Notice contains relevant information related to the data processing activities of the Controller, performed in relation to the personal data of Data Subjects (hereinafter collectively referred to as: customer data processing).

The Controller

Szélforgó Szabadidő Kft.

Address: 1121 Budapest, Mártonhegyi út 13/B.

Phone: +36 20 972 1947

Rights of the Data Subject

Data Subjects are entitled to request the following from the Controller

  • access to personal data concerning them as a Data Subject,
  • supplementation, correction, deletion or restriction of the processing of their personal data,
  • they may object to the processing of their personal data. In this case, the Controller shall not further process such personal data, unless data processing is justified by compelling legitimate reasons which take precedence over the interests, rights and freedoms of the Data Subject or which are related to the submission, enforcement or protection of legal claims.
  • they have the right to submit a complaint to the supervisory authority (National Authority for Data Protection and Freedom of Information, 1055 Budapest, Falk Miksa utca 9-11., http://naih.hu, telephone number: +36 (1) 391-1400, postal address: 1363 Budapest, Pf. 9., e-mail: ugyfelszolgalat@naih.hu). If the Data Subject is a foreign citizen, they may also submit a complaint to the supervisory authority of their place of residence.
  • they may apply for court proceedings if their rights are violated.  The court shall act out of turn in the given case. Data protection lawsuits fall within the jurisdiction of the tribunal courts, which may, at the choice of the Data Subject, be sued in the court of the Data Subject's domicile or residence.

The Controller informs the owner of the personal data that any person who has suffered pecuniary or non-pecuniary damage as a result of a breach of law is entitled to compensation from the Controller for the damage suffered in accordance with the rules of civil law.

Before contacting the supervisory authority or the court with your complaint, please contact our Company, at the e-mail address shown on this website.

Automatic decision making

There is no automatic decision making in the course of data processing.

 

Nature of reporting

The provision of personal data is voluntary.

General purpose of data processing

The purpose of data processing is to enable the Controller to perform the contract of carriage entered into between the Controller and the Data Subject.

Data Subjects of data processing

Data Subjects of data processing are persons making inquiries through the contact form of Contoller's website or e-mail, and passengers who enter into a contract for the leisure sailing trip organised and performed by the Controller under the provisions of the Controller’s Terms and Conditions.

Legal basis for data processing

Processing is carried out on the legal basis set out in Article 6 (1) b) of the GDPR, i.e. the processing is necessary for the performance of a contract to which the Data Subject is a party.

Personal data processed and the purposes of processing

Mobile phone number

This is necessary for quick and easy contact with the Data Subject for the discussion of program details, last minute changes (such as weather conditions) and emergency calls.

First name, last name, residential address, passport number

It is necessary to process these personal data for the purpose of identifying the Data Subject as a contracting party to the Controller.

E-mail address

This is necessary to (i) confirm the Data Subject’s booking of, (ii) send relevant information to the Data Subject related to, and (iii) confirm receipt of the relevant service fee paid by the Data Subject for the leisure sailing trip organised and performed by the Controller under the provisions of the Controller’s Terms and Conditions. The e-mail address is also used for sending newsletters to expressly opted-in Data Subjects.

Duration of data storage

Data Subjects’ aforesaid data is processed for 5 years.

Transfer of personal data

Save as required by mandatory provisions of law, the Controller does not transfer personal data to data processors.