Privacy policy for online ticket purchases

Privacy policy for online ticket purchases

The Service Provider (hereinafter in this paragraph: "Data Controller") shall process any personal data that it becomes aware of in the course of operating the webshop and during the performance of the contract concluded with the Customer (hereinafter in this paragraph: "Data Subject") in accordance with on Informational Self-Determination and Freedom of Information ("Privacy Act"), Act CVIII of 2016 on Electronic Commerce and on Information Society Services ("Ecommerce Act"), as well as REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter: GDPR).

Basic concepts

Data subject: any natural person that is identified or identifiable, directly or indirectly, on the basis of any specific personal data.

Personal data: any data that can be associated with a data subject, in particular by reference to a name, an identification number, or one or more factors specific to the physical, physiological, mental, economic, cultural or social identity of the data subject, and any inference that can be drawn from the data and that is applicable to the data subject.

Data controller: the natural or legal person or unincorporated organisation which, alone or jointly with others, determines the purpose of the processing of personal data, takes and executes decisions regarding the processing (including the means used) or has the data processor implement the decisions.

Data processing: any operation or set of operations which is performed on the data, regardless of the procedure used, in particular any collection, taping, recording, organisation, storage, adaptation or alteration, use, retrieval, forwarding, disclosure, alignment or combination, restriction, erasure or destruction of the data or any prevention of the further use of the data, taking of photographs, sound recordings or images, or recording any physical characteristics which are suitable for identifying a person (e.g. fingerprints, palm prints, DNA samples, iris scans.)

Data processor: a natural or legal person or an unincorporated organisation that processes data on the basis of a contract, including a contract concluded based on a legal provision.

Purpose of data processing

a.) The establishment of a contract for the performance of an order between the data controller and the data subject, the fulfilment of orders, the delivery of orders to the customer and the enforcement of claims arising from orders.

b.) Invoicing of fees pursuant to the contract.

c.) Registration to ensure a smoother ordering process and to allow the data subject subsequent access to the order data.

Legal basis for data processing

a.) Voluntary consent of the data subject (Article 6, Section (1), Clause (a) of GDPR), by his or her providing the essential data necessary for the order.

b.) Mandatory data processing according to the provisions of Act C of 2000 on Accounting.

Scope of data processing

a.) Billing name, address, telephone number, date of order, e-mail address to which the ordered tickets are to be sent.

b.) Billing information.

Duration of data processing

a.) The data controller shall process the data subject's personal data for five years after the purchase was made, since a legal dispute may arise between the data controller and the data subject until the end of this period. In addition, if a legal obligation becomes relevant in connection with the service, the data controller shall process the data while the legal obligation is applicable (Article 6. Section (5), Clause (a) of Privacy Act).

b.) The data controller is required to keep the billing information for eight years as specified in the Accounting Act.

c.) The data controller shall process the data until the withdrawal of consent, but no longer than five years after registration or the last purchase. The data subject may withdraw his or her consent by cancelling the registration. The data subject may withdraw his or her consent by clicking on the unsubscribe link at the end of the newsletter sent.

Data processor

The data controller employs a data processor for the operation of the online platform; the operator is InterTicket Ltd.

The following have the right to access the personal data

The personal data may be accessed by those employees of the data controller who manage the registration and invoicing of orders, handle complaints about orders, or carry out supervisions of internal workflow.

The data may be accessed strictly by those employees of the data processor who perform the operational tasks, provided that it is absolutely necessary for the fulfilment of their duties.

The data subject whose personal data are processed by the data controller shall also have the right to access the data. The data subject may put in such a request through the postal or e-mail contact details of the data controller as indicated in these GTC.

The data subject's rights and remedies in connection with the data processing

The data subject may request information about the processing of his or her personal data, request the rectification of his or her personal data or, with the exception of mandatory data processing, the erasure or blocking of them.

The data subject may object to the processing or transfer of his or her personal data. The data controller shall investigate the request within 15 days and will inform the data subject in writing of the decision regarding it.

 If the data subject objects to the data controller's data processing practices, he or she:

•may contact the data controller via the postal address or e-mail address indicated in these GTC

•may contact the National Authority for Data Protection and Freedom of Information (address: 1055 Budapest, Falk Miksa u. 9-11., e-mail: ugyfelszolgalat@naih.hu, website: https://www.naih.hu/ )

•may initiate legal proceedings (website: http://birosag.hu/torvenyszekek