The purpose of this prospectus (hereinafter: Prospectus) is to record the information used by Vecherinka Kft. (Registered office: 1074 Budapest, Rumbach Sebestyén utca 12. fszt. 1 ..; registration number: 01-09-377094; data protection and management principles, which the Ltd., as a data controller, recognizes with binding force in relation to the services and business activities provided by it. In formulating the provisions of the Prospectus, the Ltd. took into account with special attention the Decree CXII of 2011 of the European Parliament and of the Council (GDPR) on the right to information self-determination and freedom of information (Infotv.) and Act V of 2013 on the Civil Code (Ptk.). From the point of view of the handling of your personal data, the Ltd. is the data controller, ie the Ltd. is responsible for the lawful handling of your personal data. You can contact us at the following contacts: Name of data controller: Vecherinka Kft Postal address: 1074 Budapest, Rumbach Sebestyén utca 12. fszt. 1 .. Registration number: 01-09-377094 Email address: email@example.com Website: bbrooms.hu 1. The scope of the processed data, the legal basis and purpose of the data processing, and the duration of the data processing 1.1. Karaoke room range of data processed for booking purposes Description of the data management case, the purpose of the data management a) Reservation If you want to book a room, you can do so by bank transfer or by paying in person on the spot, by card. In case of transfer, we will know your bank account number and name. In case of credit card payment, we handle your name, email address, home address and telephone number. Management of this data is essential for booking. Legal basis for data management The legal basis for the processing is the consent you have given pursuant to Article 6 (1) (a) of the Regulation. Data management is voluntary in all cases. You can withdraw your consent at any time, but this does not affect the lawfulness of the data processing that took place before the withdrawal. Duration of data management a) The processing of the guest's personal data is carried out for the period specified in the accounting regulations. 2. Data transmission In addition to the bodies entitled to audit, only the manager of the Ltd., the employees of Könyvelosság Kft., Who are obliged to maintain confidentiality, have full access to the data managed by us. Scope of data transmitted: surname, first name, country, telephone number, email address. The purpose of the data transfer is to provide customer service assistance to users, to confirm transactions and to monitor users. 3. Your rights in relation to data management Within the period of data processing, you have the following rights in accordance with the provisions of the Decree: • access to personal data and data management information, • the right to rectification, • data management restrictions, • right of cancellation, • the right to portability, • the right to protest, • right to withdraw consent. If you wish to exercise your rights, it will involve your identification and we must communicate with you. Therefore, you will be required to provide personal information for identification purposes (but identification may only be based on information that we handle about you anyway) and your privacy complaint will be available in our email account within the time period specified in this notice. Complaints about data management will be answered within 30 days at the latest. Right to withdraw consent You have the right to withdraw your consent to data management at any time, in which case the data provided will be deleted from our systems. Access to personal data and information. You have the right to receive feedback on whether your personal data is being processed and, if data is being processed, you have the right to: • have access to the personal data processed and • provide the following information: ∙ the purposes of data management; ∙ the categories of personal data processed about you; ∙ information on the recipients or categories of recipients to whom or with whom the personal data have been or will be communicated; ∙ the intended period for which the personal data will be stored or, if that is not possible, the criteria for determining that period; ∙ your right to request the rectification, erasure or restriction of the processing of personal data concerning you and to object to the processing of such personal data in the event of a processing operation based on a legitimate interest; ∙ the right to lodge a complaint with the supervisory authority; ∙ if the data were not collected from you, all available information on their source; ∙ the fact of automated decision-making (if such a procedure has been used), including profiling, and, at least in these cases, understandable information about the logic used and the significance and expected consequences of such data processing for you has experience. The purpose of exercising the right may be to establish and verify the lawfulness of the data processing, therefore, in case of repeated requests for information, we may charge a fair fee in return for the provision of the information. We provide access to personal data by sending you the personal data and information we process after you have been identified. Please indicate in your request whether you are requesting access to personal data or requesting data management information. Right to rectification. You have the right to have inaccurate personal data about you corrected without delay upon request. Right to restrict data management. You have the right to restrict the processing of your data if you request one of the following: • You dispute the accuracy of your personal information, in which case the restriction applies to the period of time that allows us to verify the accuracy of your personal information, if no verification is required, we will not apply a restriction; • the data processing is illegal and you oppose the deletion of the data and instead ask for a restriction on its use; 3 • we no longer need your personal data for the purposes of the designated data processing, but you request it to make, enforce or protect legal claims; obsession • You have objected to the data processing, but our legitimate interest may also justify the data processing, in which case until it is determined whether our legitimate reasons take precedence over your legitimate reasons, the data processing must be restricted. If the processing is subject to restrictions, such personal data may be processed, with the exception of storage, only with your consent or for the purpose of bringing, enforcing or protecting legal claims or protecting the rights of another natural or legal person or in the important public interest of the Union or a Member State. We will inform you in advance about the lifting of the data management restriction (at least 3 working days before the lifting of the restriction). Right to delete - right to forget You have the right to delete personal data about you without undue delay if any of the following reasons exist: • personal data are no longer required for the purpose for which they were collected or processed; • You withdraw your consent and there is no other legal basis for the processing; • You object to the processing based on a legitimate interest and there is no overriding legitimate reason (ie a legitimate interest) in the processing, • personal data have been processed unlawfully and this has been established on the basis of a complaint, • personal data must be deleted in order to comply with a legal obligation under EU or national law applicable to us. If we disclose personal information processed about you for any legitimate reason and are required to delete it for any of the reasons set out above, we will take reasonable steps, including technical measures, to inform other data controllers, taking into account the technology available and the cost of implementation. data controllers that you have requested the deletion of the links to the personal data in question or of a copy or duplicate of this personal data. As a general rule, we do not disclose your personal information. Deletion does not apply if data processing is required: • to exercise the right to freedom of expression and information; • compliance with an obligation under EU or Member State law that applies to the processing of personal data, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller; • to submit, enforce or defend legal claims. Right to protest You have the right to object at any time for reasons related to your situation to the processing of your personal data on the basis of a legitimate interest. In this case, we may not further process your personal data unless we can prove that the processing is justified by compelling legitimate reasons which take precedence over your interests, rights and freedoms or which relate to the submission, enforcement or protection of legal claims. Right to portability If the data processing is necessary for the performance of a contract or the data processing is based on your voluntary consent, you have the right to request that the data you provide to us be received in a machine-readable form, which we provide you in xml, JSON or csv format, if this is technically feasible, you may request that the data be transferred in this form to another data controller. Remedies If you believe that we have violated a statutory provision on data processing or have not complied with any of your requests, in order to put an end to the alleged unlawful data processing, the You can initiate an investigation procedure by the National Data Protection and Freedom of Information Authority. Contact details of the National Data Protection and Freedom of Information Authority: Postal address: H-1125 Budapest, Szilágyi Erzsébet avenue 22 / C. Email address: firstname.lastname@example.org Phone number: +36 1 391 1400 Fax number: +36 1 391 1410 Further information on data protection issues can be found on the Authority's website: http://naih.hu/ We also inform you that you can file a civil lawsuit in court. 4. Data security During the operation of the IT systems, we ensure with the necessary rights management, internal organization and technical solutions that our data cannot be obtained by unauthorized persons, and that the data cannot be deleted, modified or deleted from the system by unauthorized persons. We also enforce data protection and data security requirements against our data processors. We will keep a record of any privacy incidents and, if necessary, keep you informed of any incidents. 5. Other provisions We reserve the right to amend this data management information in a manner that does not affect the purpose and legal basis of the data management. However, if we wish to carry out further data processing in connection with the collected data for a purpose other than the purpose for which they were collected, we will inform you about the purpose of the data processing and the following information before further data processing: • the duration of the storage of personal data or, if this is not possible, the criteria for determining the duration; • the right to request access to, rectification, erasure or restriction of the processing of personal data concerning you and to object to the processing of personal data in the case of data processing based on a legitimate interest and the right to data portability in the case of data processing based on consent or contractual relationship insurance; • in the case of consent-based data management, that you can withdraw your consent at any time, • the right to lodge a complaint with the supervisory authority; • whether the provision of personal data is based on a law or a contractual obligation or a precondition for concluding a contract, and whether you are obliged to provide personal data and the possible consequences of not providing the data; • the fact of automated decision-making (if such a procedure has been used), including profiling, and at least in these cases, understandable information about the logic used and the significance of such data processing and the expected consequences for you. The data processing can only be started after that, if the legal basis of the data processing is consent, in addition to the information, you must also consent to the data processing. This Privacy Notice is due from June 20, 2020.