Adatvédelmi tájékoztatót | Csók Bisztró

Privacy Policy

This Privacy Policy describes how Patisserie és Más Kft. (registered office: 1117 Budapest, Baranyai utca 7. 3rd floor, door 3, tax number: 32241457-2-43, company registration number: 01-09-413730) (hereinafter: the Data Controller) uses and protects personal data of its guests, prospective guests, and business partners.

This policy is in accordance with Regulation (EU) 2016/679 of the European Parliament and Council (General Data Protection Regulation, GDPR).

1. Data Controller Details

Name: Patisserie és Más Kft.
Registered office: 1117 Budapest, Baranyai utca 7. 3rd floor, door 3
Email: info@csokbudapest.hu
Phone: +36 30-075-9872
Website: www.csokbudapest.hu

2. Definitions

Personal data: Any information relating to an identified or identifiable natural person.
Data processing: Any operation performed on personal data, such as collection, recording, organization, storage, use, erasure, etc.
Data controller: The entity that determines the purposes and means of processing personal data.
Data processor: A third party that processes personal data on behalf of the controller.
Data subject: The individual whose personal data is being processed.
Consent: Freely given, specific, informed and unambiguous indication of the data subject’s wishes.

3. Principles of Data Processing

Personal data is:

Processed lawfully, fairly, and transparently
Collected for specified, explicit, and legitimate purposes
Adequate, relevant, and limited to what is necessary
Accurate and kept up to date
Stored no longer than necessary
Processed in a manner that ensures security

4. Rights of Data Subjects

You have the right to:

Transparent information
Access your personal data
Request rectification or erasure
Restrict processing
Data portability
Object to processing
Withdraw consent
Lodge a complaint with the supervisory authority

5. Exercising Your Rights

Requests can be submitted via:

Email: info@csokbudapest.hu
Post: 1117 Budapest, Baranyai utca 7. 3rd floor, door 3
Phone: +36 30-075-9872

6. Data Security

We take appropriate technical and organizational measures, including encryption, access control, regular evaluations, and SSL certification, to protect personal data.

7. Legal Bases for Processing

Consent (Article 6(1)(a))
Contract performance (Article 6(1)(b))
Legal obligations (Article 6(1)(c))
Legitimate interests (Article 6(1)(f))

8. Data Retention

Data is retained:

For contracts: 8 years in accordance with Act C of 2000 on Accounting
For complaints or questions: until resolved, or a year after the closing of the case
For marketing: until consent is withdrawn

9. Use of Personal Data

We process personal data for:

Reservations and offers
Customer support
Complaint handling
Legal compliance
Marketing and service improvement (with consent)
Guest feedback

10. Use of Cookies

Cookies are used to enhance website functionality and analytics. Details are available in our Cookie Policy.

11. Data Processors and Transfers

We may engage third-party processors (e.g., IT, delivery, invoicing providers). No personal data is transferred outside the EEA without appropriate safeguards.

12. Camera Surveillance

Our premises may be monitored by security cameras to ensure safety. Notification is provided on-site. Details of camera data processing are available at the location.

13. Complaints

If you believe your data rights have been violated, you may lodge a complaint with:

National Authority for Data Protection and Freedom of Information (NAIH)
Address: H-1125 Budapest, Szilágyi Erzsébet fasor 22/C
Postal: 1530 Budapest, P.O. Box: 5
Phone: +36-1-391-1400
Email: ugyfelszolgalat@naih.hu
Website: www.naih.hu

14. Final Provisions

The Data Controller reserves the right to amend this Policy. Updates will be published at: https://csokbudapest.hu/adatvedelmi-tajekoztato

Effective date: 05 December 2023
Patisserie és Más Kft.

8. Newsletter and Direct Marketing Activities

In accordance with Section 6 of Act XLVIII of 2008 on the Basic Requirements and Certain Restrictions of Commercial Advertising Activities, the User may give prior and express consent for the Service Provider to contact them with advertising offers and other messages through the contact information provided during registration.

Furthermore, in accordance with this Privacy Policy, the Client may consent to the processing of personal data necessary for sending advertising offers.

The Service Provider does not send unsolicited marketing messages, and the User may unsubscribe from receiving such offers at any time, free of charge and without justification. In such cases, the Service Provider will delete all personal data used for sending marketing communications and will not send further advertising messages. Users may unsubscribe by clicking on the unsubscribe link in any message.

**Data ProcessedPurpose of Processing**

First and last nameIdentification

Email addressEnabling newsletter subscription; sending updates on current promotions and new service offers

Subscription dateTechnical operation

IP address at time of subscriptionTechnical operation

Data Subjects: All individuals who subscribe to the newsletter.

Purpose of Data Processing: To send electronic messages (email, SMS, push notifications) containing advertisements, information about current news, products, promotions, new features, services, offers, etc.

Data Retention Period: Until the withdrawal of consent or unsubscription.

Persons Authorized to Access Data: The personal data may be accessed by the Data Controller’s management, sales and marketing staff, executives of the controlling entity of the business group, employees of affiliated companies involved in related services, and contracted data processors, in compliance with the principles outlined in this policy.

Rights of the Data Subject: The data subject may request access to their personal data from the Data Controller, request rectification or deletion, or request a restriction of processing.

Use of Google AdWords Conversion Tracking

The Data Controller uses the "Google AdWords" online advertising program, including Google’s conversion tracking service. Conversion tracking is provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”).

When a User accesses a website through a Google advertisement, a cookie necessary for conversion tracking is placed on their computer. These cookies are valid for a limited time and do not contain personal data, so the User cannot be identified.

If the User visits certain pages of the website and the cookie has not expired, both Google and the Data Controller can detect that the User clicked on the advertisement.

Each Google AdWords client receives a different cookie, so they cannot be tracked across the websites of different AdWords clients.

The information collected using the conversion tracking cookies is used to generate conversion statistics for AdWords clients who have opted into conversion tracking. Clients are informed about the number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking label. However, they do not receive information that can identify users.

If you do not wish to participate in conversion tracking, you can reject this by disabling cookies in your browser settings. As a result, you will not be included in the conversion tracking statistics.

More information and Google’s privacy policy is available at: www.google.de/policies/privacy/

Companies Belonging to the Data Controller’s Corporate Group: Absolute Occasion Kommunikációs Ügynökség Kft.
And Event Holding Kft.
BeLive Events Kft.
Biliárd Kft.
Burg PS Rendezvényszervező Kft.
CZNL Szolgáltató Kft.
CER Kft.
CNTRL Kft.
Concession Holding Kft.
Csónakázótó Vendéglátóipari Kft.
Csari-Trade Kft.
EMSH Kft.
EV-BI Catering & Event Rendezvényszervező Kft.
Eventrend Global Kft.
Eventrend Holding Kft.
Eventrend Project Kft.
Evezős Üzemeltető Kft.
Five Star Event Kft.
Farm Hotel Kft.
Flow Holding Kft.
Flow Hotels Kft.
Gála Eseményszervező Kft.
Gasztronómia Klub Étterem Kft.
GBR Event Kft.
GR&C Event and More Kft.
Spoontheboat Kft.
Hoteltrend Kft.
HRM Event Kft.
Jazz Event Kft.
KZZM Befektetési és Vagyonkezelő Kft.
Magna Catering Kft.
Mokoloko Kft.
Optima-Team Számviteli Szolgáltató Kft.
Országalma Étterem Kft.
PG Informatika Szolgáltató Kft.
Pre-Go Coffee&Pasta Kft.
Protokoll Event Kft.
R Hotel Üzemeltető Kft.
Sensation Event&Congress Kft.
Séf Asztala Étterem Kft.
Setup Event Kft.
Stadion Event Rendezvényszervező Kft.
Stiritup Kommunikációs és Tanácsadó Kft.
Symbol Üzemeltető Kft.
Főőrség és Lovarda Üzemeltető Kft.
Touché Event Kft.
Vásárliget Kft.
Zichy Park Hotel Kft.

Closing Provisions

This policy was prepared with regard to the following regulations:

Regulation (EU) 2016/679 (General Data Protection Regulation - GDPR)
Act CXII of 2011 on the Right of Informational Self-Determination and Freedom of Information
Act CVIII of 2001 on Electronic Commerce
Act XLVII of 2008 on the Prohibition of Unfair Commercial Practices against Consumers
Act XLVIII of 2008 on the Basic Requirements and Certain Restrictions of Commercial Advertising Activities
Act XC of 2005 on Electronic Freedom of Information
Act C of 2003 on Electronic Communications
Opinion 16/2011 on the EASA/IAB Best Practice Recommendation on Online Behavioural Advertising
Act C of 2000 on Accounting
Act CLV of 1997 on Consumer Protection
The Recommendation of the National Authority for Data Protection and Freedom of Information (NAIH) on the requirements for preliminary data protection information

Effective date: 05 December 2023
Patisserie és Más Kft.