Farkas Éva Sole Entrepreneur, tax number: 73207337-1-33, registered seat: 2120 Dunakeszi, Barátság utca 11. 9/58. (hereinafter: Service Provider, Controller) hereby submits to the following Privacy Notice.
Pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation – GDPR), we provide the following information.
This Privacy Notice governs the data processing carried out on the following website:
https://farkaseva.com
The Privacy Notice is available at the following link: https://farkaseva.com/privacy-policy
Any amendments to this Notice shall take effect upon publication at the above address.
Controller and Contact Details
Name: Farkas Éva Entrepreneur
Registered seat: 2120 Dunakeszi, Barátság utca 11. 9/58.
E-mail: farkaseva.gobelin@gmail.com
Phone: +36 30 700 4443
Definitions
- “personal data” means any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
- “processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
- “controller” means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data;
- “processor” means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;
- “recipient” means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether or not it is a third party. Public authorities which may receive personal data in accordance with Union or Member State law in the framework of a particular inquiry shall not be regarded as recipients;
- “consent of the data subject” means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;
- “personal data breach” means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.
Principles Relating to the Processing of Personal Data
Personal data must be:
a) processed lawfully, fairly and in a transparent manner (“lawfulness, fairness and transparency”);
b) collected for specified, explicit and legitimate purposes and not further processed in a manner incompatible with those purposes (“purpose limitation”);
c) adequate, relevant and limited to what is necessary (“data minimisation”);
d) accurate and, where necessary, kept up to date (“accuracy”);
e) kept in a form which permits identification of data subjects for no longer than is necessary (“storage limitation”);
f) processed in a manner that ensures appropriate security of the personal data (“integrity and confidentiality”).
The controller is responsible for, and must be able to demonstrate, compliance with the above principles (“accountability”).
Data Processing Activities
Data Processing Related to Website Operation
1. Categories of personal data processed and purpose of processing:
| Personal Data | Purpose of Processing |
|---|---|
| Username | Identification, enabling user registration. |
| Password | Secure login to the user account. |
| Last name and first name | Required for contact, purchases, and issuing lawful invoices. |
| E-mail address | Communication. |
| Phone number | Communication, effective coordination of billing or delivery. |
| Billing name and address | Issuing lawful invoices, creating and performing the contract, monitoring fulfilment, billing fees, enforcing claims. |
| Date of purchase/registration | Technical operation. |
| IP address at purchase/registration | Technical operation. |
Neither the username nor the e-mail address is required to contain personal data.
- Data subjects: all users who register or make a purchase on the website.
- Duration of processing:
Personal data are deleted immediately upon account deletion.
The controller shall notify the data subject electronically of the deletion in accordance with Article 19 GDPR.
If the request includes deletion of the e-mail address, that will also be deleted following the notification.
Exception: Accounting records must be retained for 8 years under Act C of 2000 on Accounting (Section 169 (2)).
- Authorized persons: employees of the controller working in sales and marketing.
- Rights of data subjects:
- access to personal data,
- rectification, deletion, or restriction of processing,
- objection to processing,
- data portability,
- withdrawal of consent at any time.
- Exercise of rights:
- by post: 2120 Dunakeszi, Barátság utca 11. 9/58.
- by e-mail: farkaseva.gobelin@gmail.com
- by phone: +36 30 700 4443
- Legal basis for processing:
7.1. Article 6(1)(b) GDPR (performance of a contract);
7.2. Section 13/A (3) of Act CVIII of 2001 on Electronic Commerce;
7.3. Article 6(1)(c) GDPR (legal obligation – accounting requirements);
7.4. Civil Code (Act V of 2013) Section 6:21. – limitation period of 5 years.
- Information:
- data processing is necessary for contract performance;
- providing personal data is mandatory for order fulfilment;
- failure to provide data makes order processing impossible.
Processors Used
Hosting Provider
- Processed activity: hosting services
- Provider details:
Magyar Hosting Ltd. / Websupport Magyarország Ltd.- Registered office: 1132 Budapest, Victor Hugo Street 18–22 (Magyar Hosting Ltd.) / 1119 Budapest, Fehérvári Road 97–99 (Websupport)
- Tax number: 23495919-2-41 (Magyar Hosting Ltd.), 25138205-2-43 (Websupport)
- Company registration number: 01-09-381419 (Websupport)
- Data processed: all personal data provided by the data subject
- Data subjects: all visitors of the website
- Purpose: ensuring availability and proper operation of the website
- Duration: until the termination of the contract between controller and hosting provider or until the data subject’s deletion request
- Legal basis: Article 6(1)(c) and (f) GDPR; Section 13/A (3) of Act CVIII of 2001
Cookie Management
- The website uses typical e-commerce cookies such as “password-protected session cookies”, “shopping cart cookies” and “security cookies”, which do not require prior consent.
- Data processed: unique identifiers, dates, timestamps
- Data subjects: all visitors of the website
- Purpose: identification of users and tracking visitors
- Retention:
| Cookie Type | Legal Basis | Duration | Data |
|---|---|---|---|
| Session cookies | Section 13/A (3) of Act CVIII of 2001 | Until session ends | connect.sid |
| Category | Cookie ID | Domain | Duration | Description |
|---|---|---|---|---|
| Necessary | wpEmojiSettingsSupports | farkaseva.com | session | WordPress sets this cookie to check whether the browser can display emojis properly. |
| Necessary | cookieyes-consent | farkaseva.com | 1 year | CookieYes uses this cookie to store user consent preferences. |
| Necessary | VISITOR_PRIVACY_METADATA | youtube.com | 6 months | Stores the user’s cookie consent state for this domain. |
| Necessary | rc::a | google.com | never expires | Set by Google reCAPTCHA to identify bots and protect the website. |
| Necessary | rc::c | google.com | session | Set by Google reCAPTCHA to distinguish bots from humans. |
| Category | Cookie ID | Domain | Duration | Description |
|---|---|---|---|---|
| Functional | VISITOR_INFO1_LIVE | youtube.com | 6 months | Used by YouTube to measure bandwidth and determine the appropriate video player version. |
| Functional | ytidb::LAST_RESULT_ENTRY_KEY | youtube.com | never expires | Stores the last clicked search result to improve future YouTube search suggestions. |
| Category | Cookie ID | Domain | Duration | Description |
|---|---|---|---|---|
| Analytics | ga* | farkaseva.com | 1 year 1 month 4 days | Google Analytics cookie used to store and count page views. |
| Analytics | _ga | farkaseva.com | 1 year 1 month 4 days | Tracks visitor, session and campaign data anonymously. |
| Analytics | YSC | youtube.com | session | Tracks views of embedded YouTube videos. |
| Category | Cookie ID | Domain | Duration | Description |
|---|---|---|---|---|
| Unclassified | __Secure-YNID | youtube.com | 6 months | Description not available. |
| Unclassified | __Secure-ROLLOUT_TOKEN | youtube.com | 6 months | Description not available. |
| Unclassified | __Secure-YEC | youtube.com | past | Description not available. |
- Access to data: the controller does not process personal data through cookies.
- Rights: users may delete cookies in their browser settings under Privacy options.
- Legal basis: consent is not required when cookies are used solely for transmission over an electronic communications network or when strictly necessary.