Privacy Policy

This Privacy Policy aims to provide data subjects with information regarding the data processing activities carried out by TIMÁNÉ NAGY ZITA KRISZTINA EV. (hereinafter: "Data Controller") in compliance with data protection regulations, and to enable them to exercise their legal rights.

Data Controller:

The current details of the Data Controller are as follows:

  • Name: TIMÁNÉ NAGY ZITA KRISZTINA EV.
  • Headquarters: 8598 Pápa, Tapolcafői utca 82, Hungary
  • Registration Number: 57384333
  • Tax Number: 55145606-2-39
  • Represented by: TIMÁNÉ NAGY ZITA KRISZTINA
  • E-mail: info@szitapekmuhely.hu


Your data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation - GDPR), as well as Act CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information (Infotv.).

Scope of Processed Personal Data, Purpose, Duration, and Legal Basis of Processing

Purpose of Processing: Contacting

Visitors can contact the Data Controller via the website by writing to the e-mail address provided in the "Contact" menu or by filling out the contact form.

Data subject: the sender of the message

Scope of processed data: name, e-mail address, phone number, the message and its subject

Legal basis for processing: the consent of the data subject

Purpose of processing: contacting the data controller

Platform of processing: electronic

Persons authorized to access the data: The Data Controller and internal staff members whose duties are related to the access and management of the data.

Data transfer: The Data Controller does not transfer personal data to third parties, except for data provision based on legal obligations (e.g., court, investigative authorities, prosecution, etc.).

Deadline for data deletion: Until the withdrawal of consent, or if necessary for the enforcement of a claim, for 5 years (statute of limitations under the Civil Code); otherwise, for 30 days following the receipt of the message.

Consequence of lack of data provision: failure of successful communication.

Purpose of Processing: Data processed in connection with visiting the website
Scope of data Purpose of processing Legal basis Retention period
IP address, time of visit, operating system and browser type used by the visitor Ensuring the proper and high-quality operation of the Website, monitoring and improving the quality of our services, identifying visitors attacking the website. legitimate interest (GDPR Art. 6 (1) f)) Part of the user's IP address is stored for 7 days, after which it is automatically deleted.


Purpose of Processing: "Cookies" used on the website

When a visitor visits the website at szitapekmuhely.hu, a small file called a "cookie" is placed on their computer, which may serve various purposes.

Some "cookies" we use are essential for the proper functioning of the site ("session cookies"), while others collect information regarding the use of the website (statistical cookies) to make the site more convenient and useful. Some cookies are temporary and disappear when the browser is closed, while permanent versions remain on your computer for a longer period.

The legal basis for processing cookies necessary for the operation of the website is the legitimate interest of the Data Controller, for which a balancing of interests test has been performed.

"Session Cookies"

Session cookies are necessary for browsing the website and using basic functions; among other things, they allow the site to remember operations performed by the visitor on a given page, function, or service. Without these, the smooth use of the website cannot be guaranteed. They are valid for the duration of the visit and are automatically deleted at the end of the session or when the browser is closed.

The website uses the following session cookies:

Cookie Name Purpose of the Cookie Legal Basis Storage Time
buildr_live_session Used by the site to retrieve session status between sessions.

Legitimate interest - GDPR Art. 6 (1) f) (based on balancing of interests test)

end of session
XSRF-TOKEN Used by the site to prevent cross-site request forgery. end of session
cookies-state Storage of cookie consent information. end of session
VISITOR_INFO1_LIVE Used by Youtube LLC: technical cookie measuring bandwidth and determining the player interface. 5 months
YSC Used by Youtube LLC: technical cookie determining if content is displayed as an embedded video. end of session
"Statistical Cookies"

The website uses the following cookies for statistics:

Cookie Name Purpose Legal Basis Storage Time
_ga Registers a unique ID used to generate statistical data on how the visitor uses the website. Consent of the data subject - GDPR Art. 6 (1) a) 399 days
_gat Used by Google Analytics to throttle request rate. 1 day
_gid Stores a unique value for each page visited. 1 day
collect Device identification for website visits. end of session
"Marketing Cookies"
Cookie Name Purpose Legal Basis Storage Time
DEVICE_INFO Used to track user interaction with embedded content. Consent - GDPR Art. 6 (1) a) 6 months
Purpose of Processing: Navigation to Social Media Platforms

If you are logged into your account on a selected social network, your visit to this site will be associated with your user account. Links to Facebook, Instagram, Twitter (X), and LinkedIn are indicated by icons in the top right corner of our page.

Rights of Data Subjects:

Data subjects may request information in writing from the Data Controller regarding the management of their personal data, request deletion or modification, or withdraw previously given consent at any time. Deletion rights cannot be exercised for data processing required by law.

Right to Information: The Data Controller shall provide information as listed in GDPR Articles 13-14 and 15-22 in a concise, transparent, and intelligible form.

Right of Access: The data subject has the right to obtain confirmation as to whether or not personal data concerning them are being processed, and access to details such as purposes, categories of data, recipients, and storage duration.

Right to Rectification: The subject may request the correction of inaccurate personal data.

Right to Erasure ("Right to be forgotten"): Data will be deleted within 5 business days if the data is no longer necessary, consent is withdrawn (with no other legal basis), or processing was unlawful.

Right to Restriction of Processing: Subjects may request a restriction if they contest the accuracy of data or if the processing is unlawful but they oppose erasure.

Right to Data Portability: Subjects are entitled to receive their data in a structured, commonly used, machine-readable format to transmit it to another controller.

For complaints, data subjects may contact the National Authority for Data Protection and Freedom of Information (Address: 1055 Budapest, Falk Miksa u. 9-11; Phone: +36-1-391-1400; e-mail: ugyfelszolgalat@naih.hu; website: www.naih.hu) or seek judicial remedy in court.

20.02.2023.

sZita Pékműhely • 8500 Pápa, Jókai u. 12. • info@szitapekmuhely.hu