Privacy

PRIVACY NOTICE FOR ONE-TIME CUSTOMERS

You are considered a data subject under the application of data protection rules, and in accordance with Article 13 of the GDPR, I inform you of the following:

Data Controllers

§ (1) The data processing is carried out within the framework of joint data processing by the following data controllers (hereinafter: data controller): Data Controller’s name: YouTrend Management

Contact: laszlo.marko@youtrendmanagement.com

(2) The essence of the agreement between the joint controllers is as follows:

The joint data controllers jointly organize and conduct programs, mutually sell these programs, and one of them also handles the administration of the other companies, thus they are considered joint data controllers.

(3) No data protection officer is appointed at the data controller.

Specific Data Processing Operations

§ (1) In the case of specific data processing operations a) the data processed by the data controller, b) the purpose of the data processing, c) the legal basis for the data processing, d) the duration of the data processing, are determined by the following table:

Data | Purpose of Data Processing | Legal Basis for Data Processing | Legal Basis in Case of Legal Obligation | Duration of Data Processing Name | identification of the guest | necessary for the performance of a contract [GDPR Article 6(1)(b)] | | until the claim becomes statute-barred Name | issuance of invoice | necessary for compliance with a legal obligation to which the controller is subject [GDPR Article 6(1)(c)] | VAT Act § 169 | until the right to determine tax expires Address | issuance of invoice | necessary for compliance with a legal obligation to which the controller is subject [GDPR Article 6(1)(c)] | VAT Act § 169 | until the right to determine tax expires Tax Number | issuance of invoice | necessary for compliance with a legal obligation to which the controller is subject [GDPR Article 6(1)(c)] | VAT Act § 169 | until the right to determine tax expires Email Address | communication with the guest; information, including forwarding of tickets | necessary for the performance of a contract [GDPR Article 6(1)(b)] | | until the claim becomes statute-barred Phone Number | communication with the guest | necessary for the performance of a contract [GDPR Article 6(1)(b)] | | deleted 3 months after the program Delivery Address | delivery of product or pickup of the guest in case of ordering a service | necessary for the performance of a contract [GDPR Article 6(1)(b)] | | until the claim becomes statute-barred

(2) Providing your name, address, tax number (if any), and email address is mandatory for the provision of the service; failure to do so means that the contract cannot be established. Providing your phone number, nationality, or accommodation is not mandatory and generally not a prerequisite for using the basic service, with the result that the additional service/benefit specified as the purpose of data processing cannot be ensured.

(3) Possible categories of recipients during data processing, or possible recipients:

The Rights of the Data Subject

§ (1) You are entitled to the following rights: You can request access to your personal data from the data controller: based on this right, the data controller will inform you about the specific personal data processed about you (i.e., instead of place of birth, date: Budapest, 01.01.2000). You can request the rectification of data: if the data are inaccurate for any reason, you can indicate this, and the data controller will correct the data. You can request the deletion or restriction of data processing: this can be done if the data processing was based on consent and you withdraw it, or if the duration of data processing has expired, and the data controller has not complied with its obligation to delete. If any data processing is based on the data controller’s legitimate interest, you can object to the processing of such personal data. After the objection, the data controller will consider whether there is a prevailing interest over your freedom and will decide accordingly. You have the right to data portability. Based on this right, the data controller is obliged to provide you with the data processed about you in a widely used format, so that you can make it available to another data controller. If the data processing is based on consent, you have the right to withdraw consent at any time, which does not affect the legality of the data processing carried out before the withdrawal of consent. You have the right to lodge a complaint with a supervisory authority. The contact details of the supervisory authority are as follows: NATIONAL AUTHORITY FOR DATA PROTECTION AND FREEDOM OF INFORMATION

Postal address: 1530 Budapest, Pf.: 5. Address: 1125 Budapest, Szilágyi Erzsébet fasor 22/c Phone: +36 (1) 391-1400 Fax: +36 (1) 391-1410 Email: ugyfelszolgalat@naih.hu URL: http://naih.hu (5) The provision of personal data as per § 2 is based on legislation or contractual obligation, and as per § 2(2), it’s a prerequisite for entering into a contract. You are not obliged to provide the personal data as per the conditions set out there, but failure to do so may result in the consequences mentioned in § 2(2).

(6) The following will not occur: a) transfer of data to a third country, b) automated decision-making.