Privacy Policy

THE https://bunnymoonhu.com  handles, stores and processes the data of visitors to the website and those who make purchases there in compliance with the legal regulations applicable at all times regarding data protection. The relevant rules can be read in this Data Protection Policy, which, in addition to the data management methods, also lays down the measures for data protection and safe handling of personal data.

The Data Protection Policy contains all relevant data management information regarding the operation of the website in accordance with the European Union's General Data Protection Regulation No. 2016/679 (hereinafter: the Regulation), i.e. the so-called GDPR and CXII of 2011. TV. (hereinafter: Infotv.) based on

Data of the Data Controller

The personal data provided by you is managed by:

Rebeka Novák-Szabó ev

Headquarters: 7634 Pécs, Park u. 8. 2/3.

Tax number: 56542903-1-22

E-mail address: info@bunnymoonhu.com

Website: https://bunnymoonhu.com  

Activities of the Data Controller

https://bunnymoonhu.com data management activities carried out on the website

Contact

Data processed: the data provided by you, such as name, e-mail address, reason for contact (general question, request for a quote, etc.), as well as an optional telephone number and short message.

Purpose of data management: answering questions raised by website visitors.

Duration of data management: as long as it is justified in order to achieve the specified goals, or until the consent to the processing of the data is withdrawn.

Legal basis for data management: data provided voluntarily by the contact initiator.

Data storage in the form of cookies

In addition to the personal data voluntarily provided on the website https://bunnymoonhu.com, the so-called we also work with information secured by cookies. Cookies are data that are temporarily transferred from the browser to your computer's hard drive when you visit the site, and which are necessary for visiting the site.

Purpose of data management: By themselves, they cannot be used to identify the identity of the visitor, but rather statistical information that helps in the further development of our website to make it easier to use. You can read more about individual cookies below:

• Google Analytics cookie (statistical cookie): Google Analytics is Google's analytical tool that helps website and application owners get a more accurate picture of their visitors' activities. The service may use cookies to collect information and report statistical data on the use of the website without individually identifying visitors to Google. The main cookie used by Google Analytics is the "__ga" cookie. In addition to the reports generated from website usage statistics, Google Analytics - together with some of the advertising cookies described above - can also be used to display more relevant ads in Google products (such as Google Search) and across the Internet.
• Cookies necessary for the operation of the website (essential cookie): These cookies are essential for the use of the website and enable the use of the basic functions of the website. Without them, many functions of the site cannot be used properly or are not available. The lifetime of these types of cookies is limited only to the time of visiting the page.
• Session cookie (settings cookie): These cookies store the location of the visitor, the language of the browser, and their lifetime lasts until the browser is closed, or a maximum of 2 hours.
• Referer cookies (statistical cookie): They record the external page from which the visitor came to the page. Their lifetime lasts until the browser is closed.
• Cookie acceptance cookie (settings cookie): When you arrive at the page, you accept the statement on the storage of cookies in the warning window. Its lifespan is 365 days.

Duration of data management: as indicated above (in the description of some cookies, marked with the definition "Lifespan"). In addition, you have the option to withdraw your consent at any time, even during the lifetime of the cookies. You can do this in the "Settings" menu of your browser. You can find out about the exact method of withdrawing cookie consent by clicking on the Help menu item of your browser or on the following links:

• For Internet Explorer browser: https://support.microsoft.com/hu-hu/help/17442/windows-internet-explorer-delete-manage-cookies
• For the Firefox browser: https://support.mozilla.org/hu/kb/Cookie management
• Google Chrome böngésző esetén: https://support.google.com/chrome/answer/95647?hl=hu&co=GENIE.Platform%3DDesktop

Legal basis for data management: Your consent. When browsing the website, a pop-up window will appear in front of you, in which you can choose which cookies to allow (except for the essential cookie, which does not store personal data and is limited to the duration of your visit to the website - however, in the absence of these, certain functions of the website would not work).

Storage of data received during the request for data protection consent

If https://bunnymoonhu.com. contact us via page, you must accept this Privacy Policy before sending us your message. The IT system on the site stores this consent-related IT data for later provability.

Data processed: The date of the consent and the IP address of the visitor giving the consent.

Purpose of data management: Fulfillment of the obligation according to the Regulation - see the paragraph Legal basis of data management.

Duration of data management: Due to legal regulations, we must be able to prove your consent in the future, so the data storage period is 1 year after the end of data management.

Legal basis for data management: Article 7 (1) of the Regulation stipulates this obligation. Data management according to Article 6 (1) point c) of the Regulation.

Storage of data obtained as a result of concluding a contract

If an offer is made, the Data Controller and the customer enter into a contractual relationship with each other, during which the following data are managed and processed:

Processing the assignment or order

If you want to use the bunnymoonHU (i.e. Rebeka Novák-Szabó ev) services, in which case data management and the provision of data are essential for the fulfillment of the order.

Data processed: During data management, the Data Controller manages your name, address, telephone number, e-mail address, the characteristics of the requested service, the order number and the date of the order.

Purpose of data management: Information essential for the proper fulfillment of the order.

Duration of data management: We process the data for 5 years according to the civil law statute of limitations.

Legal basis for data management: Fulfillment of the contract (data management according to Article 6 (1) point b) of the Regulation).

Storage and protection of personal data

The Data Controller will do everything possible to handle the data you provide with the greatest possible security, so that they do not come to the knowledge of unauthorized third parties, are not damaged or destroyed.

When handling data, the Data Controller acts in accordance with the provisions of this Data Protection Policy in all cases.

The Data Controller uses an external service provider to store the data. The hosting provider is also responsible for maintenance in case of problems that may arise. See point 6.1 for the data of the external service provider used for data storage.

Other contributors involved in data processing

Data transfer conditions

The Data Controller may transfer the data it manages - to the extent necessary - to persons and companies designated by it operating in the following areas:

• Data processing
• Legal representation
• Bodies authorized to handle legal disputes by law
• Delivery
• Booking
• Claims management
• Marketing
• Invoicing

Data processing for data storage - hosting service

Description of data processing activity: storage of personal data in accordance with the contract concluded with the Data Controller. He is not entitled to access personal data, he is solely responsible for their storage.

Name of the data processing company: Tárhely.Eu Szolgáltató Kft.

The registered office of the data processing company is: Könyves Kálmán körút 12-14, 1097 Budapest.

The phone number of the data processing company is: +36 1 789 2 789

Website of the data processing company: https://tarhely.eu/

Booking

Description of data processing activity: storage and use of personal data in accordance with the contract with the Data Controller. You are not entitled to access personal data, you are only entitled to access the data required for accounting (invoicing name, address).

Name of the data processing company: ZaxTax Kft.

The registered office of the data processing company is: 9797 Nárai, Ady Endre u. 8.

Tax number of the data processing company: 32037395-1-18

Website of the data processing company: https://zaxtax.hu

Data processing related to other marketing activities

Description of data processing activity: In order to continuously improve the user experience of the https://bunnymoonhu.com website, the Data Controller transmits data to the data processor indicated below, so that with the help of the data processor's services, it can prepare statistics for its own use on the activities of website visitors, such as clicks, page downloads, and the time and duration of page visits.

Name of data processing company: Google LLC

The registered office of the data processing company is 1600 Amphitheater Parkway, Mountain View, CA 94043

The e-mail address of the data processing company is: data-protection-office@google.com

The phone number of the data processing company is +1 650-253-0000

The headquarters of the data processing activity of "Google LLC" is located outside the territory of the European Union. The data processor is therefore a party to the Privacy Shield List, i.e. it ensures that data is processed with the guarantees provided in the European Union. You can find out more about this at the following links:

General description of the Privacy Shield Agreement (in English): www.privacyshield.gov

Google LLC's participation in the Privacy Shield Agreement (in English): https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

Name of data processing company: Facebook Ireland Ltd.

The registered office of the data processing company is at 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland

Contact details of the data processing company: The data processing company supports Facebook, Instagram, Messenger and other products and functions offered by Facebook - data management policy (https://www.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0) and data protection officer contact information (https://www.facebook.com/help/contact/540977946302970)

In special cases: the contract may include additional data processing persons or companies.

Data processing related to website administration

Name of the data processing company: Rebeka Novák-Szabó ev

Headquarters: 7634 Pécs, Park u. 8. 2/3.

Mailing address, complaint handling: 7634 Pécs, Park u. 8. 2/3.

Email: info@bunnymoonhu.com

Newsletter, DM activity

XLVIII of 2008 on the basic conditions and certain limitations of economic advertising activity. Pursuant to § 6 of the Act, the User may give prior and express consent to contact the Service Provider with its advertising offers and other mailings at the contact details provided during registration.

In addition, the Customer may, bearing in mind the provisions of this information, consent to the Service Provider managing his personal data necessary for sending advertising offers.

The Service Provider does not send unsolicited advertising messages, and the User may unsubscribe from the sending of offers free of charge without limitation or justification. In this case, the Service Provider will delete all personal data necessary for sending advertising messages from its records and will not contact the User with further advertising offers. Users can unsubscribe from advertisements by clicking on the link in the message.

The fact of data collection, the scope of processed data and the purpose of data management:

Personal data Purpose of data management

Name, e-mail address. Identification, enabling subscription to the newsletter.

Date of subscription Technical operation performed.

The IP address at the time of registration Execution of a technical operation.

Scope of stakeholders: All stakeholders who subscribe to the newsletter.

The purpose of data management: sending electronic messages containing advertising (e-mail, SMS, push message) to the person concerned, providing information about current information, products, promotions, new functions, etc.

Duration of data management, deadline for data deletion: data processing lasts until the consent statement is withdrawn, i.e. until unsubscription.

Data management registration number: in progress…

The person of the possible data controllers entitled to access the data, the recipients of the personal data: Personal data can be handled by the data controller's sales and marketing staff, in compliance with the above principles.

Description of the rights of data subjects related to data management: The data subject may request from the data controller access to personal data relating to him, their correction, deletion or limitation of processing, and he may object to the processing of such personal data, and the data subject has the right to data portability, as well as the right to withdraw consent at any time.

The data subject can initiate access to personal data, its deletion, modification or restriction of processing, portability of data, objection to data processing in the following ways:

Rebeka Novák-Szabó ev

Headquarters: 7634 Pécs, Park u. 8. 2/3.

Mailing address: 7634 Pécs, Park u. 8. 2/3.

Email: info@bunnymoonhu.com

Website: https://bunnymoonhu.com

Tax number: 56542903-1-22

MailChimp

Attn. Privacy Officer

privacy@mailchimp.com

675 Ponce de Leon Ave NE, Suite 5000

Atlanta, GA 30308 USA

Adwe Hungary Kft.

Headquarters: 1041 Budapest, Rózsa u. 57. 3/9.

The person concerned can unsubscribe from the newsletter at any time, free of charge.

The legal basis for data management: the consent of the data subject, Article 6 (1) point a), the Infotv. Paragraph (1) of Section 5 and XLVIII of 2008 on the basic conditions and certain limitations of economic advertising activities. Section 6 (5) of the Act:

The advertiser, the advertising service provider, or the publisher of the advertisement - within the scope specified in the consent - keeps a record of the personal data of the persons who have given their consent. The data recorded in this register - relating to the recipient of the advertisement - can only be handled in accordance with the consent statement, until it is revoked, and can only be transferred to third parties with the prior consent of the person concerned.

We inform you that

• data management is based on your consent.
• you must provide personal data if you want to receive a newsletter from us.
• failure to provide data will result in us not being able to send you a newsletter.

Additional data management

Further data processing may only take place after prior notification, in which we provide all information about the legal background and legal basis of the data processing, the purpose of the data processing, the scope of the processed data and the duration of the data processing.

Furthermore, we hereby inform you that we, as the Data Controller, must comply with the written data requests of the authorities based on legal authorization, if necessary. The Data Controller informs Infotv about this data transfer. In accordance with paragraphs (2)-(3) of § 15, the Data Controller shall keep a register (to which authority, which personal data, on which legal basis, when the Data Controller transmitted it), the content of which the Data Controller shall provide information upon request, unless such information is prohibited by law.

Visitors' rights related to data management

Request information, data modification or data deletion

At any time, you can request free information about the handling of your personal data, you can consult with us about the scope of the processed data, you can request their correction or, in certain cases, their deletion. In this case, contact us at one of the contact details provided. You can read a detailed description of the rights in the point below.

Rights under the Regulation

The Regulation describes in detail all the rights that you are entitled to during the period of data management. These are the following:

• right of access: You are entitled to receive feedback from the Data Controller on whether your personal data is being processed and, if so, you are entitled to receive information on the method and other details (purpose of data processing, scope of data processed, duration of data storage, data the possibility of modification or deletion, filing a complaint).
• right to correction: If your data has been incorrectly or incompletely recorded and stored, you have the right to request their immediate correction.
• right to erasure / oblivion: you have the right to request the erasure of data stored about you with immediate effect, if:
  • personal data has been proven to be unlawfully handled by the Data Controller;
  • the Data Controller no longer needs the data for the original purpose for which it requested or stored them;
  • the legal basis for data management is solely your consent, and you withdraw it;
  • You wish to exercise your right to deletion and there is no legal obstacle to this on the part of the Data Controller.
• Upon your request, the Data Controller must delete your data without undue delay, unless:
  • you have a legitimate interest to the contrary (e.g. if you have an invoice owed to the Data Controller or you have a data management complaint in progress).
  • would violate the right to freedom of expression and information
  • due to the legal obligations of the Data Controller, it is necessary to store the relevant data (e.g. data management related to invoicing, since the Data Controller has a legal obligation to preserve the invoice for a certain period of time).
• the right to withdraw consent: you have the option to withdraw your consent to data management at any time, in which case we will delete the data you provided from our systems. However, we would like to draw your attention to the fact that if you wish to exercise this right before the performance of the service, it may hinder/fail the full performance of the service.
• right to object: You have the right to object at any time to the processing of your personal data based on the Data Controller's legitimate interests. If this is the case, the Data Controller may no longer process the personal data - the exception to this is if the Data Controller can prove that the data processing is still justified due to compelling legitimate reasons that take precedence over your right to object, or which are related to the presentation, enforcement or defense of legal claims.
• If your personal data is processed for the purpose of direct business acquisition (including profiling), you have the right to object to this at any time, and in this case the Data Controller may no longer process your data for this purpose.
• right to limit data processing: You have the right to request the Data Controller to limit the processing of your personal data if any of the following cases apply:
  • You believe that the accuracy of your personal data is incorrect and ask the Data Controller to investigate, check and correct it. In such cases, the restriction will last until the Data Controller checks the personal data concerned.
  • Data processing is illegal, but you do not want the data to be deleted for some reason (e.g. because you took the matter to court and therefore the data is important to you), so instead of deleting it, you request a limitation of its use.
  • the Data Controller no longer needs your personal data for data management purposes, but you still require them to present, enforce or defend legal claims.
  • You objected to data processing for some reason, but the legitimate interest of the Data Controller may also provide a basis for maintaining data processing (see paragraph "right to object"). As long as it is not established that the Data Controller's legitimate reasons take precedence over your legitimate reasons, the right to restrict data processing can be asserted.
  • If the Data Controller lifts the restriction, it is obliged to inform you at least 3 working days before the lifting is carried out.
• right to data portability: you have the right to have the personal data concerning you and which you have provided to the data controller transferred to you by the Data Controller in a widely used, computer-readable format. In addition, you have the right to forward the document containing said data to another data controller or to request that it be forwarded to another data controller.

You can exercise the above-mentioned rights at any time, but identification will be required, that is, the provision of personal data - however, this data request from the Data Controller may only apply to data that has already been

Complaint

You have the right and the opportunity to file an official complaint against the Data Controller with the supervisory authority or go to court if you believe that the Data Controller has not complied with the legal requirements for data protection.

You can make an official complaint to the following supervisory body:

Supervisory authority: National Data Protection and Freedom of Information Authority

Headquarters of the supervisory authority: 1125 Budapest, Szilágyi Erzsébet fasor 22/C.

Mailing address of supervisory authority: 1530 Budapest, Pf.: 5.

E-mail address of supervisory authority: ugyfelszolgalat@naih.hu

Telephone number of the supervisory authority: +36 1 391-1400

Supervisory authority website: https://naih.hu/

Modification of data management information

The Data Controller reserves the right to modify the text of this data management information at any time in such a way that the modification does not affect the purpose and legal basis of data management. If you use the website after the modification, you accept the modified data management information.

In the event that the Data Controller wishes to make changes to the collected and stored data (e.g. performs additional data processing), he must first inform you in an appropriate manner about what exactly would change in the scope of the processed data, the purpose and legal basis of the data processing. Information alone is not sufficient for modified data management: it will only come into effect for you after your consent.

———

Those concerned acknowledge that the provisions of this Data Protection Notice prohibit the Data Controller from publicly publishing the notice; they apply to the visitor of the website from the time of the visit (acceptance of cookies) or from the contact (acceptance of the Privacy Notice), even without a separate signature.

This Data Management Notice is dated 15.06.2023. valid from