Privacy Policy

Purpose of the Rules

The purpose of this Policy is to set out the Company Name: Media 4 Hotel Kft. Registered office. 4. Tax number: 13551795-2-42 (hereinafter referred to as “PETERJONESMAGIC.COM”) and its privacy and data protection policy, which PETERJONESMAGIC.COM acknowledges as binding.
In establishing these rules, PETERJONESMAGIC.COM has taken particular account of the provisions of Act CXII of 2011 on the Right of Informational Self-Determination and Freedom of Information (“the Information Act”), Act CXIX of 1995 on the Processing of Name and Address Data for Research and Direct Marketing Purposes, Act VI of 1998 on the Processing of Personal Data, and Act VI of 1998 on the Processing of Personal Data for Research and Direct Marketing Purposes. Act on the Protection of Individuals with regard to Automatic Processing of Personal Data, Strasbourg Convention of 28 January 1981, and the provisions of Act XLVIII of 2008 on the Basic Conditions and Certain Restrictions on Commercial Advertising and the recommendations of the ONLINE PRIVACY ALLIANCE.
The purpose of this Policy is to ensure that, in all areas of the services provided by PETERJONESMAGIC.COM, all individuals, regardless of their nationality or place of residence, are guaranteed that their rights and fundamental freedoms, in particular their right to privacy, are respected when their personal data are processed by computer (data protection).

Definitions

Personal data: data that can be associated with a specific natural person (hereinafter referred to as ‘the data subject’), in particular the name, the identification mark of the data subject and the knowledge of one or more factors specific to the physical, physiological, mental, economic, cultural or social identity of the data subject, in order to draw conclusions about the data subject. The personal data shall retain this quality during the processing for as long as the link with the data subject can be re-established;
Data file: the set of data processed in a register;
Data processing: any operation or set of operations which is performed upon data, whatever the procedure used, in particular the collection, recording, recording, organisation, storage, alteration, use, retrieval, disclosure, alignment or combination, blocking, erasure and destruction of personal data and the prevention of their further use;

Data Controller:

Media 4 Hotel Kft. 1072 Budapest Akácfa utca 26. 1. floor. Tax number: 13551795-2-42
Data Processing: the performance of technical tasks related to data processing operations, irrespective of the method and means used to perform the operations and the place of application, provided that the technical task is performed on the data;
Data destruction: the complete physical destruction of a storage medium containing data;
Transfer of Data: the making available of Personal Data to a specified third party;
Disclosure: making Personal Data available to any person;
Data Processor: a natural or legal person or unincorporated body which carries out the processing of Personal Data on behalf of the Controller;
Erasure: rendering data unrecognisable in such a way that their recovery is not possible;
Automated data file: a set of data that is processed automatically;
Machine processing: includes the following operations, when carried out in whole or in part by automated means: storage of data, logical or arithmetical operations on data, alteration, deletion, retrieval and dissemination of data;
User: the natural person who registers on the PETERJONESMAGIC.COM website (www.peterjonesmagic.com) or uses the services of the site as a guest.

Scope of Personal Data processed
The following data may be provided at the User’s choice: e-mail address, telephone number, name, place of residence/residence, the product category purchased by the User when placing an order, the payment method used by the User, the amount of the User’s purchases, the User’s loyalty card ID created in the framework of the loyalty programme.
Data technically recorded in the course of the operation of the system: the data of the User’s logon computer, which are generated during the use of the service and which are recorded by the Data Controller’s system as an automatic result of technical processes. The automatically recorded data are automatically logged by the system on logging in or logging out, without any specific declaration or action by the User. These data may not be linked to other Personal Data of the User, except in cases required by law. The Data may only be accessed by the Data Controller.
PETERJONESMAGIC.COM places a small data packet (so-called “cookie”) on the User’s computer in order to provide a personalized service. The purpose of the cookie is to ensure the highest possible quality of the functioning of the site in order to enhance the user’s experience. The User can delete the cookie from his/her computer or set his/her browser to disable the use of cookies. By disabling the use of cookies, the User acknowledges that without a cookie, the functionality of the site is not fully functional.
Legal basis, purposes and methods of processing
Data processing is carried out on the basis of a voluntary, duly informed declaration by the Users of the Internet content on the website, which contains their express consent to the use of their Personal Data provided during the use of the site. The legal basis for the processing of the data is the voluntary consent of the data subject pursuant to Article 5(1)(a) of Act CXII of 2011 on the Right of Informational Self-Determination and Freedom of Information.
The purpose of the processing is to ensure the provision of the services available under the zoldbolt.hu URL. The scope of the Personal Data to be provided for the use of these services is set out in the description of the relevant services.
The purpose of the automatically collected data (see III.2.) is to ensure the provision of the services available through the PETERJONESMAGIC.COM website, the display of personalized content and advertisements, the production of statistics, the technical development of the IT system, the protection of users’ rights. The data made available by Users when using the service may be used by the Data Controller to form user groups and to display targeted content and/or advertisements on the PETERJONESMAGIC.COM websites to the user groups.
The Data Controller shall not use the Personal Data provided for purposes other than those described in these points. The disclosure of Personal Data to third parties or public authorities, unless otherwise required by law, shall only be possible with the prior express consent of the User.
The Controller does not control the Personal Data provided to it. The person providing the data is solely responsible for the correctness of the data provided. Any User who provides an e-mail address shall also be responsible for ensuring that he/she is the only one to receive services from the e-mail address provided. With regard to this responsibility, any liability for accessing the service from an e-mail address is the sole responsibility of the user who registered the e-mail address.

Principles of data management
Personal data must be obtained and processed fairly and lawfully.
Personal Data must be stored only for specified and lawful purposes and must not be used in any other way.
The method of storage of Personal Data must be such as to permit identification of the User concerned only for the time necessary for the purpose for which it is stored.
Appropriate security measures must be taken to protect Personal Data stored in automated data files against accidental or unlawful destruction or accidental loss, and against unlawful access, alteration or dissemination.
Privacy Policy of PETERJONESMAGIC.COM
PETERJONESMAGIC.COM uses Personal Data that is necessary for the use of PETERJONESMAGIC.COM services, based on the consent of the data subject and only for the purposes for which they are collected.
PETERJONESMAGIC.COM, as the Data Controller, undertakes to process the Personal Data it obtains in accordance with the provisions of the Infotv. and the data protection principles set out in this Policy and not to transfer them to third parties.
With regard to the transfer of data, the following shall be excepted from the provisions of this clause:
the use of the data in a statistically aggregated form, which may not contain the name of the user concerned or any other identifiable information; or
PETERJONESMAGIC.COM may, in certain cases, make available to third parties the data of the User concerned, in response to a formal judicial or police request, legal proceedings concerning copyright, property or other infringements or a reasonable suspicion of such infringements, or in order to prejudice the interests of PETERJONESMAGIC.COM, or to jeopardise the provision of its services, etc.
PETERJONESMAGIC.COM may collect data about the activity of Users, which cannot be linked to the Personal Data provided by Users at the time of registration, nor to data generated by the use of other websites or services.
PETERJONESMAGIC.COM undertakes to publish a clear, prominent and unambiguous notice informing Users of the method, purpose and principles of collection of any Personal Data of Users before collecting, recording or processing such Personal Data. In addition, in all cases where the collection, processing or recording of data is not required by law, PETERJONESMAGIC.COM reminds the User of the voluntary nature of the provision of the data. In the case of mandatory data provision, the legal provision imposing data processing must also be indicated. The data subject must be informed of the purposes of the processing and of the persons who will process the Personal Data. The information on the processing shall also be provided where the law provides for the inclusion of data by transfer or linking from existing processing.
In all cases where PETERJONESMAGIC.COM intends to use the Personal Data provided for purposes other than those for which they were originally collected, it will inform the User and obtain his/her prior express consent or provide him/her with the possibility to prohibit such use.
PETERJONESMAGIC.COM, as Data Controller, shall in any case comply with the restrictions laid down by law in the collection, recording and processing of data, and shall inform the data subject of its activities by electronic mail, as requested. PETERJONESMAGIC.COM undertakes not to impose any sanctions on the User who refuses to provide the optional data.
PETERJONESMAGIC.COM undertakes to ensure the security of Personal Data, to take technical and organizational measures and to establish procedures to ensure that Personal Data collected, stored or processed are protected and to prevent their destruction, unauthorized use or unauthorized alteration. It also undertakes to require any third parties to whom it may transfer or disclose Personal Data to comply with its obligations in this regard.
If the Personal Data is not accurate and the accurate Personal Data is available to the Controller, the Controller shall correct the Personal Data.
Instead of deletion, the Controller shall block the Personal Data if the data subject so requests or if, on the basis of the information available to him or her, it is likely that deletion would harm the data subject’s legitimate interests. The Personal Data thus blocked may be processed only for as long as the processing purpose which precluded the erasure of the Personal Data persists.

The rectification, blocking or deletion of the processed Personal Data shall be notified to the User concerned, as well as to all those to whom the data was previously transmitted for the purposes of the Processing. The notification may be omitted if this does not harm the legitimate interests of the data subject in relation to the purposes of the processing.
Duration of processing
The processing of the Personal Data provided by the User shall continue until the User unsubscribes from the service, under the relevant user name. The date of deletion shall be 10 working days from the date of receipt of the User’s unsubscription (request for deletion). In the event of unlawful or fraudulent use of Personal Data or in the event of a criminal offence or system attack committed by the User, the Data Controller shall be entitled to delete the data immediately upon termination of the User’s registration, but shall also be entitled to retain the Personal Data for the duration of the proceedings in the event of suspected criminal offences or civil liability.
The Personal Data provided by the User, even if the User does not unsubscribe from the Service, may be processed by PETERJONESMAGIC.COM as Data Controller until the User expressly requests in writing that the processing of such Personal Data be terminated. The User’s right to request the termination of the processing without unsubscribing from the service does not affect his/her right to request the service, however, he/she may not be able to use certain services (e.g. auction, ranking) due to the absence of Personal Data. Personal Data will be deleted within 10 working days of receipt of the request.
Data that are automatically and technically recorded during the operation of the system will be stored in the system for a period of time from the moment they are generated that is reasonable for the purposes of ensuring the functioning of the system. PETERJONESMAGIC.COM ensures that these automatically recorded data cannot be linked to other Personal Data of the User, except in cases required by law. If the User has withdrawn his/her consent to the processing of his/her Personal Data or has unsubscribed from the service, his/her identity will no longer be identifiable from the technical data.
Consent to the processing of Personal Data
Changes to Personal Data or requests for the deletion of Personal Data may be communicated by means of an express written statement sent by e-mail.
In addition, changes to certain Personal Data may be made by editing the personal profile page.
Once a request for deletion or modification of Personal Data has been fulfilled, the previous (deleted) data can no longer be restored.
Data processing
PETERJONESMAGIC.COM does not use a separate external data processor. It processes the Personal Data it processes itself.

Possibility of data transfer
PETERJONESMAGIC.COM, as the Data Controller, is entitled and obliged to transfer to the competent authorities any Personal Data at its disposal and stored by it in accordance with the law, which it is obliged to transfer by law or by a final and binding obligation of a public authority. The Controller shall not be held liable for such transfers and the consequences thereof.
If PETERJONESMAGIC.COM transfers the operation or use of the content service on zoldbolt.hu, in whole or in part, to a third party, it may transfer the Personal Data it processes to such third party for further processing without requesting the consent of the third party. This transfer of Data may only serve to ensure the continuity of the registration of Users who have already registered, but may not place the User in a more disadvantageous position than the data management and data security rules indicated in the current version of these Data Management Regulations.
PETERJONESMAGIC.COM shall keep a register of data transfers for the purposes of monitoring the lawfulness of the data transfers and informing the Data Subject, which shall include the date of transfer of the Personal Data processed by it, the legal basis and the recipient of the data transfer, the scope of the Personal Data transferred and other data specified in the legislation providing for the processing.
Amendments to the Data Processing Policy
PETERJONESMAGIC.COM reserves the right to amend this Privacy Policy at any time by unilateral decision. Following the modification of the Privacy Policy, all Users shall be informed in an appropriate manner (newsletter, login pop-up). By continuing to use the service, Users acknowledge the modified Privacy Policy and no further consent is required.
Users’ rights in relation to their personal data processed by the controller
Users may request information from PETERJONESMAGIC.COM, as the Data Controller, at any time in writing, by registered or certified mail sent to the address of the Data Controller or by e-mail to info@peterjonesmagic.hu, about the processing of their personal data. Requests for information sent by e-mail shall be considered as authentic by the Data Controller only if they are sent from the registered e-mail address of the User. The request for information may cover the User’s data processed by the Controller, their source, the purpose, legal basis and duration of the processing, the names and addresses of any data processors, the activities related to the processing and, in the case of transfer of Personal Data, who has received or is receiving the User’s data and for what purpose.
The Data Controller shall provide information in writing in response to a query relating to the Processing within the shortest possible time from receipt, but not later than 30 days. In the case of e-mail, the date of receipt shall be deemed to be the first working day following the date of sending.
Remedies
The User may exercise his/her legal rights before the courts pursuant to the Infotv. and Act IV of 1959 (Civil Code), and may also seek the assistance of the National Authority for Data Protection and Freedom of Information (1125 Budapest Szilágyi Erzsébet fasor 22/C; postal address: 1530 Budapest, Pf. 5.).

Budapest, 22 June 2019.