Privacy Policy

in which we inform you, as a visitor of our website and a user of our services, about our company’s data management and data protection practices.

1. What principles do we follow in our data processing?

In the course of our data processing, our company follows the following principles:

  • We process personal data lawfully, fairly, and in a transparent manner for you.
  • We collect personal data only for specific, explicit, and legitimate purposes, and we do not process them in ways that are incompatible with those purposes.
  • The personal data we collect and process are adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed.
  • Our company takes all reasonable measures to ensure that the personal data we process are accurate and, where necessary, kept up to date, and that any inaccurate personal data is erased or corrected without delay.
  • We store personal data in a form that allows your identification only for as long as it is necessary to achieve the purposes of the data processing.
  • We ensure the appropriate security of personal data by applying suitable technical and organizational measures to protect them against unauthorized or unlawful processing, accidental loss, destruction, or damage.
  • Our company processes your personal data
  • based on your prior, informed, and voluntary consent, and only to the extent necessary and always for a specific purpose. This means we collect, record, organize, store, and use your data accordingly.
  • In certain cases, the processing of your data is required by law and is therefore mandatory. When this applies, we will specifically inform you of this fact.
  • In other cases, the processing of your personal data is based on the legitimate interests of our company or a third party, for example to operate, develop, and secure our website.

2. Who are we?

Business name: Nikolett Debreceni Sole Proprietor (or Nikolett Debreceni Individual Entrepreneur)
Registered office: 4002 Debrecen, Kondoroskert Street 14.
Website: nikidebeceni.hu
E-mail: info@nikidebreceni.hu
Tax number: 69654987-1-29

Under Article 37 of the GDPR, our company is not required to appoint a data protection officer.

Our company’s hosting provider:

Hosting provider name: Rackhost Zrt.

Hosting provider registered office: 6722 Szeged, Tisza Lajos Boulevard 41.

Hosting provider website: rackhost.hu

Hosting provider email address: info@rackhost.hu

To ensure high-quality service for our clients, our company uses the following data processors during data processing:

Data Controller (1): Nikolett Debreceni

Address (1): 4002 Debrecen, Kondoroskert Street 14.

Scope of responsibility (1): All activities

If the list of our data processors changes, we will update this notice accordingly.

Data we process

We only request personal data from visitors to our website if they wish to register, log in, or participate in a prize draw.

Personal data provided during registration or when using our marketing services will not be linked together, and identifying our visitors is generally not our objective.

For any questions related to data processing, you may contact info@nikidebreceni.hu via email or postal address to request further information. We will send our response within 15 days (but no later than 1 month) to the contact details you have provided.

3. What are cookies and how do we manage them?

Cookies are small data files (hereinafter: cookies) that are placed on your device when you use our website, and are saved and stored by your internet browser. Most commonly used browsers (such as Chrome, Firefox, etc.) accept and enable the use of cookies by default. However, you can choose to reject or disable cookies by changing your browser settings, and you can also delete stored cookies from your device at any time. For detailed instructions on how to manage cookies, please refer to the “Help” section of your browser.

There are certain cookies that do not require your prior consent. Our website provides a brief notice about these when you first visit. These include, for example, authentication cookies, multimedia player cookies, load-balancing cookies, session cookies that assist with user interface customization, and user-centric security cookies.

For cookies that require consent, if data processing begins upon visiting the site, our company will inform you at the start of your first visit and request your consent.

Our company does not use or permit the use of cookies that would allow third parties to collect data without your consent.

Accepting cookies is not mandatory; however, our company cannot take responsibility if the website does not function as expected due to cookies being disabled.

What types of cookies do we use?

Name: _ga
Provider: domained.hu
PurposeRegisters a unique ID that is used to generate statistical data on how the visitor uses the website.
Expiration: 2 years
Type: HTTP

Name: _gat
Provider: domained.hu
PurposeUsed by Google Analytics to throttle request rate.
ExpirationSession
Type: HTTP

Name: _gid
Provider: domained.hu
PurposeRegisters a unique ID that is used to generate statistical data on how the visitor uses the website.
ExpirationSession
Type: HTTP

Name: _fbp
Provider: domained.hu
PurposeUsed by Facebook to deliver advertising products to third-party advertisers (e.g. real-time bidding).
Expiration3 months
Type: HTTP

Name: fr
Provider: facebook.com
PurposeUsed by Facebook to deliver a range of advertising products, such as real-time bids from third-party advertisers.
Expiration3 months
Type: HTTP

More details about third-party cookies can be found here on this page you can read.

4. What else should you know about data processing on our website?

You provide your personal data to us voluntarily during registration or when contacting our company, therefore we kindly ask you to ensure that the data you provide is accurate, correct, and up to date, as you are responsible for its validity. Incorrect, inaccurate, or incomplete data may prevent the use of our services.

If you provide personal data belonging to another person, we will assume that you are authorized to do so.

You may withdraw your consent to data processing at any time, free of charge, by:

  • deleting your registration,
  • withdrawing your consent to data processing, or
  • withdrawing or requesting the restriction of consent to the processing or use of any mandatory data provided during registration.

For technical reasons, we will register the withdrawal of consent within 30 days. However, please note that we may still process certain data after the withdrawal of consent if required to comply with legal obligations or to enforce our legitimate interests.

In the event of the use of misleading personal data, or if a visitor commits a criminal act or attacks our system, we will immediately delete the user’s registration and data, or – if necessary – retain the data for the duration required to establish civil liability or conduct criminal proceedings.

What should you know about our data processing for direct marketing and newsletter purposes?

By making a declaration during registration or later by modifying your stored personal data on the newsletter and/or direct marketing subscription interface (i.e., by clearly expressing your consent), you may provide permission for your personal data to be used for marketing purposes. In this case – until you withdraw your consent – we will process your data for direct marketing and/or newsletter purposes and may send you advertising or other communications, as well as information and offers, and/or forward newsletters to you (in accordance with Section 6 of the Advertising Act).

You may give your consent to direct marketing and newsletter communications jointly or separately, and you may withdraw one or both at any time, free of charge.

Deleting your registration will always be considered a withdrawal of consent. However, withdrawing consent to direct marketing and/or newsletters does not automatically mean withdrawing consent to data processing related to the use of our website. Why is that? What do we retain and on what basis if you withdraw your newsletter consent? Each consent applies to a specific purpose. Registration on the website and subscribing to a newsletter are two separate purposes and therefore stored in separate databases. They cannot be linked or treated as the same consent.

For technical reasons, the registration of each withdrawal or cancellation of consent 15 days will be completed within the specified deadline.

6. What should you know about our prize draws / contests?

Our company may organize prize draws as part of promotional campaigns, and the specific conditions for each draw are set out in a separate set of rules. The terms of the current promotion are always available on our homepage via a centrally placed link.

7. Other data processing matters

We may transfer your data only within the limits permitted by law, and in the case of our data processors, we ensure through contractual conditions that your personal data cannot be used for purposes contrary to your consent. Further information can be found in Section 2.

Our company does not transfer data abroad.

Courts, prosecutors, and other authorities (such as the police, tax authority, or the National Authority for Data Protection and Freedom of Information) may contact our company to request information, data disclosure, or the provision of documents. In such cases, we are legally required to comply with the request, but only to the extent strictly necessary to fulfill its purpose.

The contributors and employees involved in our company’s data processing and/or data management are authorized to access your personal data only to a predefined extent and are bound by confidentiality obligations.

We protect your personal data with appropriate technical and other measures, ensuring the security and availability of the data, and protecting them against unauthorized access, alteration, damage, disclosure, and any other unauthorized use.

As part of our organizational measures, we control physical access to our buildings, provide continuous training to our employees, and securely store paper-based documents. As part of our technical measures, we use encryption, password protection, and antivirus software. However, please note that data transmission over the internet cannot be considered fully secure. While our company takes all reasonable steps to make these processes as safe as possible, we cannot take full responsibility for data transmission through our website. Once the data is received by our company, we apply strict internal rules to ensure data security and prevent unauthorized access.

Regarding security matters, we kindly ask for your cooperation by keeping your login password to our website secure and not sharing it with anyone.

8. What are your rights and legal remedies?

You have the right to request information about the processing of your personal data

  • may request information
  • the correction, modification, or completion of your personal data processed by us;
  • object to data processing and request the deletion or restriction of your data (except in the case of mandatory data processing);
  • seek legal remedy before a court;
  • lodge a complaint with or initiate proceedings before the supervisory authority.

Supervisory Authority: National Authority for Data Protection and Freedom of Information (NAIH)

  • Registered office: 1055 Budapest,
    Falk Miksa Street 9-11
  • Mailing address: 1363 Budapest, PO Box 9
  • Phone: +36 (1) 391-1400
  • Fax: +36 (1) 391-1410
  • Email: ugyfelszolgalat@naih.hu

Website: https://naih.hu/

Upon your request, we will provide information about the personal data processed by us or by our appointed data processors…

  • about your data
  • the source of the data,
  • the purpose and legal basis of data processing,
  • the duration of processing or, if not possible, the criteria used to determine that duration,
  • the names, addresses, and data processing activities of our data processors,
  • the circumstances, impacts, and measures taken in connection with any data protection incidents,
  • and, in the case of data transfers, the legal basis and recipients of such transfers.

We will provide our response within 15 days of receiving your request (but no later than 1 month). The information is free of charge, except if you have already requested the same information from us during the current year. If we have processed the data unlawfully or your request results in correction, we will refund any fees you may have paid. We may only refuse to provide information in cases defined by law, with legal justification, and we will inform you of the possibility of seeking judicial remedy or turning to the supervisory authority.

Our company will notify you and all parties to whom the personal data was previously transferred of any correction, restriction, marking, or deletion of the data, unless such notification would not infringe your legitimate interests.

If we do not fulfil your request for correction, restriction, or deletion, we will provide our reasoning in writing or, with your consent, electronically within 15 days (but no later than 1 month), and inform you of your right to judicial remedy or to contact the supervisory authority.

If you object to the processing of your personal data, we will examine the objection within 15 days (but no later than 1 month) from the submission of the request and inform you in writing of our decision. If your objection is justified, we will cease the data processing—including further collection and transfer—and restrict the data, and notify all parties to whom the data was previously transferred so they may enforce your objection rights.

We will refuse to comply with your request only if we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or if the data is required for establishing, exercising, or defending legal claims. If you disagree with our decision, or if we fail to meet the deadline, you may file a lawsuit within 30 days from the notification or from the last day of the deadline.

Data protection lawsuits fall under the jurisdiction of the regional courts, and the case may also be initiated—at your discretion—before the court with jurisdiction over your place of residence or stay. Foreign citizens may also file complaints with the supervisory authority of their country of residence.

We kindly ask that before contacting the supervisory authority or initiating court proceedings, you first reach out to us so we can resolve the issue as quickly as possible.

9. What are the main legal regulations governing our activities?

  • Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) on the protection of natural persons with regard to the processing of personal data
  • Act CXII of 2011 on the Right of Informational Self-Determination and Freedom of Information (Info Act)
  • Act V of 2013 on the Civil Code (Civil Code)
  • Act CVIII of 2001 on Certain Issues of Electronic Commerce Services and Information Society Services (E-Commerce Act)
  • Act C of 2003 on Electronic Communications (Electronic Communications Act)
  • Act CLV of 1997 on Consumer Protection (Consumer Protection Act)
  • Act CLXV of 2013 on Complaints and Public Interest Disclosures
  • Act XLVIII of 2008 on the Basic Requirements and Certain Restrictions of Commercial Advertising Activities (Advertising Act)

10. Modification of this Privacy Notice or 10. Changes to the Privacy Policy

Our company reserves the right to amend this Privacy Notice and will inform the data subjects accordingly. Information related to data processing will be published on the domained.hu website

Budapest, 13 February 2025

Címsor, ami bemutatja az ajánlatot

Mutasd be a problémát, amit megoldasz, emeld ki a célközönséget, bizonyítékaidat vagy egy előnyöd, funkciód.