GDPR
Purpose of the privacy notice
The Magic Empire Kft (1065 Budapest, Hajós utca 25., hereinafter referred to as the service provider, data controller) as the data controller, acknowledges the contents of this legal notice as binding. It undertakes to ensure that all processing of data related to its activities complies with the requirements set out in this Policy and in the applicable national legislation and European Union legal acts. The data protection policy relating to the processing of personal data by Magic Empire Ltd. http://themagic.hu at. Magic Rooms Ltd reserves the right to change this information at any time. Of course, any changes will be communicated to the public in due time. If you have any questions regarding this notice, please contact us and our team will answer them. Magic Rooms Ltd. is committed to protecting the personal data of its customers and partners, and attaches the utmost importance to respecting the right of its customers to information self-determination. Magic Empire Ltd. treats personal data confidentially and takes all security, technical and organizational measures to guarantee the security of the data. Magic Empire Ltd. describes its data management practices below.
2 Data controller's data
If you wish to contact our Company, you can contact the data controller at info@themagic.hu.
Name: Magic Empire Kft
Head office: 1065 Budapest, Hajós utca 25.
Company registration number: Cg. 01-09-342499
Tax number: 26745677-2-42
Phone number: +36309849009
E-mail: info@themagic.hu
2.1 Data Protection Officer
Name: gergő Dárdai
Phone number: +36309849009
3 Scope of personal data processed
3.1 Personal data to be provided during registration
Specifically list the personal data that will be requested during registration. Indicate which fields are mandatory and check the extent to which the information requested is necessary.
3.2 Technical data
Magic Empire Ltd. selects and operates the IT tools used to process personal data in the course of providing the service in such a way that the data processed:
is accessible to authorised persons (availability);
authenticity and verification (authenticity of processing);
can be verified to be unchanged (data integrity);
be protected against unauthorised access (data confidentiality).
Magic Empire Ltd. takes appropriate measures to protect the data against unauthorized access, alteration, disclosure, disclosure, deletion or destruction and against accidental destruction.
Magic Empire Ltd. ensures the security of data processing by technical, organisational and organisational measures that provide a level of protection appropriate to the risks associated with data processing.
Magic Empire Ltd. maintains the confidentiality of the data processing: it protects the information so that only those who are entitled to access it can do so;
Integrity: protects the accuracy and completeness of the information and the processing method; Availability: ensures that when the authorised user needs it, he or she can actually access the information and the means to do so are available.
3.3 Cookies (Cookies)
3.3.1 The role of cookies
collect information about visitors and their devices;
remember visitors' individual preferences, which are used, for example, when making online transactions, so they do not need to be re-entered;
make the website easier to use;
provide a quality user experience.
In order to provide a personalised service, a small piece of data called a cookie is placed on the user's computer and read back during a subsequent visit. When the browser returns a previously saved cookie, the cookie provider has the possibility to link the user's current visit to previous visits, but only in relation to its own content.
3.3.2 Strictly necessary session cookies
The purpose of these cookies is to enable visitors to browse the Magic Empire Kft website, use its features and services fully and smoothly. The validity period of this type of cookie lasts until the end of the session (browsing), and when the browser is closed, this type of cookie is automatically deleted from the computer or other device used for browsing.
3.3.3 Third-party cookies (analytics)
Magic Empire Ltd also uses third party cookies from Google Analytics on its website. By using Google Analytics for statistical purposes, Magic Empire Ltd collects information about how visitors use its website. The data is used to improve the website and the user experience. These cookies will also remain on the visitor's computer or other browsing device, their browser, until they expire or are deleted by the visitor.
3.4 Data related to online ordering
Specifically list the personal data that will be requested when you make an online reservation. Indicate which fields are mandatory and check the extent to which the information requested is necessary.
Table reservations can be made on https://reservours.com/ and are subject to the Privacy Policy. You can accept and agree to the Privacy Policy before finalising your reservation 3.5 Data related to online administration
Specifically list the personal data that you will be asked to provide during the online administration. Indicate which fields are mandatory and check the extent to which the information requested is necessary.
Name
Phone number
Email
3.6 Data related to the newsletter
Please specify the options to subscribe and unsubscribe to the newsletter. Ensure that the customer still has the possibility to opt-out in all related processes. 4 Intended use and retention period of the data processed Name of processing Legal basis for use Retention period
Unsubscribing from the newsletter is a one-button action that does not take you to another site or advertising space
5 Purpose, method and legal basis of processing
5.1 General data processing policy
The data processing of the activities of Magic Empire Ltd. is based on voluntary consent and legal authorization. In the case of processing based on voluntary consent, data subjects may withdraw their consent at any stage of the processing. In some cases, the processing, storage and transmission of some of the data provided is required by law, and we will inform our customers separately. We draw the attention of the data providers to Magic Rooms Ltd. that if they do not provide their own personal data, the data provider is obliged to obtain the consent of the data subject. Our data management principles comply with the applicable data protection legislation, in particular with the following:
Act CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information (Infotv.);
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Regulation (EC) No 95/46/EC (General Data Protection Regulation, GDPR);
Act V of 2013 - on the Civil Code (Civil Code); Act C of 2000 - on Accounting (Accounting Act);
Act LIII of 2017 - on the Prevention and Combating of Money Laundering and Terrorist Financing (Pmt.);
Act CCXXXVII of 2013 - on Credit Institutions and Financial Undertakings (Hpt.).
6 Physical storage locations for data
Your personal data (i.e. data that can be associated with you personally) may be processed by us in the following ways: on the one hand, technical data relating to the computer, browser program, Internet address and pages visited in connection with the Internet connection are automatically generated in our computer system, and on the other hand, you may provide your name, contact details or other data if you wish to contact us personally when using the website. Data technically recorded during the operation of the system: the data of the computer of the data subject which are generated during the voting process and which are recorded by the server of Magic Empire Ltd as an automatic result of technical processes. The data that is automatically recorded is automatically logged by the system at the time of entry or exit, without any specific declaration or action by the data subject. This data cannot be linked to other personal user data, except in cases required by law. Access to the data is restricted to Magic Empire Ltd.
7 Data transfers, data processing, who has access to the data
Describe in detail the companies that are involved in the transmission, processing or knowledge. Provide basic information about the firms (company profile) and the staff who will be able to access the data. Ensure that the confidentiality clause of contracts with partners covers this scope.
8 Rights of data subjects and means of enforcement
The data subject may request information on the processing of his or her personal data, and may request the rectification, erasure or withdrawal of his or her personal data, except for mandatory data processing, and may exercise his or her right to data portability and objection in the manner indicated when the data were collected, or by contacting the controller at the above contact details.
8.1 Right to information
Magic Empire Ltd. takes appropriate measures to provide data subjects with all the information on the processing of personal data referred to in Articles 13 and 14 of the GDPR and each of the information referred to in Articles 15 to 22 and 34 of the GDPR in a concise, transparent, intelligible and easily accessible form, in a clear and plain language.
8.2 Right of access of the data subject
The data subject shall have the right to obtain from the controller feedback as to whether or not his or her personal data are being processed and, if such processing is taking place, the right to access the personal data and the following information: the purposes of the processing; the categories of personal data concerned; the recipients or categories of recipients to whom or with whom the personal data have been or will be disclosed, including in particular recipients in third countries or international organisations; the envisaged period of storage of the personal data; the right to rectification, erasure or restriction of processing and the right to object; the right to lodge a complaint with a supervisory authority; information on the data sources; the fact of automated decision-making, including profiling, and clear information on the logic used and the significance of such processing and its likely consequences for the data subject. The controller shall provide the information within a maximum of one month from the date of the request.
8.3 Right of rectification
The data subject may request the rectification of inaccurate personal data concerning him/her processed by Magic Empire Ltd. and the completion of incomplete data.
8.4 Right to cancellation
If one of the following grounds applies, the data subject shall have the right to have the personal data concerning him or her erased by Magic Empire Ltd. without undue delay upon his or her request:
the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
the data subject withdraws the consent on which the processing is based and there is no other legal basis for the processing;
the data subject objects to the processing and there are no overriding legitimate grounds for the processing; the personal data have been unlawfully processed;
the personal data must be erased in order to comply with a legal obligation under Union or Member State law to which the controller is subject;
personal data are collected in connection with the provision of information society services.
The erasure of data cannot be initiated if the processing is necessary:
to exercise the right to freedom of expression and information;
for the purposes of complying with an obligation under Union or Member State law to which the controller is subject to which the processing of personal data is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
for archiving, scientific and historical research purposes or for statistical purposes in the public interest in the field of public health;
or to bring, enforce or defend legal claims.
8.5 Right to restriction of processing
At the request of the data subject, Magic Empire Ltd. will restrict the processing of data if one of the following conditions is met:
the data subject contests the accuracy of the personal data, in which case the restriction applies for a period of time which allows the accuracy of the personal data to be verified;
the data processing is unlawful and the data subject opposes the erasure of the data and requests instead the restriction of their use;
the controller no longer needs the personal data for the purposes of processing, but the data subject requires them for the establishment, exercise or defence of legal claims;
or the data subject has objected to the processing;
in which case the restriction applies for the period until it is established whether the legitimate grounds of the controller prevail over the legitimate grounds of the data subject. Where processing is subject to restriction, personal data, except for storage, may be processed only with the consent of the data subject or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for important public interests of the Union or of a Member State.
8.6 Right to data retention
The data subject shall have the right to obtain the personal data concerning him or her which he or she has provided to the controller in a structured, commonly used, machine-readable format and to transmit such data to another controller.
8.7 Right to object
The data subject shall have the right to object at any time, on grounds relating to his or her particular situation, to processing of his or her personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller, or necessary for the purposes of the legitimate interests pursued by the controller or by a third party, including profiling based on those provisions. In the event of an objection, the controller may no longer process the personal data, unless there are compelling legitimate grounds for doing so which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.
8.8 Automated decision-making in individual cases, including profiling
The data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her.
8.9 Right of withdrawal
The data subject has the right to withdraw his or her consent at any time.
8.10 Right to apply to the courts
The data subject may take the controller to court if his or her rights are infringed. The court shall rule on the case out of turn.
8.11 Data protection authority procedure
You can lodge a complaint with the National Authority for Data Protection and Freedom of Information:
Name: National Authority for Data Protection and Freedom of Information
Head office: 1125 Budapest, Szilágyi Erzsébet fasor 22/C.
Address for correspondence: 1530 Budapest, Pf.: 5.
Phone: 0613911400 Fax: 0613911410
E-mail: ugyfelszolgalat@naih.hu
Website: http://www.naih.hu
9 Other provisions
Information about data processing not listed in this notice is provided at the time of collection. We inform our customers that the court, the prosecutor, the investigating authority, the law enforcement authority, the administrative authority, the National Authority for Data Protection and Freedom of Information, the Hungarian National Bank, or other bodies authorised by law may contact the data controller to provide information, to disclose or transfer data, or to provide documents. Magic Rooms Ltd. shall disclose to the authorities - if the authorities have indicated the exact purpose and scope of the data - personal data only to the extent and to the extent that is indispensable for the purpose of the request.