GDPR

DATA PROCESSING NOTICE

Effective: July 1, 2026

1. Purpose of the privacy notice

The purpose of this Data Protection Notice is to explain the www.themagic2.hu (hereinafter referred to as the Data Controller), and provide information on the processing of personal data of website visitors, online gift voucher purchasers, persons initiating table reservations, users of the contact form and newsletter subscribers.

The Data Controller pays special attention to the protection of personal data and to ensuring that its data processing activities comply in all respects with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR), Act CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information, and with Hungarian and European Union legislation in force at all times.

The Data Controller processes personal data exclusively for the purposes specified in the legislation, to the necessary extent and for the necessary period.

The Data Controller ensures that the principles of lawfulness, fair procedure, transparency, purpose limitation, data economy, accuracy, limited storage, integrity and confidentiality are applied when processing personal data.

2.Data controller's data

Company name:
Magic Empire Limited Liability Company

Abbreviated company name:
Magic Empire Ltd.

Headquarters:
1065 Budapest, Hajós Street 25.

Company registration number:
Cg. 01-09-342499

Tax number:
26745677-2-42

E-mail:
info@themagic.hu

Phone number:
+36 30 984 9009

Website:
www.themagic2.hu

3.Principles applied during data processing

The Data Controller applies the following principles in particular when processing personal data:

legality, due process and transparency;
purpose-bound data processing;
data saving;
accuracy;
limited storage capacity;
integrity and confidentiality;
accountability.

The Data Controller only processes personal data that is necessary to achieve the purpose of data management and only retains it for the necessary period of time.

4.Legal background of data processing

The data processing activities of the Data Controller are governed in particular by the following laws:

Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR);
1. Act CXII of 2011 on the right to informational self-determination and freedom of information;

1. Act V of 2011 on the Civil Code;

1. Act CVIII of 2011 on electronic commerce services;

1. Act XLVIII of 2008 on economic advertising activities;

1. Act C of 2011 on Accounting

1. Act CXXVII of 2011 on general value added tax;
  
  as well as the Hungarian and European Union data protection laws in force at all times.

Scope of data processing

This Data Protection Notice covers the www.themagic2.hu for all data processing activities carried out on the website, in particular:

to visit the website;
to use the contact form;
to purchase a gift certificate online;
to process electronic payments;
to subscribe to the newsletter;
data processing for marketing purposes;
statistical and analytical data processing;
to use cookies;
data processing during online table reservations;
customer service communication;
for data processing necessary to fulfill legal obligations.

Detailed description of each data processing

6.1 Data processing carried out when visiting the website

Purpose of data processing

Ensuring the proper functioning of the website, maintaining the security of the IT system, preventing abuse, and technically ensuring the operation of the website.

Scope of data processed

IP address
browser type and version
operating system
pages viewed
date of visit
referring page
session ID
technical log data

Legal basis for data processing

GDPR Article 6(1)(f) – legitimate interest of the Data Controller.

Duration of data processing

Technical log files are retained for a maximum of 30 days, unless legal requirements or a security incident warrant longer retention.

6.2 Contact form

Purpose of data processing

Responding to the User's inquiries, making contact and handling matters.

Scope of data processed

name
email address
phone number (if provided)
message content
submission date

Legal basis for data processing

GDPR Article 6(1)(a) – consent.

Duration of data processing

Up to 1 year after the case is closed.

6.3 Contact by email

If the User contacts the Data Controller directly by e-mail, the Data Controller processes the personal data necessary for the response.

Managed data

name
email address
phone number (if available)
letter content
attachments
communication time

Legal basis

GDPR Article 6(1)(b) or (f).

Retention time

Up to 5 years after the case is closed.

6.4 Telephone contact

If the User contacts the Data Controller by telephone, the Data Controller processes the data necessary for the communication.

Managed data

phone number
name (if disclosed)
data provided during conversation

The Data Controller records telephone conversations only if specifically informed.

Legal basis

GDPR Article 6(1)(b) or (f).

6.5 Buying a gift certificate online

The Data Controller processes the personal data necessary for the purchase of the gift voucher.

Managed data

name
billing name
billing address
email address
phone number
value of the ordered gift certificate
order ID
payment status
account details