Privacy Policy
Effective: 01/08/2022
This is a user-friendly summary – and not a substitute – for the legal-friendly privacy notice on the pages that follow.
Who are we?
Name: SACALM JANA Kft.
Address: 1223 Budapest, Nagytétényi út 190. b. intact. 1. em. 2.
Owner: Anett Manger
Email: bbstudio1119@gmail.com
Phone: +36 70 930 1816
What do we do?
We respect your rights and strive to comply with your requests within the legal deadlines. We handle your data in the way we expect others to handle our own data.
We take care of your data, move it through encrypted channels and never sell it to anyone else, never use it for any purpose other than the one for which you provided it.
We have a website, we measure your use, we log for security reasons, we have online marketing with targeted campaigns, we process the data you provide.
If you request it, we will release your data after identification. If you request it, we will delete your data.
Services
Web page
The viewing of our website is logged for security reasons (IP address, pages viewed). With the help of Google Analytics, we track what you are looking at so that we can produce more and more content that is interesting to you (cookies). Facebook and Google AdWords cookies are placed in your browser, and later you can see ads through these providers.
Newsletter
You can subscribe to our newsletter by entering your email address and name. We will inform you by email about our new services, promotions and useful ideas. We will include an unsubscribe link in every email so that you can opt out at any time if you change your mind. Your data will be stored for 365 days after the last interaction.
Salary
Due to legal requirements, we will keep some of your personal data and the data contained in the issued invoices for a period of time in accordance with applicable law (at least 10 years, max 15 years from the last invoice was issued).
Detailed Privacy Policy
Name of data controller: SACALM JANA Kft.
Address: 1223 Budapest, Nagytétényi út 190. b. intact. 1. em. 2.
Owner: Anett Manger
Email: bbstudio1119@gmail.com
Phone:+36 70 930 1816
Website: beautybalance.hu
Company registration number: 01 09 295268
Tax number: 5901355-2-43
Declaration of consent to the processing of my personal data
I give my voluntary and explicit consent to the processing of my data provided during the visit, subscription and registration of the company's electronic interfaces (website, Facebook ads, AdWords ads).
At the same time as recording my data, I declare that I am a person of legal capacity over the age of 18. I represent a legal entity or other organization without legal personality, and I am an authorized person authorized to represent the person or organization I represent and to give consent to data processing and data processing in accordance with this policy.
I declare that I will not provide any special personal data either during registration or later in any form. Sensitive personal data includes, but is not limited to, racial or ethnic origin; political opinions; religious and philosophical beliefs; trade union membership; genetic or biometric data that can be used to identify the person; health data or data relating to sexual life or sexual orientation.
I declare that I will not provide a personal identification number – examples without being exhaustive: passport number, personal identification number, identity card number, address card number, driver's license number.
With my consent, I acknowledge that Beauty and Balance can send me letters with advertising content, information, event invitations and contact me by phone related to its scope of activities.
I can withdraw my consent to the processing of my data at any time, in the ways specified in the information, for example by sending a request to the bbstudio1119@gmail.com email address.
Legal basis based on legitimate business interest
If you provide your data and indicate your interest by filling out a form, your application will be considered as contract preparation. In this case, the legal basis for your Personal Data Processing will already be a legal basis based on a legitimate business interest under the GDPR Regulation. From this changed legal basis, your rights and the processing of your Personal Data will not change, this only means that during the preparation of the contract, if you do not request the termination of the process, we will continue to process your Personal Data for the purpose and purpose of preparing the contract.
In case of payment, a legal basis based on a contract
If you pay a fee for one of our services, you will pay in accordance with the terms and conditions detailed in our Terms and Conditions. In this case, the legal basis for your Personal Data Processing will already be a contractual legal basis under the GDPR Regulation. From this changed legal basis, your rights and the processing of your Personal Data will not change, this only means that during the existence of the contract it is useless to withdraw your consent for the performance of the contract and for its purpose we will continue to process your Personal Data.
As soon as the contract is fulfilled or terminated, the legal basis of your data processing will change again and your Personal Data will be processed on the basis of law.
After termination or performance of a contract by law
We are legally obliged to continue to process your Personal Data in relation to the data on the invoice.
Your rights
You have the following rights. In connection with these, we must respond to your request under GDPR within a maximum of 1 month. We will do our best to respond much sooner than that.
Right to information
You can ask us to inform you about the personal data we process about you. You can request access to this information.
You can request information at any time in writing by registered letter with acknowledgement of receipt sent to our address or by sending an e-mail to our e-mail address at the office. A request for information sent by mail will be considered authentic if we can clearly identify it on the basis of the request sent.
A request for information sent by e-mail will only be considered authentic if it is sent from your registered email address, however, this does not preclude us from identifying you by other means for security reasons before providing the information.
The request for information may cover the data processed by us, their source, the purpose, legal basis, duration of the data processing, the names and addresses of any data processors, the activities related to data processing and, in the case of the transfer of Personal Data, who received or receives your data and for what purpose.
Right of access
If you request that we inform you as to whether your Personal Data is being processed, you may be given access to the purpose of the processing, categories of data, recipients, duration of storage, data subject rights, legal remedy, source of data, automated decision-making, transfer of data abroad if you answer yes.
Right to rectification
You may request the correction or modification of your Personal Data at any time by registered letter with acknowledgement of receipt sent to our address or by sending an e-mail to our official e-mail address. Taking into account the purpose of the data processing, you may request the completion of incomplete Personal Data.
Right to be forgotten (Right to erasure)
You can request the deletion of your Personal Data processed by us. Deletion may be refused (i) for the purpose of exercising the right to freedom of expression and information, or (ii) if the processing of Personal Data is carried out in the public interest (authorised by law); and (iii) is made out of legitimate private interests (for the establishment, exercise or defence of legal claims).
We will always inform you of the refusal of the deletion request, indicating the reason for the refusal. Once the request to delete personal data has been fulfilled, the previous (deleted) data can no longer be restored.
Newsletters can be unsubscribed via the unsubscribe link in them.
Right to restriction of processing
You can request that we restrict the processing of your Personal Data if you dispute the accuracy of the Personal Data processed. In this case, the restriction applies to the period of time that allows us to verify the accuracy of the Personal Data.
We will mark the Personal Data we process if you dispute its correctness or accuracy, but the incorrectness or inaccuracy of the disputed Personal Data cannot be clearly established.
You may request that we restrict the processing of your Personal Data even if the Processing is unlawful, but you oppose the erasure of the Personal Data processed and request the restriction of their use instead.
You can also exercise this right if the purpose of data processing has been achieved, but you require the processing of your data for the establishment, exercise or defence of legal claims.
If you object to the processing, we will restrict the processing of your Personal Data, which restriction shall apply until it is established whether the legitimate reasons of the data controller take precedence over the legitimate reasons given.
Right to data portability
You may request that the Personal Data provided to us by you and processed by you in an automated manner be transferred to you in a structured, commonly used, machine-readable format (XML/XLS/CSV) and/or transmitted to another data controller.
Right to object
You may object to the processing of your Personal Data (i) if the processing of personal data is only necessary for compliance with a legal obligation to which we are subject or for the purposes of our legitimate interests; (ii) if the purpose of the Processing is direct business acquisition, public opinion polling or scientific research; or (iii) if the Processing is carried out for the performance of a task carried out in the public interest.
We will examine the lawfulness of the objection and, if we determine the merits of the objection, we will terminate the Data Processing and block the processed Personal Data, and we will notify all those to whom the Personal Data affected by the objection have previously been transferred about the objection and the measures taken on the basis thereof.
Purpose of data processing
Protecting your rights.
Your identification, contact with you.
Customize the marketing messages sent to you. Provide targeted, relevant messages based on your area of interest.
Provision of services, quality of service and safety conditions undertaken in general terms and conditions.
To comply with our legal obligations.
Pursuing our legitimate business interests.
Processed data
We process the data you provide to us:
Name
Telephone number
Billing address, location
We log data for security reasons:
Page viewed/feature viewed
Exact time
IP address
Browser cookie
We build a profile for marketing purposes:
What problem are you looking for a solution to?
What services are you interested in?
Profile building is based on the data you provide. Our goal is to make the messages we send you really interesting and relevant. We also don't like to receive general messages that are not for us.
Web analytics on the website
Please note that we use Google Analytics, Google Remarketing, AdWords Conversion Tracking, and Facebook Remarketing to measure the number of visitors to the "Website Link" website and to monitor the behavior of its visitors, to compile statistics and to ensure the effectiveness of its advertisements.
The linked programs in your browser are called. Cookies are placed that store user unique identifiers. As a visitor to the website, you enable the use of Google Analytics, Google Remarketing, AdWords Conversion Tracking, and Facebook Remarketing. At the same time, you contribute to monitoring, tracking, and using all the services provided by the programs.
In addition, you have the option to disable the recording and storage of cookies at any time for the future, as described below. Please note that the settings and use of Google Analytics, Google Remarketing, AdWords Conversion Tracking, and Facebook Remarketing programs fully comply with the requirements of the data protection authority.
According to Google, Google Analytics mainly uses first-party cookies to report visitor interactions on its website. These cookies only record non-personally identifiable information. Browsers do not share their own cookies between domains. More information about the cookie can be found in the Google Advertising and Privacy FAQ.
Google Analytics
We use Google Analytics primarily to generate your statistics, including measuring the effectiveness of your campaigns. By using the program, we obtain information about how many visitors visited the website and how much time the visitors spent on the website. The program recognizes the visitor's IP address, so it can track whether the visitor is a returning or new visitor, and it can also track the path the visitor has taken on the Website and where he has entered.
Google AdWords conversion tracking
Google AdWords conversion tracking is designed to help your business measure the effectiveness of your AdWords ads. It does this with the help of cookies placed on the User's computer, which exist for 30 days.
Disable cookies
If you want to manage your cookie settings or disable the feature, you can do so in your own browser. Depending on your browser's toolbar, this option can be found in the cookies/cookies/tracking feature placements menu item. In general, you can set what tracking features you enable/disable on your computer under Devices > Settings > Privacy Settings.
If you don't want Google Analytics to report your visits, you can install the Google Analytics opt-out browser add-on. This add-on instructs Google Analytics JavaScript scripts not to send visit information to Google. If you've installed the blocking browser extension, you won't participate in Content Experiments either.
To disable Google Analytics web activity, visit the Google Analytics opt-out page and install the add-on for your browser. For more information on installing and uninstalling the extension, see the help for your browser.
Principles of data processing
The Data Controller processes Personal Data in accordance with the principles of good faith and fairness and transparency, as well as the provisions of the applicable legislation and this Policy.
The Data Controller shall use the Personal Data strictly necessary for the use of the Services on the basis of the consent of the User concerned and only for the purpose.
The Data Controller processes Personal Data only for the purposes specified in this Prospectus or in the relevant legislation. The scope of the personal data processed is proportionate to the purpose of the data processing and cannot extend beyond it (data minimisation).
We do not process the relevant Personal Data of a person under the age of 18.
The Data Controller shall not transfer the Personal Data managed by it to third parties other than the Data Processors specified in this Prospectus and in certain cases referred to in this Prospectus to external service providers. An exception to the provision of this section is the use of data in a statistically aggregated form, which may not contain any other data suitable for identifying the User concerned in any form, thus it does not qualify as Data Management or data transmission.
In certain cases – official court, police request, legal proceedings due to copyright, property or other violations or reasonable suspicion thereof, the Data Controller makes the available Personal Data of the User concerned available to third parties due to damage to the interests of the Data Controller, endangering the provision of the Services, etc.
The Data Controller's system may collect data on the activity of the Users, which cannot be linked to other data provided by the Users at the time of registration, nor to the data generated when using other websites or services.
The Data Controller shall notify the User concerned of the rectification, restriction or deletion of the Personal Data processed by him/ her, as well as all those who have previously had the
You have transferred personal data for the purpose of Data Management. The notification may be omitted if it does not violate the legitimate interest of the data subject with regard to the purpose of data management.
The Data Controller ensures the security of personal data, takes the technical and organizational measures and establishes the procedural rules that ensure that the recorded, stored and processed data are protected, and prevents their accidental loss, unlawful destruction, unauthorized access, unauthorized use and unauthorized alteration and unauthorized dissemination. To fulfill this obligation, the Data Controller invites all third parties to whom it transfers Personal Data.
Having regard to the relevant provisions of the GDPR, the Data Controller is not obliged to appoint a data protection officer.
The Data Controller is responsible for compliance with the Principles.
Confidentiality
The recorded data will be treated confidentially and will do everything possible to ensure the security of the data, using it in the manner necessary for the proper functioning of the Website. This includes, but is not limited to, sending an email and text message to you and the contact details you provide, in which case the message will be sent through the respective service provider.
We will never sell or lend your personal information to third parties for marketing purposes. We may disclose your personal information and other relevant information as necessary in response to a subpoena, court order or legal process.
Access to personal data by our employees
We provide our employees with access to only the personal data we process that are absolutely necessary for the job. All accesses are logged, and access to the data backup function is severely limited.
Data transmission
We have the right and obligation to transfer to the competent authorities all Personal Data available to us and duly stored by us, which are forced by law or by a final regulatory order to transfer Personal Data. Due to such data transfer and the consequences arising therefrom, the Data Controllers cannot be held liable.
If we transfer the operation or utilization of our service, in whole or in part, to a third party, we may transfer the Personal Data processed by us to that third party in whole or in part without asking for your separate consent, however, with your appropriate prior information, provided that this data transfer may not put you in a disadvantageous position than the data processing rules indicated in the current text of this Policy. In the case of data transfers pursuant to this paragraph, we will provide you with the opportunity to object to the transfer prior to the transfer. In the event of an objection, the transfer of your data in accordance with this section is not possible.
In order to check the lawfulness of the data transfer and to inform the data subject, the data controller shall keep a data transfer register containing the date of the transfer of the personal data processed by it, the legal basis and the recipient of the data transfer, the definition of the scope of the transferred personal data, and other data specified in the legislation requiring data processing.
Updating information, following changes in legislation
The Prospectus is constantly reviewed and updated by the data controller in accordance with changes in the legal environment and the expectations of the authorities. The User can keep up to date with the current Information under the "Privacy Policy" section of the website.
More questions/answers
You can request information about data processing and/or processing at any time by sending an email to the "EMAIL ADDRESS".
With your complaints related to data processing, you can contact the National Authority for Data Protection and Freedom of Information directly (address: 1125 Budapest, Szilágyi Erzsébet fasor 22 / c.; phone: +36-1-391-1400; e-mail: ugyfelszolgalat@naih.hu; website: www.naih.hu).
If your rights are violated, you can go to court. The trial falls within the jurisdiction of the tribunal. The lawsuit may also be brought, at your option, before the court of your place of residence or residence. At your request, we will inform you of the possibilities and means of redress.
Budapest, 01/08/2022