Protecting your personal data is of utmost importance to us. Below, we detail how we handle and protect the information you provide, particularly your name and email address, when you contact us. This privacy policy has been prepared in accordance with applicable laws, especially the General Data Protection Regulation (GDPR) of the European Union.

1. Data Controller Information

• Name of the Data Controller: Sweets Factory Ltd.
• Registered office of the Data Controller: 1044 Budapest, Ipari park utca 4.
• Company registration number: 01 09 416887
• Contact details of the Data Controller:
  • Email: info@sweets-factory.com
  • Phone: +36 70 675 6351
  • Postal address: 1044 Budapest, Ipari park utca 4.
  • Website: https://www.sweets-factory.com

The Data Controller is not required to appoint a Data Protection Officer under Article 37 of the GDPR.

2. Applicable Data Protection Laws

This privacy policy has been prepared in accordance with the following laws:

• Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation).
• Act CXII of 2011 on the Right to Information Self-Determination and Freedom of Information.
• Act V of 2013 on the Civil Code.
• Act XLVIII of 2008 on the basic requirements and certain restrictions of commercial advertising activities.
• Act CVIII of 2001 on electronic commerce and on information society services.
• Act CXIX of 1995 on the processing of name and address data for research and direct marketing purposes.
• Act CLXV of 2013 on complaints and public interest disclosures.

3. Contact Form

Data processed:

• Name: The name you provide, helping to establish a more personalized interaction.
• Email address: The email address you provide to which we send replies to your inquiry.

Purpose of data processing: We process the data you provide for the following purpose:

• To respond to your questions and inquiries and to maintain communication with you. The Data Controller will not use your personal data for any purpose other than what is described.

Legal basis for data processing: The legal basis for data processing is your consent, which you give by providing your name and email address and by checking the box stating, “I have read and accept the Privacy Policy” before submitting the contact form. You can withdraw your consent at any time by contacting the Data Controller.

We do not use the email addresses provided through the contact form for sending newsletters.

Data retention period: Your name and email address will only be stored until we respond to your inquiry (within a maximum of 30 days), or until the purpose of the contact is fulfilled. After that, the data will be deleted from our database unless a longer retention period is required by law.

4. Facebook Page Management

Data processed: As a Facebook user, the Data Controller can see the list of followers and likes, and by clicking on an individual’s profile, can view their public information.

Purpose of data processing: The Data Controller maintains a Facebook page to increase its visibility, promote its marketing activities, and organize giveaways.

Legal basis for data processing: The legal basis for data processing is your consent, given when you click the “like” or “follow” button on the Data Controller’s Facebook page.

Data retention period: When you click to unfollow or unlike the Data Controller’s Facebook page, your relationship with the Data Controller on the Facebook platform ends. For more information on Facebook’s data management policies, you can refer to their Privacy Policy at www.facebook.com/privacy/explanation.

5. Instagram Page Management

Data processed: As an Instagram user, the Data Controller can see the list of followers and likes, and by clicking on an individual’s profile, can view their public information.

Purpose of data processing: The Data Controller maintains an Instagram page to increase its visibility, promote its marketing activities, and organize giveaways.

Legal basis for data processing: The legal basis for data processing is your consent, given when you click the “like” or “follow” button on the Data Controller’s Instagram page.

Data retention period: When you click to unfollow or unlike the Data Controller’s Instagram page, your relationship with the Data Controller on the Instagram platform ends. For more information on Instagram’s data management policies, you can refer to their Privacy Policy at https://help.instagram.com/519522125107875?helpref=page_content.

6. Data Processors and Data Transfers

Your email address and name, provided via the contact form, can be accessed by persons acting on behalf of or employed by the following entities:

• Hosting provider:
  • Name: Forpsi (BlazeArts Ltd.)
  • Address: 1096 Budapest, Thaly Kálmán utca 39.
  • Website: https://www.forpsi.hu
  • Email: admin@forpsi.hu

Your data will not be transferred to third parties, except when required by law or if you provide explicit consent.

7. Data Security

We apply appropriate technical and organizational measures to ensure the security of your personal data. Data is encrypted, and systems are in place to protect data from unauthorized access, modification, disclosure, deletion, or destruction.

8. Your Rights

You have the following rights concerning the processing of your personal data:

• Right of access: You may request information about whether we process personal data about you and, if so, access to that data.
• Right to rectification: You may request the correction of inaccurate or incomplete data we hold about you.
• Right to erasure: You may request the deletion of your personal data if it is no longer necessary for the purpose of the inquiry, or if the processing is unlawful.
• Right to restriction of processing: You may request that we restrict the processing of your personal data if you contest the accuracy of the data or if the processing is unlawful, but you object to its deletion.
• Right to data portability: You may request that we provide your personal data in a machine-readable format or transfer it to another data controller.
• Right to object: You have the right to object to the processing of your personal data.

To exercise any of these rights, please contact us at:

• Email: info@sweets-factory.com
• Postal address: 1044 Budapest, Ipari park utca 4.

9. Right to Lodge a Complaint

If you believe that the Data Controller has violated your rights regarding personal data processing, you may contact us directly for faster resolution at: info@sweets-factory.com.

You also have the right to lodge a complaint with the supervisory authority. In Hungary, this is the National Authority for Data Protection and Freedom of Information (NAIH).

• Website: www.naih.hu
• Postal address: 1363 Budapest, Pf. 9.
• Phone: +36 (1) 391-1400
• Email: ugyfelszolgalat@naih.hu

10. Changes to the Privacy Policy

We reserve the right to update this Privacy Policy periodically. The latest version will always be available on our website. Please review the policy regularly to stay informed of any changes.

This Privacy Policy is effective from October 20, 2024, and remains in effect until further notice.