Garzon Plaza Ltd.
Registered office: 9024 Győr, 1 Vasvári Pál Street, Block B.
Company registration number: 08 09 015113
Tax registration number: 13995803-2-08
Website: www.garzonplaza.hu

Date of entry into force: 1 April 2025.

This privacy notice is the Garzon Plaza Ltd. (hereinafter: “Data Controller”) governs the processing of the personal data of users and customers of the website operated by the Data Controller, in accordance with the relevant legislation, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation – GDPR).

1. The purpose of data processing

The Data Controller processes personal data for the following purposes:

• Website management and analysis of visitor statistics.
• Liaising and communication.
• Provision of services (e.g. orders, home delivery, meeting special requirements).
• Invoicing, compliance with legal obligations.
• Marketing activities and the sending of newsletters, provided the data subject has given their prior consent.
• Handling complaints and operating a customer service department.

2. The legal basis for data processing

Data processing is carried out on the following legal bases:

• Consent: The data subject consents voluntarily to the processing of their personal data (Article 6(1)(a) of the GDPR).
• Performance of the contract: The processing of personal data is necessary for the performance of a contract (Article 6(1)(b) of the GDPR).
• Compliance with a legal obligation: Invoicing, compliance with legal requirements (Article 6(1)(c) of the GDPR).
• The Data Controller’s legitimate interest: For example, handling customer service complaints and analysing website traffic (Article 6(1)(f) of the GDPR).

3. Scope of data processed

• Contact details: name, email address, telephone number.
• Billing details: name, address, tax registration number.
• Technical specifications: IP address, browsing history, managing cookies.
• Ordering information: order history, preferences, delivery address.

4. Duration of data processing

The Data Controller shall process the data for as long as is necessary to fulfil the purpose:

• In the case of newsletters, until consent is withdrawn.
• In the case of invoicing, for the period specified in tax legislation (typically 8 years).
• In the case of contractual relationships, for a period of 5 years following the termination of the contract.

5. Data transfer and data processors

The Data Controller shall not disclose the data to third parties, except:

• to public authorities, where this is necessary to comply with legal obligations,
• to commissioned data processors (such as courier services and accountancy firms), who process the data strictly in accordance with the terms of the commission and only to the extent necessary.

6. The rights of data subjects

Data subjects have the following rights:

• Right of access: The data subject may request information from the Data Controller regarding what personal data is being processed about them.
• Right of rectification: The data subject may request that their data be amended or corrected.
• Right to erasure: In certain circumstances, you may request that your personal data be erased.
• The right to restrict data processing: You may request that the processing of your personal data be restricted.
• Right to data portability: The data subject may request that we transfer their personal data to another data controller.
• The right to protest: You may object to the processing of your data if it is based on a legitimate interest.