Mignon Cukrászda Debrecen

The purpose of this data processing notice is to ensure that data subjects receive information in accordance with data protection regulations and are able to exercise their legal rights with regard to data processing carried out by Mignon-Kugler Kft. (hereinafter: "Data Controller").

Data Controller:

The current details of the Data Controller are as follows:

Name:  Mignon-Kugler Kft.
Registered office: 4033 Debrecen, Szabó Pál utca 45-47.
Company registration number: 0909019432
Tax number: 22781505-2-09
Represented by: István Balogh
Email: mignoncukraszda1993@gmail.com

The processing of your data is governed by Regulation (EU) 2016/679 of the European Parliament and of the Council of 17 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), and Act CXII of 2011 on the right to self-determination and freedom of information (Infotv.).

Scope of personal data processed, purpose, duration and legal basis of data processing

Purpose of data processing: Contact

Visitors to the website can contact the Data Controller by writing to the email address provided in the "Contact" menu or by filling out the contact form.

Data subject: the sender of the message

Scope of data processed: name, email address, telephone number, message and its subject

Legal basis for data processing: consent of the data subject

Purpose of data processing: contacting the data controller 

Data processing platform: electronic

Persons with access to the data: The Data Controller, the Data Controller's internal employees whose job duties involve accessing and processing the data.

Data transfer: The Data Controller shall not transfer personal data to third parties, with the exception of data provision based on legal obligations (e.g., courts, investigative authorities, public prosecutors, etc.). 

Deadline for data deletion: Until consent is withdrawn, or if it may be necessary for the enforcement of a claim, for 5 years (claim enforcement period under the Civil Code), otherwise for 30 days after receipt of the message.

Possible consequences of failure to provide data: failure of successful communication.

Purpose of data processing: Data processed in connection with visiting the website

Purpose of data processing: Cookies used on the website 

When visitors visit the website at www.mignoncukraszda.hu, a small file called a "cookie" (hereinafter referred to as "cookie") is placed on their computer, which can serve several purposes.

Some of the cookies we use are essential for the proper functioning of the site ("session cookies"), while others collect information about the use of the website (cookies necessary for statistics) to make the site more convenient and useful. Some cookies are temporary and disappear when you close your browser, while others are persistent and remain on your computer for a longer period of time.

The legal basis for the processing of cookies necessary for the operation of the website is the legitimate interest of the Data Controller, for which a balancing test has been carried out.

"Session cookies"

"Session cookies" are necessary for browsing the website and using certain basic functions, including enabling the visitor to remember the actions performed on a given page, function, or service. Without the use of "session cookies," the smooth operation of the website cannot be guaranteed. Their validity period covers the duration of the visit, and the "cookies" are automatically deleted at the end of the session or when the browser is closed.

The proper functioning of the website is ensured in accordance with the provisions of the applicable laws.

The "session cookies" used by the website are as follows:

"Cookies necessary for compiling statistics"

We strive to fill our website with content that is preferred by our visitors, and to do so, we need to compile statistics on visitor habits.

The website uses the following cookies necessary for compiling statistics:

"Cookies necessary for marketing activities"

The purpose of using "cookies necessary for marketing activities" is to select advertisements that are most interesting or important to our visitors and display them on our website. We can also use them to measure the performance of our campaigns.

The website uses cookies necessary for compiling the following statistics:

When visiting the website, the Data Controller's separate information on cookie management is available via the link in the pop-up window.

Purpose of data processing: Redirection to social media platforms

If you are logged into your account on the selected social network at the same time, your visit will be associated with your user account.

Links to Facebook and Instagram social media sites are indicated by icons operated by Meta Platforms Ireland Limited (registered office: 4 Grand Canal Square Grand Canal Harbour Dublin 662881), which can be found in the upper right corner of our site 

• small letter "f" in a frame;
• camera icon.

For more information about the use of Facebook and Instagram and their data management policies, please visit:
https://www.facebook.com/privacy/explanation
https://privacycenter.instagram.com/policy
 
The link to the Twitter social media site is indicated by an icon operated by Twitter, Inc (registered office: 1355 Market Street, Downtown San Francisco, California, United States) and is located in the upper right corner of our website as a bird icon.
For more information about using Twitter and its data management rules, please visit:
https://twitter.com/en/privacy
 
The link to the LinkedIn social networking site is indicated by an icon operated by Microsoft Corporation (headquartered at 605 W Maude Ave, Sunnyvale, CA 94085, USA) is indicated by the icon in the upper right corner of our website, which is a frame with the text "in".
For more information about using LinkedIn and its data management rules, please visit:
https://www.linkedin.com/legal/privacy-policy

Rights of data subjects: 

Data subjects may at any time request information in writing from the Data Controller about the manner in which their personal data is processed, indicate their request for deletion or modification, and withdraw their previously given consent at the contact details provided.
The data subject may not exercise their right to erasure in the case of data processing required by law.

Content of the right to information: At the request of the data subject, the Data Controller shall provide the data subject with the information listed in Articles 13 and 14 of the GDPR concerning the processing of personal data, as well as the information specified in Articles 15-22 and 34, in a concise and easily understandable form.

Content of the right of access: At the request of the data subject, the Data Controller shall provide information on whether data processing relating to the data subject is in progress at the Data Controller. If data processing relating to the applicant is in progress at the Data Controller, the data subject shall have the right of access to the following:

1. personal data concerning him or her;
2. the purposes of the processing;
3. the categories of personal data concerned;
4. the persons to whom the data subject's data have been or will be disclosed;
5. the period for which the data will be stored;
6. the right to rectification, erasure and restriction of processing;
7. the right to lodge a complaint with a supervisory authority;
8. the source of the data;
9. the transfer of the data to a third country or international organization.

In the event of a data request as described above, the Data Controller shall provide the data subject with a copy of the data processed by it in accordance with the request. The deadline for providing the requested data is 30 days from receipt of the request. If necessary, taking into account the complexity of the request and the number of requests, this deadline may be extended by a further two months. The obligation to provide information may be ensured by operating a secure online system through which the data subject can easily and quickly access the necessary information.

Right to rectification: The data subject may request the rectification of inaccurate data concerning him or her processed by the Data Controller.

Right to erasure: If any of the following grounds apply, the Data Controller shall erase the data concerning the data subject at the latter's request as soon as possible, but no later than within 5 working days:

The data has been processed unlawfully (without legal authorization or personal consent);

1. The processing of the data is unnecessary for the fulfillment of the original purpose;
2. the data subject withdraws their consent to data processing and the Data Controller has no other legal basis for data processing;
3. the data in question was collected in connection with the provision of information society services;
4. the personal data must be deleted in order to comply with the legal obligations applicable to the Data Controller.

The Data Controller is unable to erase the data if the processing is still necessary for any of the following purposes:

1. Further data processing is necessary to comply with legal requirements applicable to the Data Controller;
2. it is necessary for the exercise of the right of expression and information;
3. it is in the public interest;
4. it is necessary for archiving, scientific, research or statistical purposes;
5. it is necessary for the establishment, exercise or defense of legal claims.

Right to restriction of processing: Where any of the following grounds apply, the Data Controller shall restrict processing at the request of the data subject:

1. The data subject disputes the accuracy of the data concerning him or her, in which case the restriction shall apply for the period necessary to verify the accuracy of the data in question;
2. the processing is unlawful, but the data subject requests that the data not be erased, but only restricted;
3. the data are no longer needed for processing, but the data subject requests their further storage for the enforcement or defense of legal claims;

If the Data Controller imposes a restriction on any processed data, during the period of restriction it shall process the data subject's data only if and to the extent that:

1. The data subject consents to this;
2. it is necessary for the establishment, exercise or defense of legal claims;
3. it is necessary for the establishment, exercise or defense of the rights of another person;
4. it is necessary for the performance of a task carried out in the public interest.

Right to withdraw consent: The data subject has the right to withdraw their consent given to the Data Controller at any time in writing. In the event of such a request, the Data Controller shall immediately and permanently delete all data processed in relation to the data subject which are not required to be stored further by law or which are not necessary for the enforcement or protection of rights related to legitimate interests. The withdrawal shall not affect the lawfulness of data processing prior to the withdrawal of consent.

Right to data portability: The data subject shall have the right to request that the Data Controller transfer the data concerning him or her to another data controller in a commonly used format readable by computer software. The Data Controller shall comply with the request as soon as possible, but no later than within 30 days.

Please note that the Data Controller uses solutions that provide an appropriate level of security in accordance with the current state of technology in order to protect electronically processed data. 

The data subject may submit complaints regarding data processing directly to the National Authority for Data Protection and Freedom of Information (address: Budapest, Falk Miksa u. 9-11, 1055; telephone: +36- 1-391-1400; e-mail: ugyfelszolgalat@naih.hu; website: www.naih.hu). 

In the event of a violation of their rights, the data subject may take legal action against the data controller. The court shall hear the case as a matter of priority. The data subject may also bring the action before the court with jurisdiction over their place of residence or domicile, at their discretion.

February 20, 2023.