Data processing information
Introduction
Dorottya Hoós, sole trader (hereinafter: Data Controller), shall proceed as follows in relation to offline or online team-building events organized by her.
The Data Subject shall be informed of all facts relating to the processing of their data prior to the commencement of data processing, or in exceptional cases, at the commencement of data processing. Particular attention shall be paid to the purpose of data processing, its legal basis, the duration of data processing, and the circle of persons authorized to process data. The information shall include the rights of the data subject and the possibilities for legal remedy.
The data processing information is available on the following website: www.gameon.teambuilding.hu
The purpose of the events organized by the Data Controller is to provide the group designated by the customer with enjoyable entertainment.
By placing an order, the customer and, by participating, the participant accept the contents of this data processing information.
The Data Controller is entitled to unilaterally modify this information at any time in accordance with the applicable legal regulations. The modifications shall enter into force upon publication at the above address.
Effective date of the statement: 28 February 2024.
Validity of the statement: until revoked.
Definitions
Data Controller: Hoós Dorottya, e.v. (Registered office: 9444 Fertőszentmiklós, Mátyás király utca 49. Postal address: 1133 , Budapest, Gogol utca 14. IX. Lph. 2.em. 21.a.; Contact: gameon.teambuilding@gmail.com)
Customer: The person responsible for the order who is in contact with the Data Controller's team.
Participant: A person invited to the event, regardless of how long they stay at the venue, whether they show up or participate in the games.
Data subject: Natural persons who can be identified based on the data stored in the system.
Personal data: Any information relating to the data subject.
Data processing: Any operation performed on the personal data of data subjects, including recording.
Data processor: A natural or legal person who processes data on behalf of the data controller.
Principles
The Data Controller fully complies with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council on the principles and incorporates the personal, technical, physical, and IT protection of data into its procedures.
Responsibility of the Customer
In cases where the Customer provides data not about themselves but about another natural person, it is the sole responsibility of the Customer to ensure that the data is provided with the consent, knowledge, and appropriate information of that natural person. The Data Controller is not obliged to verify the existence of these conditions.
The Customer is obliged to ensure the accuracy and up-to-date nature of the data registered by them, and to ensure that only the necessary data of the Data Subjects is transferred to the Data Controller.
Data processing purposes and conditions
The Data Controller processes personal data for the following purposes:
Team building consultation
The Customer can inquire about the services offered on the website by sending a message using the "Contact" or "I'm interested" interface.
Scope of data processed:
Surname, first name, email address, telephone number, other personal data contained in the message and voluntarily provided by the data subject.
Duration of data processing:
Personal data will be stored for the duration of the service, for the mandatory retention period prescribed by law, or until the data subject withdraws their consent (requests deletion).
Legal basis for data processing:
Your voluntary consent, which you give to the Data Controller when you contact us.
Team building order
The Customer enters into a contract with the Data Controller for the purpose of organizing a team building program for the persons designated by the Customer and for them to participate in the event as Participants.
Scope of data processed:
Surname, first name, e-mail address.
Legal basis for data processing:
Performance and termination of the contract.
Duration of data processing:
Data processing begins after the conclusion of the contract and ends after performance. The Data Controller shall delete the Participants' data immediately after the end of the event.
Data transfer:
No data transfer will take place.
Data processing related to image and sound recordings related to the event
The Data Controller may make recordings at events for the purpose of publishing them on its own advertising and online platforms for promotional purposes. The sole purpose of making the recordings is to produce advertising material for events organized by the Data Controller. If the Customer or any of the Data Subjects does not consent to the recording, this will not affect the conduct of the event or their participation in it. In such cases, the GameOn Teambuilding team will ensure that no recordings are made of the person who has not consented to the data processing.
Scope of data processed:
Photos and video recordings of participants.
Legal basis for data processing:
Consent of the Data Subject.
Duration of data processing:
For recordings that have been posted on any of the platforms managed by the Data Controller: 1 year.
For recordings that have not been used: 7 days.
Data transfer:
In the case of recordings used for advertising purposes, data is transferred to the Data Controller's IT service provider.
Data processing related to invoicing and financial performance
In accordance with the contract concluded in connection with the event, the Data Controller shall issue an invoice to the Customer. The Data Controller shall retain the contact details until financial performance.
Scope of data processed: Surname, first name, email address, telephone number.
Legal basis for data processing: The Data Controller's legitimate interest.
Duration of data processing:
Data processing begins after the conclusion of the contract and ends after financial settlement. The Data Controller and the Data Processor shall delete the contact details immediately after settlement.
Data transfer:
If legal action is necessary, the Data Controller may transfer the data to its legal representative and its collection partner.
Data processing in connection with accounting obligations
Due to accounting regulations, the Data Controller is obliged to process financial transaction data.
Scope of data processed: Data related to invoicing.
Legal basis for data processing: Legal obligation.
Duration of data processing: 8 years.
Data transfer: Data is transferred to the Data Controller's accounting partner.
Access to data, disclosure of data, storage of data.
The Data Controller shall take appropriate technical and organizational measures to
accurately regulate and restrict access to data.
only the Data Controller's employees and the appointed Data Processors shall have access to the data, and only to the extent that is minimally necessary for the performance of their tasks.
select Data Processors entrusted by it with care and with an appropriate data processing agreement.
ensure the integrity, authenticity, and protection of the data processed.
The data is managed, processed, and backed up on the Data Controller's computers in Hungary.
The Data Controller shall store the Data Subject's data for the period specified above, after which the data shall be destroyed.
Rights of the Data Subject
The Data Subject shall have the following rights in relation to data processing:
Right to transparent information: The Data Subject has the right to receive information about the data and the operations performed with it before and during data processing.
Right of access: The Data Subject has the right to request information about all elements of data processing.
Right to rectification: The data subject may request the rectification of the data.
Right to erasure: The data subject may request the erasure of their data.
Right to object: The data subject may object to data processing if it is carried out in the interest of the data controller.
Right to restriction: The Data Subject may restrict access if it is unlawful.
Right to portability: The Data Subject has the right to request the release of data.
Right to withdraw consent: The Data Subject may withdraw their consent at any time.
Data subjects may exercise their rights at any time by submitting their requests to the following contact details: www.gameon.teambuilding.hu or 1133, Budapest, Gogol utca 14. IX. Lph. 2. Em. 21.a.
The Data Controller shall examine the requests received and shall respond to them without delay, but no later than within one month, or shall reject them with justification. The Data Controller shall inform the Data Subject of the decision in writing. The data processed during the administration of the case shall be stored for one year, after which the data shall be deleted.
You may lodge a complaint with the National Authority for Data Protection and Freedom of Information.
Address: 1055 Budapest, Falk Miksa utca 9.
Postal address: 1530 Budapest, Pf.: 5.
E-mail: ugyfelszolgalat@naih.hu, website: www.naih.hu),
You have the option of turning to the court to protect your data, which will act on the matter as a matter of priority. In this case, you are free to decide whether to file your claim with the court competent for your place of residence (permanent address) or place of stay (temporary address) or the court competent for the Contractor's registered office. You can find the court with jurisdiction over your place of residence or temporary residence at http://birosag.hu/ugyfelkapcsolati-portal/birosag-keresooldalon.
This privacy policy is reviewed annually by the Data Controller and updated as necessary. Data subjects will be notified of any changes by email.
Date: Budapest, March 1, 2024.