Privacy guidelines

We are delighted to have an interest in our business. Privacy is a priority for the management of Baccarat 2006 Kft. Using the Internet pages of BACCARAT 2006 Kft. It is possible without the indication of personal data; However, if you want to use special corporate services through our information agent, you may need to process personal data. If the processing of personal data is required and there is no legal basis for such processing, we usually consent to the data subject.

The processing of personal data, such as the name, address, e-mail address or phone number of the data subject, is always in line with the General Privacy Policy (GDPR) and country-specific data protection for BACCARAT 2006 Kft. With this privacy statement, our company would like to inform the public about the nature, scope and purpose of the personal data we have collected, used and processed. In addition, the records are informed by this privacy statement of the rights they are entitled to.

The CEO, BACCARAT 2006 Kft., Has taken a number of technical and organizational measures to ensure the fullest protection of personal data processed on the website. However, Internet -based data transmissions can in principle be security deficiencies, so absolute protection cannot be provided. As a result, every person who informs you can freely transfer personal data with other devices, such as phone.

1. Definitions

The Privacy Statement of BACCARAT 2006 Ltd. is based on terms used to adopt the General Data Protection Regulation (GDPR) by the European legislator. Our privacy statement must be readable and understandable to the general public and to our customers and business partners. To ensure this, we must first explain the terminology used.

In this privacy statement, we use the following expressions, inter alia:

· A) Personal data

Personal data: information on identified or identifiable natural person (“data subject”). An identifiable natural person is one who is directly or indirectly identified, especially with an ID, such as name, identification number, location, online identity, or one or more, physical, physiological, genetic, mental, economic, cultural or social identity.

· B) the data subject

The data subject is any identified or identifiable natural person whose personal information is processed by the data processor responsible for processing.

· C) processing

Processing is any group of operations or operations that are made through personal data or personal data, either automated, collecting, recording, organizing, structuring, storage, adaptation or modification, reclaim, consultation, use, transfer, distribution or other way to make available , alignment or combination, restriction, deletion or destruction.

· D) Restriction of processing

Restriction of processing is to indicate the personal data stored with the aim of restricting their processing in the future.

· E) profiling

Profile is the automated processing of personal data involving the use of personal data for the evaluation of individual personal data, in particular the analysis or prediction of the aspects of the natural person’s workplace performance, economic situation, health, and personal preferences, interests, reliability, behavior , location or movements.

· F) Pseudonization

Pseudonization is the processing of personal data in such a way that personal data can no longer be used without the use of additional data, provided that these additional information is stored separate or attributed to an identifiable natural person.

· G) the controller or controller responsible for processing

A data controller or data controller responsible for processing is a natural or legal person, authority, agency or other body that determines the purpose and means of processing personal data alone or with others; If the objectives and tools of such processing are determined by EU or Member States’ law, the data controller or the special criteria for appointing may be provided in accordance with EU or Member States.

· H) processor

The processor is a natural or legal person, authority, agency or other body that processes personal data on behalf of the Data Controller.

· I) recipient

The beneficiary is a natural or legal person, authority, agency or other body to which personal information is disclosed, whether or not a third party or not. However, authorities that may receive personal data in a given investigation in accordance with EU or Member States’ legislation cannot be considered as recipients; The processing of these data by these authorities complies with the applicable data protection rules according to the purpose of processing.

· J) third party

Third party natural or legal person, authority, agency or body, except for the data subject, the data controller, the processor, and those who are entitled to process personal data under the direct supervision of the Data Controller or processor.

· K) Authorization

The consent of the data subject is any freely given, specific, informed and unambiguous sign that the data subject wishes to consent to the processing of personal data related to it by declaration or clearly confirmation.

2. Name and address of the controller

Data Controller: General Data Protection Regulation (GDPR), data protection legislation in the Member States of the European Union and other provisions on data protection:

BACCARAT 2006 KFT.

Dózsa György út 105

1224 Budapest

Hungary

Telephone: +36 30 951 7812

E-mail: botos.peter0@gmail.com

Site: http://www.peterbotos.hu/

3. Cookie-k

Use cookies on the website of Baccarat 2006 Kft. Cookies are text files that are stored through a computer system via an online browser.

Many web sites and servers use cookies. Many cookies contain a so-called cookie ID. Cookie ID is the unique identifier of cookie. It consists of a string where web sites and servers can be assigned to the browser in which the cookie was stored. This allows you to distinguish the Dacian individual browser depending on other internet browsers that contain other cookies. A specific internet browser is recognizable and identified using a unique cookie ID.

By using cookies, BACCARAT 2006 Ltd. provides user-friendly services to the users of the Website that would not be possible without the cookie setting.

Cookie can be used to optimize the information and offers on our website in the user’s eyes. Cookies allow us to recognize our websites, as mentioned earlier. The purpose of this recognition is to facilitate the use of our website for users. The web site user user, for example, does not have to enter access data every time the website is accessed because it is taken over by the website and the cookie is stored in the user’s computer system. Another example is the shopping cart cookie in the online store. The online store commemorates articles that the customer has placed in a virtual shopping cart via cookie.

At any time, your data can prevent cookies from setting the Cookies through our website by properly setting the Internet browser, thus permanently denying cookies. In addition, the cookies already set can be deleted at any time using Internet browser or other software programs. This is possible in all popular Internet browsers. If the data is turned off the cookies setting in the Internet Browser, not all the features of all of our websites can be fully used.

4. To collect general data and information

The website of BACCARAT 2006 Kft. Her a number of general information and information when an data or automated system calls the website. This general data and information are stored in the server log files. Collected (1) used browser types and versions, (2) the operating system used by the access system, (3) the website from which an access system reaches our website (so -called referrals), (4) (6) the address of the Internet Protocol (IP address), (7) Access system ISPs, and (8) other similar data and information that can be used in the case of attacks on our information technology system.

If these general data and information are used, BACCARAT 2006 Ltd. does not draw conclusions from the data subject. Rather, this information is needed to (1) correct the content of our website, (2) optimize the content and advertisement of our website, (3) to ensure the long -term viability of our IT systems and website technology, and (4) for law enforcement authorities for a computer attack they must have the necessary information. Therefore, BACCARAT 2006 Ltd. statistically analyzes the data and information collected anonymously, with the aim of increasing the data protection and data security of our company and ensuring the optimum protection of the personal data it processes.

5. Contact through the website

The website of BACCARAT 2006 Ltd. contains information that allows you to get a fast-paced electronic connection and direct communication with us, which includes the general address of the so-called e-mail (email address). If the data subject contacts the controller via email or contact, the personal data transmitted by the data subject will be automatically stored. Personal data transmitted voluntarily by the Data Controller is stored for data processing or data processing purposes. The transfer of personal data to a third party.

6. To routinely delete and block personal data

The Data Controller processes and stores the personal data of the Data Controller only within the time necessary to achieve the purpose of storage, or if the European legislator or other legislators are provided by legislation or legislation to which the Data Controller shall apply.

If the storage purpose is not applicable, or if the storage time determined by the European legislator or other competent legislator expires, personal data shall be regularly blocked or canceled in accordance with legal requirements.

7. The rights of the concerned

· A) the right to confirm

The European legislator has the right to receive from the Data Controller to confirm whether or not to process the personal data that affects him. If the data subject wishes to exercise this right of confirmation, you can admit any employee at any time.

· B) right to access

Each legal entity has the right to get the European legislator from the Data Controller with free information about his personal data and copy of information. In addition, European directives and regulations provide the data subject with access to the following information:

    • the purpose of processing;
    • categories of personal data concerned;
    • the categories of recipients or recipients whose personal data have been disclosed or disclosed, especially those receiving third countries or international organizations;
    • Where possible, the planned period for which personal data is stored, or if this is not possible, the criteria used to determine this period;
    • Requesting the Data Controller to repair or deletion of personal data, restricting the processing of the personal data of the data, or requesting objection to such processing;
    • the right to submit a complaint to the supervisory authority;
    • where personal data is not collected from the data subject, all the sources of information available;
    • The automated decision -making referred to in Article 22 (1) and (4) of the GDPR, including profiling, and at least in these cases, the essential information related to logic, and the importance and planned consequences of implementation are such processing.

In addition, the data subject has the right to obtain information on whether personal data has been transferred to a third country or an international organization. In this case, the data subject has the right to inform the appropriate guarantees related to the transfer.

If you want to use this right of access, you can admit any employee of the Data Controller at any time.

· C) the right to correct

Each stakeholder has the right to the European legislator to obtain the rectification of the inaccurate personal data that affects him without undue delay. Taking into account the objectives of the processing, the data subject has the right to fill in incomplete personal data, including an additional statement.

If the data subject wants to use this right to correct it, you can take any employee of the Data Controller at any time.

· D) Deletion Right (Forgotten)

The European legislator has the right to all data for all data to obtain the deletion of personal data that affects it without any unjustified delay, and the Data Controller is obliged to delete personal data without undue delay, as long as one of the following reasons as long as the processing is required :

    • Personal data is no longer required compared to the goals collected or otherwise processed.
    • The data subject withdraws the license for which the processing is based on Article 6 (1) (a) of GDPR or GDPR 9 (2) (a) and if there is no other legal basis for processing.
    • The data subject complains about the processing under Article 21 (1) of the GDPR, and there is no compulsive, legitimate reason for processing or the data subject is the subject of processing under Article 21 (2) of the GDPR.
    • Personal data has been processed unlawfully.
    • Personal data shall be deleted for compliance with the legal obligation under EU or Member States to which the Data Controller shall apply.
    • Personal data has been collected in connection with the information social security services referred to in Article 8 (1) of the GDPR.

If one of the above reasons is valid and the data subject intends to request the deletion of personal data stored by Baccarat 2006 Kft., You can pick up any employee at any time. Baccarat 2006 Kft. Provides immediately compliance with the deletion request.

If the Data Controller has disclosed personal data and is required to delete personal data under Article 17 (1), the Data Controller shall take reasonable steps, including technical measures, taking into account the technology available and the cost of implementation. Data Controllers who have been processed by the data controller requested from such data controllers about links, copies or copies of such personal data, unless the processing is required. Baccarat 2006 Kft. Provides the necessary measures in each case.

· E) the right to restrict processing

Each stakeholder has the right to get the European legislator from the data controller restricting processing if one of the following is valid:

    • The accuracy of personal data is disputed by the data subject for a period that allows the Data Controller to verify the accuracy of personal data.
    • Processing is illegal and the data is protesting against deleting personal data and requests instead of restricting their use.
    • The controller no longer needs to process personal data for processing, but the data subject is necessary for the creation, exercise or protection of alleged legal claims.
    • The data subject complained of the processing of Article 21 (1) of the GDPR, until it is verified that the data controller has legitimate reasons override the person of the data subject.

If one of the above conditions is fulfilled and the data subject intends to ask for a restriction of the processing of personal data stored by Baccarat 2006 Kft. Baccarat 2006 Kft. Organizes the restriction of processing.

· (F) the right to portability of data

Each stakeholder has the right to the European legislator to receive the personal data that has been given to the data controller in a structured, commonly used and mechanically readable form. You have the right to transfer this data to another Data Controller without hindering the Data Controller to which personal data has been provided if the processing is based on the consent under Article 6 (1) (a) .

In addition, when exercising its right to transfer in accordance with Article 20 (1) of the GDPR, the data subject has the right to transfer personal data directly from one controller to another if it is technically implemented and, when it adversely affects the rights and freedoms of others.

To enforce the right to data transfer, the data subject may contact at any time with any employee of Baccarat 2006 Kft.

· G) the right of objection

The European legislator shall ensure that all stakeholders shall, at any time, objection to the processing of personal data based on (e) or (f) for their situation) under Article 6 (1) of the GDPR. This also applies to profiling based on these provisions.

Baccarat 2006 Ltd. does not transmit personal data in the event of an excuse, unless we can prove the legitimate reasons for the processing of data processing, which override the interests, rights and freedoms of the stakeholders and the establishment, exercise or protection of legal claims.

If Baccarat 2006 Ltd. deals with personal data for direct marketing purposes, the data subject has the right to process such personal data at any time for such placement. This applies to a degree of profiling that is related to such direct marketing. If the data can protest BACCARAT 2006 Kft. Baccarat 2006 Kft., Personal data will not be processed for this purpose.

In addition, the data subject complains about the processing of personal data relating to it by Baccarat 2006 Ltd. for reasons related to its position. For scientific or historical research purposes or statistical purposes, Article 89 (1) of the GDPR, unless it is necessary to perform a public interest task.

In order to exercise the right of objection, you can contact the data with any employee of Baccarat 2006 Kft. In addition, the data subject is free of charge with the use of information society services, and the 2002/58 / EC is directive to object to its right by automated means.

· H) automated individual decision -making including profiling

Each stakeholder has the right to the European legislator not to make only an automated processing decision based solely on automated processing, including profiling, which has a legal effect on the legal effect of or similarly affecting him (1 (1 ) It is not necessary to conclude or fulfill the contract between the data subject and the data controller, or (2) the EU or Member States’ legislation is not authorized by the Data Controller and which also requires appropriate measures to protect the data subject’s rights and freedoms and legitimate interests or (3) It is not based on explicit consent of the data subject.

If the decision (1) is necessary for the conclusion or fulfillment of the contract between the data subject and the data controller, or (2) Baccarat 2006 Ltd. shall take appropriate measures to protect the rights and freedoms and legal interests of the data subject, at least the Data Controller In order to express his / her opinion to acquire human intervention, to express his opinion and to dispute the decision.

If the data subject wishes to exercise rights related to automated individual decision -making, you can contact any time of Baccarat 2006 Kft.

· I) Right to withdraw the Privacy Permit

Each stakeholder has the right to the European legislator at any time withdrawing his / her contribution to processing his personal data.

If the data subject intends to exercise their right to withdraw, you can contact any time of Baccarat 2006 Kft.

8. Privacy provisions on Google Analytics application and use (with anonymity feature)

On this site, the Data Controller integrated the Google Analytics element (with Anonymizer). Google Analytics web analysis service. Web analysis is to collect, collect and analyze data on the behavior of visitors to site visitors. Among other things, a web analytical service collects data from the site that a person came from (so -called referen), which was visited, and for what frequency and time a sub -page looked. Web analysis is primarily used to optimize the website and to perform cost-benefit analysis of Internet ads.

Google Analytics is operator of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, United States.

For web analyzes using Google Analytics, the controller is “_gat. Use _anonymizeip ”. By applying this application, Google shortens the IP address of the Internet connection and give an anonymous access to our websites by a Member State of the European Union or another Contracting State to an agreement on the European Economic Area.

The purpose of Google Analytics is to analyze our site traffic. Google will assess the data and information collected, among other things, to evaluate the use of our website and to create internet reports that present our websites and provide other features for the use of our website.

Google Analytics Cookie on the data of the data subject. The definition of cookies is described above. By setting a cookie, Google enables you to analyze your website. One of the web site to which the controller is integrated into and integrated into Google Analytics is automatically transmitted to Google Analytics to Google for Google for online advertising and commission. During this technical procedure, the company recognized Google’s personal data, such as the IP address of the Data Labor, which is for Google, including the origin of visitors and clicks,

Cookie is used to store personal data such as access time, access venue and the frequency of visitors to the website. Visits to our website are transmitted to Google in the United States of the United States, including the IP address of the Internet access by the data subject. These personal data are stored by Google in the United States. Google can transfer personal data collected during the technical procedure to third parties.

The data subject may, as above, prevent the cookies from setting the cookies on our web page by properly adjusting the browser used, thereby definitively denying cookies. Such setting up an internet browser used would prevent Google Analytics from setting up a cookie on the IT system of the data. In addition, cookies already used by Google Analytics can be canceled at any time via browser or other software.

In addition, the data subject has the ability to object to Google Analytics to collect data on the use of the website, to process this data by Google and to exclude it. To this end, the data subject must download and install a browser extension at https://tools.google.com/dlpage/gaoptout. This browser extension, using Google Analytics, recommends using JavaScript that data and information about visitors visit may not be transmitted in Google Analytics. The installation of browser extensions is considered by Google as an excuse. If the IT system of the data carrier is later deleted, formatted or newly installed, the data subject must reinstall browser extensions to disable Google Analytics.

Further information on Google and the relevant data protection provisions can be downloaded at https://www.google.com/intl/en/policies/privacy/ and http://www.google.com/analytics/terms/us. html. Another explanation for Google Analytics is at https://www.google.com/analytics/ https://www.google.com/analytics/.

9. The legal basis for processing

Art. 6 (1) lit. GDPR serves the legal basis for processing the operations to which we consent to a particular processing purpose. If the processing of personal data is required for the performance of a contract to which the data subject is involved, for example, when data processing operations are required to transport goods or to provide other services, then processing is under Article 6 (1). B GDPR. The same applies to processing operations that are necessary for the implementation of preceding measures, such as investigations related to our product or services. Our company is a legal obligation to process the processing of personal data, such as the fulfillment of tax liabilities, Art. 6 (1) lit. C GDPR. In rare cases, processing of personal data may be necessary to protect the vital interests of the data subject or other natural person. This would be, for example, if a visitor was offended by our company and transmits its name, age, health insurance information or other important information to a doctor, hospital or other third party. Then the processing of Art. 6 (1) lit. D GDPR. Finally, processing operations may be based on Article 6 (1). f gdpr. This legislature is used for processing operations that none of the above -mentioned legal reasons apply if processing is necessary for the application of legitimate interests in our company or third part that require the protection of personal data. Such processing operations are particularly permitted, as they were specifically mentioned by the European legislator. He considered that he could assume legitimate interest if the data subject is the Data Controller’s client (Paragraph 47 (2) GDPR).

10. The legitimate interests followed by the controller or third party

If the processing of personal data is based on Article 6 (1), it is in the legitimate interest of GDPR to carry out our business for the well -being of our employees and shareholders.

11. Duration of storing personal data

The criteria used to determine the storage time of personal data are the appropriate legal retention period. After the end of this period, the appropriate data will be deleted regularly, provided that this is no longer necessary to complete the contract or to conclude the contract.

12. Provide personal data to legal or contract requirements; The requirement for the conclusion of the contract; The obligation of the data to transfer personal data; Possible consequences for non -compliance with such data

We clarify that the transfer of personal data is partially required by legal requirements (eg tax rules) or from contractual provisions (eg a contractual partner). Sometimes it may be necessary to conclude a contract for the data to provide personal information that needs to be processed later. For example, the data subject is obliged to enter your personal information when our company enters into a contract with it. Personal data would not be provided that the contract with the data subject could not be concluded. Before the data subject provides personal information, the data subject must contact any employee.

13. The existence of automated decision -making

As a responsible company, we do not use automatic decision -making or profiling.

This privacy policy was created by the DGD – an external data protection officer’s data protection Wilde Beuger Solmecke . German lawyers generator, which was developed in Cologne in cooperation with