1. Purpose of the Data Processing Information
Nyári Márk e.v. (1132 Budapest, Visegrádi utca 64. 2/16) (hereinafter referred to as the “Service Provider” or “Data Controller”) recognizes the contents of this legal notice as binding for himself. He undertakes that all data processing related to his activities complies with the expectations set forth in this regulation and in applicable national legislation, as well as in the legal acts of the European Union.
The privacy policies related to the data processing of Nyári Márk e.v. are continuously available at www.skincarementor.hu/adatkezeles.
Nyári Márk e.v. reserves the right to change this information at any time. Naturally, he will inform his audience of any potential changes in a timely manner.
If you have any questions regarding this notice, please write to us, and our colleague will respond to your inquiry.
Nyári Márk is committed to protecting the personal data of his clients and partners, and highly values respecting his clients’ right to informational self-determination. Nyári Márk e.v. handles personal data confidentially and takes all necessary security, technical, and organizational measures to ensure data security.
Nyári Márk e.v. outlines its data processing practices below.

2. Data Controller Information
If you would like to contact Nyári Márk e.v., you can reach the Data Controller at skincare.lilinyari@gmail.com.
Nyári Márk e.v. will delete all emails received, along with personal data, no later than 5 years from the date of communication.
Name: Nyári Márk
Address: 1132 Budapest, Visegrádi utca 64. 2/16
Tax Number: 90157369-1-41
Phone Number: +36307371237
Email: skincare.lilinyari@gmail.com 

3. Scope of Processed Personal Data
3.1 Personal Data Required During Registration 

Name (mandatory)

Email (mandatory)

Phone Number (mandatory)

Mailing Address (city, street, house number, postal code) (mandatory)

3.2 Technical Data
Nyári Márk e.v. selects and operates IT tools used during the service provision in such a way that the handled data: 

    • is accessible to authorized personnel (availability);
    • its authenticity and verification is ensured (data processing authenticity);
    • its integrity can be verified (data integrity);
    • is protected against unauthorized access (data confidentiality).
      Nyári Márk e.v. protects the data with appropriate measures against unauthorized access, modification, transmission, disclosure, deletion, or destruction, as well as against accidental destruction.
      Nyári Márk e.v. takes technical, organizational, and procedural measures to ensure the security of data processing that provides an adequate level of protection corresponding to the risks associated with data processing.
      Nyári Márk e.v. preserves during data processing:
    • confidentiality: protects information so that only authorized persons can access it;
    • integrity: protects the accuracy and completeness of the information and processing methods;
    • availability: ensures that when an authorized user needs it, they can actually access the needed information and have the associated tools available.

3.3 Cookies

3.3.1 Purpose of Cookies 

collect information about visitors and their devices;

remember visitors’ individual settings that may be used during online transactions, so they do not have to be re-entered;

facilitate the use of the website;

provide a quality user experience.
To customize the service, a small data packet, known as a cookie, is placed on the user’s computer and read back during a later visit. If the browser sends back a previously saved cookie, the service provider that manages the cookie can link the user’s current visit to previous ones, but only regarding its own content.

3.3.2 Essential Session Cookies
The purpose of these cookies is to ensure that visitors can browse the www.skincarementor.hu website fully and smoothly, use its functions, and access the services available there. The validity period of such cookies lasts until the end of the session (browsing), and upon closing the browser, this type of cookie is automatically deleted from the computer or from other devices used for browsing.

3.3.3 Cookies Placed by Third Parties (Analytics)
Nyári Márk e.v. uses Google Analytics as third-party cookies on the website www.skincarementor.hu. By using the Google Analytics statistical service, Nyári Márk e.v. collects information about how visitors use the website. The data is used for the purpose of developing the website and improving the user experience. These cookies will remain on the visitor’s computer or other device used for browsing until they expire or until the visitor deletes them.

3.4 Data Related to Online Orders
Billing name (mandatory)
Billing address (mandatory)
Shipping address (if different from billing address)
Phone number (mandatory)
Email (mandatory)

3.5 Data Related to Online Administration
Name (mandatory)
Email (mandatory)

3.6 Data Related to Newsletters
When subscribing, we only request two pieces of information: the name and email address. This name and email address will be used solely to send information related to the data controller’s business websites.

3.6.1 Scope of Processed Data and Purpose of Data Processing
Processed data: The name and email address provided by the data subject. The newsletter software also records the IP address and the time of subscription. Purpose of data processing: The email address provided at subscription is processed for the purpose of sending newsletters.

3.6.2 Subscription Terms
Subscribing on the website www.skincarementor.hu means the explicit acceptance of these subscription terms, meaning that the subscriber gives explicit prior consent to receive electronic messages from the website (www.skincarementor.hu) regarding product/service usage information, event/course descriptions, aids, opinion requests, notifications related to the content of the websites, and, in certain cases, advertisements promoting the products and services of the operator and occasionally its business partners. Subscriptions initiated with non-existent email addresses, collection-type email addresses, or false data will be deleted from the database without warning and excluded from the newsletter readership of the websites.

4. Purpose, Method, and Legal Basis of Data Processing

4.1 General Data Processing Guidelines
Nyári Márk e.v.’s data processing activities are based on voluntary consent and legal authorization. In cases of data processing based on voluntary consent, data subjects can withdraw this consent at any stage of the data processing.
In certain cases, the processing, storage, and transfer of a set of provided data are mandated by laws, of which we will inform our clients separately.
We call the attention of data providers to Nyári Márk e.v. that if they do not provide their own personal data, it is the provider’s responsibility to obtain the consent of the data subject. The principles of data processing are in accordance with applicable data protection laws, particularly the following:

    • Act CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information (Infotv.);
    • Regulation (EU) 2016/679 of the European Parliament and Council (April 27, 2016) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, GDPR);
    • Act V of 2013 on the Civil Code (Ptk.);
    • Act C of 2000 on Accounting (Számv. tv.);
    • Act LIII of 2017 on the Prevention and Combating of Money Laundering and Terrorism Financing (Pmt.);
    • Act CCXXXVII of 2013 on Credit Institutions and Financial Enterprises (Hpt.).

5. Physical Locations of Data Storage
Your personal data (i.e., data that can be associated with you) can be processed in the following ways: on one hand, technical data related to the computer, browser, IP address, and the visited pages automatically generated in our computer system in connection with maintaining the internet connection; on the other hand, you may provide your name, contact information, or other data if you wish to engage in personal contact with us during the use of the website.
Technically recorded data during the system’s operation include data from the user’s computer that is generated during voting and is automatically recorded by the www.skincarementor.hu system as a result of technical processes. Automatically recorded data is logged by the system upon entry and exit without any separate declaration or action from the user. This data cannot be linked to other personal user data—except in cases mandated by law. Only www.skincarementor.hu has access to this data.

6. Data Transfer, Data Processing, and the Circle of Persons Who Gain Access to the Data

Invoicing Software Provider:
Számlázz.hu
https://www.szamlazz.hu/
Company providing the service: KBOSS.hu Kft.
Tax number: 13421739-2-41
Company registration number: 01-09-303201
Email: info@szamlazz.hu
Our phone number (automated information only; phone menu description here): +3630 35 44 789

Newsletter Software Provider:
E.N.S. Informatikai és Rendszerintegrációs Zrt.:
1106 Budapest, Fehér út 10.
Phone number: +36 30 555-1100
Email: info@ens.hu

7. Rights of the Data Subject and Legal Enforcement Options
Data subjects may request information about the processing of their personal data, as well as request the correction of their personal data, and, except for mandatory data processing, the deletion and withdrawal of their data. They may exercise their rights to data portability and objection in the manner indicated at the time of data collection or through the above contact details of the data controller.

7.1 Right to Information
Nyári Márk e.v. takes appropriate measures to ensure that all information related to the processing of personal data, as mentioned in Articles 13 and 14 of the GDPR, and each notification according to Articles 15–22 and 34, is provided to data subjects in a concise, transparent, intelligible, and easily accessible form, clearly and understandably articulated.

7.2 Right of Access
Data subjects have the right to receive feedback from the data controller regarding whether their personal data is being processed and, if such processing is ongoing, they are entitled to access their personal data and the following information: the purposes of data processing; the categories of personal data concerned; the recipients or categories of recipients to whom the personal data has been or will be disclosed, including particularly third-country recipients and international organizations; the intended duration of storage of the personal data; the right to rectification, deletion, or restriction of processing, and the right to object; the right to lodge a complaint with a supervisory authority; information regarding the sources of data; the existence of automated decision-making, including profiling, as well as understandable information on the logic involved and the significance and expected consequences of such processing for the data subject. The data controller will provide the information within a maximum of one month from the submission of the request.

7.3 Right to Rectification

The data subject may request the rectification of inaccurate personal data concerning them that is processed by Nyári Márk e.v., as well as the completion of incomplete data.

7.4 Right to Erasure

The data subject is entitled to request the erasure of personal data concerning them without undue delay by Nyári Márk e.v. if one of the following grounds applies:

    • The personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
    • The data subject withdraws their consent on which the processing is based, and there is no other legal basis for the processing;
    • The data subject objects to the processing, and there are no overriding legitimate grounds for the processing;
    • The personal data has been unlawfully processed;
    • The personal data must be erased for compliance with a legal obligation under Union or Member State law applicable to the data controller.

7.5 Right to Restriction of Processing

At the request of the data subject, Nyári Márk e.v. shall restrict processing if one of the following conditions is met:

    • The data subject contests the accuracy of the personal data, in which case the restriction applies for a period enabling the accuracy of the personal data to be verified;
    • The processing is unlawful, and the data subject opposes the erasure of the personal data and requests the restriction of its use instead;
    • The data controller no longer needs the personal data for the purposes of processing, but the data subject requires it for the establishment, exercise, or defense of legal claims; or
    • The data subject has objected to the processing; in this case, the restriction applies for the period until it has been established whether the legitimate grounds of the data controller override those of the data subject.

If processing is restricted, personal data may only be processed, with the exception of storage, with the data subject’s consent or for the establishment, exercise, or defense of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or a Member State.

7.6 Right to Data Portability

The data subject has the right to receive the personal data concerning them, which they have provided to the data controller, in a structured, commonly used, and machine-readable format, and to transmit those data to another data controller.

7.7 Right to Object

The data subject has the right to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them that is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller, or for the purposes of the legitimate interests pursued by the data controller or a third party, including profiling based on those provisions. In the event of an objection, the data controller may no longer process the personal data unless there are compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the data subject, or are related to the establishment, exercise, or defense of legal claims.

7.8 Automated Individual Decision-Making, Including Profiling

The data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them.

7.9 Right to Withdraw Consent

The data subject has the right to withdraw their consent at any time.

7.10 Right to Judicial Remedy

In case of violation of their rights, the data subject may bring a legal action against the data controller. The court shall deal with the case as a matter of urgency.

7.11 Data Protection Authority Procedure

Complaints can be filed with the National Authority for Data Protection and Freedom of Information:
National Authority for Data Protection and Freedom of Information
Headquarters: 1125 Budapest, Szilágyi Erzsébet fasor 22/C
Mailing address: 1530 Budapest, Pf.: 5
Phone: +36 1 391 1400
Fax: +36 1 391 1410
Email: ugyfelszolgalat@naih.hu
Website: http://www.naih.hu

8. Other Provisions

Information about data processing not listed in this notice will be provided at the time of data collection. We inform our clients that courts, public prosecutors, investigating authorities, misdemeanor authorities, administrative authorities, the National Authority for Data Protection and Freedom of Information, the Hungarian National Bank, and other authorities authorized by law may request information, data disclosure, transfer, or the provision of documents from the data controller. Nyári-Bruchmann Lili e.v. will only provide personal data to authorities to the extent necessary to achieve the purpose of the request, provided the authority specifies the precise purpose and the scope of the data.