• Home
• Privacy Notice

Last updated: April 2020

1. The Data Controller 2. Specific data processing activities 3. Your rights 4. Remedies 5. Data security 6. Other

1. The Data Controller

APPLE PS HOSTESS AGENCY LIMITED LIABILITY COMPANY Registered office: 1124 Budapest, 109 Hegyalja út. Represented by: Andrea Anikó Varga-Szabó. Email: appleparty@appleparty.hu. Website: www.appleparty.hu (hereinafter: the „Data Controller”)

2. Individual data processing operations

2.1. Placing an order and requesting a quotation

As the company’s contact person, you can request a quote for our services by email or using the form provided on our website. Orders can be placed by email, in person or by telephone.

Purpose of data processing: Processing requests for quotations, issuing quotations, processing and fulfilling orders, and maintaining contact in this regard. Following the fulfilment of an order, and in cases where a quotation is not followed by an order, the purpose of data processing after the quotation has been issued is to handle complaints.

Legal basis for data processing: We process the contact person’s data on the basis of our legitimate interest in providing the requested quotation and, consequently, in selling the service; and, in the event of an order, in fulfilling that order. You may object to the processing of your data at any time.

Data retention period: We process the personal data provided by the contact person when making an enquiry by storing the enquiry for 1 (one) year following the fulfilment of the order for the purposes of complaint handling. We will follow the same procedure for 1 (one) year following the submission of a quotation, in cases where the quotation is not followed by an order.

2.2 Business relationships

In the course of contracts or non-contractual relationships with our individual business partners, we share the contact details of our own contact persons and process the contact details of contact persons provided by our business partners.

Purpose of data processing: To maintain contact for the purposes of performing or preparing a contract, or for other business reasons.

Legal basis for data processing: Our legitimate interest in the performance of the contract or in maintaining contact between the companies. You may object to the processing of your data at any time.

Data retention period: We process contact details for the duration of the business relationship, until our business partner or the contact person notifies us of a change in the contact details.

2.3 If you contact us as a private individual

You can contact us via any of our contact details (by email, via Facebook, by telephone, by post, or using the forms provided for this purpose).

Purpose of data processing: To liaise with the enquirer and to answer or resolve their question or request. Once the question has been answered, the data is retained for the purposes of complaint handling.

Legal basis for data processing: Your consent, which you give by submitting your enquiry. You may withdraw your consent at any time; however, such withdrawal does not affect the lawfulness of any data processing carried out prior to that.

Data retention period: We will delete enquiries and any personal data provided in connection with such enquiries one (1) year after the relevant request, question or complaint has been dealt with.

2.4 Facebook and Instagram

You can find us on Facebook and Instagram. You can subscribe to our news feed on our social media pages by clicking the „Like” or „Follow” links on the page, and you can unsubscribe by clicking the „Dislike” or ”Unfollow” links found there, or„Unfollow” links found there, or you can use the wall settings to hide any unwanted posts appearing on the wall. By following us, your profile becomes accessible to us, but we do not process or record any data relating to it in our internal system. We do not use this information for any purpose other than sharing our updates.

Purpose of data processing: To keep you informed about the latest news, our work and developments affecting us.

Legal basis for data processing: Your consent, which you provide by following us. You may withdraw your consent at any time by ceasing to follow us. Withdrawal does not affect the lawfulness of any data processing carried out prior to such withdrawal.

Data retention period: Our news items will only appear on your news feed for as long as you wish. If you do not follow us, our posts will not appear on your news feed. You can still view our feed even if you do not follow us, but you will not receive separate notifications about them. Social media platforms are data controllers independent of us. You can find information about Facebook’s data processing at the following links: https://www.facebook.com/privacy/explanation. You can find information on Instagram’s data processing at the following link: https://www.facebook.com/help/instagram/155833707900388/

3. Your rights

With regard to data processing, you are entitled to the rights set out in sections 3.1–3.7. If you wish to exercise any of these rights, please contact us using one of the contact details provided in section 1.

Identification: We must verify your identity in every case before we can fulfil your request. If we are unable to verify your identity, we will unfortunately be unable to fulfil your request.

Response to the request: Once your identity has been verified, we will provide you with information regarding your request in writing, electronically or, at your request, verbally. Please note that if you submitted your request electronically, we will reply electronically. Of course, you may still request a different method of response in this case.

Processing time: We will inform you of the action taken in response to your request within 1 (one) month of receiving it at the latest. If necessary, taking into account the complexity of the request and the number of requests received, this deadline may be extended by a further 2 (two) months, in which case we will inform you of this within the 1 (one) month processing deadline. We are also obliged to inform you if no action is taken within the one-month processing period. You may lodge a complaint with the NAIH regarding this (point 4.1) and may exercise your right to judicial redress (point 4.2).

Administration fee: The information and action requested are provided free of charge. An exception to this is where the request is clearly unfounded or excessive – particularly due to its repetitive nature. In such cases, we may charge a fee or refuse to comply with the request.

3.1. You may withdraw your consent

In cases where data processing is carried out on the basis of your consent, you may withdraw your consent at any time. Please note that such withdrawal does not affect the lawfulness of any data processing carried out on the basis of your prior consent.

3.2. You may request information (access)

You may request information as to whether your personal data is currently being processed, and if so: • What is the purpose of this processing? • Exactly what data is being processed? • To whom do we disclose this data? • How long do we store this data? • What rights and remedies do you have in this regard? • From whom did we obtain your data? • Do we make automated decisions concerning you using your personal data? In such cases, you may also request information on the logic (method) we apply, and on the significance of such data processing and its likely consequences. • If you have found that your data has been transferred to an international organisation or a third country (a non-EU Member State), you may request an explanation of the safeguards in place to ensure the proper processing of your personal data. • You may request a copy of your personal data that we process (We may charge a fee based on administrative costs for any further copies.)

3.3. You may request a correction

You may request that we correct or complete any of your personal data that has been recorded inaccurately or incompletely.

3.4. You may request the erasure of your personal data („the right to be forgotten”)

You may request that we erase your personal data if: a) the personal data are no longer necessary for the purposes for which they were processed; b) the processing is based solely on your consent; c) It is established that we are processing the personal data unlawfully; d) It is required by EU or national law; e) The personal data must be erased in order to comply with a legal obligation under EU or Member State law to which the Data Controller is subject.

We may not erase personal data where it is necessary: (a) for the purposes of exercising the right to freedom of expression and the right to information; b) to comply with an obligation under Union or Member State law to which the data controller is subject, or for reasons of public interest; c) for the establishment, exercise or defence of legal claims.

3.5. You may request that we restrict the processing of your data

You may request that we restrict the processing of your personal data if any of the following applies: a) you contest the accuracy of the personal data; in this case, the restriction shall apply for a period enabling us to verify the accuracy of the personal data; b) The processing is unlawful, but you oppose the erasure of the data and request that its use be restricted instead; c) We no longer need the personal data for the purposes of the processing, but you require it for the establishment, exercise or defence of legal claims; d) You have objected to the processing; in this case, the restriction applies for as long as it remains to be determined whether the Data Controller’s legitimate grounds take precedence over your legitimate grounds.

In the event of a restriction, personal data may, apart from storage, only be processed with your consent, or for the purpose of establishing, or to protect the rights of another natural or legal person, or for reasons of an important public interest of the Union or of a Member State. We will inform you in advance of any lifting of the restriction.

3.6. You may request that we transfer your personal data (right to data portability)

You have the right to receive your personal data processed by us in a machine-readable format, and you are also entitled to transmit this data to another data controller – or, at your request, for us to transmit it – provided that the processing is based solely on your consent and is carried out by automated means.

3.7. You may object to the processing of your personal data

You may object to the processing of your personal data where the legal basis for such processing is the legitimate interests of the Data Controller or a third party. In this case, we will erase your personal data, unless there are compelling legitimate grounds for processing which override your interests, rights and freedoms, or which relate to the establishment, exercise or defence of legal claims.

4. Remedies

4.1. You may lodge a complaint with the NAIH

If you believe that the processing of your personal data contravenes the provisions of the General Data Protection Regulation, you are entitled to lodge a complaint with the supervisory authority in the Member State of your habitual residence, place of work or the place where the alleged infringement occurred, in Hungary, with the National Authority for Data Protection and Information Security (NAIH).

NAIH Chair: Dr Attila Péterfalvi Correspondence address: 1530 Budapest, PO Box 5 Registered address: 1125 Budapest, 22/c Szilágyi Erzsébet fasor Telephone: +36 (1) 391-1400 Fax: +36 (1) 391-1410 Website: http://naih.hu Email: ugyfelszolgalat@naih.hu or privacy@naih.hu

4.2. You may take the matter to court

If you believe that the processing of your personal data contravenes the provisions of the General Data Protection Regulation and that your rights under the General Data Protection Regulation have thereby been infringed, you are entitled to bring a claim before a court.

Proceedings against the data controller or the data processor must be brought before a court in the Member State where the data controller or data processor has its place of business. Such proceedings may also be brought before a court in the Member State where you have your habitual residence.

In Hungary, the adjudication of legal proceedings falls within the jurisdiction of the regional court. Depending on the choice of the data subject, proceedings may also be brought before the regional court having jurisdiction over the data subject’s place of residence or place of stay. A person who would otherwise lack legal capacity to be a party to legal proceedings may also be a party to such proceedings. The Authority may intervene in the proceedings in order to secure a favourable outcome for the data subject. In addition to the provisions of the General Data Protection Regulation, the court proceedings are governed by the provisions set out in Book II, Part Three, Chapter XII (Sections 2:51–2:54), as well as other statutory provisions relating to court proceedings.

4.3. Compensation and damages for non-pecuniary loss

If the Data Controller causes damage through the unlawful processing of the data subject’s data, or infringes the data subject’s right to privacy, compensation for non-pecuniary damage may be claimed from the Data Controller. The Data Controller shall be exempt from liability for the damage caused and from the obligation to pay compensation if it proves that the damage or the infringement of the data subject’s right to privacy was caused by an unavoidable cause falling outside the scope of data processing.

5. Data security

We will do everything in our power to ensure that, taking into account the current state of science and technology, the costs of implementation, the nature of the data processing, and the risks to the rights and freedoms of natural persons, to implement appropriate technical and organisational measures to ensure a level of data security appropriate to the risk.

We always handle personal data confidentially, with restricted access, encryption and by maximising resilience as far as possible, whilst ensuring that data can be restored in the event of a problem. We regularly test our system to ensure security.

The Data Controller is entitled to amend the provisions of this Privacy Notice at any time. Any such amendments shall come into effect at the same time as they are published on the website; we will draw your attention to the changes via a pop-up window on the website.

Privacy Notice

To those requesting quotations

For hostess and host applicants

For Hostesses and Hosts