Kéz- és lábápolás
felsőfokon

Controller

Name: Margit Szövérffy (referred to as: controller, service provider)

Seat of Business: 1038 Budapest, Újpalotai út 8-10.

Tax No.: 56927489-1-41

Registration No.: 55635949

Establishment: 1043 Budapest, Munkásotthon u. 18. (referred to as Salon)

Phone: +36309747792

E-mail: info@nailsuitebudapest.com

Honlap: https://nailsuitebudapest.com

General Terms

The legal basis of all data processing mentioned below is the data subject’s outspoken and freely given consent.

Rights of the Data Subject:

The data subject may request information on their processed data any time and may request their data to be modified or removed. The data subject may withdraw their consent to data processing any time.

Availability of the Privacy Policy:

- printed version at the salon during business hours,

- on the website: https://nailsuitebudapest.com/adatkezelesi-tajekoztato (also available as downloadable pdf).

Key Data Processing Regulations:

- Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation)

- Act CXII of 2011 on the right to informational self-determination and on the freedom of information

- Act XLVII. of 1997 on the processing and protection of health care data and associated personal data

Hungarian National Authority for Data Protection and Freedom of Information (NAIH):

1055 Budapest, Falk Miksa utca 9-11.
+36 (1) 391-1400
+36 (1) 391-1410
ugyfelszolgalat@naih.hu
http://naih.hu

Personal Data Collected for Appointment Booking

Personal Data Collected for Appointment Booking

The following personal data shall be submitted upon booking an appointment:

- First Name - Last Name - Phone number - E-mail address

The purpose of data processing is to enable the service provider - to get in touch with the data subject for necessary appointment modifications and - to send an electronic appointment reminder message.

Appointment booking is available via the online booking system, phone, electronic messaging and in person. The same personal data are required regardless of the booking method.

The online booking system is provided by a third party, Setmore (https://setmore.com). Setmore’s Privacy Policy is available at: https://www.setmore.com/privacy

Setmore does not use the information provided by the data subject for marketing purposes, does not sell or publish it. The data subject may request the removal of their data directly from the third party via e-mail (privacy@setmore.com).

The controller shall not export the data from the online booking system, shall not establish a new database and shall not use the information for marketing purposes.

Data Required to Receive Services:

In addition to the personal data submitted upon appointment booking the following sensitive data (data concerning health) shall be provided by the data subject in order to receive services.

The data shall be stored for one year from the date services were rendered.

The data shall be stored for one year from the date services were rendered.

The data concerning health is provided by the data subject on a paper form (Attachment 1) before receiving any services. In order to ensure the elevated level of protection when processing sensitive data, the controller does not digitalize the forms, stores them safely locked and does not create new databases.

The controller reserves the right to transfer the personal data (including data concerning health) of the data subject in case of a lawful data request or legal obligations to provide information (e.g. in order to protect the data subject’s life or health, to the Court, Public Prosecutions, forensic medical examiners, proceedings in administrative offenses etc.)

Photos

In case of the data subject’s consent the service provider may take photos of the data subject’s hands and feet, and share them on the internet. When doing so the controller ensures that the data subject pictured is not identifiable (unless the data subject explicitly consented to be identified).

The data shall be stored for ten years.

The data shall be stored for ten years.

Data Required for Newsletter Subscriptions:

In order to subscribe to the newsletter, the following data must be submitted:

- First Name
- Last Name
- E-mail Address

The purpose of data processing is marketing.

Mailchimp does not use the information provided by the data subject for marketing purposes, does not sell or publish it. The data subject may request the removal of their data directly from the third party via e-mail (personaldatarequests@mailchimp.com).

Mailchimp does not use the information provided by the data subject for marketing purposes, does not sell or publish it. The data subject may request the removal of their data directly from the third party via e-mail (personaldatarequests@mailchimp.com).

The data subject may unsubscribe from the newsletter any time by clicking on the relevant link in the newsletter’s footer.

Security Camera Footage

The Service Provider may have a continuously recording security camera installed at the service area of the salon.

The legal basis for data processing is the protection of the service providers lawful interests.

The purpose of data processing the protection of property and personnel.

The data shall be stored for one week if no incident takes place.

The controller uses the footage in relation to protection of property and personnel only: in case of an insurance or court/authority procedure the controller may transfer the footage to the persons/bodies taking part in the case. The controller does not use the footage for any other purpose, does not sell or publish it.

03 January 2022

Please find the attachments in the downloadable pdf file below.