Privacy Notice

in which we inform you, as a visitor to our website and a user of the services of Smúz Café Budapest, about our data processing and privacy practices.

1. What principles do we follow when processing your data?

Smúz Café Budapest follows the principles below when processing personal data:

• we process personal data lawfully, fairly and in a transparent manner.
• we collect personal data only for specified, explicit and legitimate purposes, and we do not process them in a way incompatible with those purposes.
• the personal data we collect and process are adequate, relevant and limited to what is necessary for the purposes of the processing.
• we take every reasonable step to ensure that the data we process are accurate and, where necessary, kept up to date; inaccurate personal data are erased or rectified without delay.
• we store personal data in a form that allows you to be identified only for as long as necessary for the purposes of the processing.
• using appropriate technical and organisational measures, we ensure the security of personal data against unauthorised or unlawful processing, accidental loss, destruction or damage.
• Smúz Café Budapest processes your personal data
• on the basis of your prior, informed and voluntary consent, only to the extent necessary and always for a defined purpose — meaning that we collect, record, organise, store and use them only for that purpose.
• in some cases, processing your data is based on legal obligations and is mandatory; in such cases, we will draw your attention to this fact separately.
• in certain cases, Smúz Café Budapest or a third party has a legitimate interest in processing your personal data — for example, operating, improving and securing our website.

2. Who are we?

Company name:
Smuz Ltd.
Registered office: 1055 Budapest, Kossuth Lajos tér 18, Hungary
Website: smuzcafe.hu
Mailing address: 1055 Budapest, Kossuth Lajos tér 18, Hungary
Email address: smuz@smuzcafe.hu
Tax number:
25092309-2-41
Company registration number: 01 09 199292

Smúz Café Budapest is not required to appoint a Data Protection Officer under Article 37 of the GDPR.

Our hosting provider:

Hosting provider name: Integrity Kft.

Hosting provider registered office: 8000 Székesfehérvár, Gyetvai u. 6, Hungary

In the course of data processing, Smúz Café Budapest engages the following processors to deliver high-quality service to its guests:

Data Controller (1): Smúz Kft. (Smúz Café Budapest)

Address (1): 1055 Budapest, Kossuth tér 18, Hungary

Responsibilities (1): All activities

If we change the list of our processors, we will update this Privacy Notice accordingly.

Data we process: 

We only ask visitors of the Smúz Café Budapest website for personal data if they wish to register, log in or take part in a prize draw.

We do not link the personal data provided through registration with the data given when using our marketing services, and identifying our visitors is not our purpose.

For any questions about how we process your data, you can request further information at the email@domained.hu email or postal address; we will send our reply within 15 days (and at the latest within one month) to the contact details you provide.

3. What are cookies and how do we use them?

Cookies are small data files (hereinafter referred to as cookies) that are transferred to your computer through the website when you use the website, and are saved and stored by your internet browser. Most of the most commonly used internet browsers (Chrome, Firefox, etc.) accept and allow the downloading and use of cookies as a default setting, but it is up to you to refuse or block them by changing your browser settings, and you can also delete cookies already stored on your computer. The „help” menu of each browser provides more information about the use of cookies.

Some cookies do not require your prior consent. Our website provides a brief notice about these on your first visit — for example, authentication, multimedia player, load-balancing and user-interface customisation session cookies, as well as user-centric security cookies.

For cookies that do require consent — where processing begins as soon as you access the site — Smúz Café Budapest informs you on your first visit and asks for your consent.

Smúz Café Budapest does not use or permit cookies through which third parties could collect data about you without your consent.

Accepting cookies is not mandatory; however, Smúz Café Budapest accepts no responsibility if our website does not function as expected when cookies are disabled.

Which cookies do we use?

Name: _ga
Provider: domained.hu
Purpose: Registers a unique ID that generates statistical data on how the visitor uses the website.
Expiry: 2 years
Type: HTTP

Name: _gat
Provider: yourdomain.hu
Purpose: Stores the throttle request rate used by Google Analytics.
Expiry: Workflow
Type: HTTP

Name: _gid
Provider: yourdomain.hu
Purpose: Registers a unique ID that generates statistical data on how the visitor uses the website.
Expiry: Workflow
Type: HTTP

Name: _fbp
Provider: yourdomain.hu
Purpose: Used by Facebook to deliver advertising products to a third party (e.g. real-time bidding).
Expiry: 3 months
Type: HTTP

Name: fr
Provider: facebook.com
Purpose: Facebook uses this cookie to provide a range of advertising products (such as real-time bidding from third-party advertisers).
Expiry: 3 months
Type: HTTP

You can read more about third-party cookies in detail here on this page you can read.

4. What else should you know about how we process data on our website?

You provide personal data to us voluntarily during registration or when communicating with Smúz Café Budapest. We therefore ask you to ensure the accuracy, correctness and completeness of the data you share, as you are responsible for them. Incorrect, inaccurate or incomplete data may prevent you from using our services.

If you provide personal data of a person other than yourself, we presume that you have the necessary authorisation to do so.

You may withdraw your consent to processing at any time, free of charge:

• by deleting your registration,
• by withdrawing your consent to processing, or
• by withdrawing your consent to the processing or use of any mandatory registration data, or by requesting it to be blocked.

For technical reasons, we register the withdrawal of consent within 30 days a stated deadline; please note, however, that we may continue to process certain data after consent is withdrawn in order to fulfil legal obligations or to enforce legitimate interests.

In the case of misleading personal data, or if a visitor commits a criminal offence or attacks the systems of Smúz Café Budapest, we will terminate the visitor’s registration and erase their data immediately or — where necessary — retain them for the duration of any civil liability or criminal proceedings.

5. What should you know about our direct marketing and newsletter data processing?

By the declaration you make at registration, or later by updating your stored personal data on the newsletter and/or direct marketing registration interface (i.e. clearly expressing your consent), you may consent to the use of your personal data for marketing purposes. In that case — until consent is withdrawn — Smúz Café Budapest also processes your data for direct marketing and/or newsletter purposes and sends you advertising and other communications, including notifications, offers and newsletters (Section 6 of Act XLVIII of 2008 on the basic conditions and limitations of commercial advertising activity, “Grtv.”).

You may give consent to direct marketing and the newsletter together or separately, and you may withdraw any of these consents free of charge at any time.

We always treat the deletion of registration as a withdrawal of consent. Withdrawing consent to direct marketing and/or newsletter processing is not interpreted as withdrawal of consent to processing related to our website. How does this work and what do we keep if you withdraw the newsletter consent? Each consent is given for a specific purpose, so registering on the website and subscribing to the newsletter are two separate purposes with two separate databases that cannot be linked.

For technical reasons, we register the withdrawal or cancellation of each consent within 15 days old a stated deadline.

6. What should you know about prize draws?

Smúz Café Budapest may organise prize draws as part of campaigns; the specific terms are set out in a separate set of rules. The rules for the current promotion are always available on the home page of our website, via a prominently placed link.

7. Other data processing matters

We may transfer your data only within the limits defined by law; in the case of our processors, we ensure through contractual provisions that they cannot use your personal data for purposes contrary to your consent. Further information is provided in section 2.

Smúz Café Budapest does not transfer data abroad.

Courts, the public prosecutor’s office and other authorities (e.g. police, tax authority, the Hungarian National Authority for Data Protection and Freedom of Information) may approach Smúz Café Budapest for information, the disclosure of data or the provision of documents. In such cases we must fulfil our obligation to provide data, but only to the extent strictly necessary for the purpose of the request.

Contributors and employees of Smúz Café Budapest who are involved in our data processing operations are entitled to access your personal data to a predefined extent, under a duty of confidentiality.

We protect your personal data with appropriate technical and organisational measures, and we ensure their security and availability while safeguarding them from unauthorised access, alteration, damage, disclosure or any other unauthorised use.

As part of our organisational measures, we control physical access at the Smúz Café Budapest premises on Kossuth Square, train our employees on an ongoing basis and keep paper-based documents secured. As part of our technical measures, we use encryption, password protection and anti-virus software. Please note, however, that data transmission over the internet cannot be considered entirely secure

For security reasons, we ask for your help in keeping your password to our website safe and not sharing it with anyone.

8. What are your rights and remedies?

Regarding the processing of your data, you may

• request information,
• request the rectification, modification or completion of the personal data we process,
• object to processing and request the erasure or restriction of your data (except in the case of mandatory processing),
• seek a judicial remedy before a court,
• lodge a complaint with the supervisory authority or initiate a procedure (https://naih.hu/panaszuegyintezes-rendje.html).

Supervisory Authority: Hungarian National Authority for Data Protection and Freedom of Information (NAIH)

• Registered office: 1125 Budapest, Szilágyi Erzsébet fasor 22/c, Hungary
• Mailing address: 1530 Budapest, P.O. Box 5, Hungary
• Phone: +36 (1) 391-1400
• Fax: +36 (1) 391-1410
• E-mail: ugyfelszolgalat@naih.hu
• Website: https://naih.hu/

On your request we provide information about

• the data we process about you, or that our appointed processor processes,
• their source,
• the purpose and legal basis of the processing,
• its duration, or if that is not possible, the criteria used to determine that duration,
• the name, address and processing-related activities of our processors,
• the circumstances and effects of any data breaches, the measures taken to address and prevent them, and
• the legal basis and recipients of any transfer of your personal data.

We will provide our reply within 15 days (and at the latest within one month) of the request. Information is free of charge, except where you have already submitted an information request for the same set of data in the current year. We will refund any cost reimbursement you have already paid if we processed the data unlawfully or if the request led to a rectification. We may refuse the information request only in cases prescribed by law, by indicating the relevant legal provision and by informing you about the option of a judicial remedy or turning to the Authority.

Smúz Café Budapest will notify you and all parties to whom the data have previously been transferred for processing purposes about any rectification, restriction, marking or erasure of personal data, unless not providing notice does not infringe your legitimate interests.

If we do not fulfil your request for rectification, restriction or erasure, within 15 days (and at the latest within one month) of receiving the request we will inform you of the reasons for our refusal in writing or — with your consent — electronically, and we will inform you about the option of a judicial remedy and turning to the Authority.

If you object to the processing of your personal data, we will examine the objection within 15 days (and at the latest within one month) of receiving the request and inform you of our decision in writing. If we decide that your objection is well-founded, we will cease the processing — including further data collection and transfer — block the data, and notify all parties to whom the personal data concerned were previously transferred and who must take measures

We will refuse to fulfil the request if we demonstrate that the processing is justified by compelling legitimate grounds which override your interests, rights and freedoms, or are linked to the establishment, exercise or defence of legal claims. If you disagree with our decision, or if we miss the deadline, you may turn to the courts within 30 days of the decision being communicated or of the last day of the deadline.

Data protection lawsuits fall within the competence of the regional court; the action — at the choice of the data subject — may also be brought before the regional court of the data subject’s place of residence or habitual stay. A foreign national may also lodge a complaint with the supervisory authority of their country of residence.

Before contacting the supervisory authority or the courts, we kindly ask you to reach out to Smúz Café Budapest first so that we can discuss the issue and resolve it as quickly as possible.

9. What are the main laws governing our activities?

• Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data (GDPR)
• Act CXII of 2011 on the right to informational self-determination and freedom of information (“Info Act”)
• Act V of 2013 on the Civil Code (“Ptk.”)
• Act CVIII of 2001 on certain issues of electronic commerce services and information society services (“Eker Act”)
• Act C of 2003 on electronic communications (“Ehtv”)
• Act CLV of 1997 on consumer protection (“Fogyv Act”)
• Act CLXV of 2013 on complaints and public-interest disclosures (“Pktv.”)
• Act XLVIII of 2008 on the basic conditions and limitations of commercial advertising activity (“Grtv.”)

10. Amendments to this Privacy Notice

Smúz Café Budapest reserves the right to amend this Privacy Notice and will inform data subjects accordingly. Information about data processing is published on the yourdomain.hu website.