Data protection guidelines

Fluss Yoga Studio Privacy Policy

Governing legislation

In drafting the provisions of the Prospectus, the Company has taken particular account of the provisions of Regulation 2016/679 of the European Parliament and of the Council ("General Data Protection Regulation" or "GDPR"), the 2011 Act on the Right to Information Self-Determination and Freedom of Information (the "EU Directive") and the 2011 Act on the Right to Information. Act CXII of 2013 on Information Privacy and Data Protection ("Infotv."), Act V of 2013 on the Civil Code ("Civil Code") and Act XLVIII of 2008 on the Basic Conditions and Certain Restrictions of Commercial Advertising Activities ("Grtv.").

Name of data controller

A Fluss.hu-is operated by.

Company name: Petrányi Réka e.v.

Company headquarters: 1111 Budapest, Szent Gellért tér 3. 5/2

Company tax number: 67262722-1-43

Company establishment/a Fluss.hu Title: 

Duna - our coastal studio - 1239 Budapest, Horgász part 41.

Your email address: [email protected]

Phone number: 06-30-4863211

Details of the hosting provider

Company name: Hostinger International Ltd.

Location: 61 Lordou Vironos st. 6023 Larnaca, the Republic of Cyprus

Address for correspondence: 61 Lordou Vironos st. 6023 Larnaca, the Republic of Cyprus

Email: [email protected]

Principles of data management

The Data Controller shall act in good faith, fairness and transparency, in cooperation with the data subjects in the processing. The Controller shall process only the data specified by law or provided by the data subjects for the purposes set out below. The scope of the Personal Data processed shall be proportionate to, and not excessive in relation to, the purposes of the processing.

The Data Controller does not verify the Personal Data provided to it. The person providing the Personal Data is solely responsible for the correctness of the Personal Data provided.

 The Data Controller shall not transfer the Personal Data it processes to third parties other than the Data Processors specified in this Notice.

Purpose of data processing

The Data Controller processes personal data only for specific purposes, for the exercise of rights and the performance of obligations. At all stages of the processing, it shall comply with the purpose of the processing. Data is collected and processed fairly and lawfully. Personal data shall be processed only to the extent and for the duration necessary to achieve the purpose. The purpose of the processing is primarily the provision of the Controller's services. The purpose of the processing is based on the above:

•       To communicate with the Guest, User;

•       Sending newsletters and advertisements by email with the User's specific consent;

•       Providing asset protection.

Scope of data processed

The Data Controller processes only the personal data provided by the Guests and Users, as well as the images taken of them. The data processed are the following:

Guests: first name, surname, email address, age, planned frequency and reason for attending yoga sessions, security camera footage.

Users: email address.

Description of data processing cases

Data processed when using the service

Scope of data processed	Purpose/legal basis for processing	Retention period	Who is entitled to access the data
Guest name, age, email address, planned frequency and reason for attending yoga sessions.	Staying in touch. Legal basis for processing: performance of a service/contract or consent.	6 months after the service is discontinued	The Managing Director of the Company, the Service Provider.

 

Data processed when subscribing to the newsletter

Scope of data processed	Purpose/legal basis for processing	Retention period	Who is entitled to access the data
User email address	Keeping in touch, sending newsletters. Legal basis for processing: Contribution.	3 days after unsubscribing from the newsletter	Managing Director of the Company.

 

Data processed when capturing images from a security camera

Scope of data processed	Purpose/legal basis for processing	Retention period	Who is entitled to access the data
Without direct observation in the main entrance corridor, visual recording of the Guest Area	Protection of persons and property. Legal basis for processing: legitimate interest.	3 days	Managing Director of the Company.

How personal data is stored

 

The Company stores the data according to the manner in which they are generated, as follows:

 

1. (a) store the data which it processes on the basis of a written declaration in the original written form or in the form of an electronic copy of the original document for the period specified above;

2. b) store data in electronic form during the period specified above, which have been generated on the basis of electronic declarations or during the use of the service.

Rights of the data subject in relation to the processing of personal data by the Company

 

The data subject (User, Guest, Staff member) may request the following from the Company at the contact details indicated above, provided that the legal prerequisites for this are met:

•       access to personal data;

•       rectification of the personal data stored;

•       the erasure of personal data;

•       restrictions on the processing of personal data;

•       object to the processing of personal data;

•       to request and transfer personal data to another controller (right to data portability)

•       where you have given your consent to the processing of your personal data, you may withdraw your consent at any time.

 

In response to the above requests, the Company must provide feedback to the data subject within 30 days on the execution or refusal of the request (in this case with reasons).

If the data subject does not agree with the Company's response or action, he or she has the following remedies:

–      you can lodge a complaint with the National Authority for Data Protection and Freedom of Information (address: 1125 Budapest, Szilágyi Erzsébet fasor 22/c; phone: +36-1-391-1400; e-mail: [email protected]), and

–      to the competent court in case of infringement.

Data processors

The involvement of processors is necessary for the provision of the service and to support the economic operation of the Company.

Data processor	Activity carried out
Yoga Studio Associate	Reception activity
Company's accounting service provider	Accounting services

 

Other provisions

The Data Controller reserves the right to amend this Notice at any time. The Data Controller will inform the data subject of the amendment by publishing the amendment on the website (www.fluss.hu) and a Flow You will be notified by posting a notice in the yoga studio.

Budapest, 2023. 15 January.