top of page
Baltazar_Painting_Navy.jpg
Baltazar_Painting_Navy.jpg

Privacy Policy

For the use of the baltazarbrandy.com website

Preamble

Benard Spirit Ltd. (hereinafter referred to as the Data Controller) pays special attention to ensuring that its operations comply with the General Data Protection Regulation of the European Union (hereinafter referred to as GDPR), Hungarian data protection law, and other applicable legal regulations. Additionally, the company adheres to the guidelines maintained by the European Data Protection Board and the Data Protection Working Party established under Article 29, as well as the data protection practices established by the Hungarian National Authority for Data Protection and Freedom of Information.

 

Through this Privacy Policy, the Data Controller informs visitors of its website about the personal data processed in connection with the website, the purpose and method of data processing, its practices concerning the handling of personal data, and the means and possibilities for exercising the rights of data subjects.

This Privacy Policy and the associated data processing are conducted in accordance with the applicable laws, particularly:

  • GDPR,

  • Act CXII of 2011 on Informational Self-Determination and Freedom of Information ("Infotv."),

  • Act CVIII of 2001 on Certain Issues of Electronic Commerce Services and Information Society Services ("Eker. tv."),

  • Act V of 2013 on the Civil Code ("Ptk."),

  • Act CLV of 1997 on Consumer Protection ("Fgytv."),

  • Act XIX of 1998 on Criminal Proceedings ("Be."),

  • Act C of 2000 on Accounting ("Számv. tv."),

  • Act C of 2003 on Electronic Communications ("Eht."),

  • Act XLVIII of 2008 on the Basic Conditions and Certain Restrictions of Economic Advertising Activities ("Grt.").

I. Data Controller’s Details and Contact Information

The data controller of personal data is Benard Spirit Kft.
Tax number: 10663172-2-17
Company registration number: 17 09 001367
Registered office: 7045 Györköny, belterület hrsz. 371.
Email address: sales@baltazarbrandy.com
Phone number: +36 30 951 5361
Representative: Frigyes Krausz, Managing Director

II. Basic Concepts Related to Personal Data

a) Personal Data: Any information relating to an identified or identifiable natural person ("data subject"). An identifiable natural person is one who can be identified, directly or indirectly, by reference to an identifier such as a name, identification number, location data, online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
b) Processing: Any operation or set of operations performed on personal data or sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment or combination, restriction, erasure, or destruction.
c) Controller: The natural or legal person, public authority, agency, or other body that determines the purposes and means of processing personal data.
d) Processor: A natural or legal person, public authority, agency, or other body that processes personal data on behalf of the controller.
e) Data Breach: A breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to personal data transmitted, stored, or otherwise processed.

III. Principles of Data Processing, Categories of Personal Data Processed, Purpose, Legal Basis, and Duration of Processing

Personal data must be processed lawfully, fairly, and transparently for the data subject.

  1. Data collection must be for specified, explicit, and legitimate purposes and not further processed in a manner incompatible with those purposes.

  2. Data processed must be adequate, relevant, and limited to what is necessary.

  3. Personal data must be accurate and kept up to date.

  4. Storage should only occur for as long as necessary for the purposes for which the personal data is processed.

  5. Data must be processed securely to prevent unauthorized or unlawful processing, accidental loss, destruction, or damage.

Data Processing Through the baltazarbrandy.com Informative Website
I. Browsing the Website

Users visiting the Data Controller’s website.

Data Subjects
Purpose of Processing

To enhance the user experience of website visitors and to ensure the proper and secure functioning of the website.

Categories of Data Processed

The Data Controller processes technical data classified as personal data that are automatically generated during the visit to the website, such as the type of browser used, domain name (URL), date of visit, and a list of viewed pages. The website also uses cookies during its operation.

Legal Basis for Processing

The data subject’s consent (GDPR Article 6(1)(a)) and the Data Controller's legitimate interest (GDPR Article 6(1)(f)) to perform error-logging tasks necessary for correcting issues.

Duration of Processing

Until the end of the relevant user session.

Mandatory or Voluntary Nature of Data Provision

You are not required to accept the use of cookies on the website.

Processor

The hosting provider of the website:

Name: Wix Studio

Address: Nemal Tel Aviv St 40, Tel Aviv-Yafo, Israel

Company Registration Number: 513081177

Email: support@wix.com

II. Users' Age
Data Subjects

Users visiting the Data Controller’s website.

Purpose of Processing

The declaration of age provided by the user is not considered personal data as it cannot be linked to a natural person. Nevertheless, for clarity, the following information is provided:

In accordance with Section 4/A(1) of Act CVIII of 2001 on Electronic Commerce Services and Information Society Services (Eker. tv.), the website may only be used by individuals who are at least 18 years old. To fulfill this legal obligation, every user entering the website must provide their birthdate.

Categories of Data Processed

  • Date of birth

Legal Basis for Processing

The data subject’s consent (GDPR Article 6(1)(a)), provided voluntarily by submitting their date of birth, and compliance with the legal obligation applicable to the Data Controller (GDPR Article 6(1)(c)).

Duration of Processing

Until the end of the relevant user session.

Mandatory or Voluntary Nature of Data Provision

You must provide your date of birth to access the website.

Processor

The hosting provider of the website:
Name: Wix Studio

Address: Nemal Tel Aviv St 40, Tel Aviv-Yafo, Israel

Company Registration Number: 513081177

Email: support@wix.com

III. Communication with Customers via Email
Data Subjects

Individuals contacting the Data Controller via email.

Purpose of Processing

Users can contact the Data Controller through the email address provided on the website. Emails received by the Data Controller are stored on its servers. The purpose of processing is to enable the exercise of rights between the data subject and the Data Controller and to ensure evidence is available for subsequent verification.

Categories of Data Processed

  • Name

  • Email address

  • Subject of the inquiry

  • Content of the inquiry

Legal Basis for Processing

  • The legitimate interest of the Data Controller in verifying received inquiries (GDPR Article 6(1)(f)).

Duration of Processing

Five years, in line with the statute of limitations under the Civil Code.

Mandatory or Voluntary Nature of Data Provision

You are not required to provide your data, but in that case, you cannot contact us via email.

Processor

The hosting provider of the website:
Name: Wix Studio

Address: Nemal Tel Aviv St 40, Tel Aviv-Yafo, Israel

Company Registration Number: 513081177

Email: support@wix.com

Right to Object

Data subjects have the right to object at any time to the processing of personal data based on GDPR Article 6(1)(f) due to reasons related to their specific situation. In such cases, the Data Controller will no longer process the personal data unless it demonstrates compelling legitimate grounds for processing that override the interests, rights, and freedoms of the data subject or for the establishment, exercise, or defense of legal claims.

IV. Contact Form Submissions
Data Subjects

Individuals contacting the Data Controller through the contact form available on the website.

Purpose of Processing

Users can contact the Data Controller via the contact form available on the website. Messages received through the form are stored on the Data Controller’s servers. The purpose of processing is to enable the exercise of rights between the data subject and the Data Controller and to ensure evidence is available for subsequent verification.

Categories of Data Processed

  • First name

  • Last name

  • Email address

  • Content of the inquiry

Legal Basis for Processing

The legitimate interest of the Data Controller in verifying received inquiries (GDPR Article 6(1)(f)).

Duration of Processing

Five years, in line with the statute of limitations under the Civil Code.

Mandatory or Voluntary Nature of Data Provision

You are not required to provide your data, but in that case, you cannot contact us via the contact form.

Processor

The hosting provider of the website:
Name: Wix Studio

Address: Nemal Tel Aviv St 40, Tel Aviv-Yafo, Israel

Company Registration Number: 513081177

Email: support@wix.com

Right to Object

Data subjects have the right to object at any time to the processing of personal data based on GDPR Article 6(1)(f) due to reasons related to their specific situation.

Cookies Usage

The Data Controller uses cookies (information packages installed on the visitor’s computer or mobile device) on its website. The purpose of using cookies is to accelerate, simplify, and support the use of the website. Cookies are files or pieces of information sent by the web server accessed by the visitor to the visitor’s web browser.

A cookie typically contains the name of the website from which it originates, a randomly generated unique number, and its lifespan (how long it will remain on the device). A cookie may be stored on the user’s computer or device in a file, and the content of the file can be queried by the web server at any time. By clicking the "ACCEPT" button, you agree to the placement of the following cookies on your device:

Detailed information regarding the cookies used on the website can be found in the Data Controller’s cookie policy.

Links

Please note that the website contains references (links) leading to other websites. The use of such external websites is subject to the privacy policy of the respective website. Once you click on an external link or the respective button, the Data Controller has no influence on the collection, storage, or processing of your personal data by the external website.

IV. Data Subject Rights

If the data subject submits a request regarding the data processing performed by the Data Controller, the Data Controller will provide information on the actions taken or the reasons for not taking action no later than one month from the receipt of the request. In the case of a justified number or complexity of requests, the Data Controller may extend the deadline by an additional two months.

To ensure the protection of the data subject's rights and compliance with data security requirements, the Data Controller will verify the identity of the individual submitting the request. This may require the provision of additional information.

The Data Controller will provide the information in the same format as the request was made (primarily by post or electronically), unless otherwise requested and feasible. If the request is clearly unfounded or excessive, the Data Controller may charge a fee or refuse to act in accordance with applicable legal provisions.

1. Right to Access

The data subject has the right to receive confirmation from the Data Controller as to whether their personal data is being processed. If such processing is ongoing, the data subject has the right to access their personal data and the following information:
a) The purposes of the data processing;
b) The categories of personal data concerned;
c) The recipients or categories of recipients to whom the personal data has been or will be disclosed, including recipients in third countries;
d) Where possible, the envisaged period of storage or, if not possible, the criteria used to determine this period;
e) The data subject’s right to request rectification or erasure of personal data, restriction of processing, or objection to processing;
f) The right to lodge a complaint with a supervisory authority; and
g) If the data was not collected from the data subject, any available information regarding its source.

If personal data is transferred to a third country, the data subject has the right to be informed of the safeguards in place.

The Data Controller will provide a copy of the personal data subject to processing. Additional copies requested by the data subject may be subject to a reasonable fee.

2. Right to Rectification

The data subject has the right to request the rectification of inaccurate personal data and to have incomplete personal data completed.

3. Right to Erasure

The data subject has the right to request the erasure of their personal data without undue delay if any of the following reasons apply:

  • The personal data is no longer necessary for the purposes for which it was collected or processed;

  • The data subject withdraws consent, and there is no other legal basis for processing;

  • The data subject objects to processing, and there are no overriding legitimate grounds for processing;

  • The personal data has been unlawfully processed;

  • Erasure is required for compliance with a legal obligation under Union or Member State law.

4. Right to Restriction of Processing

The data subject may request the restriction of processing in the following cases:

  • The accuracy of the personal data is contested, for the period necessary to verify its accuracy;

  • The processing is unlawful, and the data subject opposes the erasure of the data and requests its restriction instead;

  • The Data Controller no longer needs the personal data, but the data subject requires it for legal claims;

  • The data subject objects to processing, pending verification of whether the Data Controller’s legitimate grounds override those of the data subject.

5. Right to Data Portability

The data subject has the right to receive the personal data provided to the Data Controller in a structured, commonly used, machine-readable format and to transmit this data to another controller, provided this does not infringe upon the right to erasure or adversely affect the rights and freedoms of others.

6. Right to Object

The data subject has the right to object to the processing of their personal data. If the data subject objects, the Data Controller will no longer process their data unless it demonstrates compelling legitimate grounds for processing that override the data subject’s interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims.

7. Withdrawal of Consent

Where processing is based on the data subject’s consent, they have the right to withdraw their consent at any time. Withdrawal of consent does not affect the lawfulness of processing conducted before the withdrawal.

8. Right to Lodge a Complaint

The data subject has the right to file a complaint with the Data Controller or a supervisory authority, and to seek legal remedies through the courts. Complaints can be submitted as follows:

 

 

Alternatively, complaints can be lodged with the Hungarian National Authority for Data Protection and Freedom of Information:

 

  • Address: 1055 Budapest, Falk Miksa utca 9-11.

  • Postal Address: 1374 Budapest, Pf. 603.

  • Phone: +36-1/391-1400

  • Fax: +36-1/391-1410

  • Email: ugyfelszolgalat@naih.hu

  • Website: www.naih.hu

V. Unilateral Modifications of the Privacy Policy

The Data Controller reserves the right to unilaterally modify this Privacy Policy. The current and updated version of the Privacy Policy will be published on the Website. Any modifications will take effect upon publication on the Website. Therefore, we recommend regularly visiting the Website to stay informed about any changes.

bottom of page