Privacy Policy

This Privacy Policy provides information to you, as a visitor of our website and a user of our services, about our company's data processing and data protection practices.

1. What principles do we follow when processing personal data?

Our company follows the principles below when processing personal data:

  • We process personal data lawfully, fairly, and in a transparent manner for you.
  • Personal data is collected only for specified, explicit and legitimate purposes and is not processed in a manner incompatible with those purposes.
  • The personal data we collect and process are adequate, relevant, and limited to what is necessary in relation to the purposes of data processing.
  • Our company takes all reasonable steps to ensure that the personal data we process is accurate and, where necessary, kept up to date. Inaccurate personal data is deleted or corrected without delay.
  • Personal data is stored in a form that allows identification of the data subject only for as long as is necessary to achieve the purposes for which the personal data are processed.
  • We ensure the appropriate security of personal data through suitable technical and organisational measures, protecting them against unauthorised or unlawful processing, accidental loss, destruction or damage.
  • Our company processes your personal data
  • based on your prior informed and voluntary consent, and only to the extent necessary and in all cases for specified purposes; that is, we collect, record, organise, store and use your personal data.
  • In certain cases, the processing of your data is based on legal requirements and is mandatory. In such cases, we will specifically draw your attention to this fact.
  • In certain cases, our company or a third party may have a legitimate interest in processing your personal data, for example for the operation, development, and security of our website.

2. Who are we?

Business name: Gacsal Tamara e.v. Registered office: 3359 Tenk, Dobó István út 16/A Website: www.saphiredesign.hu Postal address: 3359 Tenk, Dobó István út 16/A Email address: hello@saphiredesign.hu Tax number: ____________________ Company registration number: ____________________

Our company is not required to appoint a data protection officer under Article 37 of the GDPR.

Our website hosting provider:

Hosting service provider: Rackhost

Hosting service provider’s registered office: 6722 Szeged, Tisza Lajos körút 41.

Hosting service provider website: www.rackhost.hu

Hosting service provider email address: info@rackhost.hu

During data processing, our company uses the following data processors in order to provide high-quality services to our clients:

Data controller (1): Gacsal Tamara

Address (1): 3359 Tenk, Dobó István út 16/A

Responsibilities (1): All activities

If we modify the scope of our data processors, the changes will be reflected in this notice.

Data processed by us:

We only request personal data from our website visitors if they wish to register, log in, or participate in a prize draw.

The personal data provided during registration or when using our marketing services are not combined, and identifying our visitors is generally not our objective.

For any questions regarding data processing, you may request further information via email at hello@saphiredesign.hu or by post. We will send our response to the contact details you provide within 15 days (and no later than 1 month).

3. What are cookies and how do we manage them?

Cookies are small data files (hereinafter referred to as “cookies”) that are placed on your computer through the website when you use it. These files are downloaded, stored, and managed by your internet browser. Most commonly used web browsers (such as Chrome, Firefox, etc.) accept and enable cookies by default. However, you may choose to reject or disable them by modifying your browser settings, and you may also delete cookies that have already been stored on your device. More detailed information about the use and management of cookies can be found in the “Help” section of your browser.

There are certain cookies that do not require your prior consent. Our website provides brief information about these cookies when you first visit the site. Examples include authentication cookies, multimedia player cookies, load-balancing cookies, session cookies that help customise the user interface, and user-centric security cookies.

For cookies that require consent, where data processing begins upon visiting the website, our company will inform you at the start of your first visit and request your consent.

Our company does not use, nor does it permit the use of, cookies that allow third parties to collect data about you without your consent.

Accepting cookies is not mandatory. However, our company cannot be held responsible if the website does not function as expected due to cookies being disabled.

What types of cookies do we use?

Name: _ga Provider: domained.hu Purpose: Registers a unique identifier that is used to generate statistical data on how visitors use the website. Expiration: 2 years Type: HTTP

Name: _gat Provider: domained.hu Purpose: Used by Google Analytics to store and manage the request rate limit (throttle request rate). Expiration: Session Type: HTTP

Name: _gid Provider: domained.hu Purpose: Registers a unique identifier that is used to generate statistical data on how visitors use the website. Expiration: Session Type: HTTP

Name: _fbp Provider: domained.hu Purpose: Used by Facebook to deliver advertising products to third parties, such as real-time advertising services. Expiration: 3 months Type: HTTP

Name: fr Provider: Facebook.com Purpose: This cookie is used by Facebook to deliver a range of advertising products, such as real-time bidding from third-party advertisers. Expiration: 3 months Type: HTTP

You can find detailed information about third-party cookies on this page.

4. What else should you know about data processing related to our website?

You provide your personal data to us voluntarily during registration or when communicating with our company. Therefore, we kindly ask you to ensure that the information you provide is truthful, accurate and complete, as you are responsible for its correctness. Incorrect, inaccurate or incomplete information may prevent you from using our services.

If you provide the personal data of another person instead of your own, we assume that you have the necessary authorisation to do so.

You may withdraw your consent to data processing at any time, free of charge.

  • by deleting your registration,
  • by withdrawing your consent to data processing, or
  • by withdrawing your consent to the processing or use of any data that is mandatory during registration, or by requesting the restriction of such data.

We undertake to register the withdrawal of consent within a period of 30 days for technical reasons. However, please note that, in order to comply with our legal obligations or to pursue our legitimate interests, we may continue to process certain data even after consent has been withdrawn.

In the event of the use of misleading personal data, or if a visitor commits a criminal offence or attacks our company’s systems, we will immediately terminate the visitor’s registration and delete their data without delay. If necessary, however, we may retain such data for the duration required to establish civil liability or to conduct criminal proceedings.

5. What should you know about our direct marketing and newsletter-related data processing?

By making a declaration during registration or later modifying the personal data stored on the newsletter and/or direct marketing registration interface (thereby clearly expressing your intention to consent), you may grant your consent for us to use your personal data for marketing purposes as well. In this case, until your consent is withdrawn, we may process your data for direct marketing and/or newsletter distribution purposes and send you advertising materials, other communications, information, offers, and/or newsletters (Section 6 of the Hungarian Advertising Act).

You may give your consent for direct marketing and newsletters either jointly or separately, and you may withdraw such consent(s) at any time, free of charge.

We consider the deletion of a registration to constitute a withdrawal of consent in all cases. However, the withdrawal of consent for direct marketing and/or newsletter-related data processing shall not be regarded as a withdrawal of consent for other data processing activities related to the use of our website. Consent is always granted for a specific purpose; therefore, website registration and newsletter subscription serve separate purposes and are managed in separate databases. Consequently, the withdrawal of consent for one purpose does not automatically affect data processing carried out for another lawful purpose.

For technical reasons, we undertake to process and register the withdrawal or cancellation of individual consents within 15 days.

6. What should you know about our giveaways and prize draws?

Our company may organise promotional prize draws from time to time. The specific terms and conditions of each campaign are set out in a separate set of rules. The rules applicable to the current promotion will always be available via a prominently displayed link on the homepage of our website.

7. Other data protection and data processing matters

We may transfer your personal data only within the limits prescribed by applicable law. In the case of our data processors, we ensure through contractual obligations that they may not use your personal data for purposes that are inconsistent with your consent. Further information can be found in Section 2.

Our company does not transfer personal data outside the country.

Courts, public prosecutors, and other authorities (such as the police, tax authorities, or the National Authority for Data Protection and Freedom of Information) may contact our company to request information, the disclosure of data, or the provision of documents. In such cases, we are required to comply with our legal obligation to provide data, but only to the extent strictly necessary to fulfil the purpose of the request.

The employees and collaborators involved in our company’s data processing and/or data handling activities are authorised to access your personal data only to a predefined extent and are bound by strict confidentiality obligations.

We protect your personal data through appropriate technical and organisational measures, ensuring the security and availability of the data. We also safeguard it against unauthorised access, alteration, damage, disclosure, and any other form of unauthorised use.

As part of our organisational measures, we control physical access to our premises, provide ongoing training to our employees, and store paper-based documents in secure, protected locations. As part of our technical measures, we use encryption, password protection, and antivirus software. However, please note that data transmission over the Internet cannot be considered completely secure. While our company makes every effort to ensure that data processing and transmission are as secure as possible, we cannot accept full responsibility for data transmitted through our website. Nevertheless, once the data has been received by our company, we apply strict security measures to protect your information and prevent unauthorised access.

With regard to security matters, we kindly ask for your cooperation in carefully safeguarding your password used to access our website and not sharing it with anyone.

8. What are your rights and available legal remedies?

Regarding the processing of your personal data,

  • you may request information,
  • you may request the correction, amendment, or completion of the personal data we process about you,
  • you may object to the processing of your personal data and request the deletion or restriction of your data (except where data processing is required by law),
  • you may seek legal remedy before a court,
  • you may lodge a complaint with the supervisory authority or initiate proceedings before it.

Supervisory Authority: National Authority for Data Protection and Freedom of Information

  • Registered Office: 1055 Budapest, Falk Miksa Street 9–11.
  • Postal Address: 1363 Budapest, P.O. Box 9.
  • Phone: +36 (1) 391-1400
  • Fax: +36 (1) 391-1410
  • E-mail: ugyfelszolgalat@naih.hu

Website: https://naih.hu/

Upon your request, we will provide information about the personal data concerning you that is processed by us or by our appointed data processor on our behalf.

  • about your personal data,
  • their source,
  • the purpose and legal basis of the data processing,
  • the duration of the data processing, or, if this is not possible, the criteria used to determine that duration,
  • the names and addresses of our data processors, as well as the activities they carry out in connection with the processing of your personal data,
  • the circumstances and consequences of any data protection incidents, as well as the measures we have taken to address and prevent them, and
  • the legal basis and recipients of any transfer of your personal data.

We will provide the requested information within 15 days of receiving the request (and no later than one month). The provision of information is free of charge, except where you have already submitted a request for information concerning the same set of data during the current year. Any fee already paid by you will be refunded if the data was processed unlawfully or if the request for information resulted in the correction of the data. We may refuse to provide information only in cases permitted by law, with reference to the relevant legal provisions, and we will also inform you of the possibility of seeking judicial remedy or lodging a complaint with the supervisory authority.

Our company will notify you, as well as all parties to whom the data has previously been disclosed for data processing purposes, of any correction, restriction, marking, or deletion of personal data, unless the omission of such notification does not prejudice your legitimate interests.

If we do not comply with your request for the correction, restriction, or deletion of personal data, we will provide you with the reasons for our refusal in writing, or electronically with your consent, within 15 days of receiving the request (and no later than one month). We will also inform you of your right to seek judicial remedy and to lodge a complaint with the supervisory authority.

If you object to the processing of your personal data, we will examine your objection within 15 days of receiving your request (and no later than one month) and inform you of our decision in writing. If we determine that your objection is justified, we will cease the data processing, including any further collection and transfer of data, and will restrict the processing of the data. We will also notify all parties to whom the personal data concerned by the objection has previously been disclosed, so that they may take the necessary measures to enforce your right to object.

We may refuse to comply with your request if we can demonstrate that the processing of the data is justified by compelling legitimate grounds which override your interests, rights, and freedoms, or which are related to the establishment, exercise, or defence of legal claims. If you disagree with our decision, or if we fail to meet the applicable deadline, you may bring the matter before a court within 30 days from the notification of the decision or from the last day of the applicable deadline.

Cases relating to data protection disputes fall within the jurisdiction of the competent court. Proceedings may also be initiated, at the data subject’s choice, before the court having jurisdiction over their place of residence or habitual residence. Foreign nationals may also lodge a complaint with the supervisory authority competent for their place of residence.

We kindly ask that, before submitting a complaint to the supervisory authority or initiating legal proceedings, you first contact our company in order to discuss the matter and facilitate the quickest possible resolution of any issue that may arise.

9. Which are the main laws and regulations governing our activities?

  • We kindly ask that, before lodging a complaint with the supervisory authority or initiating legal proceedings, you first contact our company so that we may discuss the matter and seek to resolve any issue as quickly as possible.
  • Act CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information (Info Act)
  • Act V of 2013 on the Civil Code (Civil Code – Ptk.)
  • Act CVIII of 2001 on Certain Issues of Electronic Commerce Services and Information Society Services (E-Commerce Act – Eker tv.)
  • Act C of 2003 on Electronic Communications (Electronic Communications Act – Ehtv.)
  • Act CLV of 1997 on Consumer Protection (Consumer Protection Act – Fogyv. tv.)
  • Act CLXV of 2013 on Complaints and Public Interest Disclosures (Complaints Act – Pktv.)
  • Act XLVIII of 2008 on the Basic Requirements and Certain Restrictions of Commercial Advertising Activities (Advertising Act – Grtv.)

10. Amendments to the Privacy Policy

Our company reserves the right to amend this Privacy Policy at any time. Any changes will be communicated to the affected parties in an appropriate manner. Information regarding data processing is published on the www.saphiredesign.hu website.

Budapest, 2026.06.10.