Privacy notice
Protection and Processing of Personal Data
Effective date: [Insert date]
ZEVA Tanácsadó Korlátolt Felelősségű Társaság (ZEVA Tanácsadó Kft.) (hereinafter referred to as the “Data Controller”), as owner and operator of the websites www.rituart.hu and www.rituart.net (hereinafter collectively referred to as the “Website”), is committed to protecting the privacy and personal data of visitors, prospective clients, and users of the Website.
This Privacy Notice explains how personal data is collected, used, stored, and protected in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – “GDPR”) and other applicable laws.
1. DATA CONTROLLER
Company name: ZEVA Tanácsadó Korlátolt Felelősségű Társaság (ZEVA Tanácsadó Kft.)
Registered office: 1161 Budapest, János street 186. 4., Hungary
Company registration number: 01-09-342220
Tax number: 14215049-2-42
Name of the Managing Director: Rita Zetz
E-mail address: info@rituart.hu
Websites: www.rituart.hu, www.rituart.net
For any questions regarding this Privacy Notice or the processing of personal data, please contact the Data Controller using the contact details above.
2. DATA PROCESSORS
The Data Controller may engage carefully selected service providers who process personal data on its behalf.
Hosting Provider
Name: Inclust Systems Kft.
Registered office: 1054 Budapest, Honvéd street 8., 1st Floor, Door 2, Hungary
Company registration number: 01-09-931441
Tax number: 11728282-2-41
E-mail: info@inclust.com
Website: inclust.com
The hosting provider processes personal data solely for the purpose of providing hosting and technical services and acts under a data processing agreement where required by law.
3. PRINCIPLES OF DATA PROCESSING
Personal data is processed in accordance with the following principles:
- Lawfulness, fairness, and transparency
- Purpose limitation
- Data minimisation
- Accuracy
- Storage limitation
- Integrity and confidentiality
- Accountability
The Data Controller processes only the personal data necessary for legitimate and specified purposes and takes appropriate technical and organisational measures to ensure data security.
4. DATA PROCESSING ACTIVITIES
The Website serves as a portfolio and presentation platform for artistic wall decorations and related creative services.
The Website does not provide user registration, an online shop, or newsletter subscriptions.
A. Contact Form and Direct Communication
Purpose
To respond to enquiries, provide consultations, discuss project requirements, and prepare quotations for artistic wall decoration services.
Categories of Personal Data
- Name
- E-mail address
- Telephone number (if provided)
- Project details voluntarily submitted by the user
- Any information included in messages sent through the contact form or by e-mail
Legal Basis
Article 6(1)(b) GDPR – processing necessary to take steps at the request of the data subject prior to entering into a contract.
Where information is submitted voluntarily beyond what is necessary to respond to an enquiry, processing may additionally be based on Article 6(1)(a) GDPR (consent).
Retention Period
Personal data relating to enquiries is retained only as long as necessary to respond to the request and manage any resulting business relationship.
Where a contract is concluded, personal data may be retained for the period required by applicable accounting, tax, and legal retention obligations.
B. Website Analytics
Purpose
To understand how visitors use the Website, measure performance, and improve user experience.
Service Provider
Google Analytics 4
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Categories of Data Processed
- IP address (with IP anonymisation where applicable)
- Date and time of visit
- Pages viewed
- Device type
- Browser type
- Operating system
- Website interaction data
Legal Basis
Article 6(1)(a) GDPR – consent.
Analytics cookies are activated only after the visitor has provided consent through the cookie consent banner.
International Transfers
Google may process data on servers located outside the European Economic Area (EEA).
Where personal data is transferred outside the EEA, such transfers are protected through appropriate safeguards, including the European Commission’s Standard Contractual Clauses or other legally approved transfer mechanisms.
C. Cookies
Purpose
Cookies are used to:
- Ensure the proper functioning of the Website
- Remember user preferences
- Provide analytics and performance measurement
Cookie Categories
Strictly Necessary Cookies
These cookies are essential for the operation and security of the Website and do not require consent.
Legal basis: Article 6(1)(f) GDPR (legitimate interest).
Analytics Cookies
Analytics cookies are used only after obtaining the visitor’s consent.
Legal basis: Article 6(1)(a) GDPR (consent).
Cookie Management
Visitors can accept, reject, or customise cookie preferences through the cookie consent banner.
Consent may be withdrawn or modified at any time through the cookie settings tool available on the Website.
5. DATA SECURITY
The Data Controller implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction, disclosure, or alteration.
Security measures include:
- HTTPS encrypted communication
- SSL/TLS certificates
- Password-protected systems and accounts
- Restricted access to personal data
- Regular software and security updates
Personal data is accessible only to authorised persons who require access for legitimate business purposes.
6. DISCLOSURE OF PERSONAL DATA
The Data Controller does not sell, rent, or disclose personal data to third parties for marketing purposes.
Personal data may be disclosed only:
- To service providers acting on behalf of the Data Controller;
- Where required by law;
- To public authorities where legally obligated;
- To establish, exercise, or defend legal claims.
7. RIGHTS OF DATA SUBJECTS
Under the GDPR, individuals have the following rights:
Right of Access
To obtain information about whether personal data is processed and to receive a copy of such data.
Right to Rectification
To request correction of inaccurate or incomplete personal data.
Right to Erasure
To request deletion of personal data where legal grounds exist.
Right to Restriction of Processing
To request temporary restriction of processing under certain circumstances.
Right to Data Portability
To receive personal data in a structured, commonly used, machine-readable format and to transmit it to another controller where applicable.
Right to Object
To object to processing based on legitimate interests.
Right to Withdraw Consent
Where processing is based on consent, consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.
Rights Related to Automated Decision-Making
The Data Controller does not use automated decision-making or profiling that produces legal or similarly significant effects.
Response Time
Requests will be handled without undue delay and, in any event, within one month of receipt, unless an extension is permitted under the GDPR.
Requests may be submitted to:
8. COMPLAINTS AND SUPERVISORY AUTHORITIES
If you believe your personal data has been processed unlawfully, please contact the Data Controller first so that we may attempt to resolve the issue.
You also have the right to lodge a complaint with a supervisory authority.
Because the Data Controller is established in Hungary, the lead supervisory authority is:
National Authority for Data Protection and Freedom of Information (NAIH)
Address: Falk Miksa street 9–11, 1055 Budapest, Hungary
Website: www.naih.hu
In accordance with Article 77 GDPR, you may also lodge a complaint with the supervisory authority in the EU Member State of your habitual residence, place of work, or place of the alleged infringement.
For residents of the Netherlands, this includes:
Dutch Data Protection Authority (Autoriteit Persoonsgegevens)
Website: www.autoriteitpersoonsgegevens.nl
You also have the right to seek judicial remedies before a competent court in accordance with Articles 78 and 79 GDPR.
9. CHANGES TO THIS PRIVACY NOTICE
The Data Controller reserves the right to amend this Privacy Notice from time to time to reflect changes in legal requirements, business operations, or data processing practices.
The latest version will always be published on the Website and will become effective upon publication.
Document version: v1.4
Effective date: [Insert date]