Privacy overview
GENERAL INFORMATION
The following information provides a simple overview of what happens to your personal data when you visit this website. Any data based on which you can be personally identified is considered personal data. For more detailed information on data protection, please read our data protection policy below this text.

DATA COLLECTION ON THIS WEBSITE
WHO IS RESPONSIBLE FOR DATA COLLECTION ON THIS WEBSITE?
Data processing on this website is carried out by the website operator. You can find the contact details of the website operator in the "Information on the responsible party" section of the data protection policy.

HOW DO WE COLLECT YOUR DATA?
We first collect your data when you provide it to us. This can be, for example, data entered on a contact form.

Other data is collected automatically or with your consent by our IT systems when you visit the website. These are mainly technical data (e.g. internet browser, operating system or the time the page was viewed). This data is collected automatically as soon as you enter this website.

WHAT DO WE USE YOUR DATA FOR?
Some of the data is collected in order to ensure the flawless operation of the website. Other data may be used to analyze your user behavior.

WHAT RIGHTS DO YOU HAVE IN RELATION TO YOUR DATA?
You have the right to receive free information about the origin, recipient and purpose of your stored personal data at any time. You also have the right to request the correction or deletion of this data. If you have given your consent to data processing, you can withdraw this consent at any time for the future. You also have the right to request the restriction of the processing of your personal data under certain circumstances. You also have the right to file a complaint with the competent supervisory authority.

You can contact us at any time regarding this and other questions related to data protection.

General and mandatory information
DATA PROTECTION
The site operators take the protection of your personal data very seriously. We treat your personal data confidentially, in accordance with the legal data protection regulations and this data protection declaration.

When you use this website, we collect various personal data. Personal data are data on the basis of which you can be personally identified. This Privacy Policy explains what data we collect and how we use it. It also explains how and for what purpose this is done.

We would like to draw your attention to the fact that Internet data transmission (e.g. during e-mail communication) may contain security gaps. Full data protection against access by third parties is not possible.

NOTE ON COMPETENT AUTHORITY
The party responsible for data processing on this website:

Hallai-Fekete Andrea E.V
Szív Street 15.
8647 Balatonmáriafürdő

Phone: +36 70 419 94 91
E-mail: info@villagreta.hu

The responsible body is the natural or legal person who, alone or together with others, determines the purposes and method of processing personal data (e.g. names, e-mail addresses or the like).

STORAGE TIME
Unless this Privacy Policy specifies a more specific retention period, your personal data will remain with us until the purpose of data processing ceases. If you submit a legitimate deletion request or withdraw your consent to data processing, we will delete your data, unless we have other legally permissible reasons for storing your personal data (e.g. retention periods according to tax or commercial laws); in the latter case, the data will be deleted as soon as these reasons cease.

WITHDRAWAL OF YOUR CONSENT TO DATA MANAGEMENT
Many data processing operations are only possible with your express consent. You can withdraw your consent at any time. The legality of the data management carried out until the withdrawal is not affected by the withdrawal.

The right to object to data collection in special cases, as well as the right to object to direct business acquisition (Article 21 of the ÁAR /General Data Protection Regulation/)

You have the right to object to the processing of your personal data based on points e) or f) of Article 6 (1) of the General Data Protection Regulation, including profiling based on the aforementioned provisions, at any time for reasons related to your own situation. The current legal basis for data management can be found in this Data Protection Statement. If you object, we will no longer process your personal data, unless we prove that the data processing is justified by compelling legitimate reasons that take precedence over your interests, rights and freedoms, or that are related to the presentation, enforcement or defense of legal claims (protest according to Article 21 (1) of the ÁAR).

If your personal data is processed for direct business acquisition, you have the right to object at any time to the processing of your personal data for this purpose, including profiling, if it is related to direct business acquisition. If you object, your personal data can no longer be processed for the purpose of obtaining direct business (objection according to Article 21 (2) of the ÁAR).

THE RIGHT TO COMPLAINT WITH THE COMPETENT SUPERVISORY AUTHORITY
In the event of a violation of the GDPR, data subjects may seek legal redress at the supervisory authority, especially in the Member State of their usual place of residence, workplace or the place of the alleged violation. The right to legal remedy does not affect other administrative or judicial remedies.

RIGHT TO DATA PORTABILITY
You have the right to have your data automatically processed based on your consent or during the performance of a contract transferred to you or to a third party in a commonly used, machine-readable format. If you request the direct transfer of data to another data controller, this will only be done if this is technically feasible.

SSL OR TLS ENCRYPTION
This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries sent by you as the website operator. You can recognize an encrypted connection by the presence of "https://" instead of "http://" in the address bar of the browser, as well as the lock symbol appearing in the browser bar.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by a third party.

NOTICE, DELETE AND CORRECTION
Within the framework of the applicable legal provisions, you are entitled at any time to receive free information about your stored personal data, their origin and recipient, as well as the purpose of the data management, and, where appropriate, to correct or delete the data. You can contact us at any time regarding this and any other questions related to personal data.

RIGHT TO LIMIT DATA PROCESSING
You have the right to request the restriction of the processing of your personal data. You can contact us for this at any time. The right to limit data processing exists in the following cases:

If you dispute the accuracy of the personal data we hold about you, we usually need time to verify this. During the control period, you have the right to request the restriction of the processing of your personal data.

If your personal data has been/is being processed unlawfully, you can request restriction of data management instead of deletion.

If we no longer need your personal data, but you need it to assert, defend or enforce legal claims, you have the right to request a restriction of processing of your personal data instead of deletion.

If you have filed an objection based on Article 21 (1) of the ÁAR, a balance between your interests and our interests must be carried out. Until it has been established whose interests prevail, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, these data - apart from storage - will only be processed with your consent, or in order to assert, assert or defend legal claims, or to protect the rights of another natural or legal person, or in the important public interest of the European Union or a member state can be processed.

OBJECTION TO ADVERTISING EMAILS
We hereby object to the use of the contact information published as part of the obligation to provide an imprint for the purpose of sending non-specifically requested advertising and informational materials. The operators of the website expressly reserve the right to take legal action in case of unsolicited sending of advertising information, e.g. via spam emails.

Data collection on this website
COOKIES
Our websites use so-called "cookies". Cookies are small text files and do not cause any damage to the end device. They are stored either temporarily for the duration of the session (session cookies) or permanently (permanent cookies) on your end device. Session cookies are automatically deleted at the end of the visit. Persistent cookies remain on your device until you delete them yourself or until your web browser deletes them automatically.

In some cases, third-party cookies may also be stored on your device when you access our website (third-party cookies). These enable us or you to use certain services of the third-party company (e.g. cookies needed to process payment services).

Cookies have different functions. Many cookies are technically necessary, as certain functions of the website would not work without them (e.g. the shopping cart function or the display of videos). Other cookies are used to evaluate user behavior or display advertisements.

Cookies necessary to carry out the electronic communication process (necessary cookies) or to provide certain functions requested by you (functional cookies, e.g. for the shopping cart function) or to optimize the website (e.g. cookies for measuring the web audience) are defined in Article 6 (1) of the ÁAR ), unless a different legal basis is indicated. The operator of the website has a legitimate interest in storing cookies in order to provide technically error-free and optimized services. If consent to the storage of cookies has been requested, the storage of the cookies in question is based solely on this consent (Article 6 (1) point a) of the GDPR); consent can be withdrawn at any time.

You can set your browser so that you are informed about the setting of cookies and allow cookies only in individual cases, you can exclude the acceptance of cookies in certain cases or in general, and you can activate the automatic deletion of cookies when you close the browser. If you turn off cookies, the functionality of the website may be limited.

If cookies are used by a third party or for analysis purposes, we will inform you about this separately in the context of this data protection declaration, and we will ask for your consent if necessary.

SERVER LOG FILES
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are the following:

browser type and version
Operating system used
referrer URL address
The host name of the accessing computer
The time of the server request
IP address
This data is not combined with other data sources.
These data are collected on the basis of point f) of Article 6, paragraph (1) of the ÁAR. The legitimate interest of the website operator is the technically error-free display and optimization of the website - for this purpose, the collection of server log files is necessary.

CONTACT FORM
If you send us an inquiry via the contact form, we will store the information provided in the inquiry form, including the contact information provided there, for the purpose of processing the inquiry and in case of further questions. These data will not be passed on without your consent.

The processing of this data is based on Article 6, paragraph 1, point b) of the ÁAR, if your request is related to the performance of a contract or is necessary for the implementation of measures prior to the conclusion of a contract. In all other cases, data processing is based on our legitimate interest in the efficient handling of inquiries addressed to us (Article 6 (1) point f) ÁAR) or on your consent (Article 6 (1) point a) ÁAR) if you have requested it.

The data entered in the contact form will remain with us until you request their deletion, withdraw your consent to data storage, or until the purpose of data storage ceases (e.g. after we have finished processing your request). The mandatory legal provisions - especially the retention periods - do not change.

INQUIRIES BY EMAIL, TELEPHONE OR FAX
If you contact us by e-mail, telephone or fax, we store and process your inquiry, including all personal data derived from it (name, request), for the purpose of processing your request. These data will not be passed on without your consent.

The processing of this data is based on Article 6, paragraph 1, point b) of the ÁAR, if your request is related to the performance of a contract or is necessary for the implementation of measures prior to the conclusion of a contract. In all other cases, the data management is based on our legitimate interest in the effective management of inquiries addressed to us (Article 6 (1) point f) GDPR) or on your consent (Article 6 (1) point a) DSGVO) if you have requested it.

The data sent via contact requests will remain with us until you request their deletion, withdraw your consent to data storage, or until the purpose of data storage ceases (e.g. after your request has been processed). The mandatory legal provisions - in particular the statutory retention periods - remain unchanged.

Newsletter
NEWSLETTER DATA
If you would like to receive the newsletter on the website, we need your email address and information to verify that you are the owner of the email address provided and that you agree to receive the newsletter. Additional data is not collected, or only on a voluntary basis. These data are used exclusively to send the requested information and are not passed on to third parties.

The processing of the data entered in the newsletter subscription form is based solely on your consent (Article 6 (1) point a) of the ÁAR. You can withdraw your consent to data storage, e-mail address and newsletter sending at any time, for example by using the "unsubscribe" link in the newsletter. The legality of already performed data processing operations is not affected by the withdrawal.

The data you provide to receive the newsletter will be stored by us or the newsletter provider until you unsubscribe from the newsletter, and will be deleted from the newsletter distribution list after you unsubscribe from the newsletter or the target ceases to exist. We reserve the right, at our discretion, to delete or block e-mail addresses from our newsletter distribution list within the framework of our legitimate interest according to Article 6 (1) point f) of the ÁAR.

After you have unsubscribed from the newsletter distribution list, your email address will be stored on a blacklist by us or the newsletter provider, if necessary, to prevent future correspondence. Blacklist data is used exclusively for this purpose and is not combined with other data. This serves both your interest and ours to comply with legal requirements when sending newsletters (legitimate interest pursuant to Article 6(1)(f) of the ÁAR). The storage of the blacklist is not limited in time. You can object to storage if your interests are more important than our legitimate interests.

LEGAL BASIS
Data processing is based on your consent (Article 6 (1) point a) of the General Data Protection Regulation. You can withdraw this consent at any time. The legality of already performed data processing operations is not affected by the withdrawal.

STORAGE TIME
The data you provide to receive the newsletter will be stored by us or the newsletter provider until you unsubscribe from the newsletter, and will be deleted from the newsletter distribution list after unsubscribing from the newsletter. This does not affect the data we store for other purposes.

After you have unsubscribed from the newsletter distribution list, your email address will be stored on a blacklist by us or the newsletter provider, if necessary, to prevent future correspondence. Blacklist data is used exclusively for this purpose and is not combined with other data. This serves both your interest and ours to comply with legal requirements when sending newsletters (legitimate interest pursuant to Article 6(1)(f) of the ÁAR). The storage of the blacklist is not limited in time. You can object to storage if your interests are more important than our legitimate interests.

E-commerce and payment providers
DATA PROCESSING (CUSTOMER AND CONTRACT DATA)
We collect, process and use personal data only to the extent that it is necessary for the establishment, content or modification of the legal relationship (inventory data). This is done on the basis of Article 6(1)(b) of the ÁAR, which enables the processing of data for the purpose of fulfilling a contract or taking measures prior to the conclusion of a contract. Personal data related to the use of the website (usage data) are collected, processed and used only to the extent that this is necessary for the user to use the service or to issue an invoice to the user.

The collected customer data is deleted after the order is fulfilled or the business relationship is terminated. The statutory retention periods remain unchanged.