Privacy Policy

1. What principles do we follow when processing personal data?

Our company follows the following principles when processing personal data:

• we process personal data lawfully and fairly, and in a transparent manner for you.
• we collect personal data only for specified, explicit and legitimate purposes and do not process it in a manner incompatible with those purposes.
• the personal data we collect and process is adequate and relevant for the purposes of the processing and limited to what is necessary.
• our company takes all reasonable measures to ensure that the data we process is accurate and, where necessary, kept up to date. Inaccurate personal data is deleted or corrected without undue delay.
• we store personal data in a form that allows you to be identified only for as long as is necessary for the purposes for which the personal data is processed.
• we ensure an appropriate level of security for personal data through appropriate technical and organisational measures, protecting it against unauthorised or unlawful processing, accidental loss, destruction or damage.

Our company processes your personal data

• on the basis of your prior, informed and voluntary consent, only to the extent necessary and always for a specific purpose, i.e. we collect, record, organise, store and use your personal data.
• in certain cases, the processing of your data is based on a legal requirement and is mandatory. In such cases, we will specifically draw your attention to this fact.
• in certain cases, our company or a third party has a legitimate interest in processing your personal data, for example for the operation, development and security of our website.

2. Who are we?

Name of the business

LArt Design – Anikó Lázár, sole proprietor

Registered office

7400 Kaposvár, Illyés Gyula u. 7., Hungary

Website

https://lartdesign.hu

Postal address

7451 Kaposvár, Árvácska u. 36., Hungary

E-mail address

aniko.lazar@lartdesign.hu

Tax number

55598255-1-34

Under Article 37 of the GDPR, our company is not required to appoint a Data Protection Officer.

Our company’s hosting provider:

Name of hosting provider

Contact Net Kft.

Registered office of hosting provider

4400 Nyíregyháza, Toldi u. 52., Hungary

Website of hosting provider

https://contactnet.hu/

E-mail address of hosting provider

info@contactnet.hu

In the course of processing data, our company uses the following data processors in order to provide a high standard of service to our clients:

Data processor (1)

Contact Net Kft.

Registered office (1)

4400 Nyíregyháza, Toldi u. 52., Hungary

Contact details (1)

info@contactnet.hu

Responsibilities (1)

Hosting services and data processing related to the operation of the website

If we change the scope of our data processors, we will update this Privacy Policy accordingly.

The data we process:

We only request personal data from visitors to our website if they wish to register or log in.

The personal data provided in connection with registration or the use of our marketing services may not be linked, and identifying our visitors is not generally our purpose.

If you have any questions regarding data processing, you may request further information by e-mail at aniko.lazar@lartdesign.hu or by post. We will send our response to the contact details you provide within 15 days, but no later than one month.

3. What are cookies and how do we use them?

Cookies are small data files (hereinafter: cookies) that are placed on your computer through the website when you use the website, where they are downloaded and stored by your internet browser. Most commonly used internet browsers (Chrome, Firefox, etc.) accept and enable the downloading and use of cookies by default. However, you can choose to reject or disable them by changing your browser settings, and you can also delete cookies already stored on your computer. Further information about the use of cookies can be found in the “Help” section of the respective browser.

There are cookies that do not require your prior consent. At the beginning of your first visit to our website, we provide brief information about these cookies. Examples include authentication cookies, multimedia player cookies, load-balancing cookies, session cookies that help customise the user interface, and user-oriented security cookies.

With regard to cookies that require consent, if data processing begins when you visit the website, our company will inform you at the beginning of your first visit and ask for your consent.

Our company does not use or permit the use of cookies that enable third parties to collect data without your consent.

Acceptance of cookies is not mandatory. However, our company cannot be held responsible if, without enabling cookies, our website does not function as expected.

What cookies do we use?

Detailed information about third-party cookies can be found on this page.

4. What else do you need to know about data processing related to our website?

You provide your personal data to us voluntarily when registering or communicating with our company. Therefore, we ask you to pay particular attention to the truthfulness, correctness and accuracy of the data you provide, as you are responsible for this information. Incorrect, inaccurate or incomplete data may prevent you from using our services.

If you provide personal data belonging not to you but to another person, we assume that you have the necessary authorisation to do so.

You may withdraw your consent to data processing at any time free of charge

• by deleting your registration,
• by withdrawing your consent to data processing, or
• by withdrawing your consent to the processing or use of any data that is mandatory to provide during registration, or by requesting that such data be blocked.

For technical reasons, we undertake to register the withdrawal of consent within 30 days. However, please note that we may continue to process certain data after consent has been withdrawn in order to comply with our legal obligations or to enforce our legitimate interests.

In the event that misleading personal data is used, or if one of our visitors commits a criminal offence or attacks our company’s system, we will immediately delete the visitor’s data upon termination of their registration or, where necessary, retain the data for the duration required to establish civil liability or conduct criminal proceedings.

5. What do you need to know about data processing for direct marketing and newsletters?

By making a declaration during registration or by subsequently modifying the personal data stored on the newsletter and/or direct marketing registration interface (i.e. by clearly expressing your intention to consent), you may give your consent for us to use your personal data for marketing purposes as well. In this case, until your consent is withdrawn, we will also process your data for the purposes of direct marketing and/or sending newsletters and will send you advertisements, other communications, information and offers and/or newsletters (Section 6 of the Grtv.).

You may give your consent to direct marketing and newsletters jointly or separately, and you may withdraw your consent free of charge at any time.

We consider the deletion of registration to constitute withdrawal of consent in all cases. The withdrawal of consent to data processing for direct marketing and/or newsletter purposes is not interpreted as the withdrawal of consent to data processing related to our website. How does this work? What do we retain and on what basis if consent to the newsletter has been withdrawn? In the case of consent, each consent relates to a specific purpose, meaning that website registration and newsletter subscription are two separate purposes and two separate databases, and the two must not be linked.

For technical reasons, we undertake to register the withdrawal of individual consents or unsubscribing within 15 days.

6. Other data processing matters

We may only transfer your data within the framework defined by law. In the case of our data processors, we ensure through contractual provisions that they may not use your personal data for purposes contrary to your consent. Further information can be found in Section 2.

Our company does not transfer data abroad.

Courts, prosecutors and other authorities (e.g. the police, the tax authority or Nemzeti Adatvédelmi és Információszabadság Hatóság – the Hungarian National Authority for Data Protection and Freedom of Information) may contact our company to request information, the disclosure of data or the provision of documents. In such cases, we are obliged to comply with our data disclosure obligations, but only to the extent strictly necessary to fulfil the purpose of the request.

Employees and other persons involved in the processing and/or handling of data on behalf of our company may access your personal data to a predetermined extent and are subject to confidentiality obligations.

We protect your personal data through appropriate technical and other measures and ensure the security and availability of the data. We also protect it against unauthorised access, alteration, damage, disclosure and any other unauthorised use.

As part of our organisational measures, we control physical access to our premises, provide our employees with continuous training, and keep paper-based documents securely stored. As part of our technical measures, we use encryption, password protection and antivirus software. However, please note that the transmission of data over the internet cannot be considered completely secure. Our company takes all reasonable measures to make these processes as secure as possible; however, we cannot assume full responsibility for data transmitted through our website. With regard to data received by our company, we follow strict procedures to ensure the security of your data and prevent unlawful access.

With regard to security matters, we ask you to carefully safeguard your existing password for accessing our website and not to share this password with anyone.

7. What are your rights and legal remedies?

With regard to data processing, you may

• request information,
• request the correction, modification or completion of your personal data processed by us,
• object to the processing of your data and request the deletion or blocking of your data (except in cases of mandatory data processing),
• seek legal remedy before a court,
• lodge a complaint with the supervisory authority or initiate proceedings (https://naih.hu/panaszuegyintezes-rendje.html).

Supervisory Authority: Nemzeti Adatvédelmi és Információszabadság Hatóság (Hungarian National Authority for Data Protection and Freedom of Information, NAIH)

Registered office

1125 Budapest, Szilágyi Erzsébet fasor 22/c., Hungary

Postal address

1530 Budapest, P.O. Box 5, Hungary

Telephone

+36 (1) 391-1400

Fax

+36 (1) 391-1410

E-mail

ugyfelszolgalat@naih.hu

Website

https://naih.hu/

Upon your request, we will provide information about the personal data processed by us or by us or our appointed data processor, including:

• your data,
• the source of your data,
• the purpose and legal basis of the processing,
• the duration of processing, or, if this is not possible, the criteria used to determine that duration,
• the names and addresses of our data processors and their activities related to data processing,
• the circumstances and effects of data breaches and the measures we have taken to remedy and prevent them, and
• the legal basis and recipient of any transfer of your personal data.

We will provide the requested information within 15 days of the submission of the request, but no later than one month. The information is provided free of charge, except where you have already submitted a request for information concerning the same category of data during the current year. Any costs already paid by you will be reimbursed if we have processed the data unlawfully or if your request for information resulted in the correction of the data. We may only refuse to provide information in cases specified by law, stating the relevant legal provision and informing you of the possibility of seeking legal remedy before a court or contacting the Authority.

Our company will notify you, as well as anyone to whom the data was previously disclosed for data processing purposes, of the correction, blocking, marking or deletion of your personal data, except where failure to provide such notification does not infringe your legitimate interests.

If we do not comply with your request for correction, blocking or deletion, we will provide the reasons for our refusal in writing or, with your consent, electronically within 15 days of receiving the request, but no later than one month, and will inform you of the possibility of seeking legal remedy before a court and contacting the Authority.

If you object to the processing of your personal data, we will examine your objection within 15 days of receiving the request, but no later than one month, and will inform you of our decision in writing. If we determine that your objection is justified, we will discontinue the processing, including any further collection or transfer of data, and block the data. We will also notify all persons to whom the personal data concerned by the objection had previously been transferred of the objection and the measures taken as a result. Such persons are required to take the necessary measures to ensure the exercise of the right to object.

We will refuse to comply with your request if we can demonstrate that the processing is justified by compelling legitimate grounds that override your interests, rights and freedoms, or that are related to the establishment, exercise or defence of legal claims. If you disagree with our decision, or if we fail to meet the deadline, you may bring proceedings before a court within 30 days of the notification of the decision or the last day of the deadline.

Data protection proceedings fall within the jurisdiction of the regional court. At the request of the data subject, proceedings may also be initiated before the regional court having jurisdiction over the data subject’s place of residence or stay. A foreign citizen may also lodge a complaint with the supervisory authority competent for their place of residence.

Before contacting the supervisory authority or a court with your complaint, we ask you to contact our company first so that we can discuss the matter and seek to resolve the problem as quickly as possible.

8. What are the main laws and regulations governing our activities?

• Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data (GDPR)
• Act CXII of 2011 on Informational Self-Determination and Freedom of Information (Info tv.)
• Act V of 2013 on the Civil Code (Ptk.)
• Act CVIII of 2001 on Electronic Commerce and on Information Society Services (Eker tv.)
• Act C of 2003 on Electronic Communications (Ehtv)
• Act CLV of 1997 on Consumer Protection (Fogyv tv.)
• Act CLXV of 2013 on Complaints and Public Interest Disclosures (Pktv.)
• Act XLVIII of 2008 on the Basic Conditions and Certain Restrictions of Economic Advertising Activities (Grtv.)

9. Amendment of the Privacy Policy

Our company reserves the right to amend this Privacy Policy and will inform data subjects of any amendments in an appropriate manner. Information relating to data processing is published on the https://lartdesign.hu website.

Dated: Kaposvár, 4 September 2026.