Privacy policy for webshop purchases

 

  1. General Legal Notice

We, Duna-Weser Kft. (hereinafter: Data Controller) operate the websites www.budabestboat.hu and www.rubingroup.hu (hereinafter: Website), on which we conduct online sales activities, i.e. we operate an online store (hereinafter: Webshop).

 

You can purchase our products (tickets) that we offer for sale through the Webshop but this requires the provision of certain personal datas.

 

In this notice we summarize the rules regarding the managing of personal data necessary for purchasing from the Webshop and for the delivery of the purchased product. We would like to inform you that only customers over the age of 18 can purchase in the Webshop, therefore we only process the data of adults.

 

  1. About the data controller

Name: Duna-Weser Kft.

Headquarters: 1137 Budapest, Szent István körút 26. 2/15/b

Tax number: 13741893-2-41

Company registration number: 01-09-293625

E-mail address: ticket@rubingroup.hu

 

  1. Purpose of data processing

The purpose of data processing is to order products through the Webshop and fulfill these orders.

 

  1. Legal basis for data processing

You visited our website with the intention of making a purchase from the Webshop. With the order you place, a contract is created between us (between you and Duna-Weser Kft), so the data management is based on point b) GDPR Article 6.’s paragraph (1), i.e. the data management is necessary to fulfill a contract in which you are one of the parties, and which is concluded based on your request.

 

  1. Personal data processed

In order to make a purchase from the Webshop, we ask you to provide the following data:

  • full name (surname and first name)/company name,
  • residential address/headquarters,
  • tax identification number/tax number,
  • e-mail address,
  • telephone number

 

Please provide real and accurate data in all cases. We are not responsible for the consequences of providing incomplete, inaccurate or untrue data.

 

We would like to inform you that we do not process special data or personal data not listed above, so please do not send or share such data with us.

 

We process personal data only to the extent necessary for the purpose of data management, in the scope necessary for this.

 

  1. External data processing and data transmission

We would like to inform you that the purchase price of the ordered products is paid by bank card through the website operated by FareHarbor B.V., which you can find more information about here:

 

Name and address:

FareHarbor B.V.

Herengracht 597

1017CE Amsterdam

Netherlands

CEO: Theodore “Ted” JC Clements 

 

Contact Information:

Telephone: +31 30 249 2017

E-mail: support@fareharbor.com

Company Registration File number: 71480404

VAT registration number: NL858732701B01

 

FareHarbor B.V. (the company behind FareHarbor™) is registered and based in Amsterdam, the Netherlands (“FareHarbor”, “we”, “us” or “our”), from where it renders an online, live availability booking application that allows Providers to offer tour and activity booking services to their End Users (the “Service”) on its websites (the “Websites”).

For all questions about FareHarbor, the Service (i.e. the online, live availability booking application that allows Providers to offer tour and activity booking services to their End Users) and the Websites or if you wish to send or serve any documents, correspondence, notices or other communications in respect of FareHarbor, the Service, the Websites, or for press inquiries, please contact FareHarbor B.V. directly.

 

However, we call your attention to the fact that we, Duna-Weser Kft., do not manage bank card data, we do not have access to them.

 

An invoice will be issued for the purchase and price will be paid through the system of FareHarbor B.V., which is conducted by the following company:

 

Name and address:

FareHarbor B.V.

Herengracht 597

1017CE Amsterdam

Netherlands

CEO: Theodore “Ted” JC Clements 

 

Contact Information:

Telephone: +31 30 249 2017

E-mail: support@fareharbor.com

Company Registration File number: 71480404

VAT registration number: NL858732701B01

 

We would like to inform you that no other person or organization other than the above may know or have access to your data. Your data can only be accessed by us, the data controller and the organizations involved in the data management process, only by those individuals whose job directly requires managing this data.

 

During the managing and processing of data, we ensure the security of the data against accidental or intentional destruction, alteration, damage, disclosure, and that unauthorized people have no access to it.

 

  1. Duration of data management

We would like to inform you that based on § 169 of Act C of 2000 on accounting, we are obliged to keep the accounting documents (the contract and the invoice are considered accounting documents) for 8 years from the date of execution of the contract.

 

  1. Data storage

We store the data you provide [electronically, on the Duna-Weser Kft. server at the address ticket@rubingroup.hu].

We protect your personal data from unauthorized access, use, destruction, and alteration in every possible way.

 

 

  1. Your rights and legal remedies

During the process of managing your personal data, you are entitled to a number of rights, which you can validate by sending a request to one of the contact details specified in point 2.

 

The right to access and correct personal data

You have the right to access your personal data at any time, to request a copy, and to correct or update them.

 

Based on the right of access, you are entitled to receive information about the followings:

  1. a) the purposes of data processing;
  2. b) categories of personal data concerned;
  3. c) recipients or categories of recipients to whom the personal data has been or will be communicated, including particular recipients in third countries and international organizations;
  4. d) where appropriate, the planned period of storage of personal data;
  5. e) the right of the data subject to request from the data controller the correction, deletion or restriction of processing of personal data concerning him and to object to the processing of such personal data;
  6. f) the right to submit a complaint to a supervisory authority.

 

We understand the importance of this, therefore if you wish to exercise your rights, please contact us via one of the contact details specified in point 2.

 

Right to data portability

Your personal information is portable, so you have the right to receive it in a segmented, widely used, machine-readable format. This means that you will receive your personal data managed by us in a format that can be read by a computer and that you can transfer to another person electronically.

 

If you wish to exercise your right to data portability, contact us via one of the contact details specified in point 2.

 

The right to delete personal data

You are entitled to request the deletion of your data if

  1. a) your personal datas are no longer needed for the purpose(s) for which they were collected; or
  2. b) revoke your previous consent to the processing of your personal data, and there is no further other legal basis for data processing; or
  3. c) you object to the processing of your personal data;
  4. d) your personal datas are not processed legally; or
  5. e) the deletion of your personal data is justified by compliance with the law.

 

However, we are not obliged to fulfill your request if data processing is necessary:

  1. a) for the purpose of exercising the right to freedom of expression and information;
  2. b) for the purpose of fulfilling an obligation according to EU or Member State law applicable to the data controller requiring the processing of personal data, or for carrying out a task in the public interest or in the context of the exercise of a public authority vested in the data controller;
  3. c) on the basis of public interest in the field of public health;
  4. d) for the purpose of archiving in the public interest, for scientific and historical research purposes or for statistical purposes, if the deletion of the data would likely make this data management impossible or seriously endangered it; or
  5. e) to present, enforce and defend legal claims.

 

If you wish to exercise this right, contact us via one of the contact details specified in point 2.

 

The right to restrict data processing

You can restrict the processing of your personal data if

  1. a) you believe that your personal data stored about you is not accurate; or
  2. b) your personal datas are not processed legally, but instead of requesting their deletion, you would rather restrict their processing; or
  3. c) we no longer need your personal data for the purpose(s) for which we originally collected them, but you require this data for the purpose of submitting, asserting or defending against a legal claim or
  4. d) You objected to the processing of your personal data and are awaiting confirmation as to whether your interests in relation to your objection override the legal basis for data processing.

 

If you wish to restrict the processing of your personal data, please contact us via one of the contact details specified in point 2.

 

The right to protest

You can object to the processing of your personal data at any time. In case of such intention, please contact us via one of the contact details specified in point 2.

 

The right to appeal to a supervisory authority

You have the right to file a complaint about the processing of your personal data with the National Authority for Data Protection and Freedom of Information (address: 1055 Budapest, Falk Miksa utca 9-11.; postal address: 1363 Budapest, Pf.: 9.; phone number: +36 (1) 391 -1400; email address: ugyfelszolgalat@naih.hu), as a supervisory authority.

 

You can assert your right to the protection of your personal data before a civil court.

 

Dated: Budapest, 28.06.2022.