Adatkezelési Tájékoztató – FLORICULTOR Kft.
FLORICULTOR Limited Liability Company

Data Processing Notice

for visitors to the dunavirag.hu and dunavirag.com websites

Based on Regulation (EU) 2016/679 (GDPR) and Act CXII of 2011

Effective: 25 May 2026

I. Data controller's data

Company nameFLORICULTOR Limited Liability Company
Headquarters2310 Szigetszentmiklós, Leshegy utca 1/c.
Tax number26307297-2-13
Company registration number13-09-192896
Court of registrationCourt of Justice of the Budapest District Court
Phone+36 30 549 3253
Websitewww.dunavirag.hu | www.dunavirag.com
Online Storewww.vasarterdunavirag.hu
HostingRACKFOREST Informatikai Kft., 1132 Budapest, Victor Hugo utca 18-22., info@rackforest.hu

The Company is not obliged to appoint a Data Protection Officer. For data protection issues, please contact partnerkapcsolat@dunavirag.hu you can find them at.

II. Purpose and scope of the prospectus

The purpose of this information is to inform FLORICULTOR Kft. (hereinafter: the Company) as the data controller of the www.dunavirag.hu and www.dunavirag.com website visitors about the processing of their personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Act CXII of 2011.

The website is for information and contact purposes only - it is not for shopping. The Company's online wholesale activities are conducted solely for the www.vasarterdunavirag.hu online Fairgrounds, which is subject to a separate privacy notice.

The notice will be reviewed at least every three years from the start of the processing. The revision will enter into force upon publication on the website.

III. Principles of data management

The Company processes personal data in accordance with the following principles (Article 5 GDPR):

  • Legality, fairness and transparency: we process data only on a lawful legal basis and in a transparent manner for the data subject.
  • Goal orientation: we collect data only for specified, explicit and legitimate purposes.
  • Data economy: we only process the data necessary to achieve the purpose.
  • Accuracy: we keep your personal data accurate and up to date.
  • Limited shelf life: the data is stored only for the time necessary.
  • Integrity and confidentiality: we take appropriate technical and organisational measures to ensure data security.
  • Accountability: the Company is responsible for and can demonstrate compliance with the Principles.

IV. Data processing activities

1. Contact form

A dunavirag.hu/dunavirag-centrum-contact/ we process the following data on the contact form available on our website:

  • Full name
  • E-mail address
  • Message text
Legal basisThe data subject's consent (Article 6(1)(a) GDPR), which he or she gives by submitting the form.
TargetReplying to the enquiry, contacting.
Retention period2 years from the date of contact, after which the data will be deleted.
Receiver of datapartnerkapcsolat@dunavirag.hu

2. Careers - job application form

A dunavirag.hu/careers/ The following data will be processed on the application form available on our website:

  • Full name
  • E-mail address
  • Message / cover letter
  • CV (uploaded file)
Legal basisThe data subject's consent (Article 6(1)(a) GDPR), which he or she gives by submitting the form.
TargetConducting the recruitment process, assessing the candidate.
Retention periodAfter 6 months from the end of the recruitment process, the data will be deleted.
Receiver of datapartnerkapcsolat@dunavirag.hu

You may withdraw your consent at any time by contacting partnerkapcsolat@dunavirag.hu by sending a request for cancellation to the following e-mail address. The withdrawal does not affect the lawfulness of the processing carried out before the withdrawal.

3. Registration page contact form

The following data will be processed in the contact form available on the registration page:

  • Full name
  • E-mail address
  • Message text
Legal basisConsent of the data subject (Article 6(1)(a) GDPR).
TargetAnswering questions about registration, contacting.
Retention period2 years from the date of contact.

The actual customer registration is www.vasarterdunavirag.hu online Fairgrounds, which is subject to the specific privacy notice published there.

4. Cookies and web analytics

4.1 Necessary (technical) cookies

Cookies are essential for the basic functioning of the website. They can be used without consent because they are essential for the functioning of the website. They are deleted when the browser is closed.

4.2 Google Analytics

It is used to measure website traffic and analyse visitor habits. It works with IP anonymisation.

Legal basisConsent of the data subject (Article 6(1)(a) GDPR).
Data processorGoogle LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Data transfers to the USA are lawful under the EU-US Data Privacy Framework.
Retention period14 months (Google Analytics default setting).

4.3 Google Search Console

It is used to track the website's performance in search engines. It processes personal data in aggregate form and is not individually identifiable.

4.4 Google Maps

The Google Maps map embedded on the Contact Us page is required to view the location. When the map is loaded, Google may collect data about the visitor.

Legal basisConsent of the data subject (Article 6(1)(a) GDPR).
Data processorGoogle LLC, USA. Data transfers are lawful under the EU-US Privacy Shield Framework.

Google Maps will only load after the visitor has given his/her consent to the cookie.

4.5 Cookie management

The website CookieYes uses a cookie management system. The banner that appears on the first visit allows the visitor to decide whether or not to accept the use of unnecessary cookies. This decision can be changed at any time via the cookie setting interface on the website.

5. Links to community sites

The website contains links to the following social platforms:

The links are links only - there is no embedded social content on the website. Clicking on the links will take the visitor to the relevant platform's page, where the platform's own privacy policy will apply. The Company does not collect data about these interactions.

V. Data processors

Data processor Headquarters / contact details Activity
RACKFOREST Informatikai Kft. 1132 Budapest, Victor Hugo u. 18-22. Hosting service
Google LLC 1600 Amphitheatre Pkwy, Mountain View, CA, USA Analytics, Search Console, Maps
CookieYes (Lytics Ltd.) 3 Warren Yard, Wolverton Mill, Milton Keynes, MK12 5NW, UK Baking system

For Google LLC, the legal basis for data transfers to third countries (the USA) is the EU-US Data Privacy Framework. For CookieYes, the legal basis for data transfers is the UK adequacy decision.

VI. Rights of the data subject

In accordance with Chapter VII of the GDPR, the data subject may exercise the following rights:

Right to information

You have the right to be informed about the processing of your data - this is set out in this document.

Right of access

You can ask for feedback on whether your data is being processed and request a copy of the data processed.

Right to rectification

You can request the correction of inaccurate or incomplete data.

Right to erasure

You may request the erasure of your data if the purpose of the processing has ceased or you have withdrawn your consent.

Right to restriction

You may request the restriction of processing in specific cases.

Right to object

You may object to processing based on legitimate interest.

Withdrawal of consent

You can withdraw your consent at any time - this does not affect the lawfulness of the processing before the withdrawal.

Right to data portability

In the case of automated processing based on consent, you may receive your data in machine-readable format.

You can exercise your rights by contacting:

E-mail: partnerkapcsolat@dunavirag.hu

The Company shall respond to the request without undue delay, but no later than. within 25 days responding.

VII. Remedies

If the data subject considers that his or her data processing infringes the GDPR, he or she may lodge a complaint with the supervisory authority:

National Authority for Data Protection and Freedom of Information (NAIH)

Address: 1125 Budapest, Szilágyi Erzsébet fasor 22/c.

Phone: +36 (1) 391-1400

E-mail: ugyfelszolgalat@naih.hu

Web: www.naih.hu

The data subject may also seek judicial remedies against the controller in the courts. Pest County Court, or in the courts for the place of habitual residence of the person concerned.

VIII. Data Protection Incident

In the event of a data breach, the Company shall, without undue delay, and at the latest within within 72 hours report the incident to the NAIH if it is likely to pose a risk to the rights and freedoms of natural persons. In case of high risk, it will also notify the data subjects. It keeps a record of the incidents.

IX. Data security

The Company uses the following technical and organisational measures to protect the personal data it processes:

  • SSL/TLS encryption for website traffic
  • Password access protection for IT systems
  • Use of real-time antivirus software
  • Regular backup with separate storage
  • Only authorised employees have access to personal data
  • Records and procedures for handling data protection incidents

X. Other provisions

Amendments to the prospectus

The Company is entitled to amend this information unilaterally. The amendment shall enter into force at the same time as it is published on the website. The Company shall make the current prospectus available on its website at all times.

Data on minors

The website is not directed to minors and the Company does not knowingly collect information from persons under the age of 16. If it becomes aware of such processing, it will delete the data of the data subject without delay.

Governing law

This notice is governed by Regulation (EU) 2016/679 (GDPR), Act CXII of 2011 and other applicable Hungarian legislation.

en_US