Data Processing Notice
for visitors to the dunavirag.hu and dunavirag.com websites
Based on Regulation (EU) 2016/679 (GDPR) and Act CXII of 2011
Effective: 25 May 2026
I. Data controller's data
The Company is not obliged to appoint a Data Protection Officer. For data protection issues, please contact partnerkapcsolat@dunavirag.hu you can find them at.
II. Purpose and scope of the prospectus
The purpose of this information is to inform FLORICULTOR Kft. (hereinafter: the Company) as the data controller of the www.dunavirag.hu and www.dunavirag.com website visitors about the processing of their personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Act CXII of 2011.
The website is for information and contact purposes only - it is not for shopping. The Company's online wholesale activities are conducted solely for the www.vasarterdunavirag.hu online Fairgrounds, which is subject to a separate privacy notice.
The notice will be reviewed at least every three years from the start of the processing. The revision will enter into force upon publication on the website.
III. Principles of data management
The Company processes personal data in accordance with the following principles (Article 5 GDPR):
- Legality, fairness and transparency: we process data only on a lawful legal basis and in a transparent manner for the data subject.
- Goal orientation: we collect data only for specified, explicit and legitimate purposes.
- Data economy: we only process the data necessary to achieve the purpose.
- Accuracy: we keep your personal data accurate and up to date.
- Limited shelf life: the data is stored only for the time necessary.
- Integrity and confidentiality: we take appropriate technical and organisational measures to ensure data security.
- Accountability: the Company is responsible for and can demonstrate compliance with the Principles.
IV. Data processing activities
1. Contact form
A dunavirag.hu/dunavirag-centrum-contact/ we process the following data on the contact form available on our website:
- Full name
- E-mail address
- Message text
2. Careers - job application form
A dunavirag.hu/careers/ The following data will be processed on the application form available on our website:
- Full name
- E-mail address
- Message / cover letter
- CV (uploaded file)
You may withdraw your consent at any time by contacting partnerkapcsolat@dunavirag.hu by sending a request for cancellation to the following e-mail address. The withdrawal does not affect the lawfulness of the processing carried out before the withdrawal.
3. Registration page contact form
The following data will be processed in the contact form available on the registration page:
- Full name
- E-mail address
- Message text
The actual customer registration is www.vasarterdunavirag.hu online Fairgrounds, which is subject to the specific privacy notice published there.
4. Cookies and web analytics
4.1 Necessary (technical) cookies
Cookies are essential for the basic functioning of the website. They can be used without consent because they are essential for the functioning of the website. They are deleted when the browser is closed.
4.2 Google Analytics
It is used to measure website traffic and analyse visitor habits. It works with IP anonymisation.
4.3 Google Search Console
It is used to track the website's performance in search engines. It processes personal data in aggregate form and is not individually identifiable.
4.4 Google Maps
The Google Maps map embedded on the Contact Us page is required to view the location. When the map is loaded, Google may collect data about the visitor.
Google Maps will only load after the visitor has given his/her consent to the cookie.
4.5 Cookie management
The website CookieYes uses a cookie management system. The banner that appears on the first visit allows the visitor to decide whether or not to accept the use of unnecessary cookies. This decision can be changed at any time via the cookie setting interface on the website.
5. Links to community sites
The website contains links to the following social platforms:
- Facebook: facebook.com/dunavirag.centrum
- Instagram: instagram.com/dunavirag_centrum
- YouTube: youtube.com/@dunaviragcentrum1015
The links are links only - there is no embedded social content on the website. Clicking on the links will take the visitor to the relevant platform's page, where the platform's own privacy policy will apply. The Company does not collect data about these interactions.
V. Data processors
| Data processor | Headquarters / contact details | Activity |
|---|---|---|
| RACKFOREST Informatikai Kft. | 1132 Budapest, Victor Hugo u. 18-22. | Hosting service |
| Google LLC | 1600 Amphitheatre Pkwy, Mountain View, CA, USA | Analytics, Search Console, Maps |
| CookieYes (Lytics Ltd.) | 3 Warren Yard, Wolverton Mill, Milton Keynes, MK12 5NW, UK | Baking system |
For Google LLC, the legal basis for data transfers to third countries (the USA) is the EU-US Data Privacy Framework. For CookieYes, the legal basis for data transfers is the UK adequacy decision.
VI. Rights of the data subject
In accordance with Chapter VII of the GDPR, the data subject may exercise the following rights:
Right to information
You have the right to be informed about the processing of your data - this is set out in this document.
Right of access
You can ask for feedback on whether your data is being processed and request a copy of the data processed.
Right to rectification
You can request the correction of inaccurate or incomplete data.
Right to erasure
You may request the erasure of your data if the purpose of the processing has ceased or you have withdrawn your consent.
Right to restriction
You may request the restriction of processing in specific cases.
Right to object
You may object to processing based on legitimate interest.
Withdrawal of consent
You can withdraw your consent at any time - this does not affect the lawfulness of the processing before the withdrawal.
Right to data portability
In the case of automated processing based on consent, you may receive your data in machine-readable format.
You can exercise your rights by contacting:
E-mail: partnerkapcsolat@dunavirag.hu
The Company shall respond to the request without undue delay, but no later than. within 25 days responding.
VII. Remedies
If the data subject considers that his or her data processing infringes the GDPR, he or she may lodge a complaint with the supervisory authority:
National Authority for Data Protection and Freedom of Information (NAIH)
Address: 1125 Budapest, Szilágyi Erzsébet fasor 22/c.
Phone: +36 (1) 391-1400
E-mail: ugyfelszolgalat@naih.hu
Web: www.naih.hu
The data subject may also seek judicial remedies against the controller in the courts. Pest County Court, or in the courts for the place of habitual residence of the person concerned.
VIII. Data Protection Incident
In the event of a data breach, the Company shall, without undue delay, and at the latest within within 72 hours report the incident to the NAIH if it is likely to pose a risk to the rights and freedoms of natural persons. In case of high risk, it will also notify the data subjects. It keeps a record of the incidents.
IX. Data security
The Company uses the following technical and organisational measures to protect the personal data it processes:
- SSL/TLS encryption for website traffic
- Password access protection for IT systems
- Use of real-time antivirus software
- Regular backup with separate storage
- Only authorised employees have access to personal data
- Records and procedures for handling data protection incidents
X. Other provisions
Amendments to the prospectus
The Company is entitled to amend this information unilaterally. The amendment shall enter into force at the same time as it is published on the website. The Company shall make the current prospectus available on its website at all times.
Data on minors
The website is not directed to minors and the Company does not knowingly collect information from persons under the age of 16. If it becomes aware of such processing, it will delete the data of the data subject without delay.
Governing law
This notice is governed by Regulation (EU) 2016/679 (GDPR), Act CXII of 2011 and other applicable Hungarian legislation.