top of page

PRIVACY POLICY

 

newsletter for those interested in the services of InfuBar Aesthetic Services Limited Liability Company , patients, visitors to the infubar.com website, subscribers to InfuBar Aesthetic Services Limited Liability Company .

 

1. INTRODUCTION

 

Name and contact details of the service provider and data controller

 

Infubar Aesthetic Clinics are operated by InfuBar Aesthetic Service Limited Liability Company. 

 

NAME:  InfuBar Aesthetic Service Limited Liability Company  

HEADQUARTERS:  1065 Budapest, Bajcsy-Zsilinszky utca 5. 1st floor 3

COMPANY REGISTRATION NUMBER:  01-09-357319 

TAX NUMBER:  27923791-1-41

MAILING ADDRESS:

1065 Budapest, Bajcsy-Zsilinszky utca 5. 1st floor 3

EMAIL: info@infubar.com

​

Az  InfuBar Aesthetic Services Limited Liability Company. (hereinafter: Infubar Kft., service provider or data controller) as a data controller, acknowledges the content of this legal notice as binding. 

It undertakes to ensure that all data management related to its activities meets the requirements set out in these regulations and the applicable legislation.

Infubar Kft. reserves the right to change this information at any time. Of course, you will notify your audience of any changes in time.

 

Concepts

​

"data management": any operation or set of operations performed on personal data or data files in an automated or non-automated manner, such as collection, recording, organization, segmentation, storage, transformation or change, query, insight, use, communication, transmission, distribution or otherwise by making available, coordinating or connecting, limiting, deleting or destroying;

"data processor": the natural or legal person, public authority, agency or any other body that processes personal data on behalf of the data controller;

"third party": the natural or legal person, public authority, agency or any other body that is not the same as the data subject, the data controller, the data processor or the persons who, under the direct control of the data controller or data processor, are authorized to process personal data they got;

"personal data": any information relating to an identified or identifiable natural person ("data subject"); a natural person can be identified directly or indirectly, in particular on the basis of an identifier such as name, number, location data, online identifier or one or more factors relating to the physical, physiological, genetic, mental, economic, cultural or social identity of the natural person can be identified

"IP address": the IP address is a series of numbers with which the computers and mobile devices of users accessing the Internet can be clearly identified. IP addresses can even be used to locate the visitor using a given computer geographically. The address of the pages visited, as well as the date and time data, are not in themselves suitable for identifying the data subject, however, when combined with other data (e.g. provided during registration), they are suitable for drawing conclusions about the user.

​

Basic principles of data management

​

Infubar Kft. is committed to protecting the personal data of its users and partners, and considers it of utmost importance to respect its customers' right to self-determination of information.

As a data controller, Infubar Kft. is responsible for complying with the following:

  • handles personal data lawfully and fairly and transparently for the data subject ("lawfulness, fair procedure and transparency");

  • collect personal data only for specific, clear and legitimate purposes and do not process them in a manner incompatible with these purposes ("purpose limitation");

  • the processed personal data must be appropriate and relevant for the purposes of data management and limited to what is necessary ("data economy");

  • ensures that personal data is accurate and, if necessary, up-to-date and takes all reasonable measures to promptly delete or correct personal data that is inaccurate for the purposes of data management ("accuracy");

  • stores personal data in a form that enables the identification of data subjects only for the time necessary to achieve the purposes of personal data management ("limited storage");

  • handles personal data in such a way that adequate security of personal data is ensured through the application of appropriate technical or organizational measures, including protection against unauthorized or unlawful processing, accidental loss, destruction or damage of data ("integrity and confidentiality").

​

This data management information sheet on the protection of personal data of natural persons and the free flow of data was prepared based on Regulation (EU) 2016/679 of the European Parliament and of the Council, taking into account CXII of 2011. on the content of the law on the right to self-determination of information and freedom of information.

Its basic data management principles are in line with the applicable legislation on data protection, and in particular with the following:

  • Regulation (EU) 2016/679 of the European Parliament and of the Council (April 27, 2016) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (general data protection regulation)

  • CXII of 2011 Act - on the right to self-determination of information and freedom of information (Infotv.);

  • CXIX of 1995 Act - on the management of name and address data for the purpose of research and direct business acquisition (Katv.);

  • Act C of 2000 - on accounting;

  • CVIII of 2001 Act - on certain issues of electronic commercial services, as well as services related to the information society (Eker. tv.);

  • Act C of 2003 - on electronic communications (Eht.);

  • XLVIII of 2008 Act - on the basic conditions and certain limitations of economic advertising activity (Grt.);

  • Act V of 2013 - on the Civil Code (Ptk.).

  • XLVII of 1997 on the management and protection of health and related personal data. Law, and the

  • 62/1997 on certain issues of the management of health and related personal data. (XII. 21.) Formed by NM decree.

​

2. SCOPE OF PERSONAL DATA, PURPOSE, TITLE AND DURATION OF DATA PROCESSING

The data management of the activities of Infubar Kft. is based on voluntary consent. 

In some cases, however, the management, storage, and transmission of a range of the provided data is made mandatory by law, of which we will notify our audience separately. (see health information).

​

INFUBAR KFT. DATA MANAGEMENT

​

1. INFUBAR KFT. PATIENTS AND PATIENTS INTERESTED IN AESTHETIC SERVICES

Purpose of data management: health data management

In order to use the services of Infubar Kft., it is necessary to provide basic personal data. Infubar Kft. treats data and facts related to the Person and health of the Data Subject that it has become aware of during the provision of the Service as confidential and only transfers them to those authorized to do so.

 

Legal basis for data management:

During the performance of Infubar Kft., the personal data it acquired is subject to the CXII of 2011 on the protection of personal data and the disclosure of data of public interest. tv., as well as XLVII of 1997 on the management and protection of health and related personal data. In accordance with the governing provisions of the Act and other relevant legislation, it is handled solely for the purpose of providing the services.

Scope of processed data: personal data, as well as data necessary for the given examination/treatment, medical decision-making

Duration of data management: based on legal requirements - for at least 30 years from the date of data collection, the final report must be kept for at least 50 years.

​

2. DATA OF WWW.INFUBAR.COM WEBSITE VISITORS

 

Purpose of data management: during visits to the website, the data manager records visitor data in order to perform the service, check its operation, and prevent abuse.

The legal basis for data management: the consent of the data subject and Eker. TV. 13/A. (3) of §

Scope of managed data: date, time, IP address, previously visited page address, data related to the user's operating system and browser.

Duration of data management: 90 days from the date of viewing the website.

​

Data transmission :

The html code of the portal contains links to and from external servers independent of Infubar Kft. The servers of external service providers are directly connected to the user's computer. We draw our visitors' attention to the fact that the providers of these links, due to the direct connection to their server and direct communication with the user's browser, collect user data (e.g. IP address, browser, operating system data, mouse pointer movement, clicks, address of the page visited and the time and duration of the visit ) are able to collect.

Some parts of the portal use the reCAPTCHA service of our partner, Google, in the so-called in order to filter out robots. Google can provide information on data management involving user verification:  https://www.google.com/intl/hu/policies/

The data will be forwarded to the website operator for data processing:  Wix.com Ltd.  Wix.com Inc. Address: 500 Terry A Francois Blvd. San Francisco, CA 94158 E- Email: support@wix.com

 

3. COOKIE MANAGEMENT OF WWW.INFUBAR.COM WEBSITE

In order to provide customized service, the service provider stores a small data package on the user's computer, the so-called it places a cookie and reads it back during the next visit. If the browser returns a previously saved cookie, the cookie management service provider has the opportunity to link the user's current visit with previous ones, but only with regard to its own content.

More information about cookies is available at the following address: http://www.adatvedelmiszakerto.hu/cookie

The user can delete cookies from his computer or disable the use of cookies in his browser. It is usually possible to manage cookies in the Tools/Settings menu of browsers under the Data Protection settings, under the name cookie or cookie.

​

4. INFUBAR LTD. REGISTRATION 

On the Infubar Kft. website www.infubar.com it is possible to register and book an appointment online. 

Booking an appointment is only possible as a registered user.  During the registration process, it is also possible to consent to inquiries for direct marketing purposes, i.e. to subscribe to Infubar Kft.'s e-mail newsletter. In the case of providing the consent statement, the information 2.4. we also process your data according to point

 

Duration of data management:

Data management takes place until legal requirements or withdrawal of consent. Registration data and data for direct marketing purposes are processed until cancellation is requested

Deleting and modifying data:

In view of the accounting retention obligation, the user has a limited right to delete and modify his personal data. The user has the right to delete and modify his personal data at any time by entering his profile in the My account menu; or at the contact details of the data controller indicated in Chapter 4 of this information.

The data controller and its employees are entitled to access the data.

Data storage method: electronic.

​

5. SENDING AN ELECTRONIC NEWSLETTER

Infubar Kft. sends general information and direct marketing (direct business acquisition) messages in an electronic newsletter to those who have expressly consented to this.
A statement of consent can be given to Infubar Kft. in several ways, during registration processes, or in person when logging in, or using one of the forms on the www.infubar.com website.

The purpose of data management is to send e-mail newsletters containing professional reviews and advertising to interested parties, information on current information and offers.

We would like to inform you that if you wish to receive a newsletter from us, you must provide the necessary data. If the data is not provided, we cannot send you a newsletter. You can unsubscribe from the newsletter at any time without any consequences.

Legal basis for data management: the voluntary consent of the person concerned.

The range of processed data: e-mail address, name, date and time of registration, IP address, postal code, city, name, gender, age, this is the date and time of certain interactions (openings, clicks, feedback, replies, unsubscribing). You can withdraw your consent to data management at any time by sending a letter to the contact e-mail address, by phone, or by post. Consent can also be withdrawn based on the link appearing in the sent newsletters.

Data deletion deadline:

until withdrawal (withdrawal of the consent given to sending the newsletter does not affect the legality of data management prior to withdrawal) The data controller and its employees are entitled to access the data.

​

6. OTHER DATA MANAGEMENT

We provide information on data management not listed in this information when the data is collected.
We inform our customers that the court, the prosecutor, the investigative authority, the administrative authority, the National Data Protection and Freedom of Information Authority, or other bodies based on the authorization of the law, may contact the data controller in order to provide information, communicate or transfer data, or make documents available . Infubar Kft. will only release personal data to the authorities - if the authority has specified the exact purpose and the scope of the data - to the extent and to the extent that is absolutely necessary to fulfill the purpose of the request.

​

3. PRIVACY RIGHTS AND REMEDIES

 

Your rights

Based on Articles 15-20 of the GDPR, you are entitled to have your personal data managed by Infubar Kft.

  • access personal data;

  • request correction of personal data;

  • request the deletion of personal data;

  • request the restriction of the processing of personal data;

  • object to the processing of your personal data;

  • receive the personal data and forward them to another data controller, if the legal prerequisites for this exist (right to data portability);

  • if personal data is processed based on your consent, you may withdraw your consent at any time.

You can send your request for the exercise of the above rights to the contact details indicated in point 4.

Right of access

You are entitled to receive feedback from the Data Controller as to whether your personal data is being processed, and if such data is being processed, you are entitled to receive access to the personal data and to receive information about the circumstances related to their processing.

Rectification

You have the right to request that the Data Controller correct inaccurate personal data without undue delay and to request the completion of incomplete personal data.

The right to erasure ("the right to be forgotten")

You are entitled to request that the Data Controller delete your personal data without undue delay if one of the following reasons exists:

  • the personal data is no longer needed;

  • if the consent forming the basis of the data management is withdrawn and there is no other legal basis for the data management;

  • if the personal data was handled illegally by Infubar Kft. ;

  • if personal data must be deleted by law.

The Data Controller will not delete the data if the data management is necessary for one of the following reasons: (i) for the purpose of exercising the right to freedom of expression and information; (ii) for the purpose of fulfilling a legal obligation requiring the processing of personal data; (iii) or necessary for the presentation, enforcement or defense of legal claims.

The right to restrict data processing

You are entitled to request that Infubar Kft. limit data processing if one of the following conditions is met:

  • You dispute the accuracy of the personal data, in which case the limitation applies to the period that allows dm to verify the accuracy of the personal data

  • the data processing is unlawful and you object to the deletion of the data and instead request the restriction of its use;

  • You have objected to data processing; in this case, the restriction applies to the period until it is established whether the legitimate reasons of the data controller take precedence over the legitimate reasons of the data subject.

​

The right to protest

You have the right to object at any time to the processing of your personal data based on the legitimate interests of Infubar Kft. In this case, Infubar Kft. may no longer process the personal data, unless the data controller proves that the data processing is justified by compelling legitimate reasons that take precedence over your interests, rights and freedoms, or that are necessary for the submission or enforcement of legal claims or related to its protection.

 

The right to data portability

If the rights and freedoms of others are not violated, you are entitled to receive your personal data in a segmented, widely used, machine-readable format. Infubar Kft. is also entitled to transfer these data directly to another data controller if

the data processing is necessary with your consent, or to fulfill a contract to which you are a party, or it is necessary to take steps at your request prior to the conclusion of the contract; and

data management is automated, i.e. personal data is handled in an IT system and not on a paper basis.

​

Legal remedy

Legal remedies and complaints can be made at the National Data Protection and Freedom of Information Authority:

Name: National Data Protection and Freedom of Information Authority
Headquarters: 1125 Budapest, Szilágyi Erzsébet fasor 22/C.
Mailing address: 1530 Budapest, Pf.: 5.
Telephone: 06.1.391.1400
Fax: 06.1.391.1410
Website:  http://www.naih.hu
E-mail:  ugyfelszolgalat@naih.hu

bottom of page