Privacy Policy

NOÉMI BENEDEK
SOLE PROPRIETOR

EFFECTIVE FROM:
01.03.2026 UNTIL WITHDRAWAL


1. Details of the Data Controller

Name of the entrepreneur:
Noémi Benedek – Sole Proprietor

Registered seat:
2014 Csobánka, Templom köz 5.

Tax number:
90126684-1-33

Registration number:
59275592

Registering authority:
National Tax and Customs Administration

Phone number:
+36 30 713 2288

Email address:
info@ladyconnect.hu


2. Purpose of the Data Processing Notice

The Data Controller acknowledges the content of this legal notice as binding upon herself.

The purpose of this Data Processing Notice is to inform clients, customers, purchasers and partners about the processing of their personal data.

The Data Controller processes personal data exclusively in compliance with the applicable legislation and in strict adherence to data protection and data management regulations, taking into account the following principles:

  • lawfulness

  • fairness and transparency

  • purpose limitation

  • data minimization

  • accuracy

  • storage limitation.

The Data Controller takes all necessary technical and organizational measures to ensure that the personal data of her partners are processed securely in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).

In accordance with the above, the Data Controller has organized her daily operations and developed her policies, records, document templates and information materials.

Data protection principles related to the Data Controller’s processing activities are continuously available at the Data Controller’s registered office and on her websites.

The Data Controller reserves the right to modify this notice at any time. Naturally, any changes will be communicated to the public in due time.

The Data Controller is committed to protecting the personal data of her clients and partners and considers it particularly important to respect the informational self-determination rights of her clients and customers.

Personal data are treated confidentially, and the Data Controller takes all necessary security, technical and organizational measures to guarantee the security of the data.

Below the Data Controller describes her data processing practices.


3. Personal, Material and Temporal Scope of the Notice

The personal scope of this Data Processing Notice extends to the Data Controller and to all natural persons whose personal data are included in the data processing activities covered by this Notice, as well as to persons whose rights or legitimate interests are affected by such processing.

The material scope of this Notice covers all data processing activities arising in the course of the Data Controller’s operations.

This Notice enters into force on the date of approval and remains valid for an indefinite period until further provisions are made.


4. Important Definitions

Personal data:
Any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified directly or indirectly, in particular by reference to an identifier such as:

  • name

  • identification number

  • location data

  • online identifier

  • or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Special category data:
Any personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as genetic data, biometric data used for the purpose of uniquely identifying a natural person, health data, and data concerning a natural person’s sex life or sexual orientation.

Data processing:
Any operation or set of operations performed on personal data or on sets of personal data, whether or not by automated means, such as:

  • collection

  • recording

  • organization

  • structuring

  • storage

  • adaptation or alteration

  • retrieval

  • consultation

  • use

  • disclosure by transmission

  • dissemination or otherwise making available

  • alignment or combination

  • restriction

  • erasure or destruction.

Data Controller:
A natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of processing personal data.

Data Processor:
A natural or legal person, public authority, agency or other body which processes personal data on behalf of the Data Controller.

Joint Controllers:
Where two or more controllers jointly determine the purposes and means of processing, they shall be regarded as joint controllers.

Third party:
A natural or legal person, public authority, agency or body other than the data subject, the controller, the processor, or persons authorized to process personal data under the direct authority of the controller or processor.

Consent of the data subject:
Any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she signifies agreement to the processing of personal data relating to him or her.

Data protection incident (data breach):
A breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to personal data transmitted, stored or otherwise processed.

5. Lawful Data Processing by the Data Controller

The Data Controller processes personal data exclusively in the following cases:

  1. The data subject has given consent to the processing of his or her personal data for one or more specific purposes.

  2. Processing is necessary for the performance of a contract to which the data subject is a party.

  3. Processing is necessary for compliance with a legal obligation to which the Data Controller is subject.

  4. Processing is necessary to protect the vital interests of the data subject or another natural person.

  5. Processing is necessary for the purposes of the legitimate interests pursued by the Data Controller or by a third party.

The Data Controller reviews the lawfulness of data processing at every stage of her activities and processes only data for which the purpose and legal basis can be justified.

If the legal basis ceases to exist, data processing may continue only if the Data Controller can demonstrate another appropriate legal basis.

As a general rule, the justification of the legal basis must be documented in writing. Even in cases where the legal basis arises through implicit conduct, it must be examined whether it can be clearly verified afterwards.

In case of doubt, and considering the principles of reasonableness and economic efficiency, efforts should be made to confirm such implied legal basis in writing.

When data processing is based on consent, the data subject provides written consent to the processing of their personal data.

Although consent is not formally bound to a specific format, written consent in paper or electronic form is required to ensure subsequent verifiability.

Processing based on legal obligation is independent of the data subject’s consent, as the obligation to process data is determined by law.

Regardless of whether the processing is mandatory, the data subject must be informed before the processing begins that the processing is mandatory and unavoidable.

Furthermore, prior to the start of data processing, the data subject must be provided with clear and detailed information about all relevant aspects of the processing of their personal data.

According to the General Data Protection Regulation (GDPR), personal data may also be processed if such processing is necessary for the performance of a contract to which the data subject is a party, or if it is necessary to take steps at the request of the data subject prior to entering into a contract.

On this legal basis, the Data Controller may process personal data for the purpose of concluding, performing and terminating a contract.


6. Processing of Personal Data by the Data Controller

The Data Controller provides professional translation, interpreting and coaching services to her clients.

In addition, she is engaged in:

  • selling a book translated by her

  • holding lectures and workshops

  • performing virtual assistant services.

During these activities, the Data Controller comes into contact with the personal data of natural persons.

The Data Controller carries out the following data processing activities:


A. Coaching and Pastoral Counseling Services

Clients may apply for coaching and pastoral counseling services:

  • in person

  • by telephone

  • by e-mail

  • through social media platforms.

After clarifying the conditions, an appointment is scheduled.

During registration, the Data Controller requests the following personal data from the client:

  • name

  • telephone number

  • e-mail address.

The Data Controller processes this personal data in order to:

  • assign the appropriate appointment to the client

  • ensure contact in case of appointment modification.

The legal basis for processing personal data obtained in this manner is the establishment of a contract (Article 6(1)(b) GDPR).

If the client does not use the service at the agreed appointment time, the Data Controller deletes the personal data without delay, but no later than 30 days after the scheduled service date.

During the performance of the service, personal data are processed on the legal basis of performance of contractual obligations (Article 6(1)(b) GDPR).

The purpose of processing personal data is:

  • maintaining contact

  • fulfilling contractual obligations.

The Data Controller issues an invoice for the service fee.

The invoice contains:

  • the client’s name

  • address

  • possibly tax number.

Issuing the invoice is a legal obligation of the Data Controller.

The legal basis for processing personal data appearing on the invoice is compliance with a legal obligation (Article 6(1)(c) GDPR).

Personal data appearing on invoices are retained for 5 years, in accordance with applicable legal requirements.


B. Processing of Special Categories of Personal Data

During the provision of services, the Data Controller may occasionally become aware of information relating to the data subject’s:

  • health condition

  • sexual life or sexual orientation

  • pathological addictions.

Such information qualifies as special categories of personal data.

Due to their nature, such particularly sensitive personal data require specific protection, as the circumstances of their processing may pose significant risks to fundamental rights and freedoms.

The Data Controller processes such special categories of personal data exclusively for the purpose of providing professional services.

These special categories of personal data are destroyed no later than 30 days after the completion of the service.

The Data Controller is entitled to process such data under Article 9(2)(a) of the GDPR, as the data subject provides explicit written consent based on appropriate information before the service begins.

The legal basis for processing special categories of personal data is also the performance of contractual obligations (Article 6(1)(b) GDPR), as the processing is necessary to ensure the proper professional standard of the services provided.


C. Other Contractual Services (Translation, Interpreting, Virtual Assistant Services)

In connection with the Data Controller’s additional activities such as:

  • translation

  • interpreting

  • virtual assistant services

  • lectures or presentations,

contractual partners may be both natural persons and legal entities.

The establishment of the contractual relationship is preceded by a request for quotation, which may be made:

  • in person

  • by telephone

  • by e-mail

  • through social media platforms.

The person requesting the quotation provides the following personal data:

  • name

  • telephone number

  • e-mail address.

The Data Controller sends the quotation to the provided contact details.

If the quotation is rejected, the personal data of the interested party will be deleted without delay, but no later than 30 days after the rejection.

If the person requesting the quotation does not respond, the personal data will be deleted within 60 days from the date the quotation was sent.

The legal basis for processing personal data is the establishment of a contract (Article 6(1)(b) GDPR).

If the offer is accepted and the service is ordered, a contractual relationship is established between the parties.

Afterwards, the Data Controller may obtain additional personal data of natural persons (partners or contact persons).

The legal basis for processing such data is:

  • performance of contractual obligations (Article 6(1)(b) GDPR), or

  • consent of the contact person in the case of legal entities (Article 6(1)(a) GDPR).

The Data Controller issues an invoice for the services provided.

The invoice contains:

  • name

  • address

  • possibly tax number.

The legal basis for processing personal data on invoices is compliance with legal obligations (Article 6(1)(c) GDPR).

The Data Controller retains these data for 5 years in accordance with legal requirements.

6. Processing of Personal Data by the Data Controller (continued)

D. Virtual Assistant Services

During the provision of virtual assistant services, the Data Controller may become aware of personal data belonging to the clients’ customers or employees.

In this respect, the Data Controller qualifies as a data processor, since the processing of personal data is carried out according to the purposes determined by the client (who acts as the data controller).

The Data Controller declares that during her operations she fully complies with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).

Furthermore, the Data Controller does not process the personal data of the client’s partners, employees or customers for purposes other than those documented in the contractual agreement with the client, unless such processing is required by applicable law.

The Data Controller takes reasonable steps to ensure the reliability of any persons who may have access to the personal data of the client and ensures that access is granted only to those persons who need to know such data strictly for the purposes defined in the contractual agreement.

The Data Controller enters into appropriate confidentiality agreements with all such persons.

The Data Controller is obliged to preserve any business secrets and any essential information concerning the client, its employees, customers and operations that become known during the performance of her activities.

Any data, procedures, methods, documents or other information relating to the client, its employees or customers may only be used for the performance of the contractual duties.

Such information shall not be disclosed to unauthorized persons or organizations, nor provided to third parties, nor misused in any other way.

Documents, analyses or other information provided by the client are treated confidentially and are not made accessible to third parties.

If the contractual relationship with the client is terminated, the Data Controller returns all documents to the client.

The legal basis for processing personal data for this purpose is the performance of contractual obligations (Article 6(1)(b) GDPR).


E. Book Sales

The Data Controller is also engaged in book sales.

Purchases may be made by filling out the order form available on the website:

www.oazisapusztaban.hu

Customers may be both natural persons and legal entities.

During the purchase process, the customer provides the following personal data:

  • name

  • address

  • e-mail address

  • telephone number.

The purpose of processing personal data is:

  • fulfillment of the order

  • maintaining contact with the customer.

The legal basis for processing personal data is the performance of contractual obligations (Article 6(1)(b) GDPR).

In the case of legal entities, the personal data of the contact person are processed based on the consent of the data subject (Article 6(1)(a) GDPR).

The Data Controller issues an invoice for the purchased books.

The invoice contains:

  • the customer’s name

  • address

  • possibly tax number.

Issuing invoices is a legal obligation of the Data Controller.

The legal basis for processing personal data appearing on invoices is compliance with a legal obligation (Article 6(1)(c) GDPR).

Personal data appearing on invoices are retained for 5 years, in accordance with applicable legal requirements.


F. Workshops, Lectures and Other Programs

The Data Controller organizes and holds:

  • workshops

  • lectures

  • other events and programs.

Registration for these programs may be made via:

  • e-mail

  • telephone

  • social media platforms.

The Data Controller requests the following personal data:

  • name

  • address

  • e-mail address

  • telephone number.

The purpose of data processing is:

  • registering participants for the program

  • maintaining contact with participants

  • organizing the event.

The legal basis for processing personal data is the establishment of a contractual relationship and the performance of contractual obligations (Article 6(1)(b) GDPR).

The Data Controller issues an invoice for the participation fee.

The invoice contains:

  • name

  • address

  • possibly tax number.

The legal basis for processing personal data appearing on invoices is compliance with legal obligations (Article 6(1)(c) GDPR).

These personal data are stored for 5 years in accordance with legal requirements.


G. Contracts with Subcontractors, Suppliers and Service Providers

During her activities, the Data Controller also maintains contractual relationships with:

  • subcontractors

  • suppliers

  • service providers.

These relationships also provide a basis for the processing of personal data.

In such cases the legal basis for processing personal data is:

  • performance of contractual obligations (Article 6(1)(b) GDPR) in the case of natural persons or sole proprietors

  • consent of the contact person in the case of legal entities (Article 6(1)(a) GDPR).


H. Processing of Email Addresses and Telephone Numbers

During her activities, the Data Controller processes the email addresses and telephone numbers of:

  • clients

  • customers

  • partners

  • other data subjects.

These personal data are processed primarily for the purpose of fulfilling contractual obligations (Article 6(1)(b) GDPR) or based on the individual consent of the data subject (Article 6(1)(a) GDPR).


I. Photo and Video Recordings

The Data Controller may occasionally create photographs or video recordings of:

  • clients

  • customers

  • participants

  • other data subjects.

If an identifiable natural person appears in the recording, the creation and use of the recording — on the Data Controller’s websites, social media platforms or other publications — takes place only with the prior written consent of the data subject based on appropriate information.

The legal basis for such processing is the consent of the data subject (Article 6(1)(a) GDPR).

If the data subject withdraws their consent and requests the termination of the use of the recording or its deletion, the Data Controller will comply without delay, but no later than 30 days after receiving the request.

Consent is not required for recordings made:

  • as part of a crowd recording, or

  • during public events involving public appearances.

6. Processing of Personal Data by the Data Controller (continued)

J. Websites and Use of Cookies

The Data Controller presents the book translated and distributed by her on the website:

www.oazisapusztaban.hu

The Data Controller also presents her activities and services on the website:

www.ladyconnect.hu

During the operation of these websites, cookies are used, which also collect personal data about visitors.

The legal basis for processing personal data obtained through cookies is the consent of the data subject (Article 6(1)(a) GDPR).


Cookies Used on the Website www.oazisapusztaban.hu

elementor

  • duration: until the end of the browsing session

  • type: strictly necessary

wpEmojiSettingsSupports

  • duration: until the end of the browsing session

  • type: strictly necessary


Cookies Used on the Website www.ladyconnect.hu

wpEmojiSettingsSupports

  • duration: until the end of the browsing session

  • type: strictly necessary


Purpose of Cookies

Cookies serve the following purposes:

  • collecting information about visitors and their devices

  • remembering individual visitor settings that may be used later

  • facilitating the use of the website

  • providing a better user experience.

For personalized service, a small data package called a cookie is stored on the user’s computer and read during subsequent visits.

If the browser sends back a previously saved cookie, the service provider managing the cookie may link the user’s current visit with previous visits, but only with respect to its own content.


Session Cookies

These cookies allow visitors to browse the websites smoothly and use their functions and services fully.

The validity of such cookies lasts until the end of the browsing session, and they are automatically deleted from the user’s computer or device when the browser is closed.


User Choice Regarding Cookies

Browser cookies

Through browser settings, users may:

  • accept or reject new cookies

  • delete existing cookies

  • configure the browser to notify them whenever a new cookie is placed on their device.

Further information about cookie management can be found in the browser’s Help function.

If the visitor disables some or all cookies, certain features of the website may not function properly.

By accepting the use of cookies on the Data Controller’s websites, the visitor declares that they have reached the age of 16.

Persons under the age of 16 may not make such declarations regarding cookies, as according to Article 8(1) of the GDPR, the validity of consent requires authorization from a legal guardian.


K. Requesting Sample Pages of the Book

On the website www.oazisapusztaban.hu, visitors may request several pages of the book translated and distributed by the Data Controller.

For this purpose, the visitor must provide their e-mail address.

The personal data are processed for the purpose of sending the requested pages.

By providing the email address, the visitor consents to the processing of their personal data.

The legal basis for processing is the consent of the data subject (Article 6(1)(a) GDPR).

The visitor declares that they have read and acknowledged the Data Controller’s Data Processing Notice.

The Data Controller does not use the personal data for other purposes and does not disclose them to third parties.

Such personal data are processed until:

  • the data subject withdraws consent, or

  • the requested pages are sent.

If consent is withdrawn or the pages have been sent, the Data Controller deletes the personal data without delay, but no later than 30 days.


L. Customer Testimonials

On the website, opinions and testimonials of previous clients, customers or partners may be displayed regarding:

  • the services provided by the Data Controller

  • the book distributed by the Data Controller.

Personal data and testimonials are published only if the person has given prior written consent based on appropriate information (Article 6(1)(a) GDPR).

The Data Controller processes such personal data until the consent is withdrawn.


M. Presentation of the Author of the Book

The website www.oazisapusztaban.hu presents the author of the book translated and distributed by the Data Controller.

The author appears on the website together with personal data.

Personal data are displayed only if the data subject has given prior written consent based on appropriate information.

The legal basis for processing personal data is the consent of the data subject (Article 6(1)(a) GDPR).

The personal data remain available until the consent is withdrawn.


N. Contact Form

On the website www.ladyconnect.hu, visitors may contact the Data Controller through a contact form.

The form requires the following personal data:

  • name

  • e-mail address.

The purpose of processing personal data is:

  • establishing contact with the visitor

  • responding to inquiries regarding the services of the Data Controller.

If the visitor does not order any service following the contact request, the personal data will be deleted without delay, but no later than 30 days after the contact request.

The legal basis for processing personal data is the establishment of a contractual relationship (Article 6(1)(b) GDPR).

By filling out the form, the data subject declares that they have read and accepted the Data Processing Notice.


O. Newsletter Subscription

Visitors may subscribe to the newsletter by providing:

  • name

  • e-mail address.

The purpose of processing personal data is sending:

  • newsletters

  • direct marketing messages

  • individual promotional offers.

During subscription, the data subject declares that they have read the Data Processing Notice and indicates whether they consent to the processing of their personal data for marketing purposes.

The legal basis for processing personal data is the prior informed consent of the subscriber (Article 6(1)(a) GDPR).

If the data subject withdraws consent, the Data Controller deletes the personal data without delay, but no later than 30 days after the withdrawal.


P. Social Media Platforms

The Data Controller also operates social media pages, where personal data processing may occur.

The legal basis for processing personal data on these platforms is the consent of the data subject (Article 6(1)(a) GDPR).


Q. Complaint Handling

During the handling of complaints related to the activities of the Data Controller, the purpose of processing personal data is:

  • enabling the submission of complaints

  • identifying the complainant and the complaint

  • recording legally required information

  • investigating the complaint and maintaining communication related to its resolution.

If a complaint is submitted, the handling of the complaint — and thus the processing of personal data — is mandatory under Act CLV of 1997 on Consumer Protection.

Therefore, the legal basis for processing personal data is compliance with a legal obligation (Article 6(1)(c) GDPR).

The Data Controller keeps a data processing register of the above processing activities.

The register also contains the deadlines for the deletion of personal data.

This register forms an annex to the present Data Processing Notice.

7. Data Processors Cooperating with the Data Controller

If the processing of personal data is carried out on behalf of the Data Controller by another party, the Data Controller may only use data processors that provide adequate guarantees for compliance with the requirements of the General Data Protection Regulation (GDPR) and that implement appropriate technical and organizational measures to protect the rights of data subjects.

The Data Controller hereby declares that during her activities she cooperates exclusively with data processors that provide appropriate guarantees of compliance with the GDPR and ensure the protection of the rights of data subjects through suitable technical and organizational measures.

Declarations from these data processors confirming such compliance are available.

By acknowledging and accepting this Data Processing Notice, data subjects agree that the Data Controller may transfer their personal data to the following data processors and joint controllers.


Accounting Service Provider

Data processor responsible for accounting services:

Emhe Andrea – Sole Proprietor
Registration number: 51518914

Address:
7400 Kaposvár, Béke u. 15

Phone:
+36 30 299 7275

Email:
eandrea.konyvelo@gmail.com


Invoicing Service Provider

Partner responsible for issuing invoices:

Billingo Technologies Zrt.

Address:
1133 Budapest, Árbóc utca 6., 3rd floor

Phone:
+36 (1) 500-9491

Email:
hello@billingo.hu


Online Card Payment Service Provider

Partner responsible for bank card payments, acting as an independent data controller:

myPOS Payments Ltd

Address:
The Shard, Level 24
32 London Bridge Street
London, SE1 9SG

Email:
dpo@mypos.com

The legal basis for the processing of personal data in this context is the performance of the contract and the subsequent fulfillment of statutory data retention obligations.


Postal Service Provider

Data processor responsible for delivery services:

Magyar Posta Zrt.

Address:
1138 Budapest, Dunavirág u. 2–6

Phone:
+36 1 767 8200

Email:
ugyfelszolgalat@posta.hu


Website Hosting Providers

The companies providing hosting services for the Data Controller’s websites qualify as data processors:

Rackhost Zrt.

Address:
6722 Szeged, Tisza Lajos körút 41

Email:
info@rackhost.hu


BlazeArts Kft.

Address:
6090 Kunszentmiklós, Szent Erzsébet tér 11

Email:
dpo@forpsi.hu


Email Hosting Provider

The email system of the Data Controller is also operated by a data processor:

Rackhost Zrt.

Address:
6722 Szeged, Tisza Lajos körút 41

Email:
info@rackhost.hu


Newsletter Service Provider

Data processor responsible for sending newsletters:

MailerLite Limited

Address:
88 Harcourt Street
Dublin 2, D02 DK18
Ireland

Email:
info@mailerlite.com


Social Media Platforms (Joint Controllers)

Due to the use of social media platforms, the following entities qualify as joint data controllers:

Meta Platforms Ireland Ltd.

Address:
4 Grand Canal Square
Grand Canal Harbour
Dublin 2
Ireland


Cloud Storage Provider

Personal data stored in cloud-based databases (OneDrive) are processed by the following provider acting as a data processor:

Microsoft Hungary Ltd.

Address:
1031 Budapest
Graphisoft Park 3. (Záhony u.)

Phone:
+36 1 267 4636


Authorities

The Data Controller may also transfer personal data of clients, customers and partners to the National Tax and Customs Administration (NAV) where required by law.

Contracted data processors and partners process personal data only according to the instructions of the Data Controller, except where processing is required by applicable law.

They are also bound by confidentiality obligations.


8. Data Processing Related to Contracts Concluded by the Data Controller

Customer Contracts

Clients may apply for coaching or pastoral counseling services:

  • in person

  • by telephone

  • by e-mail

  • through social media platforms.

After the conditions are clarified, an appointment is scheduled.

During registration, the following personal data are requested:

  • name

  • telephone number

  • e-mail address.

These personal data are processed to:

  • assign an appointment to the client

  • ensure contact in case of appointment modification.

The legal basis for processing personal data is the establishment of a contract (Article 6(1)(b) GDPR).

If the client does not attend the appointment, the Data Controller deletes the personal data without delay, but no later than 30 days after the scheduled appointment date.

During the performance of the service, the legal basis for processing personal data is the performance of contractual obligations (Article 6(1)(b) GDPR).

The purpose of the data processing is:

  • maintaining contact

  • fulfilling contractual obligations.

The Data Controller issues an invoice for the service fee.

Invoices contain:

  • name

  • address

  • possibly tax number.

Issuing invoices is a legal obligation of the Data Controller.

The legal basis for processing personal data appearing on invoices is compliance with legal obligations (Article 6(1)(c) GDPR).

These personal data are stored for 5 years.


9. Processing of Personal Data on Invoices

The Data Controller issues invoices for:

  • services provided

  • products sold.

Invoices contain the following personal data:

  • name of the customer

  • address

  • possibly tax number.

Issuing invoices is a legal obligation of the Data Controller.

Therefore, the legal basis for processing personal data appearing on invoices is compliance with legal obligations (Article 6(1)(c) GDPR).

The personal data appearing on invoices are stored for 5 years, in accordance with legal requirements.

 

10. Processing of Children’s Data and Special Categories of Personal Data

When requesting sample pages of the book on the website www.oazisapusztaban.hu, or when consenting to the use of cookies on the Data Controller’s websites, the data subject declares that they have reached the age of 16.

Persons under the age of 16 may not request such pages or consent to the use of cookies, since according to Article 8(1) of the General Data Protection Regulation (GDPR), the validity of such consent requires authorization from a legal guardian.

The Data Controller has no means of verifying the age or legal entitlement of the person giving consent; therefore the data subject guarantees that the personal data provided are accurate and truthful.

During the provision of services, the Data Controller may occasionally become aware of information relating to the data subject’s:

  • health condition

  • sexual life or sexual orientation

  • pathological addictions.

Such information constitutes special categories of personal data.

Due to their particularly sensitive nature, such personal data require enhanced protection, since the circumstances of their processing may pose significant risks to the fundamental rights and freedoms of individuals.

The Data Controller processes such special categories of personal data solely for the purpose of providing professional services.

These special categories of personal data are destroyed no later than 30 days after the completion of the service.

The legal basis for processing special categories of personal data is Article 9(2)(a) of the GDPR, as the data subject provides explicit written consent based on appropriate prior information.

The processing is also justified under Article 6(1)(b) GDPR, as it is necessary for the performance of contractual obligations and for ensuring the professional standard of the services provided.

If the Data Controller becomes aware of special categories of personal data in any other way and such data are not required for service provision, they will not be recorded.

If such data inadvertently enter any system of the Data Controller without her knowledge, they will be deleted immediately upon detection.


11. Processing of Email Addresses and Telephone Numbers

During her activities, the Data Controller may become aware of the email addresses and telephone numbers of clients, customers, partners and other data subjects.

Such personal data are processed primarily for the purpose of fulfilling contractual obligations (Article 6(1)(b) GDPR).

If the contractual relationship with a partner ends and no legal obligation requires further retention of the data or documents, the email addresses and telephone numbers will be deleted.

In some cases, the Data Controller may still have a legitimate interest in retaining certain data. In such cases, the Data Controller requests the written consent of the data subject for further storage of their personal data (Article 6(1)(a) GDPR).


12. Creation of Photographs and Video Recordings

The Data Controller may occasionally create photographs or video recordings of:

  • clients

  • customers

  • participants

  • other individuals involved.

If an identifiable natural person appears in the recording, the creation and use of the recording — including publication on the Data Controller’s:

  • websites

  • social media platforms

  • other publications —

is carried out only with the prior written consent of the data subject based on appropriate information.

The legal basis for this data processing is the consent of the data subject (Article 6(1)(a) GDPR).

However, consent is not required for the creation and use of recordings in the following cases:

  • crowd recordings

  • recordings of public appearances at public events.

If the data subject withdraws their consent and requests the termination of the use of the recording or the deletion of the recording, the Data Controller will comply without delay, but no later than 30 days after receiving the request.


13. Websites of the Data Controller

The Data Controller presents the book translated and distributed by her on the website:

www.oazisapusztaban.hu

The Data Controller presents her services and activities on the website:

www.ladyconnect.hu

During the operation of these websites, cookies are used.

The legal basis for the processing of personal data collected through cookies is the consent of the visitor (Article 6(1)(a) GDPR).


Cookies Used on the Website www.oazisapusztaban.hu

elementor

  • duration: until the end of the browsing session

  • type: strictly necessary

wpEmojiSettingsSupports

  • duration: until the end of the browsing session

  • type: strictly necessary


Cookies Used on the Website www.ladyconnect.hu

wpEmojiSettingsSupports

  • duration: until the end of the browsing session

  • type: strictly necessary


Purpose of Cookies

Cookies:

  • collect information about visitors and their devices

  • remember visitor preferences and settings

  • facilitate easier use of the website

  • provide a better user experience.

To provide personalized services, a small data file called a cookie is placed on the user’s computer and read during subsequent visits.

If the browser sends back a previously saved cookie, the cookie service provider may link the user’s current visit with previous visits, but only with respect to its own content.


Session Cookies

These cookies allow visitors to browse the website smoothly and use its functions and services.

The validity period of such cookies lasts until the end of the browsing session, and they are automatically deleted from the user’s computer or device when the browser is closed.