Nagyházi Gallery and Auction House Limited Liability Company (hereinafter: Nagyházi Gallery and Auction House LLC) is committed to fully respecting the rights related to data processing of its clients and those interested via the website operated by the Nagyházi Gallery and Auction House LLC (https://www.nagyhazi.hu). In the course of its operations, Nagyházi Gallery and Auction House LLC performs the data processing activities set forth in this information. In this regard, it considers it important to demonstrate to the data subjects the handling of personal data that has come to its attention, along with its most important characteristics and circumstances.

The terms used in this information should be interpreted according to the concepts defined in the Regulation (EU) 2016/679 of the European Parliament and of the Council (hereinafter: GDPR), which concerns the protection of natural persons with regard to the processing of personal data and the free movement of such data, as well as the repeal of Directive 95/46/EC, and in the Act CXII of 2011 on the right to informational self-determination and freedom of information (hereinafter: Info Act).

I. Rights of the Data Subjects and Conditions for Enforcement

1. Who handles your personal data?

Your personal data is handled by Nagyházi Gallery and Auction House LLC as the data controller, and on its behalf and in accordance with its instructions by data processors it employs.

The name of the data controller: Nagyházi Gallery and Auction House Limited Liability Company (company registration number: Cg. 01 09 065221, tax number: 10313396-4-41, headquarter: 1055 Budapest, Balaton utca 8.)

Contact information for communication:

represented by: Lőrinc Nagyházi, managing director

Email address:

Nagyházi Gallery and Auction House LLC will not appoint a data protection officer.

2. What principles does Nagyházi Gallery and Auction House LLC consider important in handling your personal data?

In its data management activities, Nagyházi Gallery and Auction House LLC respects the rights related to personal data of the data subjects and handles personal data in compliance with applicable legal regulations. Accordingly, it guarantees the enforcement of provisions contained in the General Data Protection Regulation, as well as in the Info Act, and in specific sectoral regulations pertaining to data management.

In order to provide the service, only personal data that is appropriate and relevant in terms of the purposes of data management will be handled, and this will take place for the duration necessary to achieve the objectives of personal data management. The security of the provided personal data is protected by the necessary and possible technical and organizational measures, in particular, to ensure the confidentiality, integrity, and availability of personal data. The provider is responsible for the accurate handling of personal data with content identical to what you provided following the submission of personal data.

3. 3. Categories of data subjects and the scope of processed data

In the current data processing activity, the data subjects are individuals utilizing the services.

Name and purpose of the processing	Legal basis for processing	Scope of the data processed	The processing Duration of data processing
Scope of processed data Identification of the data subject, contacting the data subject	Consent of the data subject GDPR Article 6 (1) point a)	The name of the data subject Email address of the data subject Phone number of the data subject	For the duration of the contact.

 

4. 4. Who will personal data be transmitted to?

Nagyházi Gallery and Auction House LLC may, based on legal authorization, contact authorities (especially the regulatory authority, investigative authority, prosecutor’s office, court, other administrative authority, the National Authority for Data Protection and Freedom of Information) or other data controllers for the purpose of sharing, accessing, and transmitting the personal data it handles. If the requesting authority precisely specifies the scope of the requested data, the purpose and legal basis of the request, and the fulfillment of the request does not violate legal provisions, the personal data necessary for the realization of the request will be provided.

Aside from the above cases, personal data will not be transmitted to other data controllers without your consent.

No data transfer will occur to third countries.

There is no automated decision-making or profiling on the site.

The Data Controller does not handle personal data that has not been collected from the data subject.

Legal bases for data processing

Personal data may be processed if

1. 1. a) the data subject has given consent to the processing of their personal data for one or more specific purposes;
2. 2. b) the data processing is necessary for the performance of a contract to which the data subject is a party, or for taking steps at the request of the data subject prior to entering into a contract;
3. 3. c) the processing is necessary for compliance with a legal obligation to which the data controller is subject;
4. 4. d) the processing is necessary to protect the vital interests of the data subject or another natural person;
5. 5. e) the processing is necessary for the performance of a task carried out in the public interest or in the exercise of the official authority vested in the data controller;
6. 6. f) the processing is necessary for the purposes of the legitimate interests pursued by the data controller or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject, which require protection of personal data, especially if the data subject is a child.

The data subject has the right to withdraw their consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. The data subject must be informed about this before giving their consent. Withdrawing consent must be made as easy as giving it.

If personal data was collected based on the consent of the data subject, the Service Provider may process the collected data – unless otherwise provided by law –

1. 1. a) for the purpose of fulfilling their legal obligation, or
2. 2. b) for the purposes of pursuing the legitimate interest of themselves or a third party, provided that the pursuit of this interest is proportionate to the limitation of the right to the protection of personal data,

without further consent, even after the data subject has withdrawn their consent.

5. 5. What rights does the Service Provider (Nagyházi Gallery and Auction House LLC) have concerning the personal data it manages?

According to the GDPR regulation, the data subject is entitled to the following rights in relation to data processing; the maximum timeline for fulfilling a request upon receipt is one month:

• The right to information and access, during which the data subject is entitled to receive feedback from the data controller regarding whether their personal data is being processed and, if such data processing is ongoing, the data subject is entitled to access personal data, as well as the categories of personal data, the purposes of data processing, the recipients or categories of recipients with whom their personal data has been shared or will be shared, and, where applicable, the planned duration of the storage of personal data, or if that is not possible, the criteria for determining that duration. Furthermore, the data subject has the right to request the rectification, erasure, or restriction of processing of their personal data from the data controller, and to object to such data processing, as well as the right to lodge a complaint with a supervisory authority.
• The right to rectification, under which the data subject is entitled to request the data controller to rectify without undue delay any inaccurate personal data concerning them and, taking into account the purposes of data processing, they are entitled to request the completion of incomplete personal data – inter alia by means of supplementary statement.
• The right to erasure, under which the data subject is entitled to request the data controller to erase personal data concerning them that is processed based on their consent without undue delay.
• The right to restriction of processing, under which the data subject is entitled to request the data controller to restrict processing if the data subject disputes the accuracy of the personal data, or if the processing is unlawful and the data subject opposes erasure but requests the restriction of use instead; furthermore, if the data controller no longer needs the personal data for processing purposes, but the data subject requires them for the establishment, exercise, or defense of legal claims, or when the data subject has objected to processing, in which case the restriction applies for the period during which it needs to be determined whether the legitimate grounds of the data controller override those of the data subject.
• The right to object, under which the data subject is entitled to object at any time to the processing of their personal data on grounds relating to their particular situation, if the processing is necessary for the purposes of the legitimate interests pursued by the data controller or a third party. The Service Provider does not cease processing based on the objection if there are compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the data subject, or are related to the establishment, exercise, or defense of legal claims.

6. What legal remedies are available in connection with the personal data processed by the Service Provider?
7. The right to lodge a complaint with the supervisory authority

Without prejudice to any other administrative or judicial remedies, every data subject has the right to lodge a complaint with the National Authority for Data Protection and Freedom of Information (hereinafter: Supervisory Authority) if the data subject believes that the data controller or the data processor contracted by them has committed a violation or has created a risk of such violation through their activities or omissions.

Contact details of the National Authority for Data Protection and Freedom of Information:
1363 Budapest, Pf.: 9.
1055 Budapest, Falk Miksa utca 9-11
Tel.: 06 1/391-1400
Fax: 06 1/391-1410

1. The right to an effective judicial remedy against the data controller or the data processor.

Without prejudice to the administrative or non-judicial remedies available – including the right to lodge a complaint with the supervisory authority – every data subject has the right to an effective judicial remedy if they believe that their rights related to the processing of their personal data have been violated. The court will have jurisdiction to adjudicate the case. You may choose to initiate the lawsuit in the court of your residence or the court of your place of stay.

You can find the list of courts at the following web address: http://birosag.hu/torvenyszekek

II. Cases of Data Processing

1. 1. Information related to contact made through the website

Purpose of Data Processing

The purpose of data processing by Nagyházi Gallery and Auction House LLC is to provide information, quotes, and general information related to its products and services to the data subject, as well as to establish contact with the data subject based on inquiries sent through the website.

Duration of Data Processing

The duration of data processing by Nagyházi Gallery and Auction House LLC lasts as long as the services provided exist, or until the data subject withdraws their consent (until their request for deletion).

The data subject may request the deletion of their personal data from Nagyházi Gallery and Auction House LLC via an email sent to . Nagyházi Gallery and Auction House LLC will also delete the data subject’s personal data without a request from the data subject if its processing is unlawful, the purpose of data processing has ceased, or the data storage period specified by law has expired, if ordered by a court or the National Authority for Data Protection and Freedom of Information, or if the data processing is incomplete or incorrect – and this situation cannot be lawfully remedied – provided that the deletion is not excluded by law.

Legal Basis for Data Processing

The legal basis for processing is the voluntary consent of the data subject according to Info Act § 5 (1) point b) and GDPR Article 6 (1) point a).

The data subject gives their consent by using the services of the website (by filling out the contact form).

Nagyházi Gallery and Auction House LLC is not required to verify the accuracy of the data provided by the data subject during registration or at the time of granting consent.

The data subject is entitled to withdraw their voluntary consent at any time. In this case, Nagyházi Gallery and Auction House LLC will delete the data subject’s information following the withdrawal.

Processed Data

The data processed includes the names, phone numbers, and email addresses of the data subjects.

III. Information on the use of cookies on the https://www.nagyhazi.hu/ website

The https://www.nagyhazi.hu/ website uses so-called cookies in connection with the use of the site. A cookie is a packet of information consisting of letters and numbers that the website sends to your browser to save certain settings, facilitate the use of the website, and help collect some relevant statistical information.

1. 1. Types of cookies:
2. 2 A) Cookies can be “permanent” or “temporary.” Permanent cookies are stored by the browser until a specified time (or until deleted), while temporary cookies are not stored by the browser and are automatically deleted when the browser is closed.
3. 3 B) Cookies that are strictly necessary for operation are essential for using the website and enable the use of the website’s basic functions. Without them, many functions of the website will not be available to you.

Cookies that improve user experience collect information about how the website is used by users, for example, which pages are visited most frequently or what error messages are received from the website. The information obtained from these will be used to improve the website’s performance.

If you do not wish to allow the use of cookies, you can disable them in your browser settings. However, please note that disabling cookies may result in certain elements of some services being partially or not usable at all.

2. Disabling cookies:

Modern browsers allow you to modify cookie settings. Some browsers automatically accept cookies by default, but this setting can also be changed so that the user can prevent automatic acceptance in the future. If adjusted, the browser will subsequently offer the option to select cookie settings each time.

We would like to draw the attention of our visitors to the fact that since the purpose of cookies is to support and facilitate the usability of the website and its processes, we cannot guarantee that the visitor will be able to fully use all functions of the website if cookies are disabled. In this case, the website may operate differently than intended in the browser.

If you do not consent to the placement of cookies, you can do so through settings made in your own browser.

Further detailed information about cookie settings for individual browsers can be accessed through the browser’s setting-related menus and the so-called help interfaces that support usage.

Important information regarding the use of ad-blockers

We would like to inform our visitors that when using an ad-blocker, the information regarding the cookie statement may not always be displayed. If you would like to view it, please deactivate the ad-blocker application!

3. 3. The legal background of cookies and the legal basis for their application:

The background of data management is established in accordance with Article 6 (1)(a) of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons regarding the processing of personal data and on the free movement of such data, which repeals Directive 95/46/EC, where your consent is required for the processing of your personal data, which you can withdraw at any time; however, this does not affect the legality of the processing carried out based on consent before revocation.

4. 4. Security

It is essential that the operator of the site, namely Nagyházi Galéria és Aukciósház Kft., does not store any identifiers or passwords even if cookies are enabled.

Visitors can safely use the electronic services of Nagyházi Galéria és Aukciósház Kft. even when accepting cookies.

IV. Governing laws

In preparing the data management information, we paid particular attention to the following laws:

• Regulation (EU) 2016/679 of the European Parliament and of the Council (“General Data Protection Regulation” or “GDPR”)
• Act CXII of 2011 on the right to informational self-determination and freedom of information (“Infotv.”)
• Act V of 2013 on the Civil Code (Ptk.)
• Act CVIII of 2001 on certain issues of electronic commercial services and services related to the information society (Eker tv.)
• Act C of 2003 on electronic communications (Ehtv)
• Act CLV of 1997 on consumer protection (Fogyv tv.)