Please read this legal notice carefully before using the website, the content of which you acknowledge and accept by using the website - without requesting further consent!
The Privacy Policy Regulation (EU) 2016/679 of the European Parliament and of the Council (27 April 2016) – EU law on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Regulation 95/46/EC (General Data Protection Regulation, GDPR) and Act CXII of 2011 on the right to self-determination and freedom of information (hereinafter: Info.tv.) and other applicable data processing legislation.
Data controller's details and contact information:
Name: Istvan Lukacs
Address: Calle Mar Llana no. 2. Sea Senses, Punta Prima, Torrevieja, Spain
Phone: +36 (30) 955 9691
E-mail:
Website: www.seasensespearl.com
Data processor (hosting provider):
Name: BlazeArts Ltd.
Address: 1096 Budapest, Thaly Kálmán Street 39.
Email address: info@forpsi.hu
User: visitor to the website seasensespearl.com
Legal basis and definition of data processing
Data processing carried out through the website is carried out with the voluntary consent of the users, based on Section 5 (1) a) of the Info.tv. Consent is given by the user by using the website and by voluntarily providing his/her personal data by filling out the contact form. The website contains links that point to other websites. The data processing of such external websites is governed by the data processing declaration of the given website.
Scope of processed data, purpose and duration of data processing
Duration of data processing: The data controller retains the personal data provided as long as it is in contact with the user or until the user requests that their data be deleted.
The data controller informs the website's visitors and users that the website uses cookies for efficient operation.
The data controller informs the visitors and users of the website that Google Analytics helps to independently measure the website's traffic and other web analytics data. Google Analytics uses additional cookies to identify visitors. Google Analytics does not record IP data that could be used to identify the data subject. Google provides detailed information about the measurement data and its management on the following page. Contact: https://policies.google.com/technologies/types?hl=hu
By using the website, visitors authorize the Data Controller to use the following cookies:
Type | Contribution | Description | Purpose | Validity |
system general cookies | does not require | basic cookie responsible for the operation of the web application | ensuring the operation of the website | until browser is closed |
system general cookies | requires | After loading the web application, you must consent to cookies to access additional features. | Allow cookies | 365 days |
system function cookies | does not require | cookies necessary for easier operation and personalization | The user can access the full functionality of the system with it, without these many things do not work | until browser is closed |
system tracking cookies | requires | necessary for measurement or to create the user experience | preparing statistics | 365 days |
tracking cookie
(from a third party) |
does not require | suitable for identifying new visitors and web tracking (some are integrated into the system and some can be set individually) (Google, Facebook) | We use the Google Adwords conversion tracking cookie to measure the effectiveness of AdWords ads. | Adwords campaign period |
Disable cookies:
The Data Controller informs visitors and users of the website that they have the option to disable the use of cookies in the settings of their own user devices. This setting is usually available in the device's browser settings under the Privacy and Security menu.
No data is required to visit the seasensespearl.com website. However, there are services that necessarily require data provision. Below we detail the type of data provision that occurs during which event.
Name of activity and purpose of data processing |
Legal basis |
Managed data |
Period |
Visit website
The aim is to ensure the website functions properly and to a high standard, to monitor and improve the quality of our services, identification of malicious visitors attacking our website, to measure attendance, statistical purposes |
The legitimate interest of the data controller | IP address
date of visit data on the subpages visited, the type of operating system and browser you are using |
not relevant |
Submit form
agreeing on the rental date of the apartment building, requesting an offer
|
contribution | natural person's last name and first name
title |
180 days |
Administration, complaint
responding to a comment or complaint
|
legal obligation | full name
email address phone number mailing address other personal message |
For 5 years |
If you have any questions about data processing, you can request further information at seasensespearl@gmail.com. I will send you the answer within 15 days at the contact information you provided.
In the above cases, the most necessary data will be recorded exclusively for the purpose of carrying out the online transaction or providing the service until such time as this is absolutely necessary; including in the event of a complaint.
I do not connect the personal data provided when filling out contact forms with any other data, and it is not my goal to identify visitors.
You voluntarily provide personal data by filling out contact forms or by contacting us by e-mail, which is why I ask that you gradually pay attention to the truthfulness, correctness and accuracy of your data when providing it, because you are responsible for these. Incorrect, inaccurate or incomplete data may prevent you from using the service.
If you are providing personal data of someone other than yourself, I assume that you have the necessary authorization to do so.
You can withdraw your consent to data processing at any time free of charge. can withdraw
– by withdrawing consent to data processing, or
– by withdrawing consent to the processing or use of any data that must be filled out on the contact form or by requesting its blocking.
– withdraw your consent at seasensespearl@gmail.com You can request it at
The execution of the withdrawal of consent 5 sunny I undertake to do so with a deadline, however, I would like to draw your attention to the fact that I may process certain data even after the withdrawal of consent in order to fulfill my legal obligation or to assert my legitimate interests.
In the event of the use of misleading personal data or if a visitor commits a crime, I will immediately delete the data of the given visitor or, if necessary, retain it for the duration of the determination of civil liability or the conduct of criminal proceedings.
Other data processing issues
I will only transfer your data within the framework specified by law, and in the case of our data processors, I will ensure by stipulating contractual terms that they cannot use your personal data for purposes contrary to your consent.
I do not transfer data abroad.
The court, the prosecutor's office and other authorities (e.g. the police, the tax office, the National Data Protection and Freedom of Information Authority) may request information, disclose data or make documents available. In these cases, I must comply with my data provision obligation, but only to the extent strictly necessary to achieve the purpose of the request.
I protect your personal data with appropriate technical and other measures, and ensure the security and availability of the data, and protect it from unauthorized access, alteration, damage, disclosure and any other unauthorized use.
Visitor rights and remedies
The user consents to the Data Controller handling, processing and storing his/her personal data for the purposes specified above. The user acknowledges this information and acknowledges the contents thereof.
The user may modify or withdraw his consent to data processing at any time by contacting the Data Controller, and may also request the correction or deletion of his personal data. This is excepted for any document or document, or its digital version, the preservation of which is determined by separate legislation.
User rights
1. right of withdrawal (Article 7 of the GDPR)
The user has the right to withdraw their consent at any time. Withdrawal of consent does not affect the lawfulness of data processing based on consent prior to withdrawal.
2. Right to information (Article 12 of the GDPR)
The controller shall take appropriate measures to provide the user with all information referred to in Articles 13 and 14 of the GDPR concerning the processing of personal data and with all information pursuant to Articles 15 to 22 and 34 in a concise, transparent, intelligible and easily accessible form, in clear and plain language, and free of charge. The right to information may be exercised through the contact details indicated in the introduction (in writing or by other means, including, where appropriate, by electronic means). At the user's request, oral information may also be provided, provided that the identity of the data subject has been verified in another way.
3. Right of access to personal data (Article 15 of the GDPR)
The user has the right to receive feedback from the data controller as to whether his/her personal data is being processed and, if such processing is taking place, he/she has the right to access the personal data and the following information:
a) the purposes of data processing;
(b) the categories of personal data concerned;
(c) the recipients or categories of recipients to whom the personal data have been or will be disclosed, including in particular recipients in third countries or international organisations;
(d) where applicable, the planned period for which the personal data will be stored;
e) the right of the data subject to request from the controller the rectification, erasure or restriction of processing of personal data concerning him or her and to object to the processing of such personal data;
(f) the right to lodge a complaint with a supervisory authority;
g) if the data were not collected from the data subject, all available information on their source;
h) the fact of automated decision-making referred to in Article 22(1) and (4) of the GDPR, including profiling, and at least in these cases, intelligible information on the logic involved and the significance and foreseeable consequences of such processing for the data subject.
I will provide the user with a copy of the personal data that is the subject of the data processing upon request. For additional copies, the data controller may charge a reasonable fee based on administrative costs. If the user has submitted the request electronically, I will provide the information in a widely used electronic format, unless the data subject requests otherwise.
The data controller shall inform the data subject within one month of receipt of the request.
4. Right to rectification (Article 16 GDPR)
The user has the right to request that the data controller correct inaccurate personal data concerning him/her. Taking into account the purpose of the data processing, the user has the right to request that incomplete personal data be completed, including by means of a supplementary statement.
5. Right to erasure (“to be forgotten”) (Article 17 GDPR)
The user has the right to request that the data controller erase personal data concerning him or her without undue delay if one of the following reasons applies:
a) the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
b) the user withdraws his/her consent on which the processing is based pursuant to point (a) of Article 6(1) or point (a) of Article 9(2) and there is no other legal basis for the processing;
(c) the user objects to the processing of his or her data pursuant to Article 21(1) and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2);
d) the personal data have been processed unlawfully;
(e) the personal data must be erased for compliance with a legal obligation under Union or Member State law to which the controller is subject;
(f) the personal data were collected in connection with the provision of information society services referred to in Article 8(1).
If data processing is necessary for any of the following reasons, deletion of data cannot be initiated:
a) for the purpose of exercising the right to freedom of expression and information;
b) compliance with an obligation under Union or Member State law applicable to the controller requiring the processing of personal data, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller;
c) on grounds of public interest in the field of public health;
d) for archiving purposes in the public interest, scientific and historical research purposes or statistical purposes, where the right to erasure would likely render impossible or seriously jeopardise such processing; or
e) for the establishment, exercise or defense of legal claims.
6. the right to restriction of data processing (Article 18 of the GDPR)
The user has the right to request that the data controller restrict data processing if one of the following applies:
a) the user disputes the accuracy of the personal data, in which case the restriction shall apply for a period of time allowing the controller to verify the accuracy of the personal data;
b) the processing is unlawful and the data subject opposes the erasure of the data and instead requests the restriction of their use;
c) the controller no longer needs the personal data for the purposes of the processing, but the data subject requires them for the establishment, exercise or defence of legal claims; or
d) the user has objected to the processing pursuant to Article 21(1); in this case, the restriction shall apply for a period of time until it is determined whether the legitimate grounds of the controller override those of the data subject.
If processing is restricted on one of the above grounds, such personal data may only be processed, with the exception of storage, with the user's consent, or for the establishment, exercise or defence of legal claims, or for the protection of the rights of another natural or legal person, or for important public interest reasons of the Union or of a Member State.
The data controller shall inform the user in advance of the lifting of the restriction on data processing.
7. the right to data portability (Article 20 of the GDPR)
The user has the right to receive the personal data concerning him or her, which he or she has provided to the data controller, in a structured, commonly used and machine-readable format and has the right to transmit these data to another data controller without hindrance from the data controller to which the personal data have been provided, if:
(a) the processing is based on consent pursuant to point (a) of Article 6(1) or point (a) of Article 9(2) or on a contract pursuant to point (b) of Article 6(1); and
b) the data processing is carried out in an automated manner.
When exercising the right to data portability, the data subject has the right to request the direct transmission of personal data between data controllers, if technically feasible.
8. the right to object (Article 21 of the GDPR)
The user has the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller, or for the purposes of the legitimate interests pursued by the controller or by a third party, including profiling based on those provisions. In such a case, the controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defence of legal claims.
If personal data are processed for direct marketing purposes, the data subject has the right to object at any time to processing of personal data concerning him or her for such purposes, including profiling, where it is related to direct marketing.
9. Automated decision-making in individual cases, including profiling (Article 22 of the GDPR)
The user has the right not to be subject to a decision based solely on automated processing, including profiling, which would produce legal effects concerning him or her or similarly significantly affect him or her.
Paragraph (1) shall not apply if the decision:
a) necessary for the conclusion or performance of a contract between the data subject and the data controller;
(b) it is permitted by Union or Member State law applicable to the controller and which also lays down suitable measures to safeguard the rights and freedoms and legitimate interests of the data subject; or
(c) is based on the explicit consent of the data subject.
Procedural rules for exercising user rights:
GDPR Article 12: The controller shall inform the user without undue delay, and in any event within one month of receipt of the request, of the action taken in response to a request pursuant to Articles 15 to 22. Where necessary, taking into account the complexity of the request and the number of requests, this deadline may be extended by a further two months.
The data controller shall inform the data subject of the extension of the deadline, indicating the reasons for the delay, within one month of receipt of the request. If the user submitted the request electronically, the information shall be provided electronically, if possible, unless the user requests otherwise.
If the data controller does not take action at the user's request and does not inform the data subject of the reasons for the failure to take action within one month of receipt of the request, the data subject may file a complaint with a supervisory authority and exercise his or her right to judicial remedy.
The controller shall provide the information referred to in Articles 13 and 14 and the information and action referred to in Articles 15 to 22 and 34 free of charge. If the user's request is manifestly unfounded or excessive, in particular because of its repetitive nature, the controller may charge a reasonable fee, taking into account the administrative costs of providing the requested information or communication or taking the requested action, or may refuse to act on the request.
The burden of proving that the request is clearly unfounded or excessive shall be on the data controller.
GDPR Article 19: The controller shall inform any recipient to whom or with whom the personal data have been disclosed of the rectification, erasure or restriction of processing carried out by him, unless this proves impossible or involves a disproportionate effort. Upon request, the controller shall inform the data subject of these recipients.
GDPR Article 15(3): The controller shall provide the data subject with a copy of the personal data which are the subject of the processing. For further copies requested by the data subject, the controller may charge a reasonable fee based on the administrative costs. If the data subject has submitted the request electronically, the information shall be provided in a commonly used electronic format, unless the data subject requests otherwise.
Legal remedies
Judicial redress (Article 12(3) and Article 79 GDPR)
In the event of a violation of his or her rights, the user may file a lawsuit against the data controller. The court shall hear the case without delay. The data subject may, at his or her choice, also file a lawsuit before the court competent for his or her place of residence or stay.
Compensation and damages (GDPR Article 82, Civil Code Section 2:52 and Section 2:53)
If the data controller causes damage to another person by unlawfully processing the user's data or by violating data security requirements, he or she is obliged to compensate for the damage.
If the data controller violates the user's personal rights by unlawfully processing the user's data or by violating data security requirements, the user may claim damages from the data controller.
The data controller is exempt from liability for the damage caused and the obligation to pay damages if it proves that the damage or the violation of the user's personal rights was caused by an unavoidable reason outside the scope of data processing.
No compensation for damage shall be required and no damages may be claimed if the damage or the infringement of personal rights resulted from the intentional or grossly negligent conduct of the injured party or the user.
Supervisory authority procedure (right to lodge a complaint – Article 14(3) and Article 77 GDPR)
Anyone can initiate an investigation by reporting to the Authority, citing that a violation of the law has occurred or there is an immediate threat of such a violation in connection with the processing of personal data or the exercise of rights to access data of public interest or data made public in the public interest.
Supervisory authority details:
Name: National Data Protection and Freedom of Information Authority
Registered office: 1125 Budapest, Szilágyi Erzsébet fasor 22/c
Postal address: 1530 Budapest, P.O. Box: 5.
Phone: +36 (1) 391-1400
web: naih.hu
E-mail: ugyfelszolgalat@naih.hu
Before you contact the supervisory authority or court with your complaint, I ask you to contact me at the contact details provided in the introduction, in order to discuss and resolve the problem as quickly as possible.
Legislation related to data processing:
- Fundamental Law of Hungary, Article VI
- Regulation (EU) 2016/679 of the European Parliament and of the Council on the processing of personal data of natural persons (GDPR)
- Act CXII of 2011 on the right to informational self-determination and freedom of information (Info Act)
- Act V of 2013 on the Civil Code (Civil Code)
- Act CVIII of 2001 – Eker Act (On certain issues of information society services),
- Act C of 2003 on Electronic Communications – (Ehtv)
- Act CLV of 1997 on Consumer Protection (Consumer Protection Act)
- Act CLXV of 2013 on Complaints and Public Interest Notifications (Pktv.)
- Act XLVIII of 2008 on the basic conditions and certain limitations of economic advertising activities (Grtv.)