Privacy Policy
The purpose of this Privacy Notice is to ensure that data subjects receive proper information regarding data processing carried out by Colored Ribbon Zrt. (hereinafter: “Data Controller”) in accordance with applicable data protection regulations, and are able to exercise their legal rights.
Data Controller:
The current details of the Data Controller are as follows:
- Name: Colored Ribbon Zrt.
- Registered office: 2724 Újlengyel, Petőfi Sándor utca 48., Hungary
- Company registration number: 32300529-2-13
- Tax number: 13 10 42482
- Represented by: Éva Csilla Hankóczi
- Email: info@colored-zrt.hu
Personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation – GDPR), as well as Act CXII of 2011 on Informational Self-Determination and Freedom of Information (Info Act).
Scope of personal data processed, purpose, duration, and legal basis of processing
Purpose of data processing: Contact
Visitors may contact the Data Controller via the email address provided under the “Contact” menu or by filling out the contact form on the website.
Data subject: the sender of the message
Categories of data processed: name, email address, phone number, message content and subject
Legal basis: consent of the data subject
Purpose: contacting the Data Controller
Processing method: electronic
Persons authorized to access the data: the Data Controller and its employees whose job responsibilities require access to such data
Data transfer: Personal data is not transferred to third parties, except where required by law (e.g. courts, authorities).
Data retention period: until withdrawal of consent, or up to 5 years if necessary for legal claims; otherwise 30 days from receipt of the message
Consequence of not providing data: failure of successful communication
Purpose of data processing: Website visit data
| Data processed | Purpose | Legal basis | Retention period |
| IP address, time of visit, operating system and browser type | Ensuring proper operation of the website, improving service quality, identifying malicious visitors | legitimate interest (GDPR Article 6(1)(f)) | Partial IP address stored for 7 days, then automatically deleted |
Purpose of data processing: Cookies
When visiting the website, small files called cookies are stored on the user’s device for various purposes.
Session cookies
These are necessary for browsing and basic functionality. They are deleted automatically after the session ends.
Analytics cookies
Used to generate statistics about website usage to improve user experience.
Marketing cookies
Used to display relevant advertisements and measure campaign performance.
Social media links
The website includes links to social platforms such as Facebook, Instagram, Twitter, and LinkedIn. If the user is logged in to these platforms, their visit may be linked to their account.
Rights of data subjects
Data subjects may request information, correction, deletion, restriction, or portability of their personal data, and may withdraw consent at any time.
Right to access: The data subject has the right to obtain confirmation of whether personal data concerning them is being processed and access to such data.
Right to rectification: The data subject may request correction of inaccurate data.
Right to erasure: The data subject may request deletion of their data under certain conditions.
Right to restriction: Processing may be restricted under specific circumstances.
Right to withdraw consent: Consent can be withdrawn at any time in writing.
Right to data portability: The data subject may request transfer of their data in a commonly used format.
The Data Controller applies appropriate technical and organizational measures to ensure data security.
Complaints may be submitted to the Hungarian National Authority for Data Protection and Freedom of Information (NAIH).
In case of violation of rights, the data subject may take legal action before a competent court.
20 February 2023