Privacy notice

This document contains the information on data management on the website www.nicodali.com.

The Privacy Notice has been prepared in accordance with the rules of the General Data Protection Regulation 2016/679 (hereinafter: the Regulation).

Nico Dali (artist who uses this artist name in his artistic activities).

E-mail: ____

1. Scope of data processed, legal basis, purpose and duration of processing

Please note that only the cookies on this website process data as described below.

2. Information about the use of cookies

What is a cookie?

The Data Controller uses so-called cookies when you visit the website. A cookie is a set of information consisting of letters and numbers that our website sends to your browser in order to save certain settings, facilitate the use of our website and help us to collect some relevant statistical information about our visitors.

Some of the cookies do not contain any personal information and cannot be used to identify an individual user, but some of them contain a unique identifier – a secret, randomly generated sequence of numbers – that is stored on your device, thus ensuring your identification. The duration of each cookie is described in the relevant description of each cookie.

Legal background and legal basis of cookies:

We basically distinguish between three types of cookies, cookies that are essential for the proper functioning of the Website, cookies for statistical purposes and cookies for marketing purposes.

The legal basis for the processing is your consent pursuant to Article 6(1)(a) of the Regulation in the case of statistical and marketing cookies, and the legitimate interest necessary for the functioning of the Website pursuant to Article 6(1)(f) of the Regulation in the case of cookies necessary for the functioning of the Website.

Main characteristics of the cookies used by the Website:

Cookies for statistical purposes:

_ga cookie: this cookie is associated with the Google Universal Analytics service, the cookie is used to distinguish individual users by assigning a randomly generated number as a client identifier. It is included in all site page requests and is used to calculate visitor, session and campaign data for site analytics reports. It has a lifetime of one year and 1 month.

_gaCF844XDQYL cookie. Its lifetime is one year 1 month.

For more information on how to delete cookies, see the links below:

– Internet Explorer: http://windows.microsoft.com/en-us/internet-explorer/delete-manage-cookies#ie=ie-11

– Firefox: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer

– Mozilla: https://support.mozilla.org/hu/kb/weboldalak-altal-elhelyezett-sutik-torlese-szamito

– Safari: https://support.apple.com/guide/safari/manage-cookies-and-website-data-sfri11471/mac

– Chrome: https://support.google.com/chrome/answer/95647

– Edge: https://support.microsoft.com/hu-hu/help/4027947/microsoft-edge-delete-cookies

3. Your rights regarding data processing

During the period of processing, you have the following rights under the Regulation:

– Access to personal data and information relating to the processing,

– the right to rectification,

– restriction of processing,

– the right to access, rectify and oppose the processing of personal data

– right to access, rectification, cancellation, right to erasure, right to portability,

– right to object,

– right to withdraw consent.

If you wish to exercise your rights, this will involve identifying yourself and we will need to communicate with you. Therefore, in order to identify you, you will be required to provide personal data (but identification will only be based on data that we already hold about you) and your complaint about our processing will be available in our email account for the period of time specified in this notice in relation to complaints.

We will respond to complaints about processing within 30 days at the latest.

Right to withdraw consent

You have the right to withdraw your consent to data processing at any time, in which case the data will be deleted from our systems.

Access to personal data and information.

You have the right to receive feedback as to whether your personal data is being processed and, if it is being processed, you have the right to:

– access to the personal data processed; and

– be informed of the following information:

o the purposes of the processing;

o the categories of personal data processed about you;

o information about the recipients or categories of recipients to whom or with which the personal data have been or will be disclosed;

o the envisaged duration of the storage of the personal data or, where this is not possible, the criteria for determining that duration;

o your right to request the rectification, erasure or restriction of the processing of personal data relating to you and, in the case of processing based on legitimate interests, to object to the processing of such personal data;

o the right to lodge a complaint with a supervisory authority;

o if the data have not been collected from you, any available information about their source;

o the fact of automated decision-making (where such a process is used), including profiling, and, at least in these cases, clear information on the logic used and the significance and likely consequences for you of such processing.

The purpose of exercising the right may be to ascertain and verify the lawfulness of the processing, and we may charge a reasonable fee for providing the information in return for repeated information and requests.

Access to your personal data will be ensured by sending you the personal data and information processed by e-mail after you have been identified.

Please indicate in your request whether you want access to the personal data or information about the processing.

Right to rectification.

You have the right to have inaccurate personal data relating to you corrected without delay at your request.

Right to restriction of processing.

You have the right to obtain at your request restriction of processing if one of the following conditions is met:

– You contest the accuracy of the personal data, in which case the restriction will be for a period of time that allows us to verify the accuracy of the personal data, if verification is not necessary, no restriction will be applied;

– If the processing is unlawful and you oppose the erasure of the data and instead request a restriction of their use;

– we no longer need the personal data for the purposes for which they are being processed but you require them for the establishment, exercise or defence of legal claims; or

– you have objected to the processing, but we may have a legitimate interest in the processing, in which case, until it is determined whether our legitimate grounds override your legitimate grounds, the processing should be restricted.

Where processing is restricted, such personal data, other than for storage, may only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for important public interests of the Union or of a Member State.

You will be informed in advance (at least 3 working days before the restriction is lifted) of the lifting of the restriction on processing.

Right to erasure – right to be forgotten.

You have the right to have your personal data erased without undue delay if one of the following grounds applies:

– the personal data is no longer necessary for the purposes for which it was collected or processed;

– You withdraw your consent and there is no other legal basis for the processing;

– You object to the processing based on legitimate interests and there is no overriding legitimate ground (i.e. legitimate interest) for the processing,

– the personal data have been unlawfully processed and this has been established on the basis of the complaint,

– the personal data must be erased in order to comply with a legal obligation under EU or Member State law applicable to us.

If we have disclosed personal data we hold about you for any lawful reason and we are required to delete it for any of the reasons set out above, we will take reasonable steps, including technical measures, taking into account available technology and the cost of implementation, to inform other data controllers that you have requested the deletion of links to or copies of the personal data in question. As a general rule, your personal data will not be disclosed.

Erasure does not apply where the processing is necessary:

– for the exercise of the right to freedom of expression and information;

– to comply with an obligation under EU or Member State law that requires the processing of personal data (such as processing in the context of invoicing, where the retention of the invoice is required by law) or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;

– for the establishment, exercise or defence of legal claims (e.g. where we have a claim against you and you have not yet satisfied that claim, or in the course of dealing with a consumer complaint or a complaint about data processing).

Right to object

You have the right to object to the processing of your personal data based on legitimate interests at any time on grounds relating to your particular situation. In this case, we may no longer process your personal data unless we can prove that the processing is justified by compelling legitimate grounds which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

Right to portability

Where the processing is necessary for the performance of a contract or is based on your voluntary consent, you have the right to request that the data you have provided to us be provided to you in a machine-readable format, which we will make available to you in xml, JSON or csv format, and, if technically feasible, to request that we transfer the data in this format to another controller.

Remedies

If you believe that we have violated any legal provision applicable to data processing or have not complied with any of your requests, you may initiate an investigation procedure with the National Authority for Data Protection and Freedom of Information (postal address: 1363 Budapest Pf. 9., e-mail: ugyfelszolgalat@naih.hu) to stop the alleged unlawful processing.

You are also informed that you may also bring a civil action before a court.

4. Data security

In the operation of our IT systems, we ensure that the necessary access control, internal organisation and technical solutions are in place to prevent unauthorised persons from obtaining your data and to prevent unauthorised persons from deleting, removing or modifying your data. We also enforce data protection and data security requirements with our data processors.

We keep records of any data breaches and, where necessary, we will inform you of any incidents that occur.

5. Other provisions

We reserve the right to modify this Privacy Notice in any way that does not affect the purpose and legal basis of the processing.

If, however, we intend to carry out further processing of the data collected for purposes other than those for which they were collected, we will inform you of the purposes of the processing and the information below before carrying out the further processing:

– the period for which the personal data will be stored or, if this is not possible, the criteria for determining that period;

– the right to request access to, rectification, erasure or restriction of processing of personal data concerning you and, in the case of processing based on legitimate interest, to object to the processing of personal data and, in the case of processing based on consent or contractual relations, to request the right to data portability;

– in the case of processing based on consent, that you may withdraw your consent at any time,

– the right to lodge a complaint with a supervisory authority;

– whether the provision of the personal data is based on a legal or contractual obligation or is a precondition for the conclusion of a contract and whether you are under an obligation to provide the personal data and the possible consequences of not providing the data;

– the fact of automated decision-making (if such a process is used), including profiling, and, at least in these cases, clear information about the logic used and the significance and likely consequences for you of such processing.

The processing may only start after this, if the legal basis for the processing is consent, and you must consent to the processing in addition to being informed.

This Privacy Notice is valid from 26.07.2023.