Privacy Notice
Application and Website Privacy Notice: Full Privacy Notice
This summary of the Privacy Notice ("Privacy Notice") explains how the Hungarian Cycling Federation processes your personal data when you use the Balaton Bike 365 mobile application ("Application") and its related website, balatonbike365.hu ("Website") (together, the "Platform"). The Privacy Notice helps you better understand how we use your personal data and explains how we collect, use, and with whom we share it.
DATA CONTROLLER
VisitBalaton365 Nonprofit Korlátolt Felelősségű Társaság (registered office: 1011 Budapest, Szilágyi Dezső tér 1.; email address: adatvedelem@balatonbike365.hu; "Visit Balaton", or "we").
PURPOSES OF PROCESSING
Visit Balaton processes your personal data for the following processing purposes:
- Creation and management of a user account: the processing of your data is necessary for the execution and performance of the provisions set out in the applicable terms of use of the Application and website as a contract, as well as for accessing the functions of the Platform.
- Service provider application: any bicycle-friendly service provider may register through the Website as a favorite service location or favorite point.
- Communication with service providers: you have the opportunity to communicate with any bicycle-friendly service provider through the Platform, for which we rely on your consent as the legal basis.
- Location sharing with service providers: you may share your current location with service providers for 60 minutes so that the service provider can plan a route to your current location, for which we rely on your consent as the legal basis
- Location sharing: you may share your own location with the members of the group if they also enable location sharing. Location sharing stops automatically when you leave the view.
- Recommending tour routes, route planning: registered users may recommend tour routes to each other through the Platform.
- User statistics and previous activities: you may save your previous tour routes and create individual statistics from them according to your choice.
- Rating service providers and places: you may rate individual service providers and places.
- Managing tour groups: you have the opportunity to create groups and/or join groups with your acquaintances registered on the Platform so that you can organize bicycle tours.
- Contact and communication: the purpose of the processing is to handle your questions and inquiries received by us.
- Recording places: you may record places that are currently not available on the Platform.
- Newsletter, notifications and marketing communications: the purpose of the processing is to send notifications about our services and activities; for this purpose, we rely on your consent.
WHAT PERSONAL DATA DO WE PROCESS ABOUT YOU?
For the purposes described above, we process the following types of personal data:
- Registration data: such as your name, identification data (email address and password), Google ID, registration confirmation code.
- User profile: such as your username, email address, saved user activities, user group, group membership identifier, the date and time of visits to the Platform, logins, profile picture, user type (general/admin), language used, newsletter subscription (if applicable), the code required for password change and its validity date, the code required for email address change and its validity date.
- Tour route data: such as data of saved tour routes, data of saved route plans
- Location data: such as the user's last geographic location, the timestamp belonging to the last geographic location
- POI data: POI name, content of the description, POI location data, POI image, content of user ratings.
- Service provider data: service provider name, email address, phone number (only when browsing the Website), service provider rating
- Device data: such as the type of device used by the user, the Internet Protocol (IP) address used during the visit to the Platform, as well as cookies and local storage and session storage data.
- Communication data: such as your questions, inquiries, comments, or communications with you.
LEGAL BASES FOR PROCESSING
When processing your personal data, we rely on the following legal bases:
- The processing of your personal data is necessary for the performance of the contract with you pursuant to Article 6(1)(b) of Regulation (EU) 2016/679 ("GDPR") ("Contract").
- You have given us your consent in accordance with Article 6(1)(a) of the GDPR ("Consent").
- The processing of your personal data is based on our legitimate interest pursuant to Article 6(1)(f) of the GDPR ("Legitimate Interest").
Visit Balaton has a legitimate interest in responding to users' questions, inquiries, and complaints, since satisfying user needs and resolving concerns is in Visit Balaton's legitimate interest. If the user contacted Visit Balaton directly with a question or complaint, the user may reasonably expect that their data will be processed in connection with the response provided.
Visit Balaton has a legitimate interest in ranking POIs based on user feedback and in allowing our users to recommend new POIs through the Platform. It is our legitimate interest to provide up-to-date information to our users about POIs and to increase the value of our service by adding new POIs.
For further information, please contact us at adatvedelem@balatonbike365.hu.
| Purpose of processing | Categories of personal data processed | Legal basis |
|---|---|---|
| Creation and management of a user account |
| Contract |
| Service provider application |
| Contract |
| Communication with service providers |
| Consent |
| Location sharing with service providers |
| Consent |
| Location sharing |
| Consent |
| Recommending tour routes, route planning |
| Contract |
| Preparing user statistics, recording previous activities |
| Contract |
| Rating service providers and places |
| Legitimate interest |
| Managing tour groups |
| Contract |
| Contact and communication |
| Legitimate interest |
| Recording places |
| Legitimate interest |
| Newsletter, notifications and marketing communications |
| Consent |
HOW LONG DO WE RETAIN YOUR PERSONAL DATA?
We process and store personal data only for as long as necessary for the performance of our services and obligations, and strictly only for the period necessary to achieve the purpose for which the data was recorded. Your personal data will be deleted when they are no longer necessary for us.
In the case of processing based on consent, we process your data until consent is withdrawn, but in the case of communication for marketing purposes, for no longer than two years.
Any personal data related to complaints or legal claims are retained for the duration of the civil law limitation period (that is, for 5 years).
If you have a contractual relationship with us, we retain personal data for the duration of the civil law limitation period (that is, for 5 years). Personal data stored in contracts, communications, and business letters are subject to statutory retention requirements, which prescribe retention periods of at least 8 years for accounting documents.
WHO HAS ACCESS TO YOUR PERSONAL DATA
Visit Balaton staff have access to your personal data on a "need-to-know" basis. Our service providers and other third parties may have access to your personal data as processors, and courts, authorities, and other official bodies may require us to make your personal data available. We may transfer your personal data to third parties for the following reasons:
- To certain third parties: we may transfer your data to external advisors (such as lawyers) for the purpose of responding to legal claims. We may transfer your Location data to bicycle-friendly service providers if you have given your prior consent. The Platform uses Google Maps services through Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) for the visual display of your location data. Google may transfer your data to the USA. You can find Google's privacy notice at the following link: https://policies.google.com/privacy?hl=hu
- Service providers: we use third-party IT services and systems to support our internal procedures.
| Name of processor | Registered office | Activity |
|---|---|---|
| QILAQ SOLUTION Kft. | 8623 Balatonföldvár, Móricz Zs. u. 26/b/3, info@qilaq.hu | Website operation |
| RACKFOREST Kft. | 1132 Budapest, Victor Hugo u. 18-22, 3. em. 3008 a , info@rackforest.hu | Cloud service provider |
- Authorities and other official bodies: to authorities and other official bodies, including supervisory authorities upon request in accordance with the law, or for the protection of our rights or the security of our clients, staff, or property.
By entering into appropriate data transfer agreements based on the Standard Contractual Clauses referred to in Article 46(5) of the GDPR (2010/87/EU and/or 2004/915/EC), or by other appropriate measures, we have ensured that recipients located outside the EEA will provide an adequate level of protection for personal data and that appropriate technical and organizational security measures have been introduced in order to protect personal data against accidental or unlawful destruction, accidental data loss or alteration, unauthorized disclosure or access, and all other forms of unlawful processing.
Please contact us at the above email address if you would like to receive a copy of the relevant data transfer safeguards.
YOUR RIGHTS
You have the following rights:- Right of access: you are entitled to receive confirmation/feedback from us as to whether the processing of your personal data is ongoing and, if it is ongoing, you are entitled to obtain access to your personal data. We may request additional information from you for the purpose of identifying you, and we may charge a reasonable fee in the case of additional copies.
- Right to rectification: you are entitled to request that we rectify inaccurate personal data concerning you.
- Right to erasure (right to be forgotten): you are entitled to request the deletion of your personal data.
- Right to restriction of processing: in certain cases, based on your request, we restrict the processing of your personal data. In such a case, we may process the data only for purposes prescribed by law.
- Right to data portability: you are entitled to receive the personal data concerning you that we have about you in a structured, commonly used, machine-readable format, and you are also entitled to transmit those personal data to another controller.
- Right to object:
| You are entitled to object at any time, on grounds relating to your own situation, to our processing of your personal data, in which case we may no longer process your personal data. If you are entitled to the right to object and the exercise of this right is justified, we will no longer process your personal data for the processing purposes affected by the objection. |
You are also entitled to contact the National Authority for Data Protection and Freedom of Information (registered office: 1055 Budapest, Falk Miksa utca 9-11.; website: www.naih.hu; phone number: +36-1-391-1400; email address: ugyfelszolgalat@naih.hu; fax: +36 1 391 1410).