DATA PROTECTION NOTICE
Panthera Stone Sculpture Ltd.
Website: https://pantherakoszobraszat.hu/
Valid: 2026 [month] [day]
1. The data controller
This data management notice is Panthera Stone Sculpture Ltd. run by https://pantherakoszobraszat.hu/ It applies to the personal data processing that takes place during the use of the website.
Name of data controller: Panthera Stone Sculpture Ltd.
Headquarters: 2100 Gödöllő, Címer utca 25.
Company registration number: [COMPANY NOTE]
Tax number: [TAX NUMBER]
Email: pantherakoszobraszat@gmail.com
Phone number: [PHONE NUMBER]
Website: https://pantherakoszobraszat.hu/
The data controller shall process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and applicable Hungarian laws.
2. Principles of data management
The Data Controller processes the personal data:
- handles it lawfully, fairly and transparently;
- processes it only for a specific, clear and lawful purpose;
- restricts the processing to the extent necessary for the purpose of the processing;
- strives to ensure that the data is accurate and up-to-date;
- only for the necessary time;
- it is protected by appropriate technical and organizational measures.
3. Data management related to the operation of the website
During the visit to the website, certain technical data may become automatically manageable, for example:
- IP address;
- the date of the visit;
- the website visited;
- browser type;
- operating system;
- technical log data;
- data related to IT security incidents.
The purpose of data processing:
- the secure operation of the website;
- the detection and elimination of technical errors;
- prevention of abuse;
- Maintaining IT security.
The legal basis for data processing: Article 6(1)(f) of the GDPR, the Data Controller’s legitimate interest in ensuring the safe and proper operation of the website.
The data retention period depends on the settings of the technical system and the hosting provider, and the Data Controller will only process them for the necessary period.
Storage provider:
[NAME]
[location/address]
[website]
4. Contact form
The contact form on the website is operational.
During the use of the form, the data provided by the person concerned may be processed, in particular:
- name;
- e-mail address;
- phone number, if the person concerned provides it;
- the text of the message;
- additional information voluntarily provided by the person concerned.
The purpose of data processing
The purpose of data processing:
- providing contact information;
- responding to the request of the interested party;
- handling of the request for quotation;
- providing the professional or other information requested by the interested party;
- Preparing a business relationship.
Legal basis for data processing
If, before concluding the contract in question, you request an offer or initiate the establishment of a contractual relationship, the legal basis for data processing is Article 6(1)(b) of the GDPR.
In the case of other contact requests, the legal basis for data processing is Article 6(1)(f) of the GDPR; the Data Controller’s legitimate interest in responding to requests and establishing a business relationship.
Data retention
The Data Controller processes the data provided during the contact process until the request is fulfilled or the possible contractual or legal obligations remain in place.
If a contractual relationship is not established from the contact, the data will be stored for a maximum of 1 year it shall be kept, unless a law or a legitimate claim requires longer retention.
5. Request for offer and contract conclusion
If the interested party requests an offer for the services of Panthera Kőszobrászat Kft., the Data Controller may process personal data necessary for preparing the offer and preparing the contract.
Data processing may particularly involve:
- by name;
- to an e-mail address;
- to a phone number;
- billing data;
- contact details;
- information related to the ordered service.
The legal basis for data processing is Article 6(1)(b) of the GDPR.
The Data Controller stores the data necessary for the performance of the contract and the fulfillment of legal obligations for the period specified in the relevant laws.
6. Data management related to billing
The Data Controller may process personal data in order to fulfill its billing and accounting obligations.
The legal basis for data processing is Article 6(1)(c) of the GDPR, the fulfillment of the legal obligation to the Data Controller.
The retention of billing and accounting documents is carried out in accordance with the applicable tax and accounting laws.
7. Google Maps
On the website Google Maps the service may be embedded.
When displaying Google Maps, Google technologies may establish a connection with the user's device with Google's servers, during which technical data, such as IP address, may be transmitted.
Further information regarding the use of the service can be found in Google's privacy policy.
Google's data protection notice:
https://policies.google.com/privacy
Important: The loading of Google Maps on the website must be managed in accordance with the cookie consent system settings used on the website.
8. YouTube videos
On the website Embedding YouTube videos It can happen.
Viewing the YouTube video may establish a connection with Google/YouTube’s servers, during which technical data, such as IP address and information about the browser, may be transmitted.
YouTube Data Protection Notice:
https://policies.google.com/privacy
The loading of YouTube content must be provided in accordance with the website’s cookie consent system.
9. Facebook and Instagram
On the website is Panthera Stone Carving Ltd. Facebook and Instagram presence it is available, and if technically embedded content is used, it can establish a connection with Meta platforms.
The data management of Facebook and Instagram is governed by Meta’s own data protection regulations:
https://www.facebook.com/privacy/policies/
If external Meta content is directly embedded on the website, its technical operation must be ensured in accordance with the cookie contribution system.
10. Cookies and similar technologies
The website may use cookies and similar technologies.
Among the cookies may be:
- cookies necessary for the operation of the website;
- cookies that retain the consent settings;
- statistical cookies;
- cookies related to external services.
The website is Complianz It uses a cookie consent management system.
The cookies used by Complianz can be used to store consent settings, among other things.
The exact list of cookies, their purpose, category and duration of storage can be found on the website. Cookie Statement It includes.
The use of non-essential cookies and similar technologies – where consent is required under applicable laws – will only take place after the relevant consent has been given.
The affected person can modify or revoke their consent at any time through the cookie settings.
11. Google Fonts
To display the website Google Fonts The service is usable.
If the font is loaded directly from Google’s servers, the browser can establish a connection with Google’s servers.
Google's privacy policy:
https://policies.google.com/privacy
The website operator is advised to load Google Fonts locally., If this is technically feasible, because this way the direct data connection between the visitor's browser and Google's servers can be reduced.
12. Social media
The Panthera Stone Carving Ltd. may use social media platforms, in particular:
- Facebook;
- Instagram;
- YouTube.
If the person concerned accesses these external sites via a link on the website, the data protection regulations of the respective provider shall apply.
13. Data Processors
The Data Controller may employ data processors to operate the website and perform other tasks.
Web hosting provider
Name: [LOADSHED PROVIDER]
Headquarters: [TITLE]
Website: [WEBPAGE]
Website developer / maintainer
Name: [PROVIDER]
Headquarters: [TITLE]
Website: [WEBPAGE]
Other data processor
[NAME / SERVICE / AVAILABILITY]
The Data Controller only uses data processors that provide appropriate guarantees for the implementation of data processing in accordance with the GDPR.
14. Data transfer to a third country
When using certain external services – such as Google or Meta – personal data may also be transferred to a country outside the European Economic Area.
Such data transfer can only take place if the conditions permitted by the GDPR are met.
The external service providers provide detailed information in their own privacy policies regarding data management and any international data transfers.
15. Data security
The Data Controller strives to ensure the security of personal data by implementing appropriate technical and organizational measures.
Within this framework, it particularly strives to:
- to prevent unauthorized access;
- to prevent unauthorized modification of data;
- to prevent the loss and destruction of data;
- to maintain the website's IT security;
- to limit access rights.
16. Automated decision-making
Regarding the personal data collected through the website by the Data Controller it does not employ any solely automated decision-making that would have legal effects on the data subject or would similarly significantly affect them.
The Data Controller does not carry out any profiling that would have such a significant impact on the data subject.
17. The rights of the concerned
The person concerned is entitled, under the conditions set out in the GDPR:
Requesting information
You may request information about the processing of your personal data.
Requesting access
You may request confirmation that the processing of your personal data is ongoing and request access to the data being processed.
Requesting correction
You may request the rectification of inaccurate or incomplete personal data.
Request for removal
In the cases specified in the GDPR, you may request the deletion of your personal data.
Requesting the restriction of data processing
You may request the restriction of data processing under the conditions specified in the GDPR.
Object to
In data processing based on legitimate interest, the data subject is entitled to object to the data processing.
Right to data portability
If the conditions set out in the GDPR are met, you may request the provision of your personal data in a structured, widely used, machine-readable format.
Withdrawal of consent
If the data processing is based on the consent of the data subject, the consent can be withdrawn at any time.
The withdrawal of consent does not affect the legality of data processing before the withdrawal.
18. Submission of the affected applications
To exercise your rights, you may contact the Data Controller at the following address:
Panthera Stone Sculpture Ltd.
2100 Gödöllő, Címer utca 25.
Email: pantherakoszobraszat@gmail.com
The Data Controller will examine and respond to requests within the timeframe specified in the GDPR.
The Data Controller is entitled to request additional information if necessary to verify the identity of the applicant.
19. Appeal
If the person concerned believes that the processing of their personal data does not comply with the applicable data protection laws, they may file a complaint with the supervisory authority:
National Data Protection and Freedom of Information Authority (NAIH)
Headquarters: 1055 Budapest, Falk Miksa utca 9–11.
Postal address: 1363 Budapest, Pf. 9.
Phone +36 (1) 391-1400
Email: ugyfelszolgalat@naih.hu
Website: https://www.naih.hu/
The affected person is also entitled to go to court in accordance with the provisions of the GDPR.
20. Modification of the information
The Data Controller reserves the right to modify this data protection notice, in particular:
- change in legislation;
- change in official practice;
- changes in the functionality of the website;
- introduction of a new data management purpose or service;
- Technical change
in that case.
The data protection notice currently in effect is available on the website.
The date of entry into force of this data management notice: 2026. [month] [day]
Panthera Stone Sculpture Ltd.