Data processing information

Acceptance date: 2026-01-09 

Data controller Name: Innovative Marketing Solutions Ltd 
Headquarters: 1143 Budapest, Gizella út 19/B
Mailing address, complaint handling: 1143 Budapest, Gizella út 19/B 
E-mail: hello@tangerinedesign.hu
Phone number: +36705000800 
Website: https://tangerinedesign.hu 

Hosting provider 
Name: Tárhely.Eu Szolgáltató Kft. 
Mailing address: 1097 Budapest, Könyves Kálmán körút 12-14. 
E-mail address: support@tarhely.eu Phone number: +36 1 789-2-789 


Description of data processing carried out during the operation of the website

Information regarding the use of cookies 
What is a cookie? 
The Data Controller uses so-called cookies during your visit to the website. A cookie is an information package made up of letters and numbers that our website sends to your browser with the aim of saving certain settings, facilitating the use of our website, and helping us collect some relevant statistical information about our visitors.
Some cookies do not contain personal information and are not suitable for identifying individual users, but some contain a unique identifier - a secret, randomly generated number sequence - which is stored on your device, thus ensuring your identifiability.

The duration of operation of individual cookies is included in the description of each cookie. 

The legal background and basis of cookies:
The legal basis for data processing is your consent according to Article 6(1)(a) of the Regulation. The main characteristics of the cookies used by the website:
Essential cookies for operation:
If you do not accept the use of these cookies, certain functions may not be available to you.
  • storage of klaro consent (cookie banner settings)
  • _ga measuring traffic (GA4)
  • Statistical cookies: _ga_*
  • measuring traffic (GA4)ar_debug (Google debug cookie – sometimes appears) measuring traffic (GA4) 

If you do not accept the use of cookies, certain functions will not be available to you. More information about deleting cookies can be found at the following links:

Google Consent Mode v2

The Data Controller has integrated the Google Consent Mode v2 version into the website, and through its cookie panel, it manages consents and refusals based on the new version. 

According to Google Consent Mode v2, Google uses two additional flags alongside the previous two (analytics_storage, ad_storage) which are intended for storing and reading statistical and advertising cookies: 
  • ad_user_data: Any user data that can be sent to Google for advertising purposes. 
  • ad_personalization: The user's data can be used for personalized advertising purposes, such as remarketing. 

The operation of these two switches serves to determine whether the storage and reading of statistical and advertising cookies is permitted.

Contact

For example, if you contact us via email, contact form, or phone with a question, then the processing of your personal data will also take place. 
Processed data 
The data you provided during the contact.
Duration of data processing 
We will process the data only until the contact is concluded.
Legal basis for data processing
Your voluntary consent, which you provide to the Data Controller during the contact. [Data processing under Article 6(1)(a) of the Regulation]

Marketing-related data processing

Remarketing 

The data processing as a remarketing activity is carried out using cookies. 
Processed data 
The data processed by the cookies defined in the cookie notice. 
Duration of data processing 
The storage duration of the given cookie, more information is available here: 

Google general cookie notice:
Google Analytics notice:
Facebook notice:
The storage duration of the given cookie, more information is available here: 

Legal basis for data processing 
Your voluntary consent, which you provide to the Data Controller by using the website [Data processing under Article 6(1)(a) of the Regulation].

Further data processing

If the Data Controller wishes to carry out further data processing, it will provide prior information about the essential circumstances of the data processing (the legal background and legal basis of data processing, the purpose of data processing, the scope of processed data, the duration of data processing).

Recipients of personal data

Data processing aimed at storing personal data 

Name of the data processor: 
Tárhely.Eu Szolgáltató Kft. 
Contact details of the data processor:
Phone number: +36 1 789-2-789 
Email address: support@tarhely.eu 
Headquarters: 1097 Budapest, Könyves Kálmán körút 12-14. 
Website: https://tarhely.eu 

The Data Processor stores personal data based on a contract with the Data Controller. The Data Processor is not entitled to access the personal data. 

Data processing related to newsletter sending 


Name of the company operating the newsletter system: MarketingMérnök (Innovative Marketing Solutions Kft) 
Headquarters of the company operating the newsletter system: 1143 Budapest, Gizella út 19/b
Phone number of the company operating the newsletter system: +36705000800 
Email address of the company operating the newsletter system: ugyfelszolgalat@marketingmernok.hu
Website of the company operating the newsletter system: https://marketingmernok.hu 

The Data Processor and the Data Controller agree, using their own software to send newsletters. In this process, the Data Processor processes the name and email address of the data subject to the extent necessary for sending the newsletter. 

Data processing related to CRM system operation 

Name of the data processor: MarketingMérnök (Innovative Marketing Solutions Kft) 
Headquarters of the data processor: 1143 Budapest, Gizella út 19/b 
Phone number of the data processor: +36705000800 
Email address of the data processor: ugyfelszolgalat@marketingmernok.hu 
Website of the data processor: https://marketingmernok.hu

The Data Processor and the Data Controller agree, using their own software to keep track of orders. 
In this process, the Data Processor processes the name, address, phone number, number of orders, and dates of the data subject within the civil law limitation period.

Your rights during data processing

Within the duration of data processing, you are entitled to the following rights according to the provisions of the 
Regulation:
  • the right to withdraw consent
  • access to personal data and information related to data processing
  • the right to rectification 
  • the right to restriction of processing, the right to erasure 
  • the right to object 
  • the right to data portability. 
If you wish to exercise your rights, it will involve your identification, and the Data Controller will necessarily need to communicate with you. Therefore, for identification purposes, you will need to provide personal data (but identification can only be based on data that the Data Controller is already processing about you), and your complaint regarding data processing will be available in the Data Controller's email account within the time frame specified in this notice. 
The Data Controller will respond to complaints related to data processing no later than within 30 days. 

The right to withdraw consent 
You have the right to withdraw your consent to data processing at any time, in which case we will delete the provided data from our systems. 
Access to personal data 
You have the right to receive feedback from the Data Controller regarding whether your personal data is being processed, and if data processing is ongoing, you are entitled to access the processed personal data and to be informed by the Data Controller about the following information: 
  • the purposes of data processing; 
  • the categories of personal data concerning you; 
  • information about the recipients or categories of recipients to whom the personal data has been or will be disclosed by the Data Controller; 
  • the planned duration of storage of personal data, or if that is not possible, the criteria for determining that duration; 
  • your right to request the rectification, erasure, or restriction of processing of your personal data from the Data Controller, and in the case of processing based on legitimate interests, to object to such processing; 
  • the right to lodge a complaint with a supervisory authority; 
  • if the data was not collected from you, all available information about their source; 
  • the fact of automated decision-making (if such a procedure is applied), including profiling, as well as at least understandable information about the logic involved and the significance of such processing for you, and the expected consequences.
The purpose of exercising the right may be to establish and verify the lawfulness of data processing, therefore, in the case of repeated requests for information, the Data Controller may charge a reasonable fee for the provision of the information. 
The Data Controller provides access to personal data by sending the processed personal data and information to you via email after your identification. If you have a registration, we will provide access by allowing you to view and verify the personal data processed about you by logging into your user account. 
Please indicate in your request whether you are requesting access to personal data or information related to data processing.

The right to rectification 

You have the right to request the Data Controller to rectify any inaccurate personal data concerning you without undue delay.

The right to restriction of processing 

You have the right to request the Data Controller to restrict processing if any of the following applies: 
  • You contest the accuracy of the personal data, in which case the restriction applies for the period enabling the Data Controller to verify the accuracy of the personal data; if the accurate data can be established immediately, the restriction will not apply; 
  • the processing is unlawful, but you oppose the erasure of the data for any reason (for example, because the data is important for you to assert a legal claim), therefore you do not request the erasure of the data but instead request the restriction of its use;&nbsp
  • The Data Controller no longer needs the personal data for the purposes of the processing indicated, but you require them for the establishment, exercise, or defense of legal claims; or 
  • You have objected to the processing, but the Data Controller's legitimate interest may also justify the processing; in this case, until it is determined whether the Data Controller's legitimate grounds override your legitimate interests, the processing must be restricted. 
If the processing of personal data is restricted, such personal data may only be processed with the data subject's consent, or for the establishment, exercise, or defense of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of substantial public interest of the Union or a Member State. The Data Controller will inform you in advance (at least 3 working days before the lifting of the restriction) about the lifting of the restriction on processing.

The right to erasure - the right to be forgotten 

You have the right to request the Data Controller to erase personal data concerning you without undue delay if any of the following grounds apply: 
  • the personal data are no longer necessary for the purposes for which they were collected or otherwise processed by the Data Controller; 
  • You withdraw your consent and there is no other legal basis for the processing; 
  • You object to the processing based on legitimate interests, and there is no overriding legitimate reason (i.e., legitimate interest) for the processing, 
  • the personal data have been unlawfully processed by the Data Controller and this has been established based on the complaint, the personal data must be erased to fulfill a legal obligation imposed on the Data Controller by Union or Member State law.
If the Data Controller has disclosed personal data concerning you for any lawful reason, and is obliged to erase it for any of the reasons specified above, it must take reasonable steps, taking into account available technology and the cost of implementation – including technical measures – to inform other data controllers processing the data that you have requested the deletion of links to the personal data in question or copies or duplicates of such personal data. 
The right to erasure does not apply if the processing is necessary:
  • for the exercise of the right to freedom of expression and information; 
  • for compliance with a legal obligation to which the Data Controller is subject under Union or Member State law (such as data processing carried out in the context of invoicing, as the retention of invoices is required by law), or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller; 
  • for the establishment, exercise, or defense of legal claims (e.g., if the Data Controller has a claim against you that has not yet been fulfilled, or if a consumer or data processing complaint is pending).

The right to object 

You have the right to object at any time to the processing of your personal data based on legitimate interests for reasons relating to your particular situation. In this case, the Data Controller may not continue to process the personal data unless it demonstrates compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or which relate to the establishment, exercise, or defense of legal claims. 
If the processing of personal data is for direct marketing purposes, you have the right to object at any time to the processing of your personal data for that purpose, including profiling, to the extent that it is related to such direct marketing. If you object to the processing of personal data for direct marketing purposes, the personal data may no longer be processed for that purpose.

The right to data portability 

If the processing is carried out by automated means, or if the processing is based on your voluntary consent, you have the right to request the Data Controller to provide you with the data you have provided to the Data Controller, which the Data Controller will make available to you in xml, JSON, or csv format, if technically feasible, you may also request that the Data Controller transmits the data in this format to another data controller.

Automated decision-making 

You have the right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects concerning you or similarly significantly affects you. In such cases, the Data Controller is obliged to take appropriate measures to protect the rights, freedoms, and legitimate interests of the data subject, including at least the right of the data subject to obtain human intervention from the Data Controller, to express their point of view, and to contest the decision.
The above does not apply if the decision:
  • is necessary for the conclusion or performance of a contract between you and the Data Controller; 
  • is based on Union or Member State law applicable to the Data Controller that also provides for appropriate measures to protect your rights and freedoms, and legitimate interests; 
  • or is based on your explicit consent.

Registration in the data protection registry

According to the provisions of the Infotv., the Data Controller was required to report certain data processing activities to the data protection registry. This reporting obligation ceased on May 25, 2018.

Data security measures

The Data Controller declares that appropriate security measures have been taken to protect personal data against unauthorized access, alteration, transmission, disclosure, deletion, or destruction, as well as against accidental destruction and damage, and against becoming inaccessible due to changes in the applied technology. The Data Controller will do everything possible, given the organizational and technical capabilities, to ensure that its data processors also implement appropriate data security measures when processing your personal data.

Remedies

If you believe that the Data Controller has violated any legal provisions regarding data processing or has not fulfilled any of your requests, you may initiate an investigation procedure by the National Authority for Data Protection and Freedom of Information to terminate the presumed unlawful data processing (mailing address: 1363 Budapest, Pf. 9., email: ugyfelszolgalat@naih.hu, phone numbers: +36 (30) 683-5969 +36 (30) 549-6838; +36 (1) 391 1400). We also inform you that in the event of a violation of legal provisions regarding data processing, or if the Data Controller has not fulfilled any of your requests, you may initiate a civil lawsuit against the Data Controller before a court.

Modification of the data processing information

The Data Controller reserves the right to modify this data processing information in a manner that does not affect the purpose and legal basis of data processing. By using the website after the modification takes effect, you accept the modified data processing information. If the Data Controller wishes to carry out further data processing for purposes other than those for which the data was collected, it will inform you of the purpose of the data processing and the following information prior to the further data processing:

  • the duration of storage of personal data, or if this is not possible, the criteria for determining the duration; 
  • your right to request access to your personal data from the Data Controller, to have it rectified, deleted, or to restrict its processing, and in the case of data processing based on legitimate interests, to object to the processing of personal data, as well as to request the provision of the right to data portability in the case of data processing based on consent or contractual relationship; 
  • in the case of data processing based on consent, that you can withdraw your consent at any time, 
  • your right to lodge a complaint with the supervisory authority; 
  • whether the provision of personal data is based on a legal obligation or a contractual obligation or is a prerequisite for entering into a contract, and whether you are obliged to provide personal data, as well as the possible consequences of failing to provide data; 
  • the fact of automated decision-making (if such a procedure is applied), including profiling, as well as at least in these cases understandable information about the logic involved and the significance of such data processing and the expected consequences for you.
Data processing may only commence thereafter if the legal basis for data processing is consent, and in addition to the information, you must also consent to the data processing. 

This document contains all relevant data processing information related to the operation of the website in accordance with the General Data Protection Regulation (EU) 2016/679 (hereinafter: Regulation, GDPR) and Act CXII of 2011 (hereinafter: Infotv.).