← Home

FESZTIZ – Privacy Policy

This is a courtesy translation. In legal matters the Hungarian version prevails.

I. The Controller and Contact Details

Controller: FESZTIZ Kereskedelmi és Szolgáltató Korlátolt Felelősségű Társaság (FESZTIZ Kft.)

Registered office: 6635 Szegvár, Iskola utca 41., Hungary

Tax number: 32911648-1-06

Represented by: Bence Lénárt-Karácsonyi, managing director

Contact e-mail (for data protection matters): info@fesztiz.hu

Application name: FESZTIZ

This notice applies to the FESZTIZ visitor application and to the FESZTIZ Staff application.

II. Definitions (GDPR references)

Data subject: A registered user of the FESZTIZ application.

Personal data: Any information by which the user can be identified (e.g.

name, e-mail address, phone number, address).

Processing: Any operation performed on personal data (collection,

storage, transfer, erasure).

Processor: An organisation processing data on behalf of the controller

(e.g. Barion, server hosting).

III. Scope, Purpose, Legal Basis and Duration of Processing

Data category Purpose of processing Legal basis (Article 6 GDPR) Retention period

Registration data (full name, e-mail address, phone number) identification, registration, provision of the service, contact Performance of a contract – Article 6(1)(b) Until deletion of the account, then 5 years due to legal obligation

Financial transaction data (amount of the ticket, booking or order, Barion transaction identifier) execution of the payment transaction, invoicing Legal obligation – Article 6(1)(c) 8 years under the Accounting Act

Billing data (billing address, tax number) issuing the accounting document Legal obligation – Article 6(1)(c) 8 years under the Accounting Act

Ticket and booking data (ticket type, validity, time of use, content of the booking) issuing the ticket, admission, fulfilment of the booking Performance of a contract – Article 6(1)(b) 8 years under accounting rules

Favourites and daily agenda (favourite festivals, events, stages) compiling a personal programme recommendation, reminders Performance of a contract – Article 6(1)(b) Until deletion of the account

Friends and location sharing settings voluntary location sharing between friends Consent – Article 6(1)(a) Until withdrawal of consent or deletion of the account

Notification settings (push permission, blocking) information, marketing notifications (if permitted) Consent – Article 6(1)(a) Until withdrawal of consent

IV. Special processing: Location Data

The FESZTIZ application accesses the location data of the user's device for the following purposes:

listing the festivals closest to the user's location,

showing the user's own position on the festival map,

if the user has enabled it: location sharing between friends.

The Service Provider states that:

we keep no location history: we store only the last known position, and only

if the user has enabled location sharing between friends;

this record is updated when sharing is switched off and deleted when the account

is deleted;

the position is visible only to those friends with whom the user has **expressly

allowed** sharing – this is verified by the server as well, not only by the app;

location data is not transferred to third parties and is not used for marketing;

the application accesses location data only in the foreground, while in use.

Granting location permission is voluntary and can be withdrawn at any time in the device settings or in the application. In that case the location-based features (nearby festivals, location sharing) do not work; the rest of the application does.

V. Data stored on the device (offline use)

At a festival the mobile network is often overloaded, therefore two sets of data are also stored on the user's own device so that they remain available without a network connection: the purchased tickets and the day's programme. These data are not transferred separately, and they are deleted on logout.

VI. Data Security and Data Transfer

1. Processors and recipients

Partner Providers (vendors, venues, organizers): During normal operation

they receive only the anonymised data necessary for fulfilment. They receive no personal data, except in the case of complaint handling (see below).

Barion Payment Zrt.: In the course of executing payment transactions it

processes transaction data as an independent controller.

Billingo Zrt.: Acts as a processor when issuing the official invoice.

External technical providers (Processors): server hosting, cloud

infrastructure, push notifications, map services.

2. Data transfer in case of a complaint ("report")

The Service Provider transfers the User's full name, e-mail address and phone number to the Restaurant concerned in one specific case only:

Purpose of the transfer: investigating the complaint, contacting the user, providing redress.

Legal basis: The legitimate interest of the controller – Article 6(1)(f) GDPR (justified interest in complaint handling and in investigating service faults). The legitimate interest is supported by a balancing test.

3. Transfer of data abroad

FESZTIZ Kft. does not transfer personal data outside the EU.

VII. Rights of the Data Subject (Chapter III GDPR)

The user may exercise their rights at any time at info@fesztiz.hu or by post.

Right of access (Article 15 GDPR): may request information about their

personal data.

Right to rectification (Article 16): may request correction of inaccurate

data.

Right to erasure (Article 17): may request erasure of their data if there

is no lawful ground for storage.

Right to restriction (Article 18): may request restriction of processing.

Right to data portability (Article 20): may request their data in a

machine-readable format.

Right to object (Article 21): may object to processing based on

legitimate interest.

VIII. Remedies

1. Complaint to the Controller

E-mail: info@fesztiz.hu

2. Complaint to the supervisory authority (NAIH)

Hungarian National Authority for Data Protection and Freedom of Information

Address: 1055 Budapest, Falk Miksa utca 9-11., Hungary

Postal address: 1363 Budapest, Pf. 9., Hungary

E-mail: ugyfelszolgalat@naih.hu

3. Court proceedings

The user may turn to a court to have the lawfulness of the processing examined (Article 79 GDPR).