☰

Effective date: 1 January 2025

1. Data Controller

Company name: Bezolgastro Kft.
Address: 4100 Berettyóújfalu, Berettyólapos gátsor 10/a, Hungary
Tax number: 24079491-2-09 · Reg. no.: 09-09-023484
E-mail: info@stopbisztro.hu
Phone: +36 30 352 8040
No DPO required. Privacy enquiries: info@stopbisztro.hu

2. Data Processing Activities

2.1. Online order

Data: name, e-mail, phone, delivery address, order details, transaction ID.
Purpose: order processing. Legal basis: GDPR Art. 6(1)(b) – contract performance.
Retention: 8 years (accounting obligation).

2.2. User account registration

Data: name, e-mail, password (hashed), saved address(es).
Legal basis: GDPR Art. 6(1)(a) – consent.
Retention: until account deletion, or after 3 years of inactivity.

2.3. Guest checkout

Data: anonymous session ID (guest_token), basket contents.
Legal basis: GDPR Art. 6(1)(f) – legitimate interest. Retention: until browser session ends.

3. Data Processors

3.1. Magyar Hosting Kft. – hosting provider

1132 Budapest, Victor Hugo u. 18-22., Hungary · www.magyarhosting.hu
Role: data processor – stores application data on its servers.

3.2. Barion Payment Zrt. – payment provider

1117 Budapest, Infopark sétány 1., Hungary · www.barion.com
Role: independent data controller – processes payment data under its own policy. Seller only receives the transaction ID.
Privacy policy: barion.com/en/privacy-policy

4. Cookies

Technical (necessary) – no consent required:

session – session management, basket (until browser closed)
XSRF-TOKEN – security token
laravel_session – authentication

Third-party (consent required):

Barion pixel (pixel.barion.com) – payment optimisation, fraud prevention. Controller: Barion Payment Zrt.

Withdraw cookie consent at any time via the "Cookie settings" link in the footer.

5. Your Rights
Access – request information about your data
Rectification – correct inaccurate data
Erasure – delete data when legal basis ceases
Restriction – restrict processing
Portability – receive data in machine-readable format
Objection – object to legitimate interest processing

Withdraw consent: e-mail info@stopbisztro.hu – does not affect prior lawful processing.
Response deadline: 30 days (extendable by 60 days with notice).

6. Automated Decision-Making

The Seller does not carry out automated decision-making or profiling.

7. Supervisory Authority

NAIH – National Authority for Data Protection and Freedom of Information
1055 Budapest, Falk Miksa u. 9-11., Hungary · www.naih.hu
E-mail: ugyfelszolgalat@naih.hu · Phone: +36 1 391-1400
Berettyóújfalu, 1 January 2025