PRIVACY AND DATA PROTECTION INFORMATION
Effective: September 8, 2026
1. Introduction
TISZA TÜZÉP ÉS KERESKEDŐHÁZ Fuel and Building Materials Trading, Industrial and Service LLC (hereinafter: „Data Controller”) is committed to the protection of personal data.
The purpose of this Data Management and Privacy Policy is to provide visitors to the tiszatuzep.hu website (hereinafter: „Website”) and persons contacting the Data Controller with transparent information on what personal data the Data Controller manages, for what purpose, on what legal basis and for how long, as well as who may access the data and what rights the data subjects have.
The Data Controller manages personal data in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council („GDPR”) and applicable Hungarian legislation.
The call for applications of the Sándor Demján Program also explicitly stipulates the fulfillment of data management requirements stemming from the GDPR.
2. Data Controller Information
Full company name:
TISZA TÜZÉP ÉS KERESKEDŐHÁZ Fuel and Building Materials Trading, Industrial and Service LLC.
Registered office:
28 Jókai Street, Tiszalúc, 3565.
Mailing address:
3564 Hernádnémeti, 2 Rákóczi Street.
Company registration number:
05-09-000965
Tax number:
10480458-2-05
Email:
tiszatuzep1@gmail.com
Phone number:
06 46 594 207
Website
tiszatuzep.hu
The company's registered office, company registration number, and tax number appear with these exact details in the project service contract as well.
3. Principles of Data Processing
During the processing of personal data, the Data Controller keeps the following principles in mind in particular:
- lawfulness, fairness and transparency;
- purpose limitation;
- data minimization;
- Accuracy;
- limited shelf life;
- integrity and confidentiality;
- accountability.
The Data Controller only processes personal data that is necessary to achieve the specific purpose of data processing.
4. Contact and Inquiry
By means of the contact form available on the website, the visitor can contact the Data Controller and inquire about its products and services.
The purpose of data processing:
identification of the inquirer, answering their inquiry, keeping in touch, providing information and – depending on the content of the inquiry – providing an offer or preparing for the subsequent conclusion of a contract.
Processed data:
- name;
- e-mail address;
- phone number;
- subject/category of interest;
- the content of the message and any other personal data voluntarily provided therein.
Legal basis:
primarily Article 6, paragraph 1, point (b) of the GDPR, insofar as contacting is necessary for taking steps prior to entering into a contract at the request of the data subject; in the case of other general inquiries, data processing is based on the voluntary contact initiated by the data subject.
Retention period:
Data related to simple inquiries will be retained for up to 1 year following the closure of the case, unless further retention of the data is necessary for the performance of a contract, compliance with a legal obligation, or the establishment, exercise, or defense of legal claims.
The technical requirements of the project explicitly include the contact form.
5. Contact by phone and e-mail
Data subjects can also contact the Data Controller directly using the phone number and email address indicated on the Website.
This applies, among other things, to:
- for inquiries regarding products;
- for quote request;
- for guest house inquiries and bookings;
- for beauty salon inquiries and appointment scheduling;
- for inquiries regarding other services.
Processed data: the name, email address, and phone number provided by the data subject, as well as the content of the inquiry and any additional data voluntarily disclosed therein.
Purpose of data processing: communication, responding to inquiries, booking or scheduling appointments, providing quotes and, if necessary, preparing/fulfilling contracts.
Legal basis: depending on the nature of data processing, Article 6(1)(b) of the GDPR, or in the case of other inquiries, the contact initiated by the data subject.
6. Newsletter
It is possible to subscribe to the newsletter on the website.
Subscribing to the newsletter volunteer, that is not a condition for using the Data Controller's other services.
Processed personal data:
email address.
Purpose of data processing:
newsletters, electronic sending of information, news, and – if such content is sent – offers related to the Data Controller's products and services.
Legal basis:
the data subject's voluntary consent pursuant to Article 6(1)(a) of the GDPR.
Duration of data processing:
until the withdrawal of consent or until unsubscribing from the newsletter.
The data subject may withdraw their consent at any time. The withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.
The technical documentation of the project also accounts for the possibility of newsletter subscription.
7. Technical data related to the use of the Website
During the use of the website, certain technical data may be automatically generated in connection with the operation, security, and technical servicing of the website.
Such data may specifically include:
- IP address;
- date of visit;
- technical characteristics of browser and device;
- visited pages;
- technical log data;
- data related to cookies and consent settings.
The processing of these data may take place for the purpose of ensuring the proper and secure operation of the Website, detecting errors, IT security, preventing abuse, and preserving visitor settings.
8. Cookies
The website uses cookies and related technologies.
Detailed rules regarding cookies, their purpose, category, duration, and the granting and withdrawal of consent are available separately on the Website Cookie Policy contains it.
The currently available Cookie Policy includes the use of WordPress, Google Fonts, Google Maps, Complianz, and Elementor, among others.
The use of non-essential cookies is subject to the user's proper consent. The Website provides the option to manage consent settings through the Complianz system; according to the documentation, the related consent cookies can be stored for 365 days.
The data subject may modify or withdraw their consent at a later time.
9. Google Maps
The website uses the Google Maps service to display the business location and contact information on a map.
When loading Google Maps content, the service provider may receive technical data, such as an IP address in particular.
The attached Cookie Declaration also lists the Google Maps API separately and indicates the handling of the IP address.
For further data processing related to the use of Google Maps, Google's own privacy policy also applies.
10. Google Fonts
The website may use the Google Fonts service to display web fonts.
According to the available Cookie Policy, the user's IP address may be transmitted during the use of the Google Fonts API.
11. E-mail service
The Data Controller for contact purposes tiszatuzep1@gmail.com also uses the email address.
Accordingly, personal data received via email or forwarded to this address from the Website's contact form may be processed through Google's services in the course of providing technical email services.
The Data Controller uses the data provided via e-mail exclusively to the extent necessary for handling the given inquiry.
12. Data processors and third-party service providers
During the operation of the Website, the Data Controller may engage technical service providers.
The currently known services, in particular:
Rackhost Inc.
Registered office: 6722 Szeged, Tisza Lajos körút 41.
Activity: hosting, IT and technical services related to the website, within the scope of services actually used.
Rackhost is listed in the project contract as the service provider performing website development.
Google services
During the operation of the Website and the Data Controller, Google Maps, Google Fonts, and Gmail services are used.
In certain cases, individual service providers may also act as independent data controllers.
13. Data Transfer to a Third Country
In the case of certain international service providers used by the Data Controller, personal data may also be transferred or made accessible to a country outside the European Economic Area.
Such data transfer may take place exclusively with an appropriate legal basis and safeguards permitted by the GDPR.
14. Data Security
The Data Controller applies appropriate technical and organizational measures to protect personal data, in particular against:
- from unauthorized access;
- from unauthorized modification;
- from transmission or disclosure;
- from deletion or destruction;
- from accidental loss or damage.
The Data Controller strives to ensure that personal data is accessed exclusively by those persons who need it to perform their duties.
15. Rights of data subjects
In accordance with the provisions of the GDPR, the data subject has the right to:
Request access: you may request information as to whether your personal data is being processed and you have the right to access the personal data being processed.
Request a correction You may request that inaccurate information be corrected and that missing information be added.
Request deletion: Under the conditions set out in the GDPR, you may request the deletion of your personal data.
To request restriction of data processing: In the cases specified in the GDPR, you may request the restriction of the processing of your personal data.
To exercise your right to data portability: if the legal conditions pertaining to it are met, they may request the personal data provided by them to be issued in a structured, commonly used, machine-readable format.
To protest In the case of data processing based on legitimate interests, the data subject has the right to object, on grounds relating to their particular situation, to the processing of their data.
To withdraw your consent: In the case of data processing based on consent, the data subject may withdraw their consent at any time. This shall not affect the lawfulness of data processing prior to the withdrawal.
The attached data processing templates contain these same fundamental data subject rights in detail: access, rectification, erasure, restriction, data portability, withdrawal of consent, and lodging a complaint with a supervisory authority.
16. Submission of Requests by Data Subjects
You may submit your request regarding the data processing in question using the contact information provided below:
Email: tiszatuzep1@gmail.com
Mailing address: 3564 Hernádnémeti, 2 Rákóczi Street.
The Data Controller will review and respond to the request within the time limit specified in the GDPR.
17. Complaints and legal remedies
If the data subject considers that the processing of their personal data infringes applicable data protection regulations, they have the right to lodge a complaint with a supervisory authority.
National Authority for Data Protection and Freedom of Information (NAIH)
Address: 9–11 Falk Miksa Street, 1055 Budapest.
Mailing address: 1363 Budapest, Pf. 9.
Email: ugyfelszolgalat@naih.hu
Phone: +36 1 391 1400
The current official contact information of NAIH contains this data. (NAIH)
The data subject is also entitled to turn to a court in the cases specified by law.
18. Automated decision-making and profiling
Based on the personal data provided through the website, the Data Controller does not carry out any solely automated decision-making or profiling that would have legal effects on the data subject or similarly significantly affect them.
19. Amendment of the information sheet
The Data Controller reserves the right to amend this Data Management and Privacy Information, particularly if:
- any function of the Website changes;
- a new data processing activity is starting;
- any of the service providers change;
- The applicable regulatory environment is changing.
The version in force at any given time is available on the Website.
Effective date: September 8, 2026.