Privacy and data management information
2025.02.15.
"We treat our partners' data the way we expect others to treat our data."
Table of contents:
1. Principles governing the processing of personal data.
2. Basic terms used in our Privacy Notice.
3. The Data Controllers.
4. Newsletter registration.
5. Cookie information and Google Analytics.
6. Reservations and food ordering through the contact details on the Website.
7. Card application and Card (gift card, voucher) registration.
8. Conclusion of a contract for catering services.
9. Scope of data processed in the course of WASABI career advertising.
10. Data processor.
11. Security of data processing.
12. Your rights.
13. Remedies.
14. Scope of the Privacy Notice, applicable law.
This notice will be reviewed and maintained in light of changes in legislation and changes to our data.
Entry into force: 15 February 2025
Introduction
The Privacy Notice (hereinafter "Privacy Notice") purpose, that WSB Zrt., as franchisee and licensee, transferor and owner and operator of the websites indicated below, as well as the companies indicated among the Data Controllers as franchisees and licensees, provide the data subjects with all information on the data management practices of WSB Zrt., as franchisee and licensee, for all its activities and services, regarding the processing of personal data, in particular on the organisational and technical measures taken to protect the data and on the rights and enforcement options of the users/ data subjects.
This leaflet scope covers the companies listed as Data Controllers and the natural persons to whom its processing activities relate. The processing activities set out in this notice are directed at personal data of natural persons. This notice does not cover the processing of personal data relating to legal persons or, in particular, to undertakings established as legal persons, including the name and form of the legal person and the contact details of the legal person. A legal person is an association, a partnership, a cooperative, an association and a foundation.
Please note that we respect your rights in all cases, we accept the provisions of this Privacy Notice as binding on us and we will comply with your requests within the time limits set by law. The Data Controllers undertake to process your personal data in accordance with the provisions of this Privacy Notice and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data (hereinafter referred to as GDPR) and in accordance with the applicable laws:
- during personal contact;
- when sending newsletters;
- the websites available under the domain names www.wasabi.hu, www.wasabi-hirlevel.hu, www.wasabi-etlap.hu, www.whatsrunning.hu, www.yamatorestaurant.hu, www.margarets.hu, www.kistarcsainosztalgia.hu, www.happyetterem.hu, www.doblo.hu, www.seoulhouse.hu (hereinafter: Website);
- the WASABI Club card, Yamato card, What's Running card, Doblo card, Margaret's card, Nostalgia card and Happy card (hereinafter: Card) during in-person and online registration;
- WASABI career during job advertisement
the data processed.
1. Principles governing the processing of personal data.
1.1. Principle of legality: the Data Controllers are lawfully processing your personal data. In order for the processing of personal data to be lawful, it must be based on your consent or have some other lawful basis established by law, including the need to comply with legal obligations to which the Data Controller is subject, the performance of any contract entered into by the data subject, or the pre-contractual steps requested by the data subject.
1.2. The principle of fair and transparent processing: data controllers ensure that you, as the data subject, are informed of the fact and purposes of the processing. The Controllers shall provide the data subject with all necessary information, taking into account the specific circumstances and context in which the personal data are processed. You have the right to obtain confirmation and information about the processing of your personal data.
1.3. Purpose limitation principle: personal data are collected only for specified, explicit and legitimate purposes. Data controllers will not process data in a way incompatible with the purposes set out in the Data Protection Notice. Additional processing for statistical purposes is not considered incompatible with the original purpose.
1.4. Data economy principle: in their processing, Data Controllers shall bear in mind that personal data must be adequate, relevant and limited to what is necessary for the purposes for which they are processed.
1.5. The principle of accuracy: the personal data must be accurate and, where necessary, kept up to date, the Controller shall take all reasonable steps to ensure that personal data inaccurate for the purposes of the processing are erased or rectified without undue delay.
1.6. Limited shelf-life principle: the personal data are stored in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed.
1.7. Integrity and confidentiality: the Data Controllers shall carry out the processing in such a way that all appropriate technical and/or organisational measures are taken to ensure adequate security of personal data and to protect personal data against unauthorised or unlawful processing, accidental loss, destruction or damage.
1.8. Accountability principle: the Data Controller is responsible for compliance with the principles governing the processing of personal data set out in this Privacy Notice and for certifying that the processing complies with this Privacy Notice.
2. Basic terms used in our Privacy Notice.
2.1. Users: our Website's readers, visitors, users, any natural or legal person or other entity who visits the Website at least once, views the Website, applies for a Card, registers for a newsletter or requests an offer on the Website or otherwise (by telephone, in person, by electronic mail, etc.).
2.2. Affected: the natural person User identified or identifiable from the personal data processed by the controller, or the employee of a sole trader or company contracted with the controllers, designated to communicate with us.
2.3. Personal data: any information relating to an identified or identifiable natural person; by reference to which the data subject can be identified, directly or indirectly, on the basis of one or more factors, and any inference relating to the data subject which can be drawn from those data.
2.4. Data management: any operation or set of operations which is performed upon personal data or on sets of personal data, whatever the procedure used, in particular the collection, recording, recording, organisation, storage, alteration, use, retrieval, disclosure, alignment or combination, blocking, erasure or destruction of data and the prevention of their further use.
2.5. Direct Marketing (DM) newsletter: information and advertising material sent by the data controller to the data subjects at specified intervals in the form of postal mail or electronic mail about the products or services it distributes, possible promotions, etc., to which the Data Subject has given his or her prior consent by subscribing to the newsletter.
2.6. Consent of the data subject: a voluntary, specific and explicit expression of the data subject's wishes, based on adequate information, by which he or she gives his or her unambiguous and unequivocal consent to the processing of personal data relating to him or her.
2.7. Acceptance of the Privacy and Data Protection Notice: the Data Subject declares that he/she has read, understood and agrees to the provisions of this Privacy and Data Protection Notice by duly completing the checkbox provided for this purpose (hereinafter referred to as "checkbox").
2.8. Affected objection: a statement by the data subject objecting to the processing of his or her personal data and requesting the cessation of processing or the deletion of the data processed or copies of the data.
2.9. Data deletion: rendering the data processed by the controller in relation to the data subject unrecognisable, as a result of which it is not possible to recover them in the future.
2.10. Data transmission: making the data available to a specified third party.
2.11. Data limitation: to identify the data for the purpose of limiting their further processing permanently or for a limited period of time.
2.12. Data processing: the performance of technical tasks related to processing operations, irrespective of the method and means used to carry out the operations and the place of application, provided that the technical task is performed on the data.
2.13. Data processor: the natural or legal person or unincorporated body who or which is carrying out the processing of the data on the basis of a contract with the controller, including a contract concluded pursuant to a legal provision.
2.14. Third person: a natural or legal person or unincorporated body other than the Data Subject, the Controller or the Processor.
2.15. Special data: personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, genetic data or biometric data revealing the identity of natural persons, health data and personal data concerning the sex life or sexual orientation of natural persons.
2.16. Other data: any data that does not fall under the categories of Personal Data and Special Data.
2.17. Data protection incident: a breach of security that results in the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, Personal Data transmitted, stored or otherwise processed.
2.18. cookies ("cookies"): short data files placed on the user's computer by the website visited by the User.
2.19. IP address: the unique identification number (Internet Protocol address) of computers and other devices connected to the Internet.
3. The Data Controllers:
Name: WSB Hospitality and Services Private Limited Company
Head office: 2000 Szentendre, Rab Ráby tér 6.
Company registration number: 13-10-041901
Tax number: 26640424-2-13.
Electronic contact: wsbzrt@wasabi.hu
Represented by: dr. Bródi Béla Árpád CEO
Name: ABChikuma Ltd.
Registered office: 1095 Budapest, Mester utca 28. B. lph. I. floor 5.
Company registration number: 01-09-708614
Tax number: 12892666-2-43
Electronic contact: rendeles@wasabi.hu
Acting on behalf of: Szandra Kisgyőri, Managing Director
Name: Nagano Trade Ltd.
Head office: 1037 Budapest, Szépvölgyi út 15.
Company registration number: 01-09-337983
Tax number: 26664189-2-41
Electronic contact: wasabi@wasabi.hu
Represented by: Sándor György Eötvös, Managing Director
Name: Kuzama Trade Kft.
Head office: 1065 Budapest, Podmaniczky utca 21.
Company registration number: 01-09-333041
Tax number: 26576750-2-42
Electronic contact: wasabi2@wasabi.hu
Represented by: Károly Rudolf Debreczeni, Managing Director
Name: "ZEBRA ÜZLETHÁZ" Ltd.
Head office: 4025 Debrecen, Piac utca 18.
Company registration number: 09-09-035176
Tax number: 12730917-2-09
Electronic contact: wasabidebrecen@wasabi.hu
Represented by: István Tripó, Managing Director
Name: Tokomu Trade Ltd.
Head office: 1124 Budapest, Németvölgyi út 91.
Company registration number: 01-09-333581
Tax number: 26586182-2-43
Electronic contact: wasabimom@wasabi.hu
Represented by: Anna Beáta Bándy, Managing Director
Name: Minimal Design Ltd.
Head office: 1051 Budapest, Hercegprímás u. 4.
Company registration number: 01-09-997434
Tax number: 14114429-2-41
Electronic contact: whatsrunning@wasabi.hu
Represented by: László Attila Takó, Managing Director
Name: Seoul House Korean Restaurant Ltd.
Head office: 1011 Budapest, Fő utca 8.
Company registration number: 01-09-068728
Tax number: 10444614-2-41
Electronic contact: seouletterem@gmail.com
Represented by: Erzsébet Eötvös Gyöngyi, Managing Director
Name: For Sale 2002 Ltd.
Seat: 1053 Budapest, Vámház körút 2.
Company registration number: 01-09-704842
Tax number: 12816840-2-41
Electronic contact: forsale.etterem@gmail.com
Represented by: Erzsébet Kelemen-Honvéd, Managing Director
Name: Alfred the Rabbit Ltd.
Headquarters: 2045 Törökbálint, Pistályi út 6.
Company registration number: 13-09-217695
Tax number: 27113215-2-13
Electronic contact: doblo@doblo.hu
Represented by: István Sallai Managing Director
Name: FORRÓKŐ Bt.
Registered office: 2143 Kistarcsa, Szabadság út 46.
Company registration number: 13-06-021821
Tax number: 24569600-2-13
Electronic contact: kistarcsainosztalgia@gmail.com
Represented by Katalin Gergely, Managing Director
Hereinafter collectively referred to as Data controllers.
Given that the purpose of each of the processing activities set out in this Notice and the method of processing are determined jointly by the Data Controllers, WSB Zrt. and the other Data Controllers listed below. from Regulation (EU) No 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Regulation (EC) No 95/46/EC (hereinafter "GDPR"), Chapter IV, Section 1, Article 26 common the data controller are considered to be.
Data Protection Officer:
Szandra Kisgyőri
+36 30 825 6376
Our activities:
We are a Hungarian company duly registered and operating. We operate our services through WSB Zrt. as the grantor of the franchise and licence rights and the other Data Controllers as the transferees of the franchise and licence rights.
Nationally, WSB Zrt. operates the above-listed Website and its associated webshop, and the other Data Controllers operate the Restaurants and home delivery. All of them are considered Data Controllers under the GDPR, in particular because they process personal data (e.g. name, address, IP address, e-mail address) of Website users, measure Website usage and log visits for security reasons. When visiting the Website, the Internet server of the Data Controllers automatically registers the IP address and the type of operating system of the computer of the users, as well as the time of the visit to the Website. Online marketing activities include sending you newsletters. When you contact us by e-mail or via the Website in connection with a service, in particular when you book a table via the Website or request food delivery via the webshop, or when you request an offer or enter into a contract or register a Card, your personal data will be processed to the extent and for the duration strictly necessary for the provision of that service.
4. Newsletter registration
Subscribing to the newsletter on the Website is subject to registration, during which you provide your e-mail address, to which we will only send advertising mail if you have expressly agreed to this in advance. The data subject shall, subject to the provisions of this notice and after having been duly informed, expressly consent to the processing of personal data by the Data Controllers necessary for the sending of advertising newsletters. The Data Controllers will not send unsolicited commercial communications.
In practice, consent means that you, as a user visiting the Website, fill in and tick the box to give your consent, and then you can receive newsletters from us after registration. The Data Controllers keep a database of subscribers to the newsletter and a blocked list of unsubscribers to the newsletter in order to comply with their legal obligations.
4.1. Scope of stakeholders:
Users who visit the Website and sign up for the Restaurant's newsletter.
4.2. Purpose of the processing:
- sending e-mail newsletters to subscribers containing economic advertising,
- accurate management of orders or reservations,
- information on current information and promotions,
- storage in a database.
4.3. Legal basis for processing:
- voluntary, prior and informed consent of the data subject,
- Data controllers of the personal data of the persons who have given their consent
are required to keep records. (Grt. § 6 (5).)
4.4. Scope and purpose of the data processed:
your name identification
send a birthday greeting and reminder of your date of birth
your e-mail address for newsletter distribution, general contact
the date of subscription to perform a technical operation.
performing a technical operation on the IP address at the time of subscription.
4.5. Source of data: directly from the data subject, i.e. you.
4.6 Duration of the processing:
- until the user's consent is withdrawn, i.e. until unsubscription,
- but no more than 24 months from the date of the user's last newsletter.
4.7. Unsubscribe from the Newsletter:
You can unsubscribe from the newsletter free of charge, without any restrictions or justification. In this case, all your personal data necessary for the sending of advertising messages will be deleted from our records and you will not be contacted with any further advertising offers.
Your consent may be withdrawn at any time without restriction and without giving reasons, as set out below, without prejudice to the lawfulness of the processing prior to the withdrawal:
- using the link at the end of this newsletter,
- by post: by letter sent to the head office of the operators,
- by sending an e-mail to info@wasabi.hu.
4.8. Pursuant to Article 6(5) of the GDPR, we keep a record of the personal data of persons who have given their consent. The data recorded in this register - relating to the recipient of the advertising, i.e. you - will only be processed in accordance with the consent you have given until it is withdrawn.
4.9 The Data Controllers will not transfer your data to a 3rd party, they will only store it in their own database. Your data will only be accessible by a member of the Data Controllers' marketing or sales staff.
5. Cookie information and Google Analytics
The operator of our website currently uses cookies for the operation of the website.
Our website uses Google Analytics, Google's web analytics service. The Google Analytics service is based on internal cookies, so it uses cookies to compile reports for data controllers, providing information about your interactions with the website (e.g. where you clicked and how long you spent on certain subpages). Due to the way the internet works, website operators and owners may learn the IP address of their users when using Google Analytics. However, Google Analytics only collects the IP addresses of website users to protect the security of the service and to allow website owners to build up a picture of where their visitors come from around the world (also known as "IP geolocation"). More information about the Google cookie is available at the link below: https://www.google.com/policies/technologies/cookies Detailed information on Google's privacy policy is available at the following link: https://policies.google.com/privacy?hl=hu
5.1 The purpose of using Google Analytics is to provide information to Data Controllers, in particular about:
- how many visitors have visited our Website and how much time they have spent on our Website,
- whether the visitor is a returning visitor or a new visitor, and to track the path the visitor has taken on the Website and where they have accessed.
5.2 You can prevent Google Analytics cookies from being stored by changing your browser settings, but this may limit the proper functioning of the Website. The user can also prevent Google from tracking the collection and processing of data about the user's use of the website through cookies by installing the browser module at the link below: https://tools.google.com/dlpage/gaoptout?hl=hu
5.3 Google Analytics supports three JavaScript libraries (tags) for measuring the use of the Website: gtag.js, analytics.js and ga.js. gtag.js and analytics.js set the following cookies:
cookie type cookie function duration
- ga - used to distinguish users, 2 years,
- gid - used to distinguish users ,24 hours,
- gat - used to control the polling rate, 1 minute,
AMP_TOKEN contains a token that can be used to download the customer's ID from the AMP customer ID service, from 30 minutes to 1 year,
- gac - contains information related to campaign for the user, 90 days,
ga.js sets the following cookies:
type of cookie, purpose of processing, duration of processing,
- path - used to distinguish between users and sessions. It provides information about whether the user has visited the website before, so it can be used to determine who is a new visitor to the website. The cookie is updated every time data is sent to Google Analytics, 2 years from the date of setting/updating,
- utmt - used to control the polling rate, 10 minutes,
- utmb - used to define new sessions/visits 30 minutes after setup/update,
- utmc - worked in conjunction with the _utmb cookie to determine whether the user was in a new session/visit until the browser was closed,
- utmz - keeps track of where the visitor came from 6 months from the date of setting/updating,
- utmv - is used to store visitor-level, individually variable data. This cookie is created when the developer uses the setCustomVar method with visitor-level, individually variable data. 2 years from set/update.
6. Reservations and food ordering through the contact details on the Website.
The Website provides a telephone number and e-mail address through which you can contact the Data Controllers.
Reservation: you can make a reservation by phone, in which case our staff will ask you for your reservation name, exact date and phone number, if you make your reservation via the Website, we will need your e-mail address to which we will send a confirmation message, your reservation name, date and phone number.
Food ordering: in the webshop, you add the products you wish to order to your shopping cart, enter your e-mail address and the Data Controller will send you a confirmation message with the details of your order. In order to complete the order, we need your name, delivery address and a telephone number where you can be contacted.
If you tick the checkbox to indicate that you are aware of the relevant provisions of this Privacy Notice and that you accept the processing and storage of your data by the Data Controller concerned, you will register for our webshop, which also includes your consent to receive our newsletter. For unsubscribe options from the newsletter, see section 2.7.
6.1. Data subjects: persons placing the order, persons making the reservation.
6.2 Purpose of the processing: to inform you, to fulfil your reservation or food order request.
6.3. Legal basis for processing:
- voluntary, prior and informed consent,
- data controllers must keep a record of the personal data of the persons who have given their consent. § 6 (5).)
6.4. Scope and purpose of the data processed:
your name identification
your e-mail address. enter information
your mobile phone number information, quick contact
delivery address order fulfillment
6.5 Source of the data: directly from the data subject, i.e. you.
6.6 Duration of the processing:
- until the user's consent is withdrawn.
6.7 The Data Controllers will not transfer your data to a third party, it will be stored only in their own database. Your data will only be accessible by a member of the Data Controllers' marketing or sales staff. If you contact us by telephone to make a reservation, your data will be stored on paper until the time of the reservation, after which the paper will be destroyed.
7. Card application and Card (gift card, voucher) registration
For details of the services, please visit the Website. We will create an "account" for you after you register in our restaurants or online. If you register in person, we will create a card for you, which will contain your details in our system from that point onwards.
7.1 If you use the Card, you will receive discounts and credits for your purchases under the Basic Services. You can find out how to use the Card, discounts and credits only on the Website and in our restaurants.
7.2 In addition to the basic services, we provide additional services, which are:
Advertising includes our own products, goods, promotions or services.
For questions about the Card, you can contact our staff at our restaurants, or you can contact our Restaurants on the Website.
7.3. We usually draw gift vouchers, shopping or discount coupons during the prize draw. Sweepstakes will be posted on our Websites or Facebook account.
7.4 Your data will be used solely for the purposes of organising and running promotions, delivering prizes, sending prize notifications, contacting you, dealing with complaints, investigating fraud and pursuing legal claims. First name, Last name, Date of birth, E-mail address.
7.5. Market research
Market research allows us to make decisions about our business model on an empirical basis. To do this, we look at pre-defined areas and criteria, such as demographic trends, consumer habits or media usage. To do this, we collect personal data, which we anonymise in advance to protect our customers, so that the data processing cannot be traced back to you.
Personal data evaluation allows us to automatically check your interests. By evaluating your personal data and learning about your habits, we can, for example, offer you more personalised services, offers and promotions.
7.6. Within the framework of the use of the Card, by registering and using the related Basic Services, you provide the following personal data to our Company:
After registration, a card number will be created, to which your personal data will be assigned, allowing you to be clearly identified.
7.7 If you have given your consent to receive information and advertising, we will inform you about our products, services, competitions, customer surveys and promotions in accordance with point 1.
This data processing is based on Article 6(1)(a) of the General Data Protection Regulation (GDPR) and is for the purpose of receiving non-personal advertising.
8. Conclusion of a contract for catering services
If you enter into a Contract of Agency between us for the provision of catering services in response to a request for a quotation or other enquiry and you are a sole trader or a person appointed to act as a contact person for the company contracting with us, your personal data will be recorded in the contract.
7.1.The data subjects: individual entrepreneurs who have concluded a contract of engagement with the Data Controller concerned, as well as employees of enterprises designated for contact purposes.
7.2 Purpose of the processing: performance of the contract.
7.3. Legal basis for processing:
- the performance of a contract to which the data subject or his or her employer is a party or the taking of steps at the request of the data subject prior to the conclusion of the contract,
- to comply with the legal obligations applicable to Data Controllers, such as the obligation under Act C of 2000 on Accounting.
7.4. Scope and purpose of the data processed:
your name identification
enter your mailing address information
enter your e-mail address information
enter your mobile phone number information
7.5. Source of data: directly from the data subject, i.e. you
7.6 Duration of data processing: if the Contract of Agency between us is terminated after the expiry of the retention period (8 years) for the last invoice issued to you (as provided for in Act C of 2000), the data will be deleted. After the date of termination of the Contract of Agency, the Data Controller concerned will only store the data and will not process them.
9. WASABI career during a job advertisement the scope of the data processed
9.1: Registration). During the registration process, the following personal data are required (data marked with * are mandatory):
A Google website link on the WASABI Careers Facebook page, from allas@wasabi.hu by sending a letter to the following e-mail address, and the Data Controller in person the User has the possibility to provide his/her data in order to apply for the advertised job. During the registration process, the following personal data are required (data marked with * are mandatory):
9.2. Create a new self-portrait you can enter the following data:
9.3. In the User profile, the User has the possibility to. select from the job you are looking for, which you can click on to send an e-mail message indicating your own and jobs in demand (type of job, location, other aspects), save job advertisements, modify the data you have provided, delete data except for optional data, subscribe or unsubscribe to newsletters.
9.4.The data subject also has the possibility to request, by making a personal appearance in the Controller's restaurants or by having a personal conversation with the Controller's advisor (hereinafter: Interview) on a paper or digital form specially designed for this purpose (hereinafter: Data sheet) provide your data, your CV and your requirements for the job to be filled, in order to be contacted by the Data Controller with a suitable job offer. Only the Data Subject's data necessary for the job search will be collected during the completion of the Data Sheet and the interview. On the basis of the data provided in the Data Form or during the interview, the Data Controller will also create a User Profile of the Data Subject, which may include the data provided in the "User Profile" section, based on the Data Subject's voluntary consent.
9.5.During a telephone conversation with the Data Controller, the Data Subject also has the possibility to provide his/her data in order to be contacted by the Data Controller in the future in connection with job opportunities, to inform him/her about job offers at the e-mail address provided by him/her.
9.6. Applying for a job
The Data Controller is by processes the personal data (CV, identification data, contact details, data relating to education, employment, interests) provided in the course of applications for advertised vacancies for the purpose of processing the application for the vacancy.
The Data Controller shall process the data of the Data Subject in accordance with Section 10 of Act I of 2012 on the Labour Code (hereinafter: Labour Code), which are relevant for the establishment, performance and termination of the employment relationship with the Data Controller:
location;
Data Controller only such as special data collects, on the basis of the Data Subject's written consent, the information necessary for the performance of the job in question. Only persons over the age of 16 may provide data are entitled to.
The Data Controller uses the data for the following purposes in connection with the services it provides:
to be contacted by the Data Controller with a suitable job offer, and the User
your qualifications, skills and abilities that are relevant to the position to be filled
to identify the needs of;
conducting;
9.8 The Data Controller shall also use the personal data provided by the User for statistical purposes, exclusively by anonymizing the personal data, so that they are no longer suitable for identification and cannot be linked to any natural person.
9.9. Duration of data processing
The Data Controller will process personal data for the duration of the purpose of the processing, such as registration on the Website, in the case of the User profile, in connection with the collection of data during telephone enquiries and in the case of sending the Newsletter, until the User requests the deletion of his/her data or withdraws his/her consent to the processing of his/her personal data or to the receipt of the Newsletter.
The personal data shall be deleted at the same time as the purpose of the processing ceases to exist, or at the request of the User without undue delay, except for data that the Data Controller legislation on the basis of an obligation must retain the personal data for the period specified in the legislation imposing mandatory data processing, so the Data Controller shall retain the personal data processed in the course of the establishment, performance and termination of the employment relationship with the Data Controller until the statute of limitations for claims arising from the employment relationship, i.e. 3 years from the termination of the employment relationship pursuant to Section 286 (1) of the Labour Code, or, if the legislation provides for a longer period, during this period.
In the case of an application for a job advertisement, the Data Controller processes the personal data for the duration of the purpose of the processing, i.e. in the case of a specific job offer, until the time of the administration of the job offer, and in the case of the provision of a job offer corresponding to the Data Subject's interest or choice, for the duration of the purpose of the processing, or until the Data Subject requests the deletion of the data or withdraws his or her consent.
10. Data processors.
10.1 The Data Controllers use a data processor to perform the following data processing activities:
- Website operation, maintenance:
Name: devwing Korlátolt Felelősségű Társaság
Registered office: 1165 Budapest Hunyadvár u. 56 1/3
Tax number: 26499785-2-42
Contact: info@devwing.hu
- Hosting services providing IT back-up:
Name: dotRoll Ltd.
Head office: 1148 Bp, Fogarasi út 3-5.
Representative: Gábor Busai
Contact: + 36 1 432 3232
Name: devwing Korlátolt Felelősségű Társaság
Registered office: 1165 Budapest Hunyadvár u. 56 1/3
Tax number: 26499785-2-42
Contact: info@devwing.hu
- Web analytics, email and document management, calendar, phone contacts, spreadsheet synchronisation, targeted advertising:
Name: Google LLC
Location: 1 Hacker Way, Menlo Park, California 94025
Representative: N/A
Contact details: N/A
Website: https://www.google.com/
- Targeted advertising display:
Name: Facebook Inc.
Location: 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Contact: +1 650-543-4800
Website: https://www.facebook.com/
- Card registration:
Netlient Information Technology Services Limited Liability Company
Registered office: 2600 Vác, Háló köz 3.
Your email address: info@ugyfelkartya.hu
Representative: managing director András Szilágyi
- Meeting tax and accounting obligations:
Five Agents Ltd.
Head office: 1037 Budapest, Szépvölgyi út 23.
Representative: Kristóf Palotai
Contact: + 36 30 634 9424
10.2 If the processing is carried out by another party on behalf of the Data Controller, the Data Controller shall use only processors that provide adequate guarantees of compliance with the legal requirements for processing and implement appropriate technical and organisational measures to ensure the protection of the rights of data subjects.
10.3 The Data Controllers reserve the right to use additional processors after prior information of the data subjects, which may be done by amending this Privacy Notice accordingly and by publishing it on the Website.
11. Security of data processing.
11.1 As Data Controller, we take all technical and organisational measures to ensure an adequate level of data security for you, in particular against unauthorised access, alteration, disclosure, transmission, disclosure, deletion or destruction of personal data, accidental destruction or accidental damage and inaccessibility resulting from changes in the technology used.
11.2 Together with our data processors, we will take steps to ensure that persons acting on our behalf who have access to your data can only process the data in accordance with the instructions of the Data Controllers, unless they are required to do otherwise by law.
We use data networks with appropriate firewall and password protection, but please note that Internet data transmission cannot be completely secure or error-free. You are responsible for the security of passwords, identifiers or other special access methods, unless the damage is caused by the Data Controllers' unlawful handling of the data subject's data or by a breach of data security requirements.
11.3 We take the necessary measures to protect paper records, in particular with regard to physical security and fire protection.
We will securely store and protect the data media we use or have in our possession that contain personal data, regardless of how the data is recorded, against unauthorised access, alteration, disclosure, disclosure, deletion or destruction, and against accidental destruction or damage.
12. Your rights.
You have the right to request from the Data Controller access to, rectification, erasure or restriction of processing of personal data concerning you and to object to the processing of such personal data, as well as the right to data portability and to withdraw consent at any time.
12.1. Right to information
This Privacy Notice is intended to provide you with prior and adequate information about our processing activities before you give your voluntary consent.
12.2. Data subject's right of access
You have the right to receive feedback on whether the Data Controllers are processing your personal data.
At your request, we will provide information on:
- the data we process, the categories of personal data concerned and their source,
- the purposes and legal basis of the processing,
- the duration of the processing, the storage period of personal data,
- your right to request from us the rectification, erasure or restriction of the processing of personal data concerning you and to object to the processing of such personal data, your right to lodge a complaint with a supervisory authority,
- the data processed by the data processors used, their source, the purposes and legal basis of the processing and the duration of the processing,
- the name and address of the data processor and his or her activities in relation to the processing,
- the circumstances of any data breaches, their effects and the measures taken to deal with them,
- the legal basis and the recipient of the transfer.
We will respond to your request within a maximum of 1 month, in accordance with the relevant provisions of the GDPR. If we refuse to provide you with information, we will inform you in writing within 1 month of the reasons for not providing the information and inform you of the supervisory authority to which you can lodge a complaint and exercise your right to judicial remedy. If your request is clearly unfounded or excessive, we may refuse to provide the information or charge an administrative fee for providing it.
12.3. The data subject's right to rectification:
You may request the Data Controller to correct inaccurate data and to complete incomplete data. The Data Controllers shall take action without undue delay upon receipt of your request.
12.4. The data subject's right to erasure ("right to be forgotten"):
You have the right to have your personal data deleted by the Data Controllers without undue delay upon your request.
12.5. The data subject's right to restriction of processing:
You have the right to obtain, at your request, the restriction of processing by the Data Controller, in particular in the following cases:
- if you dispute the accuracy of your data, for as long as it takes us to verify it,
- the processing is unlawful and you request restriction of use of the data instead of erasure,
- we no longer need the personal data for the purposes of processing, but you require it for the establishment, exercise or defence of legal claims,
- if you object to the processing, for as long as it is necessary to establish whether the legitimate interests of the Controller override the legitimate interests of the data subject.
12.6. Data subject's right to data portability:
You may request that the personal data you provide to us be transferred to you and/or transferred to another controller in a structured, commonly used, machine-readable format.
12.7. Right to object
You may object to the processing of your personal data (i) if the processing is necessary for the fulfilment of a legal obligation to which we are subject or for the purposes of the exercise of our legitimate interests; (ii) if the processing is for direct marketing, public interest surveys or scientific research; or (iii) if the processing is necessary for the performance of a task carried out in the public interest.
We will examine the lawfulness of the objection within 15 days, and if we find that the objection is justified, we will terminate the processing and block the personal data processed, and notify the objection and the action taken on it to all those to whom the personal data concerned by the objection have been previously disclosed. If you disagree with our decision, you have 30 days from the date of its notification to appeal to the courts.
12.8. Objection by the data subject in the event of direct marketing
Where personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such purposes, including profiling, where it is related to direct marketing. If you object to the processing of your personal data for direct marketing purposes, your personal data may no longer be processed for those purposes.
12.9 Automated decision-making in individual cases, including profiling, You have the right not to be subject to a decision based solely on automated processing, including profiling, which would have legal effects concerning you or similarly significantly affect you.
The preceding paragraph shall not apply in the case where the decision:
- necessary for the conclusion or performance of a contract between us;
- is permitted by Union or Member State law applicable to the controller which also lays down appropriate measures to protect your rights and freedoms and legitimate interests; or
- is based on your explicit consent.
Please send any requests to exercise your rights under this Privacy Notice to the following contact details:
- by post: by registered letter with acknowledgement of receipt sent to the registered office of the Data Controllers,
- electronically: by sending an e-mail to wsbzrt@wasabi.hu.
13. Remedies.
13.1 In all cases, please contact the Data Controllers in the first instance with your complaint and we will be happy to assist you at the following contact details:
- by post: by letter sent to the Data Controllers' headquarters,
- electronically: by sending an e-mail to wsbzrt@wasabi.hu.
13.2 Right to apply to the courts:
You can take the Data Controllers to court if your rights are infringed. The court will rule on the case out of turn. The court will have jurisdiction to hear the case. You can choose to bring the case before the court of your domicile or residence.
13.3 Data protection authority procedure:
In the event of a violation of your rights, you have the right to lodge a complaint with the National Authority for Data Protection and Freedom of Information at the following contact details:
Name: National Authority for Data Protection and Freedom of Information
Head office: 1125 Budapest, Szilágyi Erzsébet fasor 22/C.
Postal address: 1530 Budapest, Pf.: 5.
Phone: +36 1/391-1400
Fax: +36 1/391-1410
E-mail: ugyfelszolgalat@naih.hu
Website: http://www.naih.hu
14. Scope of the Privacy Notice, applicable law
14.1 The scope of this Privacy Notice covers the processing on the Website and the processing when you contact or ask a question to any of the Data Controllers through the Website or otherwise, including processing necessary for the use of services available on the Website or through any website operated by the Data Controllers.
The effective date of this Privacy Notice is 1 February 2025.The provisions of this Privacy Notice apply to all data subjects from the effective date.
14.2 The Data Controllers reserve the right to modify the Privacy Policy and the information related to the use of the Website from time to time, unilaterally and without prior notice. The Data Controllers shall ensure that the current Privacy Notice is continuously available on the Website.
14.3 By accepting this Privacy Notice, each data subject acknowledges that the provisions of the Privacy Notice in force on the date of processing shall apply to the processing of his or her personal data.
14.4 In particular, the Data Controllers shall be governed by the following legislation when providing their services and processing personal data:
- General Data Protection Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016
- Act V of 2013 - on the Civil Code (Civil Code)
- Act CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information (Infotv.)
- Act XLVIII of 2008 on the Basic Conditions and Certain Restrictions of Economic Advertising (Act XLVIII of 2008)
- Act CVIII of 2001 on Certain Issues of Electronic Commerce Services and Information Society Services (Act on Electronic Commerce).
-------- O --------
Monday - Sunday
11:30 – 23:30
1066 Budapest, Jókai u. 30.
+36 70 681 7544
rendeles@yamatorestaurant.hu
Become a Yamato club member! Earn points and redeem them for discounts! We will credit 15% for Table Grill and 10% for Á la carte to your card.
Be among the first to join.
Expected launch date: May 2025