Privacy Notice

The purpose of this notice is to inform visitors of the beddone.hu website, newsletter subscribers, and persons who contact BedDone by email or on social media (hereinafter: Data Subject) about the processing of their personal data, in accordance with Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation, hereinafter: GDPR). This is a translation of the Hungarian notice; in case of any discrepancy, the Hungarian version prevails.

1. The controller

Questions and requests relating to data processing may be submitted to the email address above.

2. Data processed and purposes of processing

• Name: identifying and addressing the Data Subject, and providing the content of the consent statement required by Section 6 of the Grt.
• Email address: sending information about the market launch of the BedDone product and news related to it.
• Time of subscription and the Data Subject’s IP address: proof that consent was given.
• Data on opening the emails sent and clicking the links in them (time, device and browser data, IP address): measuring the performance of the emails, for statistical purposes only.

Providing the data is voluntary. If the data is not provided, no newsletter will be sent. The Controller does not carry out automated decision-making, including profiling.

3. Legal basis

The legal basis for processing is the Data Subject’s voluntary and explicit consent (Article 6(1)(a) GDPR), given by ticking the checkbox on the subscription form, and Section 6 of Hungarian Act XLVIII of 2008 on the Basic Requirements and Certain Restrictions of Commercial Advertising Activities (hereinafter: Grt.). Consent may be withdrawn at any time without giving reasons. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal. Consent also covers recording statistical data on email opens and clicks. The legal basis for technical processing related to visiting the website is set out in Section 5.

4. Retention period

The Controller processes the personal data until consent is withdrawn (unsubscription) or until the Data Subject’s request for erasure is fulfilled. The Data Subject can unsubscribe using the link at the bottom of every email sent, or by emailing info@beddone.hu. Data on email opens and clicks is kept together with the subscriber data until that data is deleted.

5. Visiting the website

When the website is opened, the hosting provider (Netlify, Inc.) may record technical log data (IP address, time of visit, browser type) in order to operate the website securely and reliably. The legal basis for this is the Controller’s legitimate interest (Article 6(1)(f) GDPR) in keeping the website available and secure. The hosting provider keeps log data for a limited period under its own policies; the Controller does not use it to identify Data Subjects.

The website does not use cookies and does not track or measure visitors. If a visitor changes the language with the language switcher, the chosen language is saved in the local storage (localStorage) of the visitor’s browser so that the website opens in that language on the next visit. This data stays on the visitor’s device, is not sent to the Controller, and can be deleted at any time in the browser settings.

6. Contacting us by email

If the Data Subject writes to info@beddone.hu, the Controller processes their name, email address, the content of the message and any other data provided in it in order to respond. The legal basis is the Controller’s legitimate interest in responding to enquiries (Article 6(1)(f) GDPR) and, for requests relating to data processing, compliance with the legal obligations arising from Articles 12–22 GDPR (Article 6(1)(c) GDPR).

The Controller keeps such emails for one year after the enquiry is closed, and keeps requests relating to data processing, together with the replies, for five years.

7. Processors and data transfers

The Controller does not sell personal data and does not transfer it to third parties for marketing purposes. The Controller uses the following processors, which act solely on the Controller’s instructions:

• MailerLite Limited (registered office: 88 Harcourt Street, Dublin 2, D02 DK18, Ireland): storing the subscriber list and sending emails.
• Netlify, Inc. (United States of America): hosting the website. It may process technical log data (such as IP addresses) when the website is opened.

For email correspondence, the Controller also uses the following services:

• ImprovMX Incorporated (United States of America): forwarding emails sent to info@beddone.hu to the Controller’s mailbox. It stores emails only until they are forwarded.
• Google Ireland Limited (Ireland): provider of the Controller’s mailbox (Gmail), where incoming emails and system notifications about new subscriptions are stored.

Transfers outside the European Economic Area take place on the basis of safeguards adopted by the European Commission (the EU–US Data Privacy Framework or standard contractual clauses).

8. Social media pages

BedDone is also present on Facebook and Instagram. These platforms are operated by Meta Platforms Ireland Limited (Ireland). If the Data Subject follows the pages, comments or sends a message, Meta processes the related data under its own privacy policy. The Controller only sees data displayed publicly on the platform, messages sent by the Data Subject, and aggregated, anonymous statistics. With regard to the processing related to Facebook Page statistics (Page Insights), Meta and the Controller are joint controllers; under the relevant agreement, Meta takes primary responsibility for complying with the obligations under the GDPR. The Facebook and Instagram icons on the website are plain links: opening the website does not send any data to Meta.

9. Rights of the Data Subject

Under Articles 15–21 GDPR, the Data Subject has the right to:

• obtain information about the personal data processed about them and request a copy of it (right of access);
• request the rectification of inaccurate data (right to rectification);
• request the erasure of their personal data (right to erasure);
• request the restriction of processing (right to restriction of processing);
• receive their personal data in a structured, commonly used and machine-readable format (right to data portability);
• object to processing based on legitimate interest, and object at any time, without giving reasons, to processing for direct marketing purposes (right to object);
• withdraw their consent at any time.

Requests may be submitted to info@beddone.hu. The Controller will respond without undue delay and in any event within one month of receipt.

10. Remedies

If the Data Subject considers that the processing of their personal data infringes the GDPR, they may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information, or with the supervisory authority of their habitual residence or place of work in the EU. They may also bring the matter before a court; in Hungary, proceedings may also be brought, at the Data Subject’s choice, before the regional court competent for their place of residence or stay. The Controller recommends that the Data Subject contact the Controller first with any complaint.

11. Changes to this notice

The Controller reserves the right to amend this notice. Any changes will be published on this website together with their effective date.