regarding ticket purchases, communication and marketing activities

1. Data Controller

Company name: RCS Power Limited Liability Company
Registered office: 6230 Soltvadkert, Szőlő utca 66., Hungary
Company registration number: 03-09-131492
Tax number: 26263898-2-03
Email: info@rcs.hu
Phone: +36 20 390 89 70
Website: https://www.rcs.hu

The Data Controller processes personal data in accordance with the applicable data protection laws, particularly Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).

2. Purpose of this Privacy Policy

This Privacy Policy explains how RCS Power Ltd. collects, processes, stores and protects personal data in connection with:

• ticket purchases,

• customer communication,

• invoicing and accounting obligations,

• complaint handling,

• newsletter and marketing communications.

3. Legal basis of data processing

Personal data is processed based on the following legal grounds:

• performance of a contract (e.g. ticket purchase),

• compliance with legal obligations (e.g. invoicing and accounting),

• legitimate interest of the data controller,

• consent of the data subject (e.g. marketing emails).

4. Categories of personal data processed

Depending on the purpose of processing, the Data Controller may process the following personal data:

• full name,

• email address,

• phone number,

• billing name,

• billing address,

• company name and tax number (in case of corporate purchase),

• ticket purchase details,

• event and order information,

• payment method,

• technical transaction identifiers,

• marketing subscription information,

• complaint details and related communication.

The Data Controller only processes personal data that is necessary and proportionate for the specific purpose.

5. Purpose, legal basis and duration of data processing

5.1 Ticket purchase and order processing

Processed data: name, email address, phone number, ticket purchase data
Purpose: processing ticket purchases, issuing tickets, sending confirmations, event entry management
Legal basis: performance of a contract
Retention period: until the completion of the contract and for the duration required for legal claims.

5.2 Invoicing and accounting

Processed data: billing name, billing address, company name, tax number, purchase data
Purpose: issuing invoices and fulfilling accounting and tax obligations
Legal basis: legal obligation
Retention period: 8 years, according to Hungarian accounting regulations.

5.3 Customer communication

Processed data: name, email address, phone number
Purpose: providing information regarding purchases, event updates or technical information
Legal basis: performance of a contract or legitimate interest
Retention period: until the completion of the event or the closure of the related process.

5.4 Complaint handling

Processed data: name, contact details, purchase data, complaint information
Purpose: investigating and resolving complaints
Legal basis: legal obligation and legitimate interest
Retention period: for the legally required period.

5.5 Newsletter and marketing communication

Processed data: name, email address
Purpose: sending newsletters, event invitations, promotions and marketing messages
Legal basis: consent of the data subject
Retention period: until consent is withdrawn.

Consent can be withdrawn at any time by clicking the unsubscribe link in the email or contacting the Data Controller.

6. Source of the personal data

Personal data is collected directly from the data subject when:

• purchasing tickets,

• contacting the company,

• submitting a complaint,

• subscribing to the newsletter.

7. Data processors

The Data Controller may use the following data processors in order to operate its services.

7.1 Hosting provider

Company: Sybell Informatika Kft.
Address: 1158 Budapest, Késmárk u. 7/B., Hungary
Website: https://www.sybell.hu

7.2 Payment service provider

Company: OTP Mobil Kft.
Service: SimplePay online payment system
Registered office: 1138 Budapest, Váci út 135-139. B. building 5th floor, Hungary

Online payments are processed through the SimplePay system operated by OTP Mobil Ltd. Payment data is handled in accordance with SimplePay’s own privacy policy.

7.3 Invoicing service provider

Company: KBOSS.hu Kft.
Service: Számlázz.hu invoicing system
Address: 1031 Budapest, Záhony utca 7., Hungary

7.4 Newsletter or marketing system

If the Data Controller uses a third-party email marketing or newsletter system, it will be listed here accordingly.

8. Data transfers

Personal data may be transferred to third parties only in the following cases:

• with the consent of the data subject,

• if required for the performance of a contract,

• to comply with legal obligations,

• or based on the legitimate interests of the Data Controller.

In the case of online payments, transaction data may be transferred to OTP Mobil Ltd. (SimplePay), and invoicing data may be processed through Számlázz.hu.

9. Data security

The Data Controller implements appropriate technical and organizational measures to protect personal data against:

• unauthorized access,

• alteration,

• disclosure,

• deletion,

• destruction,

• accidental loss or damage.

10. Rights of the data subject

Data subjects have the following rights regarding their personal data:

• right of access,

• right to rectification,

• right to erasure,

• right to restriction of processing,

• right to data portability,

• right to object to processing,

• right to withdraw consent at any time,

• right to lodge a complaint with a supervisory authority.

11. Right to lodge a complaint

If a data subject believes their personal data is processed unlawfully, they may contact the supervisory authority:

Hungarian National Authority for Data Protection and Freedom of Information (NAIH)
Address: 1055 Budapest, Falk Miksa utca 9-11., Hungary
Mailing address: 1363 Budapest, Pf. 9
Email: ugyfelszolgalat@naih.hu
Website: https://www.naih.hu

Data subjects also have the right to seek judicial remedy.

12. Automated decision making

The Data Controller does not use automated decision-making or profiling in connection with the processing activities described in this Privacy Policy.

13. Modification of this policy

The Data Controller reserves the right to modify this Privacy Policy. The updated version will be published on the website.

Effective date: