Privacy Policy

Privacy Policy

I. Name and contact details of Controller:

Vásárnap Művészeti Szolgáltató Korlátolt Felelősségű Társaság (registered seat: H-2724 Újlengyel, Határ út 12., company registration number: 13-09-168581, tax number: 13794138-2-13, statistical number: 13794138-8230-113-13, represented by: dr. Luca Sáfri-Ványi managing director) (hereinafter referred to as WAMP or Controller)

II. Data processing registration number of Controller: NAIH-123710/2017

Controller processes the personal data based on the voluntary consent of the exhibitors and visitors registered on the website (hereinafter collectively referred to as Users) and in accordance with Section 5(1)(a) of Act CXII of 2011 on Informational Self-Determination and the Freedom of Information (hereinafter referred to as Information Act) and with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as GDPR).

III. The Controller processes the data of the Users to the extent and for the purposes below, for the following period of time:


The Controller may only process personal data that is essential for the realization of the following processing purposes, is adequate for the achievement of the purposes and only to the extent and for the duration necessary for the realization of the purpose. The Controller may only transmit or disclose the personal data to third persons if the User concerned has provided his/her consent to the transmission and disclosure of that particular personal data, or if it is ordered by the decision of the local government for the purpose of public interest based on law or legal authorization, in the scope determined therein.

a. WAMP organizes design fairs as part of its economic activities for which the data subjects (Exhibitors) may register on the website under the “Login” menu. While registering on the website, the User, resulting from his/her voluntary actions, mandatorily submits the name of the contact person, the brand name, the email address of the enterprise, the username and password selected by him/her (compulsory data for registration), the address and telephone number of the company, which shall be available and accessible to the colleagues of WAMP. Furthermore, for the registration to be evaluated, the User uploads images of the product to be sold, attaching a brief description about his/her products, motivation, professional background. Providing (uploading) such data is voluntary; however, it is essential for the evaluation of the application for the design fair participation. If the User fails to provide the required data upon the repeated request of WAMP, the User’s registration will be deleted.

The personal data mandatorily provided by the User are required to identify the entitlement of the User, to evaluate the application, to enter into a contract, and—upon a separate consent—for the newsletter service.

Controller shall store these data as long as the User is a one of the Users of the website. If the User, based upon his/her voluntary decision, requests his/her user status to be terminated, his/her data to be erased, the Controller shall erase the personal data within 5 business days from having received the erasure request. In accordance with the GTC, the User may not register again within 180 days from the date an application was rejected, and WAMP, in the case of rejected applications, shall store every data provided during the registration for a period of 180 days after the date of the registration in order to enforce this rule, even if the User requests his/her data to be deleted.

If the User uses personal data unlawfully or deceptively, or if the erasure of the personal data was ordered by the National Authority for Data Protection and Freedom of Information, then the Controller may immediately erase all of the personal data upon becoming aware of it, at the same time when the registration is deleted.

The Controller may use the data uploaded by the User for statistical purposes. The User may prohibit the use of these data for such purposes by sending a written request to in an email requesting the deletion of his/her profile.


Under Section 13/A of Act CVIII of 2001 on Certain Aspects of Electronic Commerce Services and Information Society Services, the Controller may process the identification data and the address of the natural person necessary to identify the User for the purposes of entering into a contract for the provision of information society services, determining and amending the content thereof, monitoring the performance thereof, invoicing any resulting fees, and for the exercising of any claims in relation to it; it may process the identification data and the address of the natural person in relation to the use of the services as well as the data relating to the time, duration and location of the use of the services in order to invoice the fees arising from the contract for the provision of services; furthermore, it may process the personal data in order to provide the services which are technologically essential for the provision of the services.

The data of the successful transactions—in order to be used as proof of such transactions—will be stored for 7 years.

The system of will occasionally send to the User notification messages closely related to the service and the activities performed in the system (system notification) via email: registration, decision of the jury, confirmation of orders. Furthermore, Vásárnap Kft. will inform the exhibitors by electronic means at the email address provided during the registration about the following: Amendment of policies (GTC and Privacy Policy), the requirements for participating in the fair, technical information related to the particular fair and the display and cooperation opportunities organized by WAMP.  


b. The User voluntarily provides his/her email address, first and surname to the Controller, to be used for promotional and informational purposes that are related to the activities of WAMP under the “Newsletter” menu of the website, or by other means, when subscribing to the Newsletter service.

The processing of the data provided upon subscribing to the newsletters will be processed until unsubscribing from the newsletters or at the latest until the consent to the processing of the data is withdrawn.

The User may at any time unsubscribe from the Newsletters by clicking on the “unsubscribe” link at the bottom of the Newsletters or in an email sent to


c. WAMP measures the User, the number and characteristics of the visitors with the Google Analytics web analytics service. The following data are logged at the website:

  • The website the User arrives from,
  • The Internet browser the User uses,
  • The operating system used by the User,
  • The monitor resolution and color depth applied by the User,
  • Which pages the User visits on the website,
  • How long the User spends visiting individual pages,
  • What search activities the User performs with the help of the search engine of the website.

For the measurement, the system places small data files, so-called cookies, in the User’s browser. The purpose of the measurement is to learn about the habits of the Users, and therefore, to expand and develop the website based on the information acquired this way. It also aims to survey the search habits of the Users arriving on the website and to map the search phrases applied in order to cast light on the fields of interests of the Users.

The data stored by Google Analytics are not suitable for identifying any User by his/her name; however, it may reveal during a subsequent visit by the User whether the computer or the browser of the User have earlier been used to visit the website.


IV. The rights of data subjects related to data processing


Based on the applicable provisions of the GDPR and the Information Act, the User may request to obtain information from the Controller on the processing of his/her personal data, may request the rectification and the erasure of his/her personal data, except when processing is mandatory. Upon the request of the Data Subject, the Controller shall provide information on his or her data being processed by it, on the source of such data, the purpose, legal basis and duration of the processing, the name, address (registered seat) of the processor and its activities related to the processing, the circumstances of a data breach, its effects and the measures taken to avert them, and furthermore—where the personal data of the Data Subject is transmitted—, the legal basis and the recipient of the transmission. The User shall forward his or her relevant request to the Controller to in the form of an electronic mail. Controller shall provide the information in writing within 30 days after the request has been submitted in a commonly understandable form, free of charge.

Controller may reject to provide information to the User only in the cases set forth in the GDPR and the Information Act. If the provision of the information is rejected, the Controller shall inform the Data Subject in writing about the legal provision based on which the information was denied; furthermore, it shall inform the Data Subject on the possibility of seeking redress in court or by appealing to the Authority.


The User may request the erasure of the personal data concerning him or her in writing in an email sent to The Controller shall notify the User of the erasure immediately after the erasure by electronic means, as well as those parties to whom the data—either based on the consent of the Data Subject or as required law—have been transmitted.

The Controller shall erase the personal data if the personal data is no longer required for the purpose for which they had been obtained or if they have been processed in any other manner; if the Data Subject withdraws his or her consent that the processing is based upon, and there is no other legal basis for the processing; if the Data Subject objects to the processing and there is no lawful overriding reason for the processing based on legitimate interests; if the personal data have been processed unlawfully; if the personal data must be erased to comply with a legal requirement stipulated in the law of the European Union or of a Member State that the Controller is subject to; if the period for the storing of the data stipulated by law has expired; if it has been ordered by the court or the Authority.

The Controller shall not comply with the Data Subject’s request for erasure if the processing is necessary for the fulfilment of a legal obligation requiring the processing of the personal data that the Controller is subject to.


Instead of erasure, the Controller may restrict processing if the Data Subject disputes the accuracy of the personal data, in such cases the restriction is for the period that is necessary for the business association to check the accuracy of the personal data; if the processing is unlawful and the Data Subject opposes the erasure of the personal data and requests the restriction of their use instead; if the Controller no longer needs the personal data for the purposes of the processing but they are required by the Data Subject for the establishment, exercise or defense of legal claims; if the Data Subject objected to the processing where processing is based on legitimate interests; in such cases the restriction is for the duration that is necessary to establish whether the legitimate interests of the business association have priority over the legitimate interests of the Data Subject.

Where processing has been restricted based on the above, such personal data shall, with the exception of storage, only be processed with the data subject's consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.


The User shall have the right to object to processing where it is based on legitimate interests. In the case of a request by the Data Subject to object to processing, the Controller shall no longer process the personal data unless the Controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the Data Subject or for the establishment, exercise or defense of legal claims.

Where the personal data is processed for direct marketing purposes, the data subject has the right at any time to object to the processing of the personal data concerning him or her. Where the data subject objects to the processing of personal data for direct marketing purposes, the personal data shall no longer be processed for such purposes.


The Controller shall ensure that the Data Subject shall have the right to receive the personal data concerning him or her, which he or she has provided to the business association, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller.


In cases where the Controller fails to fulfill any of the requests by the User in connection with his or her personal data, the Controller shall communicate the factual and legal reasons for rejecting the request by electronic means within 30 days after receiving the request. In cases where the request is denied, the Controller shall inform the User of the available legal remedies in court and the possibility of appealing to the Authority.


V. Data Processor and its contact details:


Farm Studio Korlátolt Felelősségű Társaság

Registered seat:

H-1024 Budapest, Fillér u. 23. 1. em. 7.

Company registration number:


Court of Registration:

Company Registry Court of Budapest-Capital Regional Court

Tax number:



Data processing registration number:



 IT.Controll Services Betéti Társaság

Registered seat:

H-9011 Győr, Honfoglalás utca 71/B.

Company registration number:


Court of Registration:

Győr Regional Court

Tax number:






Partner HUB Zrt.

Registered seat:

H-1138 Budapest, Szekszárdi utca 16-18. 4. em. 2.

Company registration number:


Court of Registration:

 Budapest-Capital Regional Court

Tax number:




VI. Data transmission:

WAMP transmits the email address of the Users to the Processor and also to The Rocket Science Group LLC (675 Ponce de Leon Ave NE, Atlanta, GA 30308 USA), who is the newsletter service provider. During the data transmission, WAMP shall act in compliance with the limitations stipulated by the GDPR and the Information Act.

VII. Amendment of the Privacy Policy, possibilities for the exercising of claims in connection with personal data: maintains the right to unilaterally amend this Privacy Policy with the prior notification of the Users. Users may be notified of any amendments through the internal notification system of the website or via emails sent to the email address of the Users. With the use of the website after the amendment of the Privacy Policy, the User—after logging in—automatically accepts the amended Privacy Policy.


The User may enforce his or her claims in relation to personal data in front of a competent court in accordance with the applicable provisions of the GDPR, the Information Act or Act V of 2013 on the Civil Code, or may appeal to the National Authority for Data Protection and Freedom of Information (registered seat: H-1125 Budapest, Szilágyi Erzsébet fasor 22/C., mailing address: H-1530 Budapest, Pf. 5.).

Should you have any further questions or comments, please contact a colleague of at in an email.


This Privacy Policy is valid from 16 January 2020 until revoked.