Privacy and Policy
The purpose of this Data Processing Notice is to ensure that data subjects receive information in compliance with data protection regulations regarding the data processing activities carried out by TOP1 Vendéglátóipari Kft (hereinafter referred to as the “Data Controller”), and are able to exercise their lawful rights.
Data Controller:
The current details of the Data Controller are as follows:
- Name: TOP1 Vendéglátóipari Kft
- Registered office: 1089 Budapest, Diószeghy Sámuel utca 15, 5 71
- Company registration number: 01 09 346200
- Tax number: 27039982-2-42
- Represented by: Dr. Dóra Baráth
- E-mail: dora@topbars.hu
The processing of your personal data is carried out in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation – GDPR), as well as Act CXII of 2011 on the Right of Informational Self-Determination and on Freedom of Information (Infotv.).
Scope of personal data processed, purpose, duration and legal basis of data processing
Purpose of data processing: Contact
Through the Website, visitors may contact the Data Controller by sending an email to the address provided under the “Contact” menu item or by completing the contact form.
Data subject: the sender of the message
Categories of personal data processed: name, e-mail address, telephone number, message content and subject
Legal basis of data processing: consent of the data subject
Purpose of data processing: contacting the Data Controller
Data processing platform: electronic
Persons entitled to access the data: the Data Controller and those internal employees of the Data Controller whose job responsibilities require access to and processing of such data.
Data transfer: The Data Controller does not transfer personal data to third parties, except where required by law (e.g. courts, investigative authorities, prosecution services).
Data retention period: until consent is withdrawn, or where necessary for the enforcement of legal claims, for 5 years (statutory limitation period under the Civil Code); otherwise, for 30 days following receipt of the message
Possible consequences of failure to provide data: failure of effective communication
Purpose of data processing: Data processed in connection with website visits
| Categories of data processed | Purpose of data processing | Legal basis | Retention period |
| IP address, date and time of visit, operating system and browser type used by the visitor | Ensuring the proper and high-quality operation of the Website, monitoring and improving service quality, and identifying visitors attempting to attack the Website | Legitimate interest (Article 6(1)(f) GDPR) | Partial IP addresses are stored for 7 days, after which they are automatically deleted. |
Purpose of data processing: Cookies used on the Website
When a visitor accesses the website available at [website address], a small file called a “cookie” is placed on the visitor’s computer, which may serve various purposes.
Some of the cookies used by us are essential for the proper functioning of the Website (“session cookies”), while others collect information about website usage (cookies required for statistical purposes) in order to make the Website more convenient and useful. Some cookies are temporary and are deleted when the browser is closed, while others are persistent and remain on the user’s computer for a longer period.
The legal basis for the use of cookies necessary for the operation of the Website is the legitimate interest of the Data Controller, for which a balancing of interests test has been carried out.
“Session cookies”
Session cookies are necessary for browsing the Website and using its basic functions, including remembering actions taken by the visitor on a given page, function or service. Without the use of session cookies, smooth operation of the Website cannot be guaranteed. Their validity lasts for the duration of the visit and they are automatically deleted at the end of the session or when the browser is closed.
The operation of the Website complies with applicable legal requirements.
The session cookies used by the Website are as follows:
| Cookie name | Purpose of cookie | Legal basis | Retention period |
| buildr_live_session | Cookie used by the Website to retrieve session status between sessions. | Legitimate interest – Article 6(1)(f) GDPR (based on balancing of interests test) | End of session |
| XSRF-TOKEN | Cookie used by the Website to retrieve session status between sessions. | End of session | |
| cookies-state | Stores cookie consent information. | End of session | |
| VISITOR_INFO1_LIVE | Cookie used by YouTube LLC (901 Cherry Avenue, San Bruno, California, USA) to measure available bandwidth and determine whether the user sees the new or old video player interface. | 5 months | |
| YSC | Cookie used by YouTube LLC to store whether embedded video content is displayed. | End of session |
“Cookies required for statistical purposes”
We strive to provide content preferred by visitors; therefore, we prepare statistics on browsing habits.
| Cookie name | Purpose of cookie | Legal basis | Retention period |
| _ga | Registers a unique identifier used to generate statistical data on website usage. | Consent of the data subject – Article 6(1)(a) GDPR | 399 days |
| _gat | Used by Google Analytics to throttle request rates. | 1 day | |
| _gid | Stores a unique value for each visited page. | 1 day | |
| collect | Identifies the device used for website visits. | End of session |
“Cookies required for marketing purposes”
The purpose of marketing cookies is to display advertisements that are most relevant to visitors and to measure campaign effectiveness.
| Cookie name | Purpose of cookie | Legal basis | Retention period |
| DEVICE_INFO | Tracks user interaction with embedded content. | Consent of the data subject – Article 6(1)(a) GDPR | 6 months |
Purpose of data processing: Redirection to social media platforms
If the visitor is logged into their social media account at the same time, the visit may be associated with the user account.
Links to Facebook and Instagram are indicated by icons operated by Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin, Ireland).
Further information:
https://www.facebook.com/privacy/explanation
https://privacycenter.instagram.com/policy
Rights of data subjects
Data subjects may request information, correction, deletion, restriction of processing, withdrawal of consent, data portability, and may lodge complaints with the supervisory authority.
20 February 2023