Privacidade e segurança

Privacy & Security

Privacy Policy

 

The aim of this Privacy Policy is to provide information about the processing of personal data made available to MyGPTicket Kft (hereinafter ‘MyGPTicket' or ‘controller') by the individuals using the website www.mygpticket.com (hereinafter: ‘website')

 

MyGPTicket pays particular attention to the protection of personal data of its website users and its customers and respects their rights to informational self determination. When processing personal data confidentiality is preserved and all security, technical and organizational measures are taken that guarantee the safety of such data. This document summarizes MyGPTicket's data processing practices.

1. Users

Users are the visitors of the websites and those, who enter into agreements with MyGPTicket Kft electronically.

2. Name of data controller

MyGPTicket Kft. (hereinafter ‘MyGPTicket' or ‘controller')

3. Address and registration number of controller

1051 Budapest, Sas u. 11. 3/8a

Hungary

Budapest-Capital Regional Court: Cg. 01-09-446430

4. Help and contact in data processing issues

-       info@mygpticket.com 

-       → 'Helpdesk' → 'Contact us' - blank field to fill in, postal address, fax and telephone numbers are available

5. The aim of data processing

The aim of data processing is

- concluding agreements with the buyers of tickets to motorsport events 

- fulfilling the orders,

- asserting claims arising out of the agreements,

- sending electronic newsletters,

- running the website user-friendly, provision of high quality information

In order to provide full range of services, there are links to hotel booking and car rental services on the website. MyGPTicket does not process personal data with regards to these services. By clicking on the links, users leave the website.

Our available ‘Partner Program' does not process the user's personal data either.

6. Lawfulness of data processing

Personal data required for the conclusion of agreements are provided by the users, thus the legal title of data processing is the intention of the parties to enter into an agreement with each other.

Further data processing, required for the fulfilment of contractual obligations and assertion of contractual claims is based on the signed agreements.

Personal data set out in the agreements shall be processed for compliance with legal obligations within a period specified in the Accounting Law.

Processing and maintenance of personal data might be required for the purposes of the legitimate interests pursued by the data controller or by a third party (e.g. investigation of a card fraud by the bank). 

The entitlement of MyGPTicket to send electronic newsletters and to operate the website user-friendly (by using ‘cookies') is based on the user's voluntarily given consent, withdrawable any time.

7. Scope of controlled data

a)     Data controller processes the following personal data of users.

 

	Sale of tickets	Electronic newsletter	Hotel booking	Renting a car	Partner program
name	X	X	-	-	-
e-mail address	X	X	-	-	-
phone number	X	-	-	-	-
fax number	X	-	-	-	-
delivery address	X	-	-	-	-
invoicing address	X	-	-	-	-
elements of the order	X	-	-	-	-
cookie-k (pls. see details under the table)	X	-	-	-	-

 

If someone provides the personal data of another person to MyGPTicket, it is the responsibility of the provider of such personal data to obtain the data subject's consent!

 b)  Cookies on the MyGPTicket website

As it is widely known, a cookie is a small piece of data sent from a website and stored in the user's web browser as a secret identifier, while the user is browsing that website. Cookies collect useful information about the user and his/her IT device and the user's individual scope of interest, remember settings, facilitate the use of the websites and enrich user-experience.

Visiting mygpticket.com may generate the following types of cookies:

• "Session cookie" - it is necessary to make an order by the user. Session cookie contains merely a workflow identifyer and its expiry. The workflow identifyer is connected to a temporary database containing the personal data of the user, required for the purposes of making an order, and the elements of the order.

When the user starts the ordering process, his/her personal data will be stored temporarily, approximately for 30 minutes, as described above. Session cookies expire and the collected data are deleted from the temporary database at completion of the ordering process and also if it is interrupted for any reason. If the user intends to submit an order, session cookies cannot be preliminary deleted or removed.

• Third party companies, organizations and service providers (e.g. Facebook, Google Adwords, etc.) may also initiate placement of „anonym cookies" on the computer of the users when the user visits the website. Operation of these cookies does not allow MyGPTicket access to the information gathered by the third parties, and does not allow the third parties get access to the cookies and the information collected by MyGPTicket.
• „Advertising cookies" - by placing these cookies MyGPTicket receives information if a user has seen a particular advertisement and if yes, how many times. Using these cookies allows targeted advertising with useful information provided to the customers and thereby adds value to the website.

With the exception of "Session cookies", by using the Cookiebot service operating on the website, the user has the opportunity to find out from his/her web browser what cookies the website has installed, how long they are stored, and to consent to the operation of these third-party cookies or "Advertising cookies" or to prohibit the collection of data by them.

8. Periods for which the user's personal data are stored

The length of the obligation to retain underlying documentation of commercial deals for accounting purposes is 8 years in accordance with the Accounting Law, thus personal data set out in the agreements will be processed until the end of this period and thereafter destroyed.

Personal data made available to the data controller in the course of an unsuccessful transaction, when personal data were provided with the aim of entering into an agreement but finally such agreement was not concluded, shall be maintained at the request of the bank, for 5 years. The reason is to be able to inform the bank or the user during this period about the circumstances of a failing transaction or in an investigation of a card fraud.

Personal data of those who subscribe to the newsletter are retained until the date of their un-subscription.

9. User's rights with regards to the processing of their personal data

a)     Information and right to access, modification, rectification, restriction, etc.

By using the e-mail address info@mygpticket.com or any other options set out in paragraph 4, users may require information on the way and status of processing their personal data as follows:

-       if personal data concerning the user are being processed,

-       where,

-       what is the purpose of data processing,

-       what kind of personal data are processed,

-       are personal data forwarded  or not, if the answers is yes, who are the recipients of those,

-       the length of data controlling

The user is entitled

-       to receive information about the source of his/her personal data (MyGPTicket processes personal data provided by the users only!)

-       to request the correction of his/her personal data,

-       to request the termination and/or limitation of data processing if no purpose exists, or if data processing was based on the user's consent, or it was simply unlawful, etc.,

-       to object against data processing if the aim is direct marketing (and his/her consent was withdrawn), or if the purpose is the legitimate interest pursued by the data controller or any third party, but in the latter case, these are overridden by fundamental privacy rights and interest of the user.

The user is also entitled to forward his/her personal data to another data controller, provided that processing is carried out by automated means. In addition, he/she may request MyGPTicket's support to such data transfer.

User may lodge a complaint with the court or the supervising authority with regards to any privacy claims he/she may have (see paragraph 14).

The user's requests for information about processing of his/her personal data, received by MyGPTicket as indicated in paragraph 4, will be answered within the earliest reasonable timeframe, but at least within 1 month. Where necessary, the deadline can be extended by 2 additional months. Providing the required privacy information for the first time is free of charge. Reasonable administrative fees can be charged though, if the request is manifestly unfounded or gratuitous, in particular due to its repetitive character.

b) Newsletter subscription and unsubscription

MyGPTicket is entitled to send electronic newsletters to the users merely in possession of their preliminary and unambiguous consent. It may send also targeted Facebook advertisements to those who have consented to it and are also Facebook users. 

Addressee of electronic newsletters may unsubscribe the newsletter (along with the Facebook advertisements) any time a) using the contact details set out in paragraph 4 b) by clicking on the related link in the newsletter or c) using the unsubscribe button on the website.

If subscription was made on more than one language (e.g. to the English and the German version of the newsletter) and to MotoGP, Formula 1, Superbike or any other events each, unsubscription should be made with regards to each of these newsletters. Subscription records are kept by MyGPTicket for each business line as well as each language separately, in order that users receive the newsletter on the language they understand and only about the events that are interesting to them. Should the user not be sure about his/her subscriptions, MyGPTicket should be contacted and instructed to delete the user's personal data from all lists.

The newsletter database shall be used by the data controller exclusively for the purposes of sending newsletters. Personal data of those unsubscribed are destroyed.

10. Further processing and forwarding of personal data

The website www.mygpticket.com operates on the servers of Amazon Web Services EMEA Sarl (Luxembourg) as data processor, within the frame of the services agreements concluded by MyGPTicket with the data processor. Personal data processed by MyGPTicket are kept on these servers.

Above the Line Coding and Machine Learning (Al Wasl - City Walk 21B APT202 Dubai U.A.E.) performs the maintenance, development and programming tasks related to the website. 

The invoices are issued out of the electronic billing system called "Novitax", run by the data controller as licensee, while the accounting tasks are completed by the bookkeeping company Ropo Kft.

MailChimp, registered in the US, provides for sending the newsletters to the users. In case of unsubscription, the related personal data will be deleted from the database of MailChimp.

Lawful access to and the safety of the Users' personal data is guaranteed by the above service providers in the related services agreements concluded with MyGPTicket, setting out the appropriate security, technical and organisational measures implemented to ensure compliance with the applicable data protection requirements.

The data protection background of AmazonWeb Services EMEA Sarl and of Mailchimp services is guaranteed in the data protection terms and conditions, available on the service providers' website (the "Data Processing Addendum"). These documents apply the "Standard Contractual Clauses for the transfer of personal data to third (non EU) countries" laid down in European Commission Decision 2021/914 of 4 June 2021(„2021 Controller-to-Processor Clauses" or „SCC").

Personal data required for the performance of the agreements are disclosed towards the shipping companies responsible for the delivery of tickets (e.g. DHL, GLS). In accordance with the shipping company's contract concluded with the data controller, it is obliged to maintain confidentiality of personal data and is prohibited to use or transfer those for any other purposes than delivery of tickets to the MyGPTicket customers. Data protection related obligations of the shipping companies are undertaken in their general terms and conditions.

MyGPTicket reserves the right to forward personal data of users suspected of fraud or any infringement of law to the competent authorities and/or K&H Bank / K&H Payment Services, as the case may be.

11. Data security

MyGPTicket takes all reasonable measures and those expected by data protection laws in order to ensure data security and to avoid any unauthorized access and modification, illegal forwarding or publishing, any destruction or damaging of data and any failure to access those due to the change of the used technique. Data controller excludes liability for destruction, loss, or damage of personal data due to a technical failure, natural disaster, terrorist act, any other ‘vis major' event, a crime or any use for unlawful purposes, provided that it has taken all necessary and reasonable protective measures available in accordance with the state of knowledge and technics which are customary in the services sector, taking also into consideration the related implementation costs.  

In the course of payments through a credit card, MyGPTicket's system does not have access to the particulars of the credit card. Following completion of the order, users are automatically directed to the website of K&H Payment Services, where the payment is effected.  Data of the payment transactions are encrypted with 128 bits SSL encoding, which is the currently available most reliable encoding system.

12. Amendments to the Privacy Policy

MyGPTicket reserves the right to unilaterally amend this Privacy Policy within the frame of effective legal prescriptions. The amended policies will be published on the websites. It is strongly recommended that users frequently check the Privacy Policy, follow any future changes, learn and understand the consequences of those on the processing of their personal data. 

13. Legal background

This Privacy Policy is prepared in compliance with the following Acts:

-             EU 679/2016 General Data Protection Regulation (GDPR)

-             Act 112 of 2011 ‘On informational self-determination and freedom of information'

-             Act 108 of 2001 ‘On certain issues of electronic commerce activities and information society  services'

-             Act 100 of 2000 'On Accounting'

-             Act 5 of 2013  'Civil Code'

14. Enforcement of rights

Users are entitled to lodge a complaint if, in their view, data processing in relation to their personal data breaches data protection laws or the terms and conditions of the present Privacy Policy. 

Please contact MyGPTicket to address your problem by using the contact details set out in paragraph 4 ("Help and contact in data processing issues").

Users are entitled to initiate legal proceedings before the competent court, or might notify the National Authority for Data Protection and Freedom of Information (HU-1055 Budapest, Falk Miksa utca 9-11.; Postal address: 1363 Budapest, Pf.: 9.; e-mail: ugyfelszolgalat at naih.hu) and initiate an investigation with regards to a data processing issue.