I. Introductory Provisions
SHEFA EUROPRIME Kft. (hereinafter: the Data Controller) undertakes to fully comply with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation – GDPR) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and to comply with Act CXII of 2011 on the Right of Informational Self-Determination and Freedom of Information (Infotv.) under Hungarian law.
These legal provisions constitute the legal basis of our data processing practices, thereby ensuring the appropriate protection and lawful processing of the data of data subjects.
This Data Processing Information Notice is effective from 04 February 2026. We reserve the right to amend this notice.
II. Data Processors
II.1. Data Controller Details
Name / Organization name: SHEFA EUROPRIME Kft.
Address: 1061 Budapest, Andrássy út 33. 4. em. 4. ajtó
E-mail address: office@shefaglobalgroup.com
Phone number: +36 70 405 5158
II.2. Data Processor Details
Name: BlazeArts Kft.
Registered office address: 1096 Budapest, Thaly Kálmán utca 39.
E-mail address: privacy@forpsi.hu
Scope of activity: web hosting services
III. Definitions
Personal data: any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, number, location data, online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person;
Processing: any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment or combination, restriction, erasure, or destruction;
Restriction of processing: the marking of stored personal data with the aim of limiting their processing in the future;
Profiling: any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements;
Data Controller: the natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the Data Controller or the specific criteria for its nomination may be provided for by Union or Member State law;
Data Processor: a natural or legal person, public authority, agency, or other body which processes personal data on behalf of the Data Controller;
Recipient: a natural or legal person, public authority, agency, or another body to which the personal data are disclosed, whether a third party or not. Public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall comply with the applicable data protection rules according to the purposes of the processing;
Consent of the data subject: any freely given, specific, informed, and unambiguous indication of the data subject’s wishes by which they, by a statement or by a clear affirmative action, signify agreement to the processing of personal data relating to them;
Personal data breach: a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data transmitted, stored, or otherwise processed;
IV. Scope of Processed Personal Data, Method, Legal Basis, and Purpose of Processing
The Data Controller processes and stores the provided personal data until the data subject withdraws their consent.
The personal data collected and processed by the Data Controller are disclosed to the Data Processors exclusively for the purposes of web hosting services and newsletter system operation.
IV.1. Scope of Processed Personal Data
IV.1.1. Personal Data Related to the Newsletter
Data subjects:
Natural persons who voluntarily subscribe to the newsletter via the website constitute the group of data subjects of the newsletter service.
Scope of personal data:
Subscribers to the newsletter may provide the following data: name, phone number, and email address.
IV.1.2. Additional Data Processed by the Data Controller
Beyond the data detailed above, the Data Controller does not process, collect, or record any additional personal data about website visitors or newsletter subscribers.
During data collection and system operation, no automatic data recording or logging takes place regarding visitors’ computers, including IP addresses.
Only “session” cookies necessary for the basic operation of the website are used. These cookies ensure smooth browsing and functional use. Their validity is limited to the duration of browsing and they are automatically deleted from all devices when the browser is closed.
IV.1.3. Automated Data Processing Systems
The Data Controller does not perform automated data processing, including profiling, in relation to website visitors or newsletter subscribers.
IV.2. Method of Data Processing
The Data Controller guarantees the protection of the processed personal data through comprehensive security measures. Our technical and organizational solutions prevent unauthorized use, modification, and potential data loss.
In the event of a personal data breach, detailed documentation is maintained to ensure effective incident management and appropriate information for the affected data subjects.
IV.3. Legal Basis of Data Processing
The legal basis of data processing is the consent of the data subject pursuant to Article 6(1)(a) and Article 4(11) of the GDPR, and Section 5(1)(b) of the Infotv.
IV.4. Purpose of Data Processing
- online content provision
- subscription to the newsletter function available on the website
- identification of the data subject (provision of name)
- maintaining contact with the data subject (provision of email address)
- sending electronic newsletters at specified intervals
- protection of the rights of data subjects
- enforcement of the legitimate interests of the Data Controller
V. Rights of the Data Subjects
The data subject may request:
- access to their personal data (right of access),
- correction of inaccurate personal data or completion of incomplete data (right to rectification),
- objection to the processing of personal data based on their individual situation, including profiling (right to object),
- receipt and transmission of their personal data in a structured, commonly used, and machine-readable format (right to data portability),
- temporary restriction of the processing of their personal data (right to restriction of processing),
- erasure of their personal data (right to erasure).
VI. Legal Remedies
Objection to data processing is possible in the following cases:
- when data processing is necessary for compliance with a legal obligation of the Data Controller or for the enforcement of its legitimate interests,
- if data processing serves direct marketing or research purposes,
- in other cases specified by law.
The Data Controller shall examine the objection request within 25 days and notify the data subject of its decision in writing. If the objection is well-founded, data processing shall be terminated, the data shall be blocked, and all recipients who previously received the data shall be notified.
In the event of a violation of the data subject’s rights, the data subject may turn to the National Authority for Data Protection and Freedom of Information (NAIH).
NAIH contact details:
Registered office: 1125 Budapest, Szilágyi Erzsébet fasor 22/c
Postal address: 1530 Budapest, P.O. Box 5
Phone: +36 1 391-1400
Website: naih.hu
The data subject may also turn to a court if the Data Controller or Data Processor processes their personal data in violation of the law. The lawsuit may be initiated before the competent regional court based on the data subject’s place of residence or the Data Controller’s registered office within 30 days from notification. The court shall proceed on an expedited basis.