Echo Recording Studio understands that data privacy is important to you and that you are interested in how your personal data is used. We respect and value the privacy of everyone who visits this website, echorecording.com (“Our Website”), and we collect and use personal data only in the manner described here, and in a way that is consistent with our obligations and your legal rights.

Please read this Privacy and Data Management Policy carefully to ensure that you understand it. Your acceptance of this Privacy and Data Management Policy is considered to have occurred upon your first use of the Website. If you do not accept and agree with this Privacy Policy, you must immediately stop using Our Website.

1. DEFINITIONS AND INTERPRETATION

In this policy, the following terms shall have the following meanings:
“Cookie”: a small text file that is placed on your computer or device by Our Website when you visit certain parts of Our Website and/or when you use certain features of Our Website. Details of the Cookies used by Our Website are set out in section 14 below.

2. INFORMATION ABOUT US

You can reach us in writing at the email address [email protected] or through the form found on the “Contact” page.
2.1 The echorecording.com service is provided by Kiss Gábor EV., a company registered in Hungary with company number 52855935. Our registered office is located at 1067 Budapest, Csengery Street 61.

3. WHAT DOES THIS POLICY COVER?

This Privacy Policy applies only to your use of Our Website. Our Website may contain links to other websites. Please note that we have no control over how your data is collected, stored, or used by other websites, and we advise you to check the privacy policies of any such websites before providing any data to them.

4. WHAT IS PERSONAL DATA?

Personal data is defined by the General Data Protection Regulation (EU Regulation 2016/679) (“GDPR”) and according to the definition in the data protection laws of 2018 (“data protection laws”), is “any information relating to an identifiable person who can be directly or indirectly identified, in particular by reference to an identifier.”
Personal data, in simpler terms, is any information about you that enables you to be identified. Personal data includes obvious information such as your name and contact details, but also less obvious information such as identification numbers, electronic location data, and other online identifiers.

5. WHAT ARE MY RIGHTS?

Under data protection law, you have the following rights, which we always work to uphold:
a) The right to be informed about our collection and use of your personal data. GPT This Privacy Policy tells you everything you need to know, but you can always contact us if you want to learn more or have any questions using the contact details provided in section 2.
b) The right to access the personal data we hold about you. Section 13 explains how you can do this.
c) The right to have your personal data rectified if any personal data we hold about you is inaccurate or incomplete. Please contact us using the contact details provided in section 2 if you want to learn more.
d) The right to be forgotten, i.e., the right to ask us to delete or otherwise dispose of any personal data we have about you. Please contact us using the information provided in section 15 to learn more.
e) The right to restrict (i.e., prevent) the processing of your personal data.
f) The right to object to us using your personal data for a particular purpose or purposes.
g) The right to withdraw consent. This means that if we are relying on your consent as the legal basis for using your personal data, you are free to withdraw that consent at any time.
h) The right to data portability. This means that if you have provided us with personal data directly, and we are using it with your consent or for the performance of a contract, and that data is processed using automated means, you can ask us for a copy of that personal data to re-use with another service or business in many cases.
i) Rights relating to automated decision-making and profiling. Your personal data will not be used in this way.
If you would like to receive further information about the use of your personal data or exercise the rights described above, please contact us using the contact information provided in section 2.
It is important that your personal data is accurate and up to date. If your personal data stored about you changes, please inform us while the data is in our possession.

6. WHAT DATA DO YOU COLLECT AND HOW?

Depending on how you use Our Website, we may collect and store some or all of the personal and non-personal data described below, using the methods also specified below. For more information about the use of cookies and similar technologies, see section 14. We do not collect any special category or sensitive personal data, or personal data about children.
Identification data includes first name, last name, company name, username or similar identifier, and address.
Contact data includes billing address, delivery address and/or contact address, email address, and telephone numbers.
Financial data includes bank account and payment card details.
Transaction data includes details of orders and payments made by you.
Technical data includes your internet protocol (IP) address, login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access the website.
Profile data includes your username and password, your profiles, settings, preferences, feedback, and survey responses.
Usage data includes information about how you use Our Website and our services.
Marketing and communications data includes your preferences in receiving marketing from us and our third parties, as well as your communication preferences.

7. HOW DO YOU USE MY PERSONAL DATA?

Under data protection law, there must always be a legal basis for using personal data. The table below describes how we may use your personal data, and our legal bases for doing so.
Objective/Activity Types of data Legal basis for processing, including the basis of legitimate interest
Processing an invoice request
Processing orders and payments.
Contact
Financial
Transaction
Profile
Marketing and communication
Fulfilling a contract with you
Our legitimate interests in receiving and fulfilling payments.
The management of our relationship with you, which includes:
We will notify you of any changes to our terms and conditions or privacy policy.
Invite you to leave a comment or participate in a survey

Contact
Profile
Marketing and communication
Fulfilling a contract with you
Our legitimate interests necessary for receiving and fulfilling payments
Necessary for our legitimate interests (keeping our records updated and studying how users use Our Website).
Managing and protecting the website (including troubleshooting, data analysis, testing, system maintenance, support, reporting, and data hosting).
Contact
Profile
Marketing and communication
Fulfilling a contract with you
Our legitimate interests necessary for receiving and fulfilling payments
Necessary for our legitimate interests (keeping our records updated and studying how users use Our Website).
Using data analysis to improve our website, services, marketing, and customer relationships.
Contact
Technical
Necessary for our legitimate interests (operating our business, providing administrative and IT services, network security, fraud prevention, and in the context of a business reorganization or group restructuring).
Our legitimate interests necessary for receiving and fulfilling payments
Making suggestions and recommendations to you about deals or services that might interest you. Contract
Technical
Usage
Necessary for our legitimate interests (to define the needs of our customers and to inform all users of our services, to keep our website updated and relevant, to develop our business and to make our marketing strategy known).
With your permission and/or where permitted by law, we may use your personal data for marketing purposes, which may include contacting you by email with information, news, and offers on our services and products found on the Website. We will not send you any unlawful marketing or spam messages. We always work to fully protect your rights and comply with our obligations under data protection laws and the 2003 Privacy and Electronic Communications (EC Directive) Regulations, and you will always have the opportunity to opt-out.
Before we share your personal data with any third parties for marketing purposes, we will always obtain your express consent, and you can opt-out at any time. Third parties whose content appears on Our Website may use third-party cookies, as detailed in section 14. For more information on controlling cookies, please read section 14. Please note that we do not control the activities of such third parties, nor the data they collect and use, and we recommend that you check the privacy policies of such third parties.
Your personal data will only be used for the purpose(s) for which they were originally collected, except if we reasonably believe that another purpose is compatible with the original purpose(s) for which your personal data was used. If we use your personal data in this way and you would like to be informed about how the new purpose is compatible with the original one, please contact us using the contact details provided in section 2.
If we need to use your personal data for a purpose that is unrelated or incompatible with the purpose(s) for which it was originally collected, we will inform you and explain the legal basis which allows us to do so.
Under certain circumstances, as permitted or required by law, we may process your personal data without your knowledge or consent. This will only occur within the framework of data protection laws and your legal rights.

8. HOW LONG WILL MY PERSONAL DATA BE KEPT?

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, as well as the applicable legal requirements.

9. HOW AND WHERE IS MY PERSONAL DATA STORED OR TRANSFERRED?

We store or transfer your personal data exclusively within Hungary. This means they are fully protected under data protection legislation.

If we use third-party payment processing services, such as SimplePay or PayPal, they will also collect your personal and financial data. When making a payment, you should check the privacy policy of the third-party payment processor.
SimplePay’s data transfer declaration:
When making payments via SimplePay, the User (Buyer) acknowledges that the following personal data stored in the https://echorecording.com user database by Kiss Gábor E.V. (1067 Budapest Csengery Street 61.) as the data controller, are transferred to OTP Mobil Kft. as the data processor. The scope of data transmitted by the data controller includes: buyer’s name, email address, billing address, and delivery address. The nature and purpose of the data processing activities carried out by the data processor can be viewed in the SimplePay Data Management Information at the following link: https://simplepay.hu/vasarlo-aff/

10. WILL YOU SHARE MY PERSONAL DATA?

With the following exceptions, we do not share your personal data with any third party for any purpose:
If we use a third-party payment processor to collect and process payments, their terms and conditions will apply.
Service providers acting as processors who provide IT and system administration services.
Professional advisers acting as processors or joint controllers including lawyers, bankers, auditors, and insurers who provide banking, legal, insurance, and accounting services.
Third parties to whom we may sell, transfer, or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this privacy notice.
Under certain limited circumstances, we may be legally required to share certain personal data, which includes your personal data, if we are involved in legal proceedings or complying with legal obligations, a court order, or instructions from a governmental authority.
If we share your personal data with a third party as described above, we take steps to ensure that your personal data is handled securely, protected, and in accordance with your rights, our obligations, and the third party’s legal obligations, as outlined in section 9.

11. HOW CAN I CHECK MY PERSONAL DATA?

In addition to your rights under the data protection laws described in section 5, when you submit personal data via Our Website, you have options to restrict the use of your personal data. We particularly aim to provide strong control over the use of your data for direct marketing purposes (including the ability to opt-out of receiving emails from us, which you can do by unsubscribing via the links found in our emails).

12. CAN I WITHHOLD INFORMATION?

Our website provides access to certain areas without the need to provide personal data. However, access to all features and functionalities available on our website may require providing certain data or granting permission for data collection.

13. HOW CAN I ACCESS MY PERSONAL DATA?

If you would like to know what personal data we store about you, you can request from us details of your personal data and a copy of it (if we hold any such personal data). This is called a “data subject access request”.

All access requests must be submitted in writing and sent to the email or postal address provided in section 2.

Data subjects’ requests for access are generally free of charge. If your request is “manifestly unfounded or excessive” (for example, if you make repetitive requests), we may charge a fee to cover our administrative costs associated with responding.

We will respond to the data subject access request within 28 days. We generally aim to provide a comprehensive response within this time frame, including a copy of your personal data if applicable. However, in certain cases, especially if your request is more complex, it may take up to three months from the date of receipt of your request. We will keep you fully informed of our progress.

14. HOW ARE COOKIES USED?

A cookie is a small file consisting of letters and numbers that we store on your browser or computer’s hard drive if you consent. Cookies contain information that is transferred to your computer’s hard drive.

The following cookies are used:
Strictly necessary cookies: These are cookies that are necessary for the functioning of our website. These include cookies that enable you to log into secure areas of our website, use a shopping cart, or utilize e-billing services.
Analytics/performance cookies: These allow us to recognise and count the number of visitors and to see how visitors move around our Site when they use it. This helps us to improve the way our website works, for example, by ensuring that users can easily find what they are looking for.
Functional cookies: These are used to recognise you when you return to our Site. This allows us to personalize content for you, greet you by name, and remember your preferences (for example, your language or region selection).
Targeting cookies: These cookies record your visit to our Site, the pages you visit and the links you follow. We use this information to make our website and the advertisements displayed on it more relevant to your interests. We may also share this information with third parties for this purpose.
Please note that third parties (including, for example, advertising networks and external service providers such as web traffic analytics services) may also use cookies, over which we have no control. These cookies are likely to be analytics/performance cookies or targeted cookies.

You can block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including essential cookies), you may not be able to access all or parts of our site.

15. AMENDMENTS TO THESE RULES

We may change this Privacy Policy from time to time. For example, this may be necessary if the laws change, or if we make changes to our business operations that affect the protection of personal data.

Any changes will be immediately posted on our website, and we consider you to have accepted the terms of the Privacy Policy upon your first use of our website following the modifications. We recommend that you regularly check this page to stay informed and up to date. This policy was last updated on August 10, 2022.

Fel