Privacy notice

This notice explains what personal data this website collects when you book a workshop, what it is used for, who else handles it, and your rights.

Who is responsible

Nacsa-Nagy Liza, sole trader (egyéni vállalkozó), is responsible for your data as its controller. For anything about your data, email nacsanagyliza@gmail.com. Her full details are in the impresszum.

What is collected

When you book a workshop, the form asks for:

• your name, email address and phone number
• the date and the number of places
• a note, if you add one
• whether you agree to appear in photos: yes or no

The booking also records the amount, whether it has been paid, and the myPOS payment reference.

Your card details are not collected by this site. When you pay by card, myPOS processes them; Liza never sees them.

What it is used for

• Your booking. To register you, and to contact you about the workshop and payment. Legal basis: performing the contract with you (GDPR Article 6(1)⁠(b)).
• Photos. Liza takes photos during the workshop, of you only if you agreed, and uses them on her website and social media (Instagram). Legal basis: your consent (Article 6(1)⁠(a)). You can withdraw it at any time by emailing nacsanagyliza@gmail.com; this does not affect use before you withdrew.
• Bot protection. A check on the booking form keeps out bots and spam. Legal basis: Liza’s legitimate interest in a form that works (Article 6(1)⁠(f)).
• Invoices and accounting. Liza keeps invoices and accounting records as Hungarian law requires. Legal basis: a legal obligation (Article 6(1)⁠(c)).

Who else handles it

• Cloudflare, Inc. hosts the website and the booking database, which is stored in the EU. Its Turnstile check on the booking form processes your IP address and browser information, only for that check.
• Google, through Gmail: booking notifications arrive in Liza’s mailbox.
• Resend sends your booking confirmation emails, which carry your name, email address and booking.
• myPOS handles card payments and payment links.

Cloudflare, Google and Resend are US companies. Data transferred to them is covered by the EU–US Data Privacy Framework or by standard contractual clauses.

Cookies

This site uses no analytics and no advertising cookies.

How long it is kept

Booking data is deleted within one year after the workshop. Invoices and accounting records are kept for as long as Hungarian accounting law requires: 8 years.

Your rights

You can:

• see the data held about you
• have it corrected
• have it deleted
• restrict how it is used
• object to its use
• receive it in a portable format
• withdraw your consent at any time

To do any of these, email nacsanagyliza@gmail.com.

If you think your data is not handled lawfully, you can complain to the Hungarian data protection authority, NAIH (Nemzeti Adatvédelmi és Információszabadság Hatóság), at naih.hu.