PRIVACY POLICY
Effective: November 01, 2025
1. Data of the Data Controller
Name: STVG Korlátolt Felelősségű Társaság
Seat: 1115 Budapest, Fraknó utca 6/b VI. em. 20. ajtó
Company Registration Number: 01-09-398715
Tax Number: 27804993-2-43
Represented by: Gábor Varga
E-mail: bohobudapest@gmail.com
Website: www.bohobar.hu
Hereinafter: Data Controller
2. Introduction
The purpose of this Privacy Policy is to transparently present how the Data Controller manages personal data collected on the website (www.bohobar.hu) and the online ticket purchasing interface, as well as what rights the data subjects have regarding the processing of their personal data.
During data processing, we apply Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation, GDPR) and related Hungarian legislation.
3. Purpose and Legal Basis of Data Processing
3.1. Ticket Purchase and Performance of Contract The Data Controller processes the personal data provided by the Purchaser for the purpose of performing the ticket purchase contract. Legal basis: GDPR Article 6(1)(b) – performance of a contract.
3.2. Contact The legal basis for data processing for the purpose of communication with the Purchaser (e.g., order confirmation, event changes) is also the performance of the contract.
3.3. Invoicing The processing of data necessary for issuing the invoice is justified by a legal obligation. Legal basis: GDPR Article 6(1)(c) – legal obligation.
3.4. Marketing If data processing for electronic marketing purposes (e.g., newsletter) takes place, it is based solely on the data subject’s explicit consent. Legal basis: GDPR Article 6(1)(a).
4. Scope of Processed Data
The Data Controller may process the following personal data:
-
name
-
e-mail address
-
phone number (optional)
-
billing name and address
-
purchase data (e.g., event, seat/capacity)
-
payment data (processed by the payment service provider, not the Data Controller)
-
IP address and technical data related to the operation of the website
5. Data Processors and Third Parties
The Data Controller may utilize data processors, in particular:
-
online payment service provider (e.g., Stripe, SimplePay, etc.)
-
website analytics providers (e.g., Google Analytics)
-
marketing platforms (e.g., newsletter software) These data processors have their own privacy policies, which are separately applicable to the data they process.
6. Data Retention
Billing and accounting data: 8 years (according to accounting rules)
Contractual and purchase data: 5 years
Data processed based on marketing consent: until the withdrawal of consent
7. Cookies and Automatic Data Collection
The website may use cookies:
-
technical and session cookies
-
analytical cookies (e.g., Google Analytics)
-
marketing cookies (e.g., Facebook pixel)
The detailed cookie policy related to data processing can be found in a separate document or can be disabled at any time through the user’s browser.
8. Rights of the Data Subjects
The data subject is entitled to the rights set forth in the GDPR:
-
right of access to their data
-
right to request rectification
-
erasure (“right to be forgotten”)
-
right to restriction of processing
-
right to data portability
-
objection against data processing
-
consent may be withdrawn at any time (in case of data processing for marketing purposes)
Requests can be submitted to the bohobudapest@gmail.com e-mail address.
9. Legal Remedies
If the data subject considers that their rights have been violated, they may file a complaint:
National Authority for Data Protection and Freedom of Information (NAIH)
1055 Budapest, Falk Miksa utca 9–11.
Web:
The data subject may also turn to court.
10. Data Security
The Data Controller applies appropriate technical and organizational measures to protect personal data, including:
-
secure server and network management
-
SSL encryption
-
access control
11. Contact
If you have questions regarding data processing, contact us:
📧 E-mail: bohobudapest@gmail.com