Request a call back! Please fill out our form and our colleague will call you back at the indicated time.
Privacy Policy
Hair-Aesthetic Clinic Ltd. is committed to protecting the personal data and privacy of its clients and all individuals who visit our websites. This Policy (hereinafter referred to as the "Policy") primarily addresses the confidential handling and protection of clients' personal data transmitted over the Internet but is also appropriately applicable to data held solely on paper or other data carriers, acquired from clients through interactions such as marketing campaigns. This Policy outlines what data Hair-Aesthetic Clinic Ltd. may collect about you and how such data may be used by Hair-Aesthetic Clinic Ltd., its commercial network members, and suppliers.
This Policy provides important information regarding the protection of your personal data and your rights concerning them. For data protection matters not mentioned in this Policy, the general data protection provisions contained in the General Terms and Conditions (GTC) apply. By using the website, the user acknowledges and accepts this Policy and the GTC. If the user does not accept these terms, they have the right to cease using the website and refrain from providing any personal data.
1. Who collects personal data (data controller)?
Your data is collected by Hair-Aesthetic Clinic Ltd. (registered office: 2500 Esztergom, Juliánus barát utca 1. 12. ajtó, phone and email: +36 (25) 884 041, +36 (30) 883 6103, info@hairhungary.hu, website: hairhungary.hu).
2. Definitions related to personal data
personal data: data that can be linked to an identified natural person (hereinafter: data subject), or conclusions drawn from the data about the data subject. The data retains its personal nature during processing as long as its link to the data subject can be restored;
sensitive data: personal data relating to racial origin, national, ethnic affiliation, political opinion or party affiliation, religious or other beliefs, health status, addictions, sexual life, or criminal record;
data processing: regardless of the method used, it includes collecting, recording, storing, processing, utilizing (including transmission and publication), and deletion of personal data. Modification and prevention of further use also constitute processing;
data processing (technical): executing technical tasks related to data processing, regardless of the method or tool used and the location of application;
data transmission: making data available to a specific third party;
disclosure: making data available to anyone;
data controller: the natural or legal person, or organization without legal personality who determines the purpose of data processing, makes decisions on processing (and may delegate processing to a processor). In cases of mandatory processing, the purpose and conditions are defined by law or municipal regulation;
data processor: a natural or legal person or organization without legal personality who processes personal data on behalf of the data controller;
data deletion: making data unrecognizable in a way that prevents recovery;
automated data set: series of data subject to automated processing;
machine processing: includes storing data, logical or arithmetic operations, modification, deletion, retrieval, and distribution performed partly or fully by automated means.
3. Principles of data processing
1. Data must be obtained and processed fairly and lawfully;
2. Data may be stored only for specific and lawful purposes and not used in ways inconsistent with those purposes;
3. Data must be adequate, relevant, and not excessive in relation to the purposes for which they are stored;
4. Data must be accurate and, where necessary, kept up to date;
5. Data must be stored in a way that allows identification of the data subject only for the time necessary for the purpose of storage;
6. Personal data concerning racial origin, political opinion, religion or other beliefs, health, or sexual life may not be processed by automated means unless domestic law provides suitable safeguards. This applies also to criminal record data;
7. Appropriate security measures must be taken to protect personal data stored in automated data files against accidental or unlawful destruction, accidental loss, unauthorized access, alteration, or dissemination.
4. Additional guarantees protecting data subjects
Everyone has the right to:
1. be informed about the existence of automated personal data files, their main purposes, and the identity and habitual residence or headquarters of the data controller;
2. at reasonable intervals and without excessive delay or expense, be informed whether personal data relating to them are stored in an automated file and, if so, receive intelligible information about such data;
3. request, in justified cases, the correction or deletion of such data in the simplest and fastest way possible;
4. seek legal remedy if requests for information, correction, or deletion based on statutory rights are not fulfilled. Upon request, the data controller shall provide information about the data processed by them or by a processor on their behalf, including the purpose, legal basis, duration of processing, name and address (seat) of the processor, and who receives or has received the data and for what purpose. This information shall be provided in writing and in an understandable form within the shortest possible time, but no later than 30 days. In case of rights violation, the data subject may file a claim against the data controller in court. The data controller is liable for damages caused by unlawful data processing or violation of technical data protection requirements. The data controller is also liable for damages caused by the data processor. The data controller is exempt from liability if it proves that the damage occurred due to an unavoidable cause outside its control. Compensation is not required to the extent that the damage resulted from the injured party’s intentional or grossly negligent behavior.
Personal data may be processed if
1. the data subject gives consent, or
2. it is ordered by law or by a local government decree based on authorization from the law, specifying the scope of the data. By law, personal data may be made public in the public interest by explicitly specifying the data scope. In all other cases, publication requires the data subject’s consent, and written consent in the case of sensitive data. In case of doubt, it is presumed that consent has not been given. The data subject’s consent shall be deemed granted regarding data disclosed by them during public appearances or data provided for public disclosure.
Sensitive data may be processed if
1. the data subject gives written consent, or
2. regarding data on racial origin, membership of a national or ethnic minority, political opinions or party affiliation, religious or ideological beliefs, or trade union membership, it is based on an international agreement or the enforcement of a fundamental right guaranteed by the Constitution, or is required by law for national security, crime prevention, or law enforcement purposes;
3. in other cases, if required by law.
The regulations concerning data processing and the protection of visitors’ personal data apply exclusively to natural persons, since personal data can only be interpreted with respect to natural persons (based on Act CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information). Therefore, this privacy policy applies only to the handling of personal data of natural persons registering on the website.
Purpose limitation of data processing:
Personal data may only be processed for a specific purpose, for exercising a right or fulfilling an obligation. Each stage of data processing must comply with this purpose. Only personal data essential and suitable for achieving the purpose, and only to the necessary extent and duration, may be processed.
Data security:
The data controller and any data processor acting within its scope of activities must ensure the security of data and take the necessary technical and organizational measures and develop procedures required to enforce the provisions of the data protection law and other applicable data and confidentiality regulations. Data must be protected especially against unauthorized access, alteration, disclosure, or deletion, as well as damage or destruction.
5. What data do we collect?
You may access and browse our websites without providing personal data, at your discretion.
The term "personal data" refers to all information relating to an identified or identifiable natural person, either directly or indirectly, based on an identification number or one or more factors specific to their identity.
If Hair-Aesthetic Clinic Ltd. collects your personal data, such data collection is carried out confidentially and transparently.
Your personal data is collected either via a questionnaire, upon registration through our online interfaces, or during browsing on our websites—always indicating which data fields are mandatory to achieve the specified purpose. If you do not wish to provide such data, you may not be able to access certain services and features of our websites, nor will you be eligible to purchase our products or services online. The collection of non-mandatory data is intended to better understand you in relation to our products and services and is entirely voluntary—you may refuse to provide them.
Hair-Aesthetic Clinic Ltd. takes all necessary measures to ensure that personal data it processes is accurate and, where necessary, kept up to date.
6. What types of data processing occur when using the Website?
Requesting a callback
Purpose of data processing: to contact the user via confirmation email
Data processed: full name, email address, phone number, and other optional information provided in the message box
Legal basis: user's consent, fulfillment of a contract
Data retention period: 1 year from the time of order placement
Storage method: electronically
If the user provides additional personal data in the “Message” box besides the required fields, their consent will extend to these data as well. The service provider uses such data solely for contact purposes.
The user may provide consent by checking the corresponding empty checkbox on the order form interface. This consent may be withdrawn at any time. Withdrawing consent does not affect the legality of data processing prior to withdrawal.
In accordance with Article 13 of the GDPR, the service provider hereby expressly informs the user that providing the specified data is a condition for concluding a contract via the Website.
7. Who may access personal data (data transfer)?
Hair-Aesthetic Clinic Ltd. is entitled to share your personal data with its partners and commercial network. Subcontractors may be involved (each bound to process data per our instructions) to process all or part of the personal data necessary for fulfilling their contractual obligations (e.g., website hosting, services related to website use, or sending commercial offers).
8. Data security and confidentiality
Hair-Aesthetic Clinic Ltd. generally does not verify the personal data provided. Responsibility for the accuracy of the submitted data lies with the provider.
Hair-Aesthetic Clinic Ltd. takes appropriate security measures to protect the confidentiality and safety of your personal data and to prevent unauthorized third-party access, damage, deletion, or alteration.
Access to personal data is strictly limited to employees and contractors as required to perform their duties, all of whom are bound by confidentiality and privacy obligations.
9. Rights of the data subject and enforcement
The user may request information free of charge about the processing of their personal data and, in cases defined by law, may request their correction, deletion, blocking, or restriction, and may object to their processing.
Right of access: the user may receive feedback from Hair-Aesthetic Clinic Ltd. about the processing of their personal data and may access the data and its processing details.
Right to rectification: upon request, Hair-Aesthetic Clinic Ltd. will promptly correct inaccurate personal data and complete any incomplete data, including via a supplementary statement.
Right to erasure: Hair-Aesthetic Clinic Ltd. shall delete personal data upon request if they are no longer necessary, consent is withdrawn, objection is raised, or processing is unlawful.
Right to be forgotten: upon request, Hair-Aesthetic Clinic Ltd. will inform all recipients who have accessed the user’s personal data about the request for erasure, where feasible.
Right to restriction: Hair-Aesthetic Clinic Ltd. will restrict data processing if the data accuracy is contested, processing is unlawful, the user objects, or data is no longer needed.
Right to data portability: the user may receive their personal data in a structured, commonly used, machine-readable format and transmit it to another controller.
Hair-Aesthetic Clinic Ltd. will examine the request within the shortest possible time, but no later than 30 days—or 15 days in case of objection—and notify the requester in writing. If the request is denied, the reasons shall be communicated to the user.
The user may enforce their rights before court under the Civil Code (Act V of 2013) and may also lodge a complaint with the National Authority for Data Protection and Freedom of Information (1125 Budapest, Szilágyi Erzsébet fasor 22/c.; https://www.naih.hu/panaszuegyintezes-rendje.html).
10. Protection of minors' personal data
Hair-Aesthetic Clinic Ltd.'s websites are generally not intended for minors under 14 years of age. Therefore, we do not knowingly collect personal data from children under 14 without verifiable parental consent. Parents may request access to and deletion of such data.
If the company becomes aware of a minor’s age during processing, it may use that information to obtain parental consent.
11. Cookies
Our websites use cookies to adapt to user preferences and optimize online content. To enable access and personalization, the website's servers may place cookies on your device. These cookies facilitate browsing and site functionality.
Managing cookies
Several options are available for cookie management. Settings can affect browsing and access to services requiring cookies. Cookie preferences may be configured or modified as described below. Internet software allows you to accept, reject, or filter cookies globally or per sender, or prompt you each time before accepting cookies.
Enabling cookies
Allowing cookies depends on the user’s choice, which can be expressed or modified at any time via browser settings. If you consent, cookies related to visited content will be temporarily stored in a designated location accessible only to the sender.
Disabling cookies
If you block or delete cookies, certain functions of our site or application may become unavailable. This includes access to personalized services requiring login or regional/language settings. We are not liable for the reduced performance caused by disabling cookies essential for site functionality.
Browser-specific settings
Cookie handling varies by browser. Consult your browser's help section for details on how to adjust settings:
Internet Explorer™: http://windows.microsoft.com/hu-HU/internet-explorer/delete-manage-cookies#ie=ie-11
Safari™: https://support.apple.com/kb/PH21452?viewlocale=hu_HU&locale=en_US
Chrome™: https://support.google.com/chrome/answer/95647?hl=hu
Firefox™: https://support.mozilla.org/hu/kb/weboldalak-altal-elhelyezett-sutik-torlese-szamito
Opera™: http://help.opera.com/Windows/11.60/hu/cookies.html
etc.
“Adobe Flash Player”™ “Flash”© cookies
“Adobe Flash Player”™ uses Flash technology to store content settings and preferences similarly to cookies. These settings are not accessible via browser cookie settings. If your device supports Flash, visit: http://www.adobe.com/hu to manage Flash cookies.
Opt-out settings
If you do not want advertising cookies, you can disable them via your browser. This sets a cookie that disables targeted ads, though generic ads may still appear. This opt-out itself is stored via cookie; if all cookies are deleted, your opt-out preference will also be lost. To re-enable targeted ads, adjust your browser settings accordingly.
Cookies used on our website
Upon visiting our website, we may place cookies on your device, with your consent, to recognize your browser. These cookies are used for purposes as described below, depending on your browser settings.
Cookies we send allow us to:
– create statistics to evaluate the usage and popularity of different site sections and content;
– adapt site layout to display preferences (language, resolution, OS, etc.);
– store form inputs (login info, selected products/services);
– grant access to reserved areas (e.g., your account);
– implement security measures such as session timeouts.
Cookies from third parties
Our website may include cookies from third parties (e.g., ad agencies, analytics providers) that collect browsing data during their validity. These are subject to the respective third parties' privacy policies. We inform you of the types of cookies we are aware of and the tools to manage them.
We may integrate third-party tools enabling users to share site content (e.g., “Share”, “Like” buttons for Facebook, Twitter, LinkedIn). These services can track your visit even if you don’t interact with the buttons but are logged into a social network. We have no control over how social media platforms use this data. Please review their privacy policies and adjust your account settings accordingly.
The utility of cookies
Our goal is to show the most relevant ads. Cookies allow us to determine what ads to show based on your previous visits. These ads fund the free services you use. Advertisers also prefer reaching interested audiences rather than displaying irrelevant ads.
Additional information
If multiple users share a device or browser, we cannot guarantee that services or ads are directed to the intended user. Cookie-related settings and decisions are your responsibility in such cases.
12. Links to other websites
Our websites may contain links to third-party websites. Hair-Aesthetic Clinic Ltd. has no control over these sites and is not responsible for their content or data practices. We recommend reviewing their privacy policies when visiting external websites.
13. Miscellaneous
Hair-Aesthetic Clinic Ltd. may collect data about user activity that is not linked to registration data or data collected through other sites or services.
If we intend to use provided data for purposes other than originally stated, we will inform the user and obtain explicit consent or offer the option to object.
We commit to data security and will take technical measures to protect collected data from unauthorized use, alteration, or destruction.
Hair-Aesthetic Clinic Ltd. maintains a record of its data processing activities pursuant to Article 30 of the GDPR.
A data breach is any breach of security that results in the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to personal data. In such cases, we follow Articles 33 and 34 of the GDPR and maintain a record of breaches, including facts, impacts, and remediation.
Hair-Aesthetic Clinic Ltd. may unilaterally modify this Policy at any time. We will inform users via the website. Continued use of the website implies acceptance of the updated terms.
14. Applicable Laws
All personal data processing activities comply with applicable legislation, including Act CXII of 2011 on Informational Self-Determination and Freedom of Information, and Act CVIII of 2001 on Electronic Commerce and Information Society Services.
15. Amendments to the Policy
Any modifications to this Policy—whether initiated by Hair-Aesthetic Clinic Ltd. or required by law—will be published on our website and will take effect upon publication.