Privacy Notice for the sodoetterem.hu website
Effective from 4 August 2026
Contents
PRIVACY NOTICE
Introduction
Data processing related to the use of the website
1. Identification of the Data Controller
2. Legislation governing data processing
3. Data processing related to completing the contact form
4. Use of Hotjar
5. Use of Google Analytics
6. Use of Google Ads
7. Use of the Meta (Facebook) Pixel
8. Sending advertising SMS messages
9. Sending newsletters and direct marketing (DM) messages
10. Use of cookies
11. Technical and organisational measures related to data processing
12. Rights of data subjects
PRIVACY NOTICE
Introduction
This notice provides information concerning the processing of personal data in connection with the use of the website of Kedves Leves Kft. (2045 Törökbálint, Szabadság tér 22., kedvesleves@gmail.com, +36 70 2999 699)(www.sodoetterem.hu). Visitors to the website may obtain information about the services offered and contact the website operator by completing the contact form.
I. Data processing related to the use of the website
1. Identification of the Data Controller
Data Controller: Kedves Leves Kft.
Registered office: 2045 Törökbálint, Szabadság tér 22.
E-mail: kedvesleves@gmail.com
Telephone: +36 70 2999 699
2. Legislation governing data processing
Regulation (EU) 2016/679 of the European Parliament and of the Council (27 April 2016) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter: GDPR).
Act CVIII of 2001 on Certain Issues of Electronic Commerce Services and Information Society Services.
Act C of 2003 on Electronic Communications.
Act XLVII of 2008 on the Prohibition of Unfair Business-to-Consumer Commercial Practices.
Act XLVIII of 2008 on the Basic Requirements and Certain Restrictions of Commercial Advertising Activities.
Act CXII of 2011 on Informational Self-Determination and Freedom of Information.
3. Data processing related to completing the contact form
By completing the contact form, the user may contact the Data Controller.
3.1. Purpose of data processing
Identification of persons completing the contact form and enabling communication with them.
3.2. Legal basis for data processing
Article 6(1)(a) of the GDPR: the data subject has given consent to the processing of their personal data for one or more specific purposes.
3.3. Data processed and the purpose of processing
Categories of data processed when completing the contact form
| Name | identification of the data subject |
| Email address | communication |
| Telephone number | communication and more efficient coordination of questions related to the enquiry. |
Please note that an email address does not need to contain personal data. For example, the email address does not need to contain the data subject’s name. The data subject is free to decide whether to provide an existing email address containing information that may indicate their identity.
3.4. Use of a Data Processor
Website operator:
Data Processor: Aktiv Digital Media Kft.
registered office: 5600 Békéscsaba, Lencsési út 35-37. 8. em. 46.
company registration number: 04-09-014773
tax number: 26629827-2-04
e-mail: office@aktivdigital.hu
telephone number: +36 30/360 9350
Data Processors used as hosting service providers:
Data Processor: Tárhely.eu Kft.
registered office: 1144 Budapest, Ormánság utca 4. 10. em. 241.
company registration number: 01-09-909968
tax number: 14571332-2-42
e-mail: support@tarhely.eu
telephone number: +36 1 789 2 789
External SMS service provider:
Data Processor: LINK Mobility Hungary Kft.
registered office: 1062 Budapest, Andrássy út 68 C ép. 1 1 a.
company registration number: 01-09-694287
tax number: 12598582-2-42
e-mail: gabor.tamas@linkmobility.com
telephone number: +36 70 245 3625
3.5. Categories of data subjects
Persons who complete the contact form and consent to data processing.
3.6. Duration of data processing
Until consent is withdrawn.
3.7. Method of data processing
Data processing is carried out automatically in electronic form on the Data Controller’s IT interfaces and on the IT interfaces of the Partners used.
4. Use of Hotjar
Our website uses the Hotjar analytics tool to better understand the needs of our visitors and optimise their user experience. Hotjar uses cookies and other tracking technologies to collect information about user behaviour (for example, which pages they visit, how much time they spend on the website and what interactions they perform). Data collected by Hotjar are processed anonymously and cannot be used to identify individual users.
5. Use of Google Analytics
Our website uses Google Analytics, operated by Google Ireland Limited (registered office: Gordon House, Barrow Street, Dublin 4, Írország).
Google Analytics uses cookies to analyse the use of the website, including, for example, the number of visits, the pages viewed by visitors and the time spent on the website.
The information collected is stored on Google’s servers (typically in the United States). The data are used for anonymous statistical analysis without personally identifying the data subject.
6. Use of Google Ads
The website also uses the Google Ads advertising service, which enables remarketing. This means that visitors to the website may subsequently encounter advertisements within Google’s advertising network that are based on their browsing behaviour on the website.
Google Ads places remarketing cookies on the user’s device for the purpose of displaying relevant advertisements suited to the user’s interests.
7. Use of the Meta (Facebook) Pixel
Our website uses the Facebook Pixel service provided by Meta Platforms Ireland Ltd. (“Meta”, registered office: 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Írország).
The Facebook Pixel allows us to measure the effectiveness of our advertisements and display targeted advertisements to users on the Facebook and Instagram platforms.
The Meta Pixel uses cookies and other tracking technologies to collect data about the activities visitors perform on our website.
8. Sending advertising SMS messages
You consent to our periodically sending advertising SMS messages to the telephone number you have provided, informing you about our current offers, promotions and other news relevant to your interests. SMS messages are sent only with your prior consent, which you may withdraw at any time by sending a message to the (email address) email address.
Unsubscribing may take at least 30 calendar days. During this period, you may receive further advertising messages or calls; please disregard them.
9. Sending newsletters and direct marketing (DM) messages
Where the data subject, after reviewing this Privacy Notice, gives their explicit and voluntary consent by selecting the relevant checkbox, the Data Controller may send them marketing communications.
By giving consent, the data subject agrees that the Data Controller may send direct marketing (DM) messages concerning current discounts, promotions, new products, services and other marketing offers electronically (particularly by email), through direct messages sent via social media platforms (e.g. Facebook, Instagram), and, where separate consent has been given, by post.
10. Use of cookies
Cookies are small data files placed on your computer when you visit a website; they are created, saved and stored by the websites visited. The most commonly used browsers (Chrome, Firefox, etc.) generally accept and allow the downloading and use of cookies by default. However, users may reject or disable them by changing their browser settings, and cookies stored on the computer may also be deleted. Further information about the use of cookies is available in the “Help” menu of each browser.
We essentially distinguish between two types of cookies. One category consists of cookies that do not require user consent. Information about these is provided when the first visit to our website begins. Examples include “user input” cookies, authentication cookies, user-centric security cookies, multimedia player session cookies, load-balancing session cookies and cookies supporting user-interface customisation.
The other category consists of cookies requiring user consent. Where data processing begins as soon as the website is visited, we inform the user and request their consent at the beginning of the first visit. Examples include tracking cookies used by social content-sharing services, cookies related to external advertising and our own visitor analytics cookies.
Accepting cookies is not mandatory. However, users are informed that not enabling cookies may affect the operation of the website; therefore, we accept no liability where our website does not function as expected because cookies have not been enabled.
10.1. Cookies used
Type: Session cookies
Name: Cookies essential for providing the service
Consent: Not required
Description: These cookies are required to enable users to use the website.
Purpose: Ensuring the operation of the website
Validity: Until the browsing session ends.
Type: Functional cookies
Name: Cookies used to store previous settings (e.g. remembering passwords, custom settings, etc.)
Consent: Required
Description: These cookies allow the browser to remember certain user settings on the website, such as which cookies the user accepted during their first visit.
Purpose: Remembering user settings
Validity: Depends on the settings, but no longer than 2 years
Type: Tracking cookie for visitor analytics (third-party)
Name: Google Analytics (_gat and _ga)
Consent: Required
Description: These cookies collect information about the use of the website and the user’s activity
Purpose: Connecting to the services of third parties (e.g. Google) while visiting the website
Validity: 2 years
Type: Marketing cookies (third-party)
Name: Facebook Pixel, Google Ads remarketing, Tiktok and other social media and software-based measurement tools
Consent: Required
Description: Marketing cookies are used to track visitors’ activity on the website.
Purpose: To display relevant advertisements to individual users and encourage them to take action.
Validity: 2 years
Detailed information about third-party cookies (thirdpartycookie) is available at the following links:
Google Analytics - https://policies.google.com/technologies/types?hl=hu
Google Remarketing–https://policies.google.com/technologies/types?hl=hu
Facebook Pixel - https://www.facebook.com/policies/cookies/
Google Conversion Tracking - https://policies.google.com/technologies/types?hl=hu
Tiktok: https://www.tiktok.com/legal/page/global/tiktok-website-cookies-policy/e
11. Technical and organisational measures related to data processing
The Data Controller ensures and facilitates the exercise of the data subject’s rights in relation to data processing, with particular regard to the right to information and the right to object.
The Data Controller undertakes to incorporate safeguards into its data protection policy that guarantee the protection of data subjects’ rights.
12. Rights of data subjects
The data subject may exercise the rights described below at the address specified in Section 1. All requests concerning the exercise of rights will be assessed within 25 days of receipt.
12.1. Right to information
The principle of fair and transparent data processing requires us to inform data subjects, before processing begins, of the fact and purpose of the processing, the identity of the Data Controllers and data protection officers, the categories of data processed, the legal basis, duration and method of processing, and the Data Processors used during processing. Under the right to information, data subjects may request information concerning the processing of their data, in which case they will receive personalised information.
12.2. Withdrawal of consent
The data subject has the right to withdraw their consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
12.3. Right to rectification
The data subject has the right to request the rectification or completion of data concerning them that we process.
12.4. Right to erasure/right to be forgotten
Data subjects have the right to request the erasure of their data processed by us. Please note that a request for erasure will be rejected where an obligation to retain the data applies.
12.5. Right to blocking/restriction
The data subject has the right to request that we restrict/block the data processed (by clearly marking the restricted nature of the processing and ensuring that the data are processed separately from other data). The blocking remains in place for as long as the reason specified by the data subject makes it necessary.
12.6. Right to object
The data subject has the right to object and may therefore, on grounds relating to their particular situation, object at any time to the processing of personal data concerning them where the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller, or for the purposes of the legitimate interests pursued by the Data Controller or a third party.
12.7. Right to data portability
The data subject has the right to receive the personal data concerning them that they have provided to the Data Controller in a structured, commonly used and machine-readable format, and has the right to transmit those data to another Data Controller without hindrance from the Data Controller to which the personal data were provided, where the processing is based on consent or on a contract and is carried out by automated means.
12.8. Right to lodge a complaint and initiate proceedings
The data subject has the right to lodge a complaint with a supervisory authority or initiate proceedings before it, and to seek an effective judicial remedy where they consider that their rights have been infringed in connection with the processing of their data or the exercise of their rights relating to data processing. In the event of a judicial remedy, the data subject may bring a civil action, which falls within the jurisdiction of the regional court. At the data subject’s choice, proceedings may also be brought before the regional court having jurisdiction at their place of residence (the list and contact details of the regional courts are available at the following link: http://birosag.hu/torvenyszekek).
Contact details of the competent supervisory authority:
Nemzeti Adatvédelmi és Információszabadság Hatóság
address: 1125 Budapest, Szilágyi Erzsébet fasor 22/C
postal address: 1530 Budapest, Pf.: 5
e-mail: ugyfelszolgalat@naih.hu
telephone: +36 (1) 391-1400
We ask data subjects to contact the Data Controller before submitting a complaint to the supervisory authority or a court, in order to discuss the matter and resolve the issue as quickly as possible.