Privacy policy
Privacy Policy, Cookie Policy, Newsletter Privacy Policy, Legal Notice, Terms of Use
I. DATA PROCESSING NOTICE
1. Purpose of This Notice
This notice explains in plain language how we process the personal data of website visitors and newsletter subscribers. The primary purpose of the website is to publish information related to events. The website does not feature user registration, online ticket purchasing, contact forms, comment sections, or embedded YouTube videos.
When the page is first loaded, only cookies necessary for its operation are activated. Google Analytics 4, Google Ads, Meta Pixel, and the Meta Conversions API operate only after the visitor has given consent. If consent is denied, these services do not load statistical or marketing cookies, and the Conversions API cannot send marketing events. Google Maps loads.
2. Data Controller Information
| Company Name | Barba Negra Kft. | Registered Office | 2045 Törökbálint, Kossuth Lajos Street 43. | Tax ID Number | 23180550-2-13 | Company Registration Number | 13-09-173408 | [email protected] | Phone Number | +36 (20) 563 2254 | Website | https://www.barbanegra.hu |
3. Legal Basis for This Notice
- Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR), in particular Articles 5–7, 12–22, 24–25, 28, 32, and 44–49;
- Act CXII of 2011 (Info Act);
- Act C of 2003 on Electronic Communications (Eht.), in particular Section 155(4);
- Act CVIII of 2001 (Eker. tv.), in particular the rules on provider information;
- Act XLVIII of 2008 (Grt.), in particular the sending of electronic advertisements pursuant to Section 6;
- Directive 2002/58/EC (ePrivacy Directive), in particular Article 5(3).
4. Principles of Data Processing
- We process personal data lawfully, fairly, and transparently.
- We collect and use only the data necessary for the specific purpose.
- We do not use the data for purposes other than those specified.
- We retain the data only for as long as necessary, after which we delete or anonymize it.
- We protect data with appropriate technical and organizational measures.
- Consent may be withdrawn at any time, without affecting the lawfulness of processing prior to withdrawal.
5. Overview of Data Processing
| Data Processing | Data Processed | Purpose | Legal Basis | Retention |
|---|---|---|---|---|
| Server log | IP address, date and time, page, browser and device data | Security, troubleshooting | GDPR Article 6(1)(f) | 30 days |
| Essential cookies | Identification, cookie preferences | Website and banner functionality | necessity; GDPR Article 6(1)(f) | for their lifetime |
| Google Analytics 4 | online identifiers, usage, and device data | statistics | GDPR Article 6(1)(a) | as configured |
| Google Ads | online identifiers, click and conversion events | measurement, remarketing | GDPR Article 6(1)(a) | as per provider settings |
| Meta Pixel and Conversions API | online identifiers, page and conversion events | measurement, target audience, optimization | GDPR Article 6(1)(a) | as per provider settings |
| Google Maps | IP address, device and map usage data | location, route planning | GDPR Article 6(1)(a) | In accordance with Google’s policies |
| Newsletter | Email address, subscription and unsubscription data | newsletter distribution | GDPR Article 6(1)(a); Section 6 of the Grt. | until unsubscription; retention of evidence for up to 5 years |
6. Website visits and server logs
When you visit the website, the hosting provider’s server may automatically log your IP address, the time of your visit, the URL of the page you accessed, the browser and operating system type, the referring page’s URL, and other technical data necessary for operation.
The purpose of logging is to ensure the secure and stable operation of the website, to detect errors, and to prevent abuse and cyberattacks. The legal basis is the data controller’s legitimate interest. We retain log files for up to 30 days, unless a longer retention period is necessary to investigate a security incident.
Access to log data is granted to authorized employees of the data controller, as well as to the hosting and technical service providers, to the extent necessary for the performance of their duties.
7. Cookies and Consent Management
A cookie is a small data file that a website or third-party service provider may store in a visitor’s browser. The website operates as follows:
- Upon first loading, only the cookies necessary for the website and the cookie banner to function are active.
- After selecting “Accept All,” statistical and marketing tools are activated.
- If you select “Reject,” Google Analytics, Google Ads, Meta Pixel, and Meta Conversions API will not be activated.
- Your decision is recorded by a necessary cookie or local storage item.
- Google Maps loads regardless of your selection; details on this are provided in Chapter 9.
Declining consent does not restrict access to the website’s event information.
8. Google and Meta Services
| Service | Purpose | Service Provider | Legal Basis |
|---|---|---|---|
| Google Analytics 4 | Aggregated analysis of traffic, pages, and usage. | Google Ireland Limited | Consent |
| Google Tag Manager | Technical management of tracking and marketing tags. The tags contained therein can only be activated after consent is given. | Google Ireland Limited | Legal basis for the loaded tag |
| Google Ads Conversion | Measuring the performance of Google ads. | Google Ireland Limited | Consent |
| Google Ads Remarketing | Reaching previous visitors with more relevant ads. | Google Ireland Limited | Consent |
| Meta Pixel | Measuring Meta ads and creating target audiences. | Meta Platforms Ireland Limited | Consent |
| Meta Conversions API | Server-side transmission of marketing events for measurement and optimization. | Meta Platforms Ireland Limited | Consent |
The services may process cookie identifiers, IP addresses, browser and device characteristics, page views, and conversion events. The data controller may not send special categories of data, passwords, full payment details, or any data for which there is no appropriate legal basis for transmission.
9. Google Maps
The website uses an embedded Google Maps map to display event locations and facilitate route planning. The map is a functional part of the website; therefore, on pages containing the map, it loads regardless of the visitor’s cookie preferences.
Upon loading, the browser establishes a direct connection to Google’s system. Google may process the IP address, browser and device data, the viewed location, actions performed on the map, as well as—depending on the Google Account and user settings—additional data. Google’s privacy policy governs Google’s own data processing.
The data controller bases the processing of personal data associated with loading Google Maps on its legitimate interest (GDPR Article 6(1)(f)): clearly displaying the event location and providing directions to it are essential functions of the website.
Google Privacy Policy: policies.google.com/privacy
10. Newsletter Subscription
Visitors may voluntarily subscribe to a newsletter covering events, programs, news, and related offers. Subscription is not a prerequisite for using the website.
| Purpose | Information |
|---|---|
| Data Processed | Email address; the date of subscription, confirmation, and unsubscription; technical data necessary to verify consent. |
| Purpose | Sending newsletters and electronic messages for direct marketing purposes. |
| Legal basis | Consent pursuant to Article 6(1)(a) of the GDPR and Section 6 of the Grt. |
| Process | Our own system receives and records the subscription; Brevo sends the emails. |
| Retention | Until unsubscription. Data necessary to verify consent may be retained for up to 5 years for legal purposes. |
| Unsubscription | At any time, free of charge, via the link at the bottom of the newsletter or by emailing the data controller. |
11. Data Processors, Recipients, and Data Transfer
| Service Provider | Role | Task | Headquarters |
|---|---|---|---|
| Hidden Design Kft. | Data Processor | Hosting, server logs, technical operations | 1095 Budapest, Gát utca 21, ground floor, unit 1. |
| Sendinblue SAS (Brevo) | Data Processor | Subscriber list and newsletter distribution | 7 rue Salneuve, 75017 Paris, France |
| Google Ireland Limited | role depending on the service | Analytics, Tag Manager, Ads, Maps | Gordon House, Barrow Street, Dublin 4, Ireland |
| Meta Platforms Ireland Limited | Role as defined by Meta’s terms | Meta Pixel and Conversions API | Merrion Road, Dublin 4, D04 X2K5, Ireland |
12. Data Security
The data controller implements technical and organizational measures commensurate with the risks. These may include, in particular, the restriction of access rights, the use of strong passwords and multi-factor authentication, regular updates and backups, encrypted data connections, logging, and the review of data processing agreements.
In the event of a data breach, the data controller documents the incident, takes the necessary mitigation measures, and—if the conditions of the GDPR are met—report it to the NAIH within 72 hours at the latest, or, in the event of a high-risk incident, notify the data subjects.
13. Rights of Data Subjects
- may request access to and information about their processed personal data;
- may request the rectification of inaccurate data;
- may request the erasure of their data if the conditions for erasure are met;
- may request the restriction of data processing;
- may withdraw their consent;
- object to data processing based on legitimate interests;
- request data portability if the conditions are met.
Marketing tools may support profiling and audience targeting. The website operator does not make any fully automated decisions that would have legal effects on the visitor or similarly significantly affect them.
14. Handling Requests and Remedies
Requests from data subjects may be sent to the data controller’s email or mailing address listed in Chapter 2. The data controller will respond to the request without undue delay, generally within one month. This deadline may be extended by an additional two months due to the complexity of the request or the number of requests; in which case the data controller will provide notification within one month.
As a general rule, the fulfillment of the request is free of charge. In the case of a manifestly unfounded or excessive request, particularly in the case of repetitive requests, the data controller may charge a reasonable fee or refuse to comply. If necessary, the data controller may request confirmation of the data subject’s identity.
If you believe that the processing of your personal data violates the law, you may file a complaint with the NAIH, or you may bring the matter before a court. Court proceedings may also be initiated before the court of your place of residence or domicile, at your discretion.
| Authority | National Authority for Data Protection and Freedom of Information |
| Address | 1055 Budapest, Falk Miksa Street 9–11. |
| Mailing Address | 1363 Budapest, P.O. Box 9. |
| [email protected] | |
| Phone | +36 (1) 391-1400 |
| Website | https://www.naih.hu/ |
15. Amendments to the Privacy Notice
The data controller may amend the Privacy Notice in the event of changes in legislation, the introduction of new services, technical modifications, or changes in data processing practices. The current version is available on the website. In the event of a material change, the data controller will post a clearly visible notice on the website and, if necessary, request new consent.
16. Official and Service Provider Notices
- Official text of the GDPR
- National Legislation Database
- NAIH
- Google Privacy Policy
- Meta Privacy Policy
- Brevo Privacy Information
II. COOKIE POLICY
1. What is a cookie?
A cookie is a small data file that a website or an external service provider may store in a visitor’s browser. Similar technologies include the browser’s local storage, pixels, online identifiers, or server-side event tracking.
2. How the cookie banner works
- Upon initial loading, only cookies necessary for functionality are active.
- If accepted, cookies for statistical and marketing purposes, as well as tracking technologies, are also activated.
- If you decline, these are not activated, and the Meta Conversions API does not send any marketing events.
- Google Maps loads regardless of your choice.
3. Necessary and statistical cookies
| Cookie / Technology | Provider | Category | Purpose | Lifetime | Activation |
|---|---|---|---|---|---|
| bn_cookie_consent | our own site / cookie manager | necessary | Storing acceptance or rejection choice | 180 days | Always |
| ci_session | own site | required | technical session | session | always |
| _ga | Google Analytics | statistical | distinguishing unique browsers and sessions | 2 years | after acceptance |
| _ga_ |
Google Analytics | statistical | preserving session status | 2 years | after acceptance |
4. Marketing Cookies
| Cookie / Technology | Provider | Category | Purpose | Lifetime | Activation |
|---|---|---|---|---|---|
| _gcl_au | Google Ads | marketing | conversion tracking and ad performance | 90 days | after acceptance |
| _gcl_aw or other _gcl_* | Google Ads | marketing | linking ad clicks and conversions | typically 90 days | after acceptance |
| IDE / id, if present | Google / DoubleClick | marketing | ad measurement and personalization | typically 13 months in the EEA | after acceptance |
| test_cookie, if present | Google / DoubleClick | marketing | checking whether the browser supports cookies | 15 minutes | after acceptance |
| _fbp | Meta | marketing | browser identification and ad measurement | typically 90 days | after acceptance |
| _fbc, if present | Meta | marketing | identification of clicks originating from Meta ads | typically 90 days | after acceptance |
5. Google Maps and other similar technologies
| Technology | Functionality | Activation / Note |
|---|---|---|
| Google Tag Manager | Manages the website’s tags. Instead of using a standalone tracking cookie, it controls the operation of the tags embedded within it. | The technical framework may load; statistical and marketing tags are only used after consent is given. |
| Meta Conversions API | It can transmit marketing events from the server to Meta; it does not necessarily place a browser cookie. | It can only send events after marketing consent has been given. |
| Google Maps | The embedded map establishes a direct connection to Google’s system. IP, device, and usage data may be transmitted. | It always loads on pages containing the map. |
6. Managing and Deleting Cookies
If you withhold your consent, no statistical or marketing data may be collected. To delete third-party cookies already stored in your browser, you may also need to adjust your browser settings.
- In most browsers, you can view, delete, or disable cookies.
- Completely disabling cookies may affect certain technical features of the website.
- You can also adjust your Google and Meta account ad settings separately.
- After deleting the cookies stored in your browser, the cookie banner may reappear.
7. Contact and Further Information
Questions regarding the use of cookies can be sent to the data controller’s email address. Additional provider information:
III. NEWSLETTER DATA PROCESSING NOTICE
1. Data Controller
| Company Name | Barba Negra Kft. | Registered Office | 2045 Törökbálint, Kossuth Lajos Street 43. | [email protected] | Website | https://www.barbanegra.hu |
2. Details of Data Processing
3. Subscriber Rights
Subscribers may request access, rectification, erasure, restriction, and—where conditions are met—data portability, and may withdraw their consent at any time. You may file a complaint with the NAIH or take the matter to court.
IV. LEGAL NOTICE
Website operator’s details:
| Name of Service Provider / Operator | Barba Negra Kft. |
| Registered Office | 2045 Törökbálint, Kossuth Lajos Street 43. |
| Company registration number | 13-09-173408 |
| Tax ID number | 23180550-2-13 |
| [email protected] | |
| Phone number | +36 (20) 563 2254 |
| Website address | https://www.barbanegra.hu |
Web Hosting Provider
| Name | Hidden Design Kft. |
| Headquarters | 1095 Budapest, Gát utca 21, ground floor, apt. 1. |
| Email / Contact Information | [email protected] |
| Website | https://www.hidden.hu/ |
Nature of the Website
The website provides information about events. No online ticket purchases or direct contract conclusion takes place on the website. When using links to the websites of external ticket sellers or event organizers, the terms and conditions and data processing apply.
Copyright Information
Inquiries regarding the content, photographs, logos, or copyright issues may be sent to the operator’s email address provided above.
V. TERMS OF USE
1. Scope of the Terms
These terms apply to the use of the www.barbanegra.hu website (hereinafter: Website). By using the Website, the visitor accepts these terms. If you do not agree with any provision, you may discontinue use of the Website.
2. Purpose of the Website
The Website publishes information about events, performers, venues, dates, and related news. The Website does not offer user registration, online ticket sales, comments, or the conclusion of contracts on the Website.
3. Event Information
The operator strives to ensure that the published information is accurate and up-to-date. However, the event’s date, venue, performers, program, admission requirements, or ticket prices are subject to change. Visitors are responsible for checking the current information provided by the event organizer or the official ticket seller before traveling or purchasing tickets.
The recommended age restrictions, house rules, admission requirements, or accessibility information listed on the Website are for informational purposes only. In case of doubt, the official information provided by the event organizer or the venue operator shall prevail.
4. External Sites and Ticket Sales
The Website may contain links to external websites—such as those of ticket sellers, event organizers, social media platforms, or map service providers. The operator of the external site is responsible for its content, availability, data processing, and terms and conditions.
The ticket purchase agreement is concluded exclusively between the visitor and the external ticket vendor or event organizer. The terms and conditions of the external service provider govern the ticket price, payment, admission, refunds, and canceled or modified events.
5. Copyright and Content Use
The text, graphics, layouts, logos, photographs, and other content on the Website may be protected by copyright, trademark, or other legal protections. Viewing the content for personal use and linking to the Website is permitted. Unauthorized copying, compilation into a database, modification, or republication of the content for commercial purposes is prohibited.
6. Intended Use of the Website
Visitors are specifically prohibited from:
- disrupt or overload the Website’s operation or gain unauthorized access to its systems;
- to download content in bulk using automated tools or to build a database without permission;
- to distribute malicious code, misleading, or infringing content;
- to use the Website’s or any third party’s name, logo, or content in a misleading manner;
- to use the Website for any purpose that violates the law or public morals.
7. Availability and Liability
The operator strives to ensure the continuous and secure availability of the Website, but does not guarantee that the service will always be free of interruptions or errors. The Website may become temporarily unavailable, in whole or in part, due to maintenance, technical failures, service provider outages, network problems, or force majeure.
The operator is liable for damages caused by it within the framework of applicable laws. It is not liable for the operations of third-party service providers, for changes to or cancellation of events, for malfunctions in a visitor’s device or internet connection, or indirect damages that could not reasonably have been foreseen.
These terms and conditions do not limit or exclude liability for intentional acts, nor for breaches of contract that endanger human life, physical integrity, or health, nor any liability that cannot be excluded under applicable law.
8. Data Protection and Cookies
The processing of personal data is governed by the Privacy Policy, and the use of cookies and similar technologies is governed by the Cookie Policy. The detailed terms and conditions for subscribing to the newsletter are set forth in the Newsletter Privacy Policy.
9. Amendments to the Terms
The Operator may amend these Terms in the event of changes to the Website’s operation, its services, or the legal environment. The current version is available on the Website. The amendment takes effect upon publication or at a later date specified in the document.
10. Governing Law and Disputes
These Terms and Conditions are governed by Hungarian law, in particular Act V of 2013 on the Civil Code, the Eker. tv., and Act LXXVI of 1999 . The parties shall first attempt to resolve any dispute amicably; if this proves unsuccessful, the matter shall be decided by a competent Hungarian court with jurisdiction.
If a visitor, as a consumer, enters into a contract with an external ticket seller or event organizer, any consumer dispute arising therefrom must be resolved with that service provider; information regarding the conciliation board and consumer protection is included in the terms and conditions of the external service provider.