Dear Guest,
Thank you for trusting me with your health and wellbeing.
When providing my services, I pay particular attention to protecting your personal and health-related data in accordance with applicable European Union (GDPR) and Hungarian data protection regulations.
1. Who is the Data Controller?
Data Controller:
Massage Moment – Sz-Nagy Zsuzsanna Z. e.v.
Registered address:
1195 Budapest, Ady Endre u. 158.
Registration number / Tax number:
57902472 / 59857873-1-43
Email address:
nagy.zsumail@gmail.com
Phone number:
+36 20 8258278
2. What personal data do I process, for what purpose and on what legal basis?
Contact details
Processed data:
Name, email address, phone number.
Purpose of processing:
Online appointment booking, phone communication, appointment coordination and reminders.
Legal basis:
Performance of a service agreement or your consent.
Retention period:
Until the completion of the service or cancellation of the appointment.
Billing information
Processed data:
Billing name and address.
Purpose of processing:
Issuing invoices and fulfilling tax-related legal obligations.
Legal basis:
Compliance with legal obligations under accounting regulations.
Retention period:
8 years from the date of invoice issuance.
Health-related data
Processed data:
Health information, including musculoskeletal complaints and possible contraindications.
Purpose of processing:
Ensuring safe treatment and protecting your health during massage therapy.
Legal basis:
Your explicit consent according to Article 9(2)(a) of the GDPR.
Retention period:
Until the end of the treatment process or withdrawal of your consent.
Camera recordings
Processed data:
Video recordings showing facial features and body appearance at the entrance area.
Purpose of processing:
Property protection and security of the premises and personal belongings.
Legal basis:
Legitimate interest according to Article 6(1)(f) of the GDPR.
Retention period:
3 working days from recording, unless a legal dispute requires further retention.
3. Who can access your data?
Data processors
Your personal data is not sold or made available to third parties, except for service providers required for the technical operation of my services.
These include:
4. Special rules regarding camera surveillance
A security camera operates at the entrance of the premises.
The camera system records video only and does not record audio.
The recordings cannot be accessed by external persons. Access is limited to the Data Controller and is only possible in legally justified cases, such as official requests or investigations related to theft.
5. Your rights
You have the right to:
Please note that withdrawing consent for health data processing may result in the service being refused due to safety considerations.
6. Legal remedies
If you have a complaint, please contact me first at:
I will do my best to resolve the issue as quickly as possible.
You also have the right to initiate official proceedings with:
National Authority for Data Protection and Freedom of Information (NAIH)
Address:
1055 Budapest, Falk Miksa utca 9-11.
Website:
www.naih.hu
You may also seek legal remedy through the competent court according to your place of residence.
