Privacy Policy

which informs you, as a visitor to our website and a user of our services, about our company's data management and privacy policy.

1. What principles do we follow in our data management?

We follow the following principles in the processing of your data:

  • we process personal data lawfully and fairly and in a transparent manner for you.
  • personal data is collected only for specified, explicit and legitimate purposes and is not processed in a way incompatible with those purposes.
  • the personal data we collect and process is adequate, relevant and limited to what is necessary for the purposes for which it is processed.
  • Our Company will take all reasonable steps to ensure that the data we process is accurate and kept up to date as necessary, and inaccurate personal data will be promptly deleted or rectified.
  • We will store your personal data in a form which permits identification of you for no longer than is necessary for the purposes for which the personal data are processed.
  • we use appropriate technical and organisational measures to ensure adequate security of personal data against unauthorised or unlawful processing, accidental loss, destruction or damage.
  • Our Company will protect your personal data
  • We will process, i.e. collect, record, organise, store and use your personal data on the basis of your prior informed and voluntary consent and only to the extent necessary and in any case for the purposes for which it is intended.
  • In some cases, the processing of your data is based on legal requirements and is mandatory, in which case we will draw your attention to this fact.
  • In certain cases, the processing of your personal data is in the legitimate interest of our Company or a third party, for example, for the operation, development and security of our website.

2. Who we are

Name of the company: Infinito Modern Art Gallery
Location: _________________________
Website: https://infinitomodernart.eu/
Post adress: ____________________
E-mail adress: infinitomodernart@gmail.com
Tax identifier number: _________________________
Corporate registration number: ____________________

Our company is not obliged to appoint a Data Protection Officer under Article 37 of the GDPR

Our company's hosting provider:

Hosting provider name: Rackhost Zrt.

Headquarters of hosting provider: 6722 Szeged, Tisza Lajos körút 41.

Website of hosting provider: www.rackhost.hu

Email adress of hosting provider: info@rackhost.hu

The Company uses the following data processors for the processing of data in order to provide high quality service to our customers:

1.) Rackhost Zártkörűen Működő Részvénytársaság

Short name: Rackhost Zrt.

Company registration number: 06-10-000489

Tax identity number: 25333572-2-06

Headquarters: 6722 Szeged, Tisza Lajos körút 41.

Post adress: 1132 Budapest, Victor Hugó utca 18-22.

Phone number: +36 1 445 1204

E-mail: info@rackhost.hu

Website: www.rackhost.hu

as a web hosting provider (hereinafter referred to as the “Data Processor”).

Scope of the data processed: the processing potentially concerns all the data identified in this notice, the specific scope of the data is determined by the functions and services used by the User, as described in the above chapters on specific processing.

The purpose of using a data processor: to ensure the functioning of the site in the information technology sense, by providing the necessary electronic hosting.

Duration of processing: the same as the processing periods indicated for the processing operations governed by the purposes of each of the data subjects in this notice.

Nature of the processing: processing is carried out by electronic means, the processing of the data being limited to the provision of the electronic storage space necessary for the operation of the website in IT terms.

2.) Google Ireland Ltd.

Company registration number: 11603307

Tax identity number: IE 6388047V

Headquarters: Gordon House, Barrow Street, Dublin 4, Ireland

Post adress: Gordon House, Barrow Street, Dublin 4, Ireland

Phone number: +353 1 436 1000

Website: https://www.google.ie/

as the developer and hosting provider of the software used for electronic mail (hereinafter referred to as the “Data Processor”).

The data concerned by the processing: firstly, the name and e-mail address of the data subject and, secondly, any additional data sent by the User by electronic mail.

The purpose of using a data processor: to ensure the functioning of electronic mail.

Duration of processing: if the exchange of messages does not lead to a contract, in that case until the deletion of the e-mails. The Data Controller shall delete the messages after the end of the exchange of messages in the course of the electronic mail.

If a contract is concluded as a result of the exchange of messages and the content of the messages is relevant to the contract, the Data Controller shall process the data on the basis of its legitimate economic interest until the expiry of the limitation period for claims arising from the contractual relationship, which is normally 5 years from the date on which the claim becomes due, which period shall start from the end of the contractual relationship in the case of continuous provision of services. Any interruption of the limitation period shall extend the period of processing until the new date on which the limitation period starts to run. 

The Data Controller shall keep the accounting documents issued in connection with the order for the period necessary to fulfil the obligation to keep the documents as required by the Accounting Act. This period shall be at least 8 years from the date of issue of the voucher in accordance with the Accounting Act, after which the Data Controller shall delete the data within one year.  This includes, in particular, the data contained in invoices (name, address of the customer, data relating to the course package ordered and the payment of the price), and other data contained in orders and confirmations as part of the contractual documentation, which also fall within the scope of the accounting document.

During the retention periods, the messages are stored in the software environment provided by the Data Processor, and therefore data processing is maintained during this period.

Nature of the processing: during the retention periods, the emails are stored in the software environment provided by the Data Processors, so there is processing during this time.

If we change the scope of our data processors, we will reflect the changes in this notice.

The data we process:

We only ask our website visitors for their personal information when they register, log in or enter a prize draw.

We do not link the personal data provided in connection with registration or the use of our marketing services and we do not aim to identify our visitors.

If you have any questions about our privacy practices, you can contact us at infinitomodernart@gmail.com or by post at the address you have provided, and we will respond within 15 days (but no later than 1 month) to the contact details you have provided.

3. What are cookies and how do we handle them?

Cookies are small data files (hereinafter “cookies”) that are transferred to your computer through the use of the website by your internet browser and stored on your computer. Most commonly used internet browsers (Chrome, Firefox, etc.) accept and allow the download and use of cookies by default, but it is up to you to modify your browser settings to refuse or block them, or to delete cookies already stored on your computer. For more information on the use of cookies, please refer to the “help” section of each browser.

Some cookies do not require your prior consent. These include authentication cookies, multimedia player cookies, load balancing cookies, session cookies to help you customise the user interface, and user-centric security cookies.

Cookies that require your consent, where the processing starts as soon as you visit the site, will be notified to you and your consent will be requested at the start of your first visit.

Our Company does not use or allow cookies that enable third parties to collect data without your consent.

Acceptance of cookies is not mandatory, but our Company is not responsible if our website does not function as expected without cookies.

What cookies do we use?

Name: _ga
Service provider: domained.hu
Purpose: Registers a unique identifier that generates statistics on how the visitor uses the site.
Expiry date: 2 years
Type: HTTP

Name: _gat
Service provider: domained.hu
Purpose: Stores the thottle request rate used by Google Analytics.
Expiry date: While working
Type: HTTP

Name: _gid
Service provider: domained.hu
Purpose: Registers a unique identifier that generates statistics on how the visitor uses the site.
Expiry date: While working
Type: HTTP

Name: _fbp
Service provider: domained.hu
Purpose: Facebook uses it to provide advertising products to a third party (e.g. real-time ads)
Expiry date: 3 months
Type: HTTP

Name: fr
Service provider: facebook.com
Purpose: Facebook uses this cookie to offer a range of advertising products (e.g. real-time referrals from third-party advertisers)
Expiry date: 3 months
Type: HTTP

You can read more about third party cookies here on this page .

4. What else you need to know about our data management on our website

You provide us with personal data voluntarily when registering or contacting our Company, so please take care to ensure that the data you provide is true, correct and accurate, as you are responsible for it. Incorrect, inaccurate or incomplete data may prevent you from using our services.

If you provide personal information about another person, rather than yourself, we will assume that you have the necessary authority to do so.

You may withdraw your consent to data processing at any time, free of charge, by cancelling your registration at

  • cancelling your registration,
  • withdrawing your consent to data processing, or
  • or withdrawing or requesting the blocking of your consent to the processing or use of any data that you are required to provide during registration.

For technical reasons, we accept a 30-day deadline for registering the withdrawal of consent, but please note that we may process certain data after the withdrawal of consent in order to comply with our legal obligations or to pursue our legitimate interests.

In the event of the use of misleading personal data, or if one of our visitors commits a crime or attacks our Company's systems, we will delete your data immediately upon termination of your registration or, if necessary, retain it for the duration of any civil or criminal proceedings.

5. What do you need to know about our data management for direct marketing and newsletter purposes?

You can give your consent to us using your personal data for marketing purposes by making a declaration during registration or by subsequently modifying your personal data stored in the newsletter and/or direct marketing registration interface (i.e. by clearly indicating your intention to consent). In this case, we will also process your data for the purposes of direct marketing and/or sending you newsletters and will send you advertising and other mailings, information and offers and/or newsletters (§ 6 of the Act on the Protection of Personal Data (Grtv.)).

You may give your consent to direct marketing and newsletters together or separately, or withdraw it/these free of charge and at any time.

In any case, the cancellation of the registration will be considered as a withdrawal of consent. Withdrawal of consent to data processing for direct marketing and/or newsletter purposes will not be construed as withdrawal of consent to data processing in relation to our website. How is this? What and on what basis do we retain when newsletter consent is withdrawn? For consents, each consent is for a specific purpose, so registering for tomorrow and subscribing to the newsletter are two separate purposes, two separate databases, the two cannot be related.

For technical reasons, we have a 15-day deadline to register the withdrawal or cancellation of each contribution.

6. What do I need to know about prize draws?

Our company may organise prize draws as part of a campaign, the conditions of which are set out in a separate policy. In all cases, the current promotion rules can be found in a centrally located link on the home page of our website.

7. Other data management issues

We may only transfer your data within the limits set by law and, in the case of our data processors, we will ensure that they cannot use your personal data for purposes other than those for which you have given your consent by setting contractual conditions. For more information, see section 2.

Our Company does not transfer data abroad.

The courts, prosecutors and other authorities (e.g. police, tax authorities, National Authority for Data Protection and Freedom of Information) may contact our Company for information, data or documents. In such cases, we must comply with our obligation to provide information, but only to the extent strictly necessary to achieve the purpose of the request.

Our agents and employees who are involved in the processing of your personal data and/or the processing of your personal data are entitled to access your personal data to the extent provided in advance and subject to confidentiality obligations.

We will take appropriate technical and other measures to protect your personal data and to ensure its security, availability and to protect it from unauthorised access, alteration, damage or disclosure and any other unauthorised use.

As part of our organisational measures, we control physical access in our buildings, provide continuous training to our employees and keep paper documents locked away with appropriate protection. Technical measures include encryption, password protection and anti-virus software. Please note, however, that data transmission via the Internet cannot be considered a fully secure transmission. While we make every effort to ensure that our processes are as secure as possible, we cannot accept full responsibility for the transmission of data via our website, but we do maintain strict standards for the security of your data and the prevention of unlawful access to data received by us.

In relation to security issues, we ask for your help in carefully remembering your password to access our website and not to share this password with anyone.

8. What are your rights and remedies?

About the processing of your personal data you can

  • request information
  • request the rectification, modification or integration of your personal data processed by us
  • object to the processing of your data and request the deletion or blocking of your data (except for mandatory processing)
  • lodge a complaint with a court
  • lodge a complaint with a supervisory authority or initiate proceedings (https://www.naih.hu/panasz-vagy-kozerdeku-bejelentes-a-panasztorveny-szerint).

Supervisory Authority: National Authority for Data Protection and Freedom of Information

  • Headquarters: 1055 Budapest,
    Falk Miksa utca 9-11.
  • Post address: 1363 Budapest, Pf.: 9.
  • Phone number: +36 (1) 391-1400
  • Fax: +36 (1) 391-1410
  • E-mail: ugyfelszolgalat@naih.hu

Website: https://naih.hu/

At your request, we will provide you with information about

  • the data we process or that we or our data processors process,
  • the source of the data,
  • the purposes and legal basis of the processing,
  • the duration of the processing and, if this is not possible, the criteria for determining this duration,
  • the names and addresses of our data processors and their activities in relation to the processing,
  • the circumstances and effects of data breaches and the steps we have taken to prevent and respond to them, and
  • the legal basis and recipient of the transfer of your personal data in the event of a transfer.

We will provide you with the information within 15 days (but not more than 1 month) of your request. The information will be provided free of charge unless you have already submitted a request for information in the current year for the same set of data. We will reimburse you for any charges you have already paid if we have processed the data unlawfully or if the request for information has led to a correction. We may only refuse to provide information in cases provided for by law, by indicating the legal position and by informing you of the possibility of judicial remedy or recourse to the Authority.

Our Company will notify you and all those to whom it has previously disclosed the data for processing purposes of the rectification, blocking, marking and erasure of personal data, unless the non-notification is not in your legitimate interest.

If we do not comply with your request for rectification, blocking or erasure, we will provide you with the reasons for our refusal in writing or, with your consent, by electronic means within 15 days (but not more than 1 month) of receipt of your request and inform you of the possibility of judicial remedy and of recourse to the Authority.

If you object to the processing of your personal data, we will consider your objection within 15 days (but not more than 1 month) of your request and inform you in writing of our decision. If we decide that your objection is justified, we will stop the processing, including further collection and transfer, and block the data, and notify the objection and any action taken in response to it to all those to whom we have previously disclosed the personal data to which the objection relates and who are under a duty to act in order to exercise the right to object.

We will refuse to comply with a request if we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims. If you do not agree with our decision or if we fail to comply with the time limit, you have 30 days from the date of notification of the decision or the last day of the time limit to take legal action.

Data protection litigation falls within the jurisdiction of the courts, which may, at the option of the data subject, be brought before the courts of the place of residence or domicile of the data subject. A foreign national may also lodge a complaint with the supervisory authority of his/her place of residence.

Please contact our Company before lodging a complaint with a supervisory authority or a court, in order to discuss and resolve the problem as quickly as possible.

9. What is the main legislation governing our activities?

  • Regulation (EU) 2016/679 of the European Parliament and of the Council on the processing of personal data of natural persons (GDPR)
  • Act CXII of 2011 on the right to information self-determination and freedom of information - (Info tv.)
  • Act V of 2013 on the Civil Code (Civil Code)
  • Act CVIII of 2001 on certain aspects of electronic commerce services and information society services - (Eker tv.)
  • Act on electronic communications (2003. Act C of 1997 on Consumer Protection (Ehtv)
  • Act CLV of 1997 on Consumer Protection (Fogyv tv.)
  • Act CLXV of 2013 on Complaints and Notifications of Public Interest (Pktv.)
  • Act XLVIII of 2008 on the Basic Conditions and Certain Restrictions of Economic Advertising (Grtv.)

10. Amendments to the Privacy Notice

Our Company reserves the right to amend this Privacy Notice and will inform data subjects accordingly. Information on data processing will be published on the infinitomodernart.eu website.

Budapest, 2025.03.22.