1. The controller
The data you give in the Festlane app is processed by [operator's company name] (registered office: [address], company registration number: [number], e-mail: support@festlane.live). To fulfil your order, the Caterer of the venue where you order also receives the order's details.
2. What data we process, why and for how long
| Data | Purpose | Legal basis | How long |
|---|---|---|---|
| E-mail address, login code (only in encrypted form), time of login | Login, identifying the account, notices about the order | Performance of a contract (GDPR Art. 6 (1) b)) | Until the account is deleted; the login code for one day |
| If you log in with your Google account: the account's identifier, its e-mail address and the time of the last such login | Logging in with your Google account, recognising your account at the next login | Performance of a contract (GDPR Art. 6 (1) b)) | Until the account is deleted |
| Event reminders you asked for: which event, when you asked, when we sent it | An e-mail a few days before the event, with the age check in advance where the venue asks for one | Your request (GDPR Art. 6 (1) b)) | Until you turn it off or delete the account |
| Your name and phone number if you give them; your language | Handing over the order, contact | Performance of a contract | Until the account is deleted |
| Orders: venue, counter, products, amounts, tip, cup deposit, times, pickup code | Fulfilling the order, refunds, the Caterer's accounting | Performance of a contract; legal obligation (accounting records) | [8 years] under the accounting act; when the account is deleted the order stays without the name |
| Payments: amount, status, the payment provider's transaction ID | Tracking the payment and the refund | Performance of a contract; legal obligation | As long as the order |
| Age: the declaration of being over 18, and the result and ID of the identity check | Selling alcohol to adults only | Legal obligation (GDPR Art. 6 (1) c)) | Until the account is deleted; Festlane never receives the document image taken during the check |
| IP address, device and log data | Security, stopping abuse (for example too many login attempts) | Legitimate interest (GDPR Art. 6 (1) f)) | [90 days] |
3. Who can see your data
The counter of the venue and the Caterer see your order's details (the pickup code, the products you ordered and, if you gave it, your name). The following providers process the data on our behalf, only to do their task:
- hosting and server: [provider's name and registered office; to be checked]
- sending e-mail: [provider's name and registered office; to be checked]
- payment: the payment provider of the venue's Caterer [to be named per venue]
- identity check at the venues that use it: [provider's name and registered office]
If you log in with your Google account, Google handles the login under its own privacy policy. We receive only your e-mail address and your account's identifier from Google; we do not ask for your name or your profile picture.
We do not transfer your data outside the European Economic Area. [To be checked against the providers.]
4. Cookies
We use only the cookies the app needs to work: to keep you logged in, for security and to remember your language. By law these need no consent. We use no tracking or advertising cookies; if that changes, we ask for your consent first.
5. Your rights
You can ask us to tell you about your data and to correct, delete or restrict its processing, and you can object to processing based on legitimate interest. In your profile, under "My data", you can download your data in a machine-readable form, and you can delete your account there too; when you do, we overwrite your name, e-mail address and phone number, and your orders stay without a name for accounting.
Send your request to support@festlane.live, and we answer within one month. If you feel we have violated your rights, you can complain to the Hungarian National Authority for Data Protection and Freedom of Information (1055 Budapest, Falk Miksa utca 9-11., ugyfelszolgalat@naih.hu, www.naih.hu), or go to court.