1. Who is the controller?
The controller is Pannon Cigányzenekar Kulturális és Közművelődési Egyesület (registered address: 9737 Bük, Eötvös utca 11., Hungary; registration number: 18 02 0200087; tax number: 18898938118). You can send privacy questions and requests by post to this address or through the contact form on this website.
This notice applies to website visitors, people enquiring about performances, and people who contact us. Orchestra members, collaborators and people appearing in event recordings are also informed separately, as appropriate, when we work with them or record them.
2. What do we process, why and on what legal basis?
Website operation and security. When you connect to the website, your browser sends technical data such as your IP address, request time, page address, and browser and device details. We use these data to deliver the website, diagnose errors, prevent unauthorised access and protect our systems. Legal basis: our legitimate interest in operating a secure website (Article 6(1)(f) GDPR). Section 6 covers necessary cookies.
Performance enquiries and other messages. We use the name, email address, telephone number, organisation (if provided), type of event, venue, proposed date, message and related correspondence submitted through the contact form to reply, discuss arrangements and, where appropriate, prepare an offer. For an enquiry by an individual about a possible contract, the legal basis is taking steps at their request before entering into a contract (Article 6(1)(b) GDPR). For enquiries from representatives of organisations and general questions, the legal basis is our legitimate interest in responding and arranging possible performances (Article 6(1)(f) GDPR). The required checkbox acknowledging this notice is not separate consent to marketing; ticking it does not sign you up for a newsletter.
Privacy requests. We process the information needed to identify you, consider your request and respond in order to comply with our legal obligations (Article 6(1)(c) GDPR).
Fields marked with an asterisk are needed to respond to your enquiry; the form cannot be submitted without them. Other information is voluntary. Please avoid including sensitive data, such as health information, unless strictly necessary. We do not use automated decision-making or profiling.
3. How long do we keep data?
We keep enquiries and related correspondence until the matter is closed and thereafter for as long as necessary to handle follow-up questions or legal claims. We review the data regularly and delete them when they are no longer needed. If an enquiry results in a contract, statutory retention periods for contractual and accounting records apply. Technical logs are retained as needed for operation and security investigations; provider backups expire according to the relevant deletion and backup cycles. We retain records of privacy requests for as long as necessary to demonstrate that we handled them properly.
4. Who may receive data?
Authorised people working for the association can access data as needed for their roles. The provider of domain-related email and technical infrastructure is Rackhost Informatikai Zártkörűen Működő Részvénytársaság (Rackhost Zrt.), registered office: 6722 Szeged, Tisza Lajos körút 41., Hungary; company registration number: 06-10-000489. Rackhost processes personal data stored in or transmitted through its mailboxes and the services we use on our instructions. It may act as an independent controller for its own customer relations, billing and domain registration. Website hosting and technical providers may access data to the extent required for the services actually used. We disclose data to authorities only when legally required.
Rackhost’s data processing agreement states that processing primarily takes place in the European Economic Area (EEA); this does not, by itself, rule out every transfer outside the EEA. If a service we actually use requires such a transfer, we will provide information about the transfer and its applicable safeguards.
5. What are your rights?
You may request access to and rectification of your personal data, and ask for erasure or restriction of processing. Where applicable, you have a right to data portability and may object to processing based on legitimate interests. To exercise your rights, contact us using either method in section 1. These rights are subject to the conditions of the GDPR, and we will assess your request accordingly.
You may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH; 1055 Budapest, Falk Miksa utca 9–11., Hungary; www.naih.hu; ugyfelszolgalat@naih.hu) or seek a judicial remedy.
6. Cookies and external links
Cookies and similar technologies necessary for the website may support its essential functions. We will use non-essential analytics or advertising cookies only after giving you advance information and, where required, obtaining your consent. If you follow a link to an external photo gallery or another website, that destination’s own privacy rules apply.
Last updated: 24 September 2026.