Privacy Policy — Stand 4 Acro

1. The controller

BIGLIGHT Hungary Bt., 1144 Budapest, Gvadányi utca 93. 1. em. 2., Hungary, tax number 28941525-1-42, email info@stand4acro.hu, phone +36 20 359 1980. No data protection officer has been appointed: the processing does not fall within the mandatory cases in GDPR Article 37.

2. What we process

At purchase: name, email, phone, billing address, tax number if given, and the order and its amount.
At payment: Barion transaction identifiers. We never see or hold card details.
About the ticket holder: the attendee's name, where you buy a ticket in someone else's name. Tickets are personalised and the name is checked on arrival. It can be changed through customer support when a ticket is passed on.
At the class: the ticket or pass code, check-in times and the name checked on arrival.
On cancellation or refund: the fact and time of a cancellation or of a choice made after a date change, the amount refunded, and the details of any coupon issued — its amount, its validity and when it was used.
Technical: the IP address at the time of the order.

3. Purposes and legal bases

Performance of a contract (GDPR Art. 6(1)(b)): fulfilling the order, validating the ticket, and handling cancellations, refunds and coupons.
Legal obligation (Art. 6(1)(c)): invoicing and accounting retention.
Legitimate interest (Art. 6(1)(f)): preventing fraud, and checking the name on admission to keep out anyone not entitled to be there. Where you buy a ticket in someone else's name, we process the attendee's name on this basis; telling the attendee about it is your responsibility as the buyer.
Consent (Art. 6(1)(a)): newsletter and non-essential cookies. Consent can be withdrawn at any time.

4. Processors

Barion Payment Zrt. — online payment.
KBOSS.hu Kft. (szamlazz.hu) — invoicing.
PR-Telecom Zrt. (3527 Miskolc, József Attila utca 45., Hungary) — hosting.

5. The Barion Pixel and cookies

This site uses the Barion Pixel. It serves fraud prevention and sends visit data to Barion Payment Zrt., which acts as an independent controller for that purpose. The Pixel loads for every visitor: the essential cookies below rest on Barion Payment Zrt.’s legitimate interest in preventing fraud, for which the law requires no consent. Use for marketing does require separate consent, which you give in the cookie bar and can change or withdraw at any time through the “Cookie settings” link at the foot of the page.

Essential cookies (legitimate interest):

ba_vid — detects fraud in online payments through the Barion Smart Gateway, based on the digital fingerprint of your browser and your online habits. Identifies a website user across multiple sessions. Provider: Barion Payment Zrt. Lifetime: 1.5 years from the last update.
ba_vid.xxx — the same purpose, and additionally collects ba_vid, the digital fingerprint derived from browser settings, the first, current and last visit timestamps, and whether third-party cookies are enabled. Provider: Barion Payment Zrt. Lifetime: 1.5 years from the last update.
ba_sid — the same purpose, identifying a user across multiple websites. Provider: Barion Payment Zrt. Lifetime: 30 minutes.
ba_sid.xxx — the same purpose, identifying a user within a single website. Provider: Barion Payment Zrt. Lifetime: 30 minutes.

Where a lifetime runs from the last update, every further visit to the site extends the expiry by 1.5 years from that visit. This collection needs no consent; details are in Barion’s privacy notice.

Other technologies. Your browser’s digital fingerprint: it filters out fraudulent sessions based on browsing behaviour and browser fingerprints, and helps identify individual browsers used on a given device. It is used on Barion’s own site and on the sites of merchants using the Barion Smart Gateway. See chapter 5.4 of Barion’s privacy notice.

Marketing cookies (consent):

BarionMarketingConsent.xxx — stores your statement of consent to the collection and use of data about your browsing sessions and shopping habits in order to provide tailored advertisements and offers. Where consent is given, data collected by the fraud-prevention cookies above is also used for this. Provider: Barion Payment Zrt. Lifetime: 1.5 years from the last update.
Media and advertising partners’ cookies — they match Barion’s and the partner’s ID cookies; in that process the partner’s server stores its own ID in your browser. The list of partners and their own cookie policies are available here.

Marketing cookies are stored only with your consent. Barion Payment Zrt. uses them to collect data about your visit — what you clicked, which product or service you were interested in or bought, and whether you interrupted an order — and builds behavioural models and user profiles from it in order to display personalised content and ads. It manages that information itself or passes it to the licensed media and advertising partners linked above.

6. Retention

Invoicing data is kept for the period required by accounting law (currently 8 years). Order records — including the attendee's name and the details of cancellations, refunds and coupons — are kept for the general civil limitation period of 5 years. A coupon is held until it is used or expires, and after that for the same period as the order it belongs to. Processing based on consent lasts until the consent is withdrawn.

7. Your rights

You may request access to your personal data, its rectification, erasure or restriction of processing, object to processing, and exercise your right to data portability. Use the contact details above.

8. Remedies

You may complain to the Hungarian National Authority for Data Protection and Freedom of Information (1055 Budapest, Falk Miksa utca 9-11., ugyfelszolgalat@naih.hu) or go to court.