Privacy notice
In short: we do not track visitors, we do not use cookies, and we process only as much data as is unavoidable.
This notice explains how Régi Gyógyszertár handles the personal data of visitors to the regigyogyszertar.hu website. Our aim is to tell you clearly and honestly what we know about you, why, for how long, and what rights you have. It is based on Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and on Act CXII of 2011 on the Right of Informational Self-Determination and on Freedom of Information (Infotv.).
1. The data controller
| Name | „Ilma” Gyógyszerészeti Betéti Társaság (rövidített név: „Ilma” Bt.) |
|---|---|
| Registered office | 8600 Siófok, Fő utca 202. |
| Tax number | 25250154-2-14 |
| Company registration number | 14-06-302649 |
| Pharmacy (premises) | Régi Gyógyszertár, 8600 Siófok, Fő utca 202. |
| ilmabt@t-online.hu | |
| Phone | +36 84 310 041 |
2. What does this notice cover?
Only data processing related to the use of the website and to contacting us through it. Data processing in the course of pharmacy patient care (for example concerning prescriptions, e-prescriptions, loyalty programmes or health data) takes place under separate legal frameworks; you can ask for information about it in person at the pharmacy.
3. What this website does not do
- It does not use tracking or marketing cookies and places no cookie in your browser that could identify visitors.
- It does not use any analytics or advertising service (for example Google Analytics, Meta Pixel).
- It does not load external fonts, maps or embedded social media content: fonts and images come from our own server, so your IP address is not passed to any third party when you open the site.
- It has no registration, newsletter or order form.
- If you choose larger text with the text size switch (A / A+ / A++), this setting is remembered only by your own browser (local storage); it never reaches us, and you can delete it at any time.
4. What data do we process, and why?
| Processing | Data processed | Purpose and legal basis | Retention |
|---|---|---|---|
| Server log files (automatically when you open the site) | IP address, time of the request, page requested, browser type, response status code | Secure and uninterrupted operation of the website, prevention of abuse. Legal basis: legitimate interest (Article 6(1)(f) GDPR). | 30 days, then deleted |
| Contact by email or phone | Your name, email address or phone number and the content of your message – whatever you provide | Answering your enquiry, handling your matter. Legal basis: steps taken at your request prior to entering into a contract, or legitimate interest (Article 6(1)(b) and (f) GDPR). | Until the matter is closed, at most 1 year afterwards, unless the law requires longer retention |
| Session cookie in the editing interface (only for staff authorised to edit the website) | Login identifier (cookie) | Keeping the editor's login active. It is strictly necessary, so it requires no consent. It does not affect visitors. | Until the end of the session, at most 12 hours |
We do not use your personal data for profiling or automated decision-making, and we do not sell it.
5. Who can access the data?
The data can primarily be accessed by the data controller's authorised staff. We use the following processors:
- Hosting provider: [TO BE COMPLETED: name of the hosting provider], registered office: [TO BE COMPLETED: registered office of the hosting provider]. It operates the website and the server log files.
- Email provider: the provider of the ilmabt@t-online.hu mailbox (T-Online / Magyar Telekom), which stores the messages you send to us and we send to you.
We disclose data to authorities only on the basis of a legal obligation, in the cases defined by law. The data controller does not transfer personal data to countries outside the European Economic Area.
6. External links
Links on the website (Google reviews, Facebook, Instagram, maps, EESZT) lead to external providers operating under their own rules. As long as you do not click on them, these providers receive no data about you; after you click, the privacy notice of the given provider applies.
7. Your rights
You can request at any time:
- information and access to the data we hold about you (Article 15 GDPR);
- rectification of inaccurate data (Article 16);
- erasure (“right to be forgotten”) of your data where there is no further legal basis for processing (Article 17);
- restriction of processing (Article 18);
- portability of the data you provided (Article 20);
You can object to processing based on legitimate interests (Article 21); in that case we will stop the processing unless compelling legitimate grounds that override your interests justify it, or it is necessary for the establishment or defence of legal claims. Where processing is based on consent, you may withdraw your consent at any time; withdrawal does not affect the lawfulness of the earlier processing.
We will respond to your request without undue delay and at the latest within one month; where necessary, because of the complexity or number of requests, this deadline may be extended by a further two months, and we will inform you of this. Information and action are free of charge. You can submit your request at ilmabt@t-online.hu or in person at the pharmacy; to verify your identity we may ask for further information if necessary.
8. Legal remedies
If you feel that the processing of your personal data violates the law, please contact us first so that we can resolve the problem together. You may also lodge a complaint with the supervisory authority:
| Hungarian National Authority for Data Protection and Freedom of Information (NAIH) | 1055 Budapest, Falk Miksa utca 9–11. Postal address: 1363 Budapest, Pf. 9. Phone: +36 1 391 1400 Email: ugyfelszolgalat@naih.hu Website: www.naih.hu |
|---|
In case of infringement of your rights you may also go to court; the case falls within the jurisdiction of the regional court (törvényszék), and at your choice may be brought before the regional court of your place of residence or stay.
9. Data security
The website is available over an encrypted (HTTPS) connection. Only authorised, password-protected staff have access to the editing interface; the server log files are deleted by the system after the period stated above. We apply appropriate technical and organisational measures to protect personal data.
10. Changes to this notice
If the operation of the website or the law changes, we will update this notice; the version currently in force is the one published here. In force from: 30 September 2026.