PRIVACY POLICY

Effective: September 16, 2025

1. Data Controller Information

Website: viaferrata.life / viaferrata.pro
Data Controller: Gergő Novotnik
Address:1031 Budapest, Nánási út 5-7
Email: info@viaferrata.life
Phone: +36 20 319-0536
Data Protection Contact: info@viaferrata.life

2. General Information

This privacy policy has been prepared in accordance with Regulation (EU) 2016/679 of the European Union General Data Protection Regulation (GDPR). By using our website, you accept the terms set out in this privacy policy.

Legal Basis: The legal basis for data processing is Article 6(1) of the GDPR:

  • a) consent (marketing, newsletter)
  • b) contract performance (ticket purchase, service provision)
  • f) legitimate interest (website operation, security)

3. What Data We Collect and Why

3.1 Website Visit

Collected Data:

  • IP address (anonymized)
  • Browser type and version
  • Operating system
  • Pages visited and timestamps
  • Referring website

Purpose: Website operation, statistics, security
Legal Basis: Legitimate interest (GDPR Art. 6(1)(f))
Storage Period: 2 years

3.2 Contact Form

Collected Data:

  • Name
  • Email address
  • Phone number (optional)
  • Message content

Purpose: Contact handling, answering questions
Legal Basis: Consent (GDPR Art. 6(1)(a))
Storage Period: 3 years or deleted upon request

3.3 Ticket Purchase (WooCommerce)

Collected Data:

  • Full name
  • Email address
  • Phone number
  • Billing information
  • Purchase history
  • Payment transaction data (processed by Revolut)

Purpose: Contract fulfillment, ticket issuance, customer service
Legal Basis: Contract performance (GDPR Art. 6(1)(b))
Storage Period: 8 years (accounting law requirement)

3.4 User Account (WordPress)

Collected Data:

  • Username
  • Email address
  • Password (encrypted)
  • Profile data (optional)

Purpose: Login, material downloads, personalized service
Legal Basis: Contract performance (GDPR Art. 6(1)(b))
Storage Period: Until account deletion or 2 years of inactivity

3.5 Cookies

Necessary Cookies:

  • Session cookies
  • Security cookies
  • Shopping cart content storage

Analytics Cookies (Google Analytics):

  • Visitor statistics (anonymized IP)
  • User behavior analysis

Marketing Cookies (Google Ads – planned):

  • Remarketing
  • Conversion tracking
  • Targeted advertising

Legal Basis: Necessary cookies: legitimate interest, others: consent
Storage Period: 30 days – 2 years (depending on type)

4. Data Transfer to Third Parties

4.1 Payment Provider (Revolut)

Transferred Data: Payment data, transaction-related information
Purpose: Bank card payment processing
Legal Basis: Contract performance
Privacy Policy: https://www.revolut.com/legal/privacy

4.2 Google Services

Google Analytics:

  • Anonymized visitor data
  • Website usage statistics

Google Ads (planned):

  • Remarketing data
  • Conversion tracking

Purpose: Website optimization, marketing
Legal Basis: Consent (opt-in cookie banner)
Privacy Policy: https://policies.google.com/privacy

4.3 Web Hosting Provider

Transferred Data: All data stored on the website
Purpose: Website operation
Legal Basis: Contract performance, legitimate interest
Location: EU/EEA

IMPORTANT: We do NOT share your data with third parties for advertising purposes!

5. Data Storage Location and Security

Storage Location: European Union territory (Hungarian server)
Security Measures:

  • SSL encryption
  • Regular security backups
  • Limited access permissions
  • Up-to-date software updates

6. Your Rights (Under GDPR)

6.1 Right of Access

You have the right to know whether we process data about you and, if so, what data.

6.2 Right to Rectification

You may request correction or completion of your personal data.

6.3 Right to Erasure (“Right to be Forgotten”)

You may request deletion of your data when it is no longer needed.

6.4 Right to Data Portability

You may request your data in machine-readable format.

6.5 Right to Object

You may object to the processing of your data, especially for marketing purposes.

6.6 Withdrawal of Consent

You may withdraw your consent at any time.

How to Exercise Your Rights:

7. Right to Complain

If you believe our data processing is unlawful, you may file a complaint with the National Authority for Data Protection and Freedom of Information (NAIH):

NAIH Contact Information:

  • Address: 1055 Budapest, Falk Miksa utca 9-11., Hungary
  • Phone: +36 (1) 391-1400
  • Email: ugyfelszolgalat@naih.hu
  • Website: www.naih.hu

8. Automated Decision-Making

Our website does NOT use automated decision-making or profiling.

9. Processing Data of Minors

We only process data of minors under 16 with parental/guardian consent. If we become aware that we have collected data from a person under 16 without parental consent, we will delete it immediately.

10. Data Breach

In case of a data breach, we will notify the supervisory authority within 72 hours and, if necessary, the affected individuals.

11. Privacy Policy Updates

We may modify this policy at any time. We will inform about changes on the website, and in case of significant changes, we will also send email notifications.

12. Detailed Cookie Information

12.1 Necessary Cookies (always active)

Cookie NamePurposeDuration
PHPSESSIDSession identifierEnd of session
wp_*WordPress basic functions1 year
woocommerce_*Cart content30 days

12.2 Analytics Cookies (consent required)

Cookie NamePurposeDuration
_gaGoogle Analytics identifier2 years
_gidGoogle Analytics session24 hours
_gatGoogle Analytics throttling1 minute

12.3 Marketing Cookies (consent required – planned)

Cookie NamePurposeDuration
gcl*Google Ads conversion90 days
IDEDoubleClick advertising1 year

Modify Cookie Settings: Click on “Cookie Settings” link at the bottom of the website.

13. Contact

If you have any questions regarding data protection, please contact us:

Email: info@viaferrata.life


Last Updated: September 16, 2025
Version: 1.0