Effective from 27 October 2026
This policy explains what personal data we process on the LángosToGo website (the "website"), what we use it for, how long we keep it and what rights you have. It has been prepared in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation, "GDPR") and Hungarian Act CXII of 2011 on the Right of Informational Self-Determination and on Freedom of Information ("Infotv.").
1. Data controller
- Name: BeAtti Kono Kft.
- Registered office: Honfoglalás út 9, 1221 Budapest, Hungary
- Company registration number: [Kitöltendő]
- Tax number: 25448229-2-43
- Shop: Váci utca 57, 1056 Budapest, Hungary
- Phone: +36 30 353 7709
- Privacy email: web@fanga.hu
We are not required to appoint a data protection officer under Article 37 of the GDPR. You can contact us about data protection at any time using the details above.
2. What data we process and why
2.1. Contacting us (form, email, phone)
If you contact us through the form on the Contact page, by email or by phone, we process your data in order to answer your enquiry.
- Data processed: name, email address, phone number, the subject and text of the message, and the time of submission.
- Purpose: answering questions, business, press or franchise enquiries, and keeping in touch.
- Legal basis: your consent (Article 6(1)(a) GDPR), which you give by ticking the checkbox when submitting the form.
- Retention: for 1 year after the enquiry is closed, or until you withdraw your consent. If the enquiry leads to a contract, we keep the data for the period required by law for that contract.
2.2. Job applications (Careers page)
If you apply for one of our open positions on the Careers page, we process your data in order to assess your application.
- Data processed: the position applied for, name, email address, phone number, the uploaded CV and the data it contains, and your message.
- Purpose: assessing the application, running the selection process and keeping in touch with the applicant.
- Legal basis: your consent (Article 6(1)(a) GDPR) and taking steps prior to entering into an employment contract (Article 6(1)(b) GDPR).
- Retention: until the selection process is closed. If you are not selected, we delete your data after the process ends, unless you expressly agree that we may keep it for future positions; in that case we keep it for no more than 1 year.
Your CV is only accessible to the people involved in the selection.
2.3. Visiting the website and technical data
When you open the website, the hosting provider's server logs the technical data needed for operation and security.
- Data processed: IP address, time of visit, address of the page opened, browser and operating system type.
- Purpose: operating the website, troubleshooting, and detecting abuse and attacks.
- Legal basis: legitimate interest (Article 6(1)(f) GDPR). Our legitimate interest is to keep the website running securely and reliably.
- Retention: for the period set in the hosting provider's logging settings, after which the logs are deleted automatically.
We protect the forms and the login against automated spam using Cloudflare Turnstile. For this, technical data from your browser (such as your IP address and browser characteristics) is sent to Cloudflare. Legal basis: legitimate interest (Article 6(1)(f) GDPR), protecting the website and its forms.
2.4. Cookies
A cookie is a small data file that the website stores in your browser. The website itself only uses cookies that are essential for it to work, for example the cookie that remembers your choice in the cookie banner. The embedded Google Map may use its own cookies, so it only loads with your consent (see section 2.5). Our Cookie policy lists the name, purpose and expiry of each cookie.
- Legal basis: for essential cookies, Section 13/A of Hungarian Act CVIII of 2001 on electronic commerce services and our legitimate interest (Article 6(1)(f) GDPR).
- Retention: depending on the cookie, until you close your browser or for up to 1 year.
We do not currently use statistics or marketing cookies. If we introduce them in the future, we will only set them with your prior consent and will update this policy. You can delete or block cookies at any time in your browser settings. You can change or withdraw your consent at any time using the Cookie settings tab in the bottom-left corner of the website or the Cookie settings link in the footer.
2.5. External service: Google Maps
The website's fonts are loaded from our own hosting, so your browser does not connect to any external provider for them.
The Google Map on the Contact page only loads if you consent to it in the cookie banner or with the button shown in place of the map. Once loaded, Google may set cookies and receives your IP address. Google’s Privacy Policy explains how Google processes data.
3. Who has access to the data? (processors)
We do not sell your data or pass it on to third parties for marketing purposes. We use the following service providers (processors) to run the website:
- Hosting provider: Rackhost Zrt. (Tisza Lajos körút 41, 6722 Szeged, Hungary, www.rackhost.hu). The website, the database and the submitted form data are stored on Rackhost's servers in Hungary.
- Website developer and operator: Fanga (digital.fanga.hu, web@fanga.hu). It may access the website's database during maintenance and troubleshooting.
- Spam protection: Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA).
- Maps: Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland).
Cloudflare and Google may also transfer data outside the European Union, to the United States. This is based on the EU–US Data Privacy Framework, which both companies have joined, and on the standard contractual clauses adopted by the European Commission.
4. How we protect your data
The website runs over an encrypted (HTTPS) connection, so data submitted through the forms cannot be read by unauthorised parties in transit. Only authorised staff can access submitted messages and applications, on a password-protected interface. We update the website's software regularly and make backups.
5. Your rights
You have the following rights in relation to the processing of your data:
- Access: you can ask whether we process your data and, if so, what data, for what purpose and for how long (Article 15 GDPR).
- Rectification: you can ask us to correct inaccurate data (Article 16 GDPR).
- Erasure: you can ask us to delete your data if there is no longer a legal basis for processing it (Article 17 GDPR).
- Restriction: you can ask us, in certain cases, to only store your data and not use it (Article 18 GDPR).
- Data portability: you can ask us to provide the data you gave us in a machine-readable format, to you or to another controller (Article 20 GDPR).
- Objection: you can object to processing based on legitimate interest (Article 21 GDPR).
- Withdrawing consent: you can withdraw your consent at any time. This does not affect the lawfulness of processing before the withdrawal (Article 7(3) GDPR).
You can submit your request using the contact details in section 1. We will reply within one month at the latest, free of charge. If the request is complex or we receive many requests, we may extend this deadline by a further two months; we will inform you of this within the first month.
6. Remedies
If you feel we have violated your data protection rights, please contact us first so that we can resolve the issue together. You can also lodge a complaint with the supervisory authority:
Hungarian National Authority for Data Protection and Freedom of Information (NAIH)
Address: Falk Miksa utca 9–11, 1055 Budapest, Hungary
Postal address: 1363 Budapest, Pf. 9.
Phone: +36 1 391 1400
Email: ugyfelszolgalat@naih.hu
Website: naih.hu
If your rights are violated, you can also go to court. At your choice, you may bring the case before the regional court for your place of residence or stay.
7. Data of minors
Persons under 16 may only provide personal data on the website with the consent of the person exercising parental responsibility (Article 8 GDPR, Section 6 Infotv.).
8. Changes to this policy
If our data processing changes (for example, we start using a new service provider or a new cookie), we will update this policy and show the effective date at the top of the page.