HealWays

Privacy Policy

1. Purpose of this Privacy Policy

This privacy policy aims to inform you about the processing of your personal data collected in connection with the use of our website and related services.

HealWays Kft. (hereinafter: Data Controller) operates the website www.healways.hu (hereinafter: website) and processes the personal data of website visitors and customers in accordance with applicable data protection laws, in particular the GDPR.

2. Name of the Data Controller

Name: HealWays Kft.

Registered office and mailing address: 1025 Budapest, Kapy u. 32

Phone: +36 30 867 1010

Email: info@healways.hu

3. Scope of processed personal data

In connection with sending newsletters, we process the following personal data:

  • Name
  • Email address

In connection with correspondence, we process the following personal data:

  • Name
  • Email address
  • Phone number
  • Message
  • Attached files

In our web shop, for event tickets we process the following personal data:

  • Name
  • Email address
  • Address
  • Phone number
  • IP address
  • For company orders: company name and tax number

4.1. Data processing is based on your voluntary consent, given on the basis of adequate information.

You give your consent by voluntarily providing the relevant data. Consent is voluntary and can be withdrawn at any time.

4.2. The purpose of data processing is to send the newsletter to the email address you provided.

The purpose of processing health and identification data is the preservation, improvement and restoration of health.

For ticket purchases in the web shop, data processing serves to record the order, issue invoices and facilitate communication.

4.3. The Data Controller does not use the provided personal data for purposes other than those described in section 4.2.

4.4. The Data Controller does not verify the provided personal data. The person providing the data is solely responsible for its accuracy.

5. Duration of data processing

In the case of newsletters, personal data is processed until unsubscribing from the newsletter as described in section 8.

For job applicants, the duration of data processing is the duration of employment in case of a successful application, otherwise 6 months.

In connection with correspondence, the duration of data processing is 2 (two) years after the last message.

In the case of patients, the duration of data processing is determined by the legal retention obligations for invoices and medical records.

6. Recipients of data, data transfer, data processing

The data may primarily be accessed by the Data Controller and their internal employees who are bound by confidentiality.

7.1. You are entitled at any time to request information about your personal data processed by the Data Controller.

7.2. Upon request, the Data Controller will provide you with information about your processed data, the purpose, legal basis and duration of processing.

The Data Controller documents data protection incidents and the measures taken.

7.3. You can exercise your rights at the following contact details:

Email: info@healways.hu

You can contact the Data Controller's data protection officer with any questions or comments regarding data processing.

7.4. You are entitled at any time to request the correction of incorrectly recorded data or their deletion.

If the Data Controller does not comply with the correction or deletion request, they will communicate the reasons for refusal within 25 days.

The data subject may object to the processing of their personal data. The Data Controller will examine the objection within 15 days.

7.5. The data subject may address their complaint to the National Authority for Data Protection and Freedom of Information (1125 Budapest, Szilágyi Erzsébet fasor 22/c, www.naih.hu).

7.6. If you provided third-party data to use the service, the Data Controller is entitled to claim damages arising therefrom.

8. Unsubscribing

In the case of newsletters, the Data Controller processes your data provided during newsletter registration until you unsubscribe. Unsubscribing is free of charge at any time.

9. Other provisions

9.1. In all cases where the Data Controller intends to use the provided data for a purpose other than the original collection purpose, they will inform the data subject and obtain their express consent.

9.2. The Data Controller undertakes to ensure the security of the data and to take the technical and organizational measures that guarantee the protection of the processed data.

9.3. The Data Controller reserves the right to modify the data protection rules and information. Changes will be published on the website.

This website uses Google Analytics 4 and Google Ads for visitor analytics and advertising measurement. Google provides these services through Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland), acting as our data processor in the European Economic Area.

What is collected

Without consent (default): under Google Consent Mode v2, the tags send cookieless pings from which anonymous, aggregate conversion modeling is derived. IP addresses are anonymised. No personal identifier is stored.

After consent: Google sets the following cookies: _ga, _ga_* (Google Analytics visitor identifier) and _gcl_au (Google Ads measurement). Retention per Google: _ga 2 years, _ga_* 2 years, _gcl_au 90 days.

Consent under Article 6(1)(a) GDPR, given by clicking “Accept” on the cookie banner displayed on your first visit.

You can withdraw consent at any time by clicking the “Cookie settings” link in the footer. On the reopened banner, clicking “Decline” pushes a denied signal through Google Consent Mode v2; the _ga, _ga_* and _gcl_au cookies are automatically cleared from your browser on the next page load.

Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Third-country transfers

Google processing may involve transfer to the United States. The transfer relies on the EU–U.S. Data Privacy Framework adopted in July 2023, to which Google LLC is certified.