| No. |
Purpose of processing |
Scope of data processed |
Legal basis |
Retention period |
| 1. |
Processing for social media (Facebook–Instagram, TikTok) LEAD and other direct marketing campaigns |
name, email address, phone number, postal code |
Explicit consent given on social media marketing platforms – GDPR Article 6(1)(a) |
Until consent is withdrawn, or until the Spandora Call Center initiates a direct marketing call |
| 2. |
Recording a product order in the webshop |
surname, first name, company name (optional), postal code, city, street and house number, county, phone number, email address, product type, delivery address (if different), note, order time |
GDPR Article 6(1)(b) – contract preparation and performance; see details in the Spandora.hu T&C |
We process the data for 5 years following termination (performance) of the contract. |
| 3. |
Compliance with statutory invoicing obligations related to webshop purchases |
name (surname and first name), address, data included on accounting documents to be retained |
Compliance with a legal obligation (GDPR Article 6(1)(c) in view of Section 169 of Act C of 2000 on Accounting) |
We retain the data for 8 years in accordance with the Accounting Act. |
| 4. |
On the website – Cosmetics – Registration for a preliminary consultation prior to booking a Facial Diagnostic Examination (Octoline and EunSung ComfortLine, Hydron, MesoLux devices) |
name, email, phone number, source (Facebook, Google Ads, Instagram, TikTok) |
Explicit consent on the website under GDPR Article 6(1)(a) |
Until consent is withdrawn, or
– in case of contract conclusion: for 5 years after termination of the contract
– in case of inactivity (“no purchase”): 1 month from the 3rd and last contact attempt, but maximum 1 year. (see details in the separate Spandora Client Privacy Policy) |
| 5. |
On the website – Cosmetics – Body Treatment – appointment request for the ComfortLine device |
name, email, phone number, source (Facebook, Google Ads, Instagram, TikTok) |
Explicit consent on the website under GDPR Article 6(1)(a) |
Until consent is withdrawn, or
– in case of contract conclusion: for 5 years after termination of the contract
– in case of inactivity (“no purchase”): 1 month from the 3rd and last contact attempt, but maximum 1 year. (see details in the Spandora Client Privacy Policy) |
| 6. |
On the website – Aesthetic medicine – Registration for a preliminary medical consultation prior to booking |
name, email, phone number, source (Facebook, Google Ads, Instagram, TikTok) |
Consent given on social media marketing platforms – GDPR Article 6(1)(a) |
Until consent is withdrawn, or
– in case of contract conclusion: for 5 years after termination of the contract
– in case of inactivity (“no purchase”): 1 month from the 3rd and last contact attempt, but maximum 1 year. (see details in the Spandora Client Privacy Policy) |
| 7. |
Sending newsletters (via social media campaigns or on the website) |
name (surname and first name), email address, postal code |
Explicit consent under GDPR Article 6(1)(a) |
We process the data until consent is withdrawn.
You can unsubscribe via the link provided in the newsletter. |
| 8. |
Complaint handling, feedback, suggestions related to social media campaign(s) and website operation |
name (surname and first name), email address, phone number, date of receipt of the complaint |
Legitimate interest of the Data Controller under GDPR Article 6(1)(f) |
5 years after closure of the complaint case (civil law limitation period) |
| 9. |
Customer satisfaction survey |
name, email address, comment, date of completion |
Legitimate interest of the Data Controller under GDPR Article 6(1)(f) |
14 months after completion of the survey |
