Privacy Policy

Publication date: 18 October, 2026

Privacy Policy

1. Introduction

This Privacy Policy describes how personal data is processed in connection with the website tantricfusionfestival.com (hereinafter referred to as the “Website”), operated by Tantra Esoteric Educational Films Ltd., a sole proprietor (hereinafter referred to as the “Data Controller”), as well as in connection with the services available through the Website and other services provided by the Data Controller as specified in this Privacy Policy.

By accessing the Website or using the services provided by the Data Controller, visitors to the Website and users of the Data Controller’s services (hereinafter referred to as the “User”) accept all the terms and conditions set out in this Privacy Policy (hereinafter referred to as the “Policy”). Users are therefore requested to read this Policy carefully before using the Website or any of the services.

2. Details of the Data Controller

Company name: Tantra Esoteric Educational Films Ltd.

Address: 1123 Budapest, Nagyenyed u. 5.

Registration number: 01-09-426995

VAT Number: 32491274-1-43

Email: info@tantricfusionfestival.com

3. Categories of Personal Data Processed

3.1. Registration

Users may register for activities advertised by the Data Controller by purchasing a ticket on the website. The following personal data must be provided during registration. Data marked with an asterisk (*) is mandatory:

• Full name*
• Email address*
• Newsletter subscription preference

3.2. Newsletter Subscription

Users may subscribe exclusively to the Data Controller’s newsletter through the designated subscription interface on the Website. Only an email address is required to subscribe.

3.3. Complaint Handling

The following personal data may be processed when handling complaints:

• Name
• Postal address
• Email address provided during registration
• Subject and content of the complaint

Only persons who have reached the age of 18 are entitled to submit personal data.

4. Purposes of Data Processing

The Data Controller processes personal data collected through the Website and in connection with the provision of other services for the following purposes.

4.1. Registration

4.2. Newsletter Subscription

Where a User subscribes to the newsletter, the Data Controller may send electronic newsletters and advertising messages to the email address provided by the User concerning offers and services related to the Data Controller (hereinafter collectively referred to as the “Newsletter”).

The Data Controller informs Users that unsolicited advertising messages are not sent. Users may unsubscribe from the Newsletter at any time, free of charge, without restriction or justification.

4.3. Complaint Handling

The purpose of processing personal data in connection with complaints is to document complaints submitted to the Data Controller verbally, by telephone, in writing or by email, in order to ensure that they can be retrieved and reviewed when necessary.

This includes documenting the identity of the User, the exact time the complaint was submitted, the content of the complaint and the information provided by the Data Controller in response.

5. Retention Period

The Data Controller processes personal data for as long as the purpose of processing exists, unless the User requests the deletion of their data or withdraws their consent to the processing of their personal data or to receiving Newsletters.

This does not apply to data that the Data Controller is legally required to retain for the period specified by the applicable legislation.

In the case of complaint handling, pursuant to Section 17/B of Act CLV of 1997 on Consumer Protection, the Service Provider is required to retain the records of oral complaints, written complaints and the responses provided to such complaints for five (5) years.

6. Legal Basis for Processing Personal Data

When registering or subscribing to the Newsletter, the User consents to the processing of their personal data by the Data Controller in accordance with this Policy. The processing of personal data is based on the User’s voluntary consent, given after having been informed of the contents of this Policy.

Users may provide only their own personal data. If a User provides another person’s personal data, the person providing the data is responsible for obtaining the data subject’s consent.

7. Persons Authorised to Access Personal Data and Data Processing

The Data Controller and the Data Processors engaged by the Data Controller may access personal data in accordance with applicable legislation.

The following Data Processor processes data on behalf of the Data Controller:

Purpose of data processing:

The payment service provider of the website is Stripe (Stripe, 354 Oyster Point Blvd, South San Francisco, CA 94080 ); data management information:  https://stripe.com/en-hu/privacy)

The billing services are provided by Számlázz.hu: KBOSS.hu Kft. (KBOSS.hu Kereskedelmi és Szolgáltató Korlátolt Felelősségű Társaság) (registered office: 1031 Budapest, Záhony utca 7.; representative name: Ángyán Balázs managing director; cjsz. 01-09-303201; tax identification number: 13421739-2-41; e-mail: info@szamlazz.hu; data protection officer: dr. Istvánovics Éva ügyvéd; contact: dpo@kboss.hu; data management information: Számlázz.hu - Adatvédelem)

Web hosting services: SiteGround Hosting Ltd., a company registered in England and Wales. Company Registration No. 09348602, VAT: GB223072547. Registered office: 7th Floor 50 Broadway, London SW1H 0DB, United Kingdom privacy policy: eu.siteground.com/privacy.htm

Website service: Getresponse S.A. (Gdansk (80-309), Grunwaldzka 413, National Court Register No. 0000942075, TAX ID (EU VAT) 9581468984

The Data Controller reserves the right to engage additional Data Processors in the future. Users will be informed of any such changes by an amendment to this Policy.

Unless expressly required by law, the Data Controller will disclose personal data that can identify a User to third parties only with the explicit consent of the relevant User.

8. Rights of Users

Upon request, the Data Controller will provide information about the personal data it processes, the source of such data, the purpose, legal basis and duration of processing, the name and address of the Data Processor and its data-processing activities, the circumstances and effects of any personal data breach, and the measures taken to address it.

Where personal data has been transferred, the User may also request information about the legal basis for the transfer and the recipient of the data.

Requests for information may be submitted by email to info@tantricfusionfestival.com

The User must verify their identity and provide a postal address. The Data Controller will respond in writing within thirty (30) days of receiving the request at the latest.

Users have the right to request the rectification of their personal data by identifying the correct information. Such requests may be submitted by email to info@tantricfusionfestival.com. The User must verify their identity and provide a postal address.

The Data Controller will rectify the relevant data in its records without undue delay and will notify the data subject in writing once the rectification has been completed.

In addition, Users may request the erasure or restriction of processing of some or all of their personal data at any time, free of charge and without providing a reason, by emailing info@tantricfusionfestival.com.

The User must verify their identity and provide a postal address. Upon receiving a request for erasure, the Data Controller will cease processing the relevant data and delete the User’s data from its records without undue delay, subject to applicable legal obligations.

Instead of erasure, the Data Controller will restrict the processing of personal data if the User requests this or if, based on the available information, erasure could adversely affect the User’s legitimate interests. Restricted personal data may be processed only for as long as the purpose that prevents its erasure continues to exist.

If the Data Controller refuses a request for rectification, restriction or erasure, it will inform the User in writing of the factual and legal reasons for the refusal within thirty (30) days of receiving the request. In the event of such refusal, the Data Controller will inform the User of the possibility of seeking judicial remedy and contacting the Hungarian National Authority for Data Protection and Freedom of Information.

Users may also decide at any time that they no longer wish to receive Newsletters from the Data Controller. Consent to receiving Newsletters may be withdrawn at any time, free of charge, without justification or restriction, by clicking the unsubscribe link provided at the bottom of the Newsletter.

If the withdrawal of consent applies exclusively to direct marketing activities, including Newsletter distribution, the Data Controller may continue to process the User’s personal data to the extent necessary to provide services requested by the User through the Website, where another lawful basis for processing applies.

9. Handling and Reporting Personal Data Breaches

A personal data breach means any incident involving personal data processed, transmitted, stored or otherwise handled by the Data Controller that results in the unlawful processing of personal data, including, in particular, unauthorised or accidental access to, alteration, disclosure, erasure, loss or destruction of personal data, as well as its accidental destruction or damage.

The Data Controller must notify the Hungarian National Authority for Data Protection and Freedom of Information (NAIH) of a personal data breach without undue delay and, where feasible, no later than seventy-two (72) hours after becoming aware of it, unless the breach is unlikely to result in a risk to the rights and freedoms of natural persons.

If notification cannot be made within seventy-two (72) hours, the reasons for the delay must be provided. The required information may be submitted in stages without undue further delay.

The notification to the NAIH must include at least the following information:

• The nature of the personal data breach and the categories and approximate number of affected data subjects and personal data records
• The name and contact details of the Data Controller
• The likely consequences of the personal data breach
• The measures taken or proposed to address, mitigate and remedy the breach

Within seventy-two (72) hours of becoming aware of a personal data breach, the Data Controller will inform the affected data subjects of the breach through the Data Controller’s website. This notification must contain at least the information specified in this section.

The Data Controller maintains a record of personal data breaches to monitor the measures taken in response to such breaches and to inform affected data subjects. The record includes:

• The categories of personal data affected
• The categories and number of affected data subjects
• The date and time of the personal data breach
• The circumstances and effects of the breach
• The measures taken to address the breach

The Data Controller retains the information in this record for five (5) years from the date on which the breach is discovered.

10. External Links

The Data Controller accepts no responsibility for the content or data protection and information security practices of external websites accessible through links on the Website.

If the Data Controller becomes aware that a linked website or a link infringes the rights of third parties or violates applicable law, the link will be removed from the Website without undue delay.

11. Data Security

The Data Controller undertakes to ensure the security of personal data and to implement the technical and organisational measures, as well as the procedural rules, necessary to protect the data collected, stored and processed and to prevent its destruction, unauthorised use or unauthorised alteration.

The Data Controller also undertakes to require any third parties to whom personal data is transmitted or disclosed with the User’s consent to comply with applicable data security requirements.

The Data Controller will take appropriate measures to ensure that unauthorised persons cannot access, disclose, transmit, modify or erase the personal data processed.

Personal data may be accessed only by the Data Controller and the Data Processors engaged by the Data Controller. The Data Controller will not disclose personal data to third parties who are not authorised to access it.

The Data Controller will make every reasonable effort to prevent the accidental damage or destruction of personal data.

The User acknowledges and accepts that, even though the Data Controller uses modern security measures to prevent unauthorised access to or interception of personal data, complete data security cannot be guaranteed when personal data is provided over the Internet.

If unauthorised access to or acquisition of personal data occurs despite the Data Controller’s efforts, the Data Controller shall not be liable for such unauthorised acquisition or access, or for any damage suffered by the User as a result, to the extent permitted by applicable law.

Furthermore, Users may disclose their personal data to third parties, who may use such data unlawfully or for unlawful purposes.

Under no circumstances does the Data Controller collect special categories of personal data, meaning data relating to racial or ethnic origin, political opinions or party affiliation, religious or other philosophical beliefs, trade union membership, health, addiction, sexual life or criminal convictions.

12. Legal Remedies

The Data Controller will make every effort to ensure that personal data is processed in compliance with applicable legislation.

If a User believes that this Policy has not been complied with, they may contact the Data Controller by email at info@tantricfusionfestival.com.

If a User believes that their right to the protection of personal data has been infringed, they may seek legal remedies before the competent authorities in accordance with applicable law, including:

• Hungarian National Authority for Data Protection and Freedom of Information (NAIH)
  Address: 1125 Budapest, Szilágyi Erzsébet fasor 22/C., Hungary
• The competent court

The Hungarian National Media and Infocommunications Authority (NMHH) is responsible for matters concerning advertisements sent electronically.

Detailed rules are set out in Act CXII of 2011 on the Right of Informational Self-Determination and on Freedom of Information, and Act CVIII of 2001 on Certain Issues of Electronic Commerce Services and Information Society Services.

13. Miscellaneous Provisions

This Policy is governed by Hungarian law, in particular Act CXII of 2011 on the Right of Informational Self-Determination and on Freedom of Inform

14. INFORMATION ABOUT THE COOKIES USED ON OUR WEBSITE

What are cookies?

The cookie is hosted file by the web server on the visitor’s terminal (typically your computer or mobile phone) that stores information about the user, the work of the website or even the connection between the user and the web server.

When downloading a site, the web server often "works" out of this information and thus improves user experience or provide services.

For example, cookies support us to find the optimal settings for the site by providing cookies with information about your activity on our website (for example, knowing which part of the site you spent most of your time).

Cookies on our website

Essential cookies are strictly necessary for the operation of the website and the provision of services requested by the user. These cookies enable core functions such as secure login, navigation, and access to protected areas of the website. The website cannot function properly without these cookies.

Functional cookies enable enhanced functionality and personalisation on the website. They allow the website to remember choices made by the user, such as language preferences or region selection, to provide a more personalised experience.

Analytical cookies collect information about how visitors use the website. These cookies help us understand how the website is used, improve its performance, and measure the effectiveness of our content. The data collected is aggregated and anonymised where possible.

Manage cookies

Users of the website can manage or withdraw their cookie preferences at any time via the cookie settings available on the website. In addition, most web browsers allow users to control cookies through their browser settings. Please note that disabling certain cookies may affect the functionality of the website. If you want to read more about setting up your cookies, you can find more information on the browser you are using.