May 2025 Buy and Travel monthly prize draw:
✅ In the month of May we are giving away a 3 day 2 night stay for 2 persons with breakfast at Hotel Sziget Veranka in the picturesque Gemen forest! The hotel can be reached by boat from the Danube bank via Érsekcsanád.
✅ Add your favourite GALLMET capsules to your shopping cart, reach the 20.000 HUF basket value (total value of the products) and you will automatically be entered into the monthly draw!
Our products are available in all pharmacies in Hungary!
Click on the [print-me] icon to print the page
The GALLMET products are available in all Hungarian pharmacies and in some herbal shops!
20 000 Ft over the 1 390 Ft shipping discount, over 30 000 Ft and an additional 5% discount!
Purchase directly from the manufacturer
Buy and travel prize draw regulations
1. The name of the competition
"Shop and Travel Sweepstakes", hereinafter referred to as the Game.
2. The game organiser
2.1. The game is organised by GALLMED Kft. (registered office: Hungary, 6500 Baja, Szarvas Gábor utca 3., company registration number: 03-09-121132, tax number: 22999489-2-03), hereinafter referred to as: Organiser.
3. Who can participate in the game
3.1.
hereinafter referred to as: the "Entrant") who, during the period of the competition, enters the
From https://shop.gallmet.hu/ online store at least 20.000. Ft. in total, excluding shipping costs.
calculated as. The value of the purchase will include the coupon code or other discount applied by the Applicant, i.e.
the final amount, reduced in this way, must reach 20.000. Ft. This will make the application for participation in the game
(hereinafter referred to as "Application"; section 4.4.) will be automatically registered. Participation in the prize draw is only possible in the
is valid if the Candidate does not exercise his right of withdrawal without justification after the purchase.
3.2 If the Entrant is incapacitated, his/her participation in the game, the prize and the
to carry out any substantive administration, to receive the prize and to make any statements in connection with the game, only a legal
together with his or her representative or guardian. In the case of an incapacitated Candidate, the decision on the merits of the prize
to administer, receive the prize or make any statements in connection with the game, only the
your legal representative or guardian.
4. Participation in the game, application
4.1 Only those Applicants who comply with the requirements set out in Chapter 3 and fulfil the conditions set out in 3.1.
as described in point (a). Each purchase made in this way constitutes one valid tender, with several such purchases
the same person has multiple chances to participate in the game, corresponding to the number of purchases.
4.2 To be a valid entrant in the game, the Entrant must provide their true details and contact information at the time of purchase.
enter.
4.3 The Entrant will be registered in the prize draw for each valid entry during the duration of the competition.
4.4. The Application
- Shopping: the Entrant has entered a prize draw on https://shop.gallmet.hu/
within a period of at least 20.000. HUF in total value according to point 3.1. - The purchase, as part of the competition, may be validly made by the Entrant during the advertised period of the competition.
- All valid entries will be entered into the prize draw.
- The same applicant may submit more than one valid application; each valid application submitted as described in point 3.1.
purchase a new valid application and, if successful, the right to receive the prize
report.
5. Duration of the game
5.1 The game will be open from 00:00 on 1 May 2025 until withdrawal. During the duration of the game, each calendar year
One winner will be drawn from among the valid applications received during the month. The Organiser reserves the right to
the right to close the game at any time, without giving any reason and with prior notice to https://gallmet.hu/
on the website.
5.2. The deadline for receipt of applications is the 1st day of each reference month from 00:00 on the 1st day of the month to 23:00 on the last day of the month.
lasts for 59 hours 59 minutes 59 seconds.
5.3. The date of receipt of a valid application is the date of its entry in the Organiser's database, based on the internal
the time of. The internal clock of the server is valid for the duration of the game, the current Hungarian time zone
follows.
6. The winning application, the draw, the prize and its receipt
6.1. During the duration of the Game, the User may use the website https://shop.gallmet.hu/ operated by the Promoter to
purchase as described above will automatically register you as a winner, any Applicant may be a winner, subject to the above
according to.
6.2. The prize draw will take place on the first Wednesday of the month following the month of the subject at 10.00 a.m.
sort.
6.3 The prize draw will be conducted using a random numbering software at the Promoter's headquarters.
One winner will be drawn from the applicants in the draw. If, after 7 days from the date of notification of the winning
does not respond within one day, a new draw will be made and another winner will be drawn.
Lottery place: 6500 Baja, Szarvas Gábor utca 3.
6.4 The Promoter will notify the winner of the draw by email within 3 working days of the draw. The winner will be notified by e-mail to
inform the winner of the details of the receipt of the prize and request the winner to prepare a
a photo of you and your prize.
6.5 The prize will be awarded in the form of a voucher, which will be sent to the winner electronically (by e-mail) and by post.
You can also get it on paper. The Promoter will send a photographic record of the winner and the prize to the
will be published on Facebook and Instagram, with the winner's first and last name, with the winner's consent.
online community site and https://gallmet.hu/ website.
6.6. Prize draw
Prize: one accommodation per month for 2 persons for 3 days 2 nights with breakfast, which can be won in a single
winner will win in the draw. The prize will be awarded in the form of a voucher, which will be given to the winner
electronically (by e-mail) and by post, also on paper. For the exact location of the current monthly prize
https://gallmet.hu/, accommodation may change from month to month. The voucher is normally valid from Sunday
until Thursday, subject to availability of accommodation. If the winner has a Friday or Saturday
days, only by prior arrangement with the accommodation provider and possibly at an extra charge.
is possible on payment of. The voucher is valid for 6 months from the date of the draw.
The voucher is not personal and is transferable to another person, but not redeemable for money.
The Promoter reserves the right to make changes to the prize. The Organiser is not liable for the costs of travel
for reasons of force majeure or due to the fault of the winner.
6.7. Delivery and receipt of the prize.
The voucher will be sent to the winner electronically (by e-mail) and by post on paper Successful contact
within 14 days of the draw. If successful, the Applicant undertakes to provide proof of eligibility and to
cooperate with the Promoter to ensure that the prize is delivered as specified by the Promoter; and
to happen on time.
6.8 If the Eligible Winner does not respond to an e-mail sent by the Promoter informing them of the winning prize, or
failure to respond within the time limit or failure to deliver the prize to the Promoter
fails for any reason (incorrect or false e-mail address, personal data, unsuccessful contact, etc.), the prize will be returned to the
will not accrue to the successful Candidate after the deadline.
6.9 The Organiser shall not be liable for any consequences resulting from the incorrect information provided by the Applicant.
6.10. In the event that a person is drawn who is subsequently found not to have complied with the
the conditions of the rules or if the prize cannot be awarded for the reasons set out above, a new draw will be made.
7. Clause on the right to invalidation
7.1 The Organiser reserves the right to declare invalid any Tender which does not comply with the
The Organiser's personal and/or formal requirements set out in these Rules, namely:
- a disqualified Candidate as defined in point 8 participates in the game,
- the Applicant's application does not comply with point 4.
7.2 The Promoter reserves the right, in the event of unfair play or abuse of the game, to
it may order the suspension or cancellation of the game, or exclude the offending Candidate from the
from the game.
8. Who is excluded from the game
8.1. The game is not open to the Organiser or to the managers of a company acting on behalf of the Organiser.
officers, employees, agents and their close relatives (Civil Code. 8:1. § (1)1.
persons falling under the definition of a relative).
8.2. Furthermore, other direct participants in the game and their direct collaborators in the running of the game are not allowed to participate.
close relatives.
9. Exclusion of liability
9.1 The Promoter accepts no liability whatsoever for any direct or indirect damage resulting from the
participation or the loss of Internet network service outside your coverage area. The Organiser shall not be liable for
be liable for any other technical disruption outside its scope.
9.2 The Organiser shall not be held liable for any consequences arising from the conduct described in clause 10,
such as, in particular, those linked to the provision of false information by the Candidates, the conduct of the Candidates, the
for events related to the Applicant's breach of the Sweepstakes Rules.
10. Exclusion from the game
10.1 In the event of a breach of the rules, the Promoter reserves the right to take the offending Entrant to.
exclude you from the game without prior notice. Persons who use an unauthorised aid will be excluded
use (e.g. hacker program, virus, Trojan horse, etc.) or otherwise manipulate to obtain unauthorised
advantage or in any way interfere with the operation of the information technology system operated by the Promoter. Also excluded is the
from the game if you place an order on behalf of a third party (with or without their knowledge).
10.2 In particular, the Organiser may exclude a Candidate who, by providing false information, misleads in any way the other Candidates.
Applicants for the game.
10.3 It is prohibited to use any sweepstake associations, automated service providers, and in particular
professional lottery services. Breach of this rule may also result in the disqualification of the Applicant.
11. Other conditions and expenses related to the prize
11.1 The prize is not redeemable for cash. The winning Winner shall not be liable to pay any taxes on the prize.
Commitment. The Organiser will assess and pay the tax burden of the prize to the tax authorities.
11.2 Any additional costs and expenses incurred by the Winner in connection with the use of the prize shall be borne by the
Charged to the applicant.
11.3. For any misrepresentation/incompleteness of data during the data reconciliation process related to the receipt of the prize, the
The organiser accepts no liability and is under no obligation to enter into any correspondence in this regard.
11.4 The Promoter reserves the right to change or withdraw the Game without notice in case of force majeure (war,
earthquake, disaster, strike, unexpected epidemic restrictions or similar unexpected event).
11.5 The Promoter will not accept any complaints regarding the prize draw for a period of 60 days after the end of the prize draw.
11.6. For more information, please contact gallmet@gallmet.hu.
12. Data protection
See the privacy notice for the competition.
30 April 2025.
GALLMED Kft.
DATA MANAGEMENT INFORMATION for the buy and travel competition
1. Data Controller
GALLMED Industrial, Commercial and Service Limited Liability Company
Abbreviated name: GALLMED Kft.
Company registration number: 03-09-121132
Tax number: 22999489-2-03
Registered office: 6500 Baja, Hungary, Szarvas Gábor utca 3.
Postal address: Hungary, 6500 Baja, Szarvas Gábor utca 3.
E-mail address: gallmed@gallmed.hu
(hereinafter referred to as the "Data Controller").
2. Legislation applicable to data processing, scope of the information notice
2.1 The Data Controller provides its services from Hungary. Accordingly, the provision of the service and the
With regard to the processing of personal data in the course of the use of the service, the Hungarian and European
law applies. In particular, the following legislation applies to the controller's activities in relation to the processing of personal data
apply:
- REGULATION (EU) No 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 concerning the protection of the personal data of natural persons with regard to the processing of personal data
and on the free movement of such data and Directive 95/46/EC on the protection of individuals with regard to the processing of personal data
(General Data Protection Regulation); (The EU General Data Protection Regulation - The European
EU General Data Protection Regulation), (hereinafter referred to as "GDPR"),
- Act CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information (hereinafter:
Infotv.),
- on electronic commerce services and certain services in the information society
Act No CVIII of 2001 on matters relating to the protection of the environment (hereinafter referred to as the "Ekertv.") and
- Act V of 2013 on the Civil Code (hereinafter: Civil Code).
2.2. The scope of this notice is limited to https://gallmet.hu/ website (hereinafter referred to as:
website) relates to the processing of data in the course of participation in a prize draw.
2.3. For the purposes of this Notice, the Data Subject is the natural person participating in the prize draw (hereinafter referred to as
Affected).
2.4 The dates and times specified in the Prospectus are to be understood as working days in Hungary.
3. Data processing related to the prize draw
3.1. The data subjects concerned by the processing are the Data Subjects who are https://shop.gallmet.hu/en/
buy a product advertised on the website
by fulfilling the specific conditions set out in the rules of the competition within the period specified for the competition. A
game rules will be available on the website during the open period for participation in the game.
3.2. Legal basis for processing: for the purposes of providing the service pursuant to Article 6(1)(b) of the GDPR
the processing necessary for.
In order for the Data Controller to pay the taxes and levies related to the prize, as indicated in the following point.
data on the basis of Article 6(1)(c) of the GDPR, in order to comply with a legal obligation to which the Data Controller is subject
processed by the Data Controller in the interest of.
The Data Subject is required to provide the necessary data in order to participate in the prize draw. Failure to do so may result in.
the Data Subject may not participate in the prize draw or the winner may not collect their prize.
If the Data Subject gives his or her express consent, a photograph of himself or herself and of the prize
will be published pursuant to Article 6 (1) (a) of the GDPR and Article 2:48 (1) of the Civil Code.
3.3. Scope of data processed:
- surname,
- first name,
- e-mail address,
- order ID.
In the case of the winning Data Subject, the following data of the Data Subject will also be processed:
- the object of the prize,
- with his or her specific consent, his or her likeness in a photograph of him or her and the conclusions that can be drawn from it.
The following data of the winning Data Subject will be published:
- is the first letter of his surname,
- first name,
- the object of the prize,
- a photograph taken of him or her with his or her express consent.
In relation to the payment of taxes and contributions in connection with the prize, the winner is the Affected Person:
- name,
- mother's name,
- your nationality,
- place and date of birth,
- Social security number,
- tax identification number,
- postacíme.
3.4. Purpose of data processing: database management in connection with the prize draw for the purpose of running the game, and
the online publication of the winner in order to promote the Data Controller and increase its visibility. Participation in the competition
Purpose of processing the personal data and contact details voluntarily provided by the data subject in the prize draw advertised on the website
to enable the Data Subject concerned to participate in the game, in accordance with the rules of the game, and to
the drawing of the prize, the arrangements for the delivery of the prize in the event of a win and the
enabling the transfer of.
The publication is made on the website operated by the Data Controller https://www.facebook.com/gallmet/ and the https://www.instagram.com/gallmet/ on social networking sites, and https://gallmet.hu/ will take place on the website.
The purpose of the processing of data processed for the payment of taxes and levies in connection with the prize is to enable the Data Controller to
Art. 50. § (1) és (2) bekezdésében (adó- és járulékbevallás), valamint a Számv. tv. 169. §. (2). bekezdésében
(to keep supporting documents).
3.5. Duration of data processing: for 60 days from the end of the monthly prize draw, the winner's data will be
publication shall be valid for a maximum of one year from the date of publication. Thereafter, the data will be deleted.
The data processed for the payment of taxes and contributions related to the winnings are specified in Section 169 (2) of the Act on the Payment of Taxes and Contributions.
in order to comply with a specific legal obligation (to keep supporting documents), the Data Controller may use the related
on supporting documents for 8 years from the date of their creation.
3.6. Method of storage of data: electronically, in the Data Controller's IT system, for each purpose
in a separate file, as well as the published photograph, the winner's initials in the winner's surname, and
first name on the Facebook and Instagram social networking sites and on the electronic storage of the website https://gallmet.hu/.
4. Processing of data related to the receipt and response to a message
4.1. Data subjects: those who contact the Data Controller via email using the email address gallmet@gallmet.hu
Stakeholders sending a message.
4.2 Legal basis for processing: consent of the Data Subject pursuant to Article 6(1)(a) of the GDPR. Data Subject's consent.
consent by sending the e-mail.
You have the right to withdraw your consent at any time. Withdrawal of consent shall not affect the right to withdraw consent.
the lawfulness of the processing carried out before. If the Data Subject withdraws his or her consent to the processing before the
consent, the Data Controller will not continue the exchange of messages, will not answer the questions previously asked, because
delete data processed on the basis of consent.
4.3. Scope of data processed:
The Affected Party sending the message:
- name,
- your e-mail address,
- subject of the e-mail,
- the content of the message.
4.4. Purpose of processing: to enable the exchange of messages with the Data Controller.
4.5 Duration of processing: until the message is answered or the Data Subject's request is fulfilled. Data Controller
deletes the data processed for this purpose after the message has been answered/request has been fulfilled. If the exchange of information
several messages on related subjects, in which case, once the exchange of information is completed or the request is
the Data Controller shall delete the data after the fulfilment of the request.
The relevant content related to the competition and sent by the Data Subject who is a participant in the competition
messages will be deleted by the Data Controller 60 days after the end of the relevant monthly prize draw.
Where the content of the messages may form the basis of a civil claim - for example, for a right to a prize,
then the Data Controller shall keep such messages until the expiry of the general limitation period under civil law - 5 years after the conclusion of the transaction
until the expiry of the - store.
4.6. Method of storage of data: electronically, in a separate area of the Data Controller's IT system
in the data set.
5. Other data processing on the website
For more information on the further processing of data on the website, please see the Cookie Notice on the website
in detail.
6. Recipients (data processors)
The Data Controller uses the following entities as data processors.
6.1. The website hosting provider and website developer used to host the game
6.1.1. Data subjects concerned by the processing: natural persons participating in the game.
6.1.2. The Data Controller uses as data processors the following
Unas Online Limited Liability Company
Abbreviated name: Unas Online Kft.
Company registration number: 08-09-015594
Tax number: 14114113-2-08
Head office: 9400 Sopron, Kőszegi út 14.
Postal address: 9400 Sopron, Kőszegi út 14.
Telephone: +36 99 200 200
E-mail: unas@unas.hu
Website: https://unas.hu/
as the web hosting service provider and the website developer (hereinafter:
Data Processor).
6.1.3.Scope of data processing: the data processing concerns the data indicated in this notice.
6.1.4. The purpose of using a data processor: to ensure the information technology operation of the website
by providing the necessary electronic storage and software.
6.1.5. Nature of processing: the data is processed electronically and is processed exclusively by the site's IT
means the provision of the electronic hosting and software necessary for the operation of the website.
6.2. Processing of data related to prize draws
6.2.1. Data subjects concerned by the processing: the Data Subjects participating in the prize draw.
6.2.2.2 The Data Controller uses as a data processor the
Microsoft Ireland Operations Limited short name: Microsoft Ireland Ltd.
company registration number: 256796
Community tax number: IE8256796U
Location: 70 Sir Rogerson's Quay, Dublin 2, Ireland
postacím: One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland
Contact: https://www.microsoft.com/hu-HU/concern/privacy/
telephone: +1 800 710 200
as the developer of the software used for the lottery draw (hereinafter:
Data Processor).
6.2.3. Scope of the data processing: the processing of the name of the Data Subject participating in the sweepstakes
concerns.
6.2.4. Purpose of using a data processor: to provide the software used to draw the winner.
6.2.5. Nature of data processing: electronic.
6.3. Processing of data related to the technical conditions of publication on an online community site
6.3.1. Data subjects concerned by the processing: the winner of the competition.
6.3.2. The Data Controller will use as a data processor:
Meta PlatformsIreland Ltd.(Facebook, Instagram)
Company registration number: 462932
Tax number: IE 9692928F
Location:Merrion Road, Dublin 4, D04 X2K5, Ireland
Postal address: Merrion Road, Dublin 4, D04 X2K5, Ireland
Telephone: +001 650 543 4800
Message:https://facebook.com/help/contact/540977946302970
Website:https://www.facebook.com/privacy/explanation
as the operator of the social networking sites Facebook and Instagram,
(hereinafter referred to as "Processor").
6.3.3. Scope of the data processing: the data processing will include the first letter of the winner's surname,
first name and surname of the Data Subject, the name of the prize and a photograph of the Data Subject and the prize.
concerns the taking of photographs.
6.3.4. Purpose of the processing: to ensure the information technology operation of the Community site and the
including the storage space needed to store content on the Community site
also ensure.
6.3.5. Nature of data processing: processing is carried out electronically, data are processed exclusively by the Community site
technical operations related to its operation and use, in particular data storage and retrieval
and to ensure the functioning of the community site.
6.4 The Data Controller does not use any other data processor than the Data Processors indicated in this Prospectus, and does not use any other data processors.
It does not provide personal data to recipients. If it becomes necessary in judicial or other official proceedings, the
the Data Controller shall provide the necessary personal data at the request of the controller.
7. Data protection, data security
7.1 The Data Controller shall ensure the security of the data within the scope of its data processing activities, technical and organisational
ensure, through measures and internal rules of procedure, compliance with legislation and other data and
enforcing confidentiality rules. In particular, it takes appropriate measures to protect against unauthorised access,
alteration, disclosure, transmission, publication, deletion or destruction and accidental destruction or
against damage to the data processed, as well as against inaccessibility due to changes in the technology used.
7.2. The processing of data is only carried out for the legitimate purposes described in this notice and is necessary and
in a proportionate manner, based on relevant legislation and recommendations, with appropriate security measures.
7.3 To this end, the Data Controller uses the http protocol "https" to access the website, which is used to
communications can be encrypted and uniquely identified. In addition, as described above, the Data Controller shall encrypt
store the data processed in the form of data files in separate processing lists for each processing purpose
data to which the Data Controller has access for specific tasks - in the course of the activities specified in this notice
whose job it is to protect the data and to ensure that this information and the
responsibly managed in accordance with the relevant legislation.
7.4. The Data Controller shall ensure compliance with applicable laws and data security with the data processors it uses.
a binding data processing contract to guarantee an adequate level of data protection.
8. Data subject's rights in relation to data processing
8.1. Right to information
8.1.1 The Data Subject may at any time obtain information about the processing by reading this Privacy Notice. The Data Subject may inform himself/herself about the processing of personal data.
oral information may be provided upon request, provided that the identity of the Data Subject has been verified by other means. On
the Data Subject may request information during and after the period of his or her involvement in the processing. The information may be provided
all relevant details of the processing and the exercise of the Data Subject's rights. The Data Subject
at the request of the Data Controller, the measures taken on the basis of the Data Subject's requests - or the reason for their failure to take action - in response to the complaint.
and the forums available for its submission.
8.1.2 Provision of information is free of charge. If the Data Subject's request is manifestly unfounded or - in particular in the case of repeated
is excessive by reason of its nature, the Data Controller may, by providing the information or information requested or by taking the action requested, take the
the administrative costs involved in making them:
a) charge a reasonable fee; or
(b) refuse to act on the request.
8.1.3. Within the shortest possible time from the date of the request (without undue delay), but no later than one month
the Data Controller will provide the information within.
8.2. Right of access
8.2.1 The Data Subject has the right to access the data processed about him/her. In case of such a request, the Data Controller shall.
inform him or her whether or not personal data relating to the Data Subject are being processed, and the specific
all relevant circumstances concerning the processing.
8.2.2 Under the right of access, the Data Subject may request a copy of the personal data processed by the Controller,
which the Data Controller will provide free of charge for the first time. For further copies, the Data Controller shall contact the
charge a reasonable fee based on administrative costs.
8.2.3 The copy shall be made available by the Controller in a commonly used electronic format, unless the
Otherwise requested by the person concerned.
8.2.4. As soon as possible (without undue delay) and no later than one month from the date of the request.
within the Data Controller provides access as described above.
8.3 Right to rectification
8.3.1 The data subject shall have the right to obtain, at his or her request and without undue delay, the rectification by the controller of the personal data relating to him or her.
inaccurate personal data.
8.3.2 Taking into account the purpose of the processing, the Data Subject has the right to request the rectification of incomplete personal data, including, but not limited to, the following
by means of a supplementary declaration.
8.3.3.At the request of the Data Subject, the Data Controller shall, without undue delay, correct or, where justified, supplement the data.
inaccurate personal data about you.
8.4. Right to erasure
8.4.1 The data subject shall have the right to obtain, at his or her request and without undue delay, the erasure of personal data relating to him or her.
personal data and the Data Controller is obliged to ensure that the personal data relating to the Data Subject are not unlawfully disclosed.
without delay if one of the following grounds applies:
(a) the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
b) the Data Subject withdraws the consent on which the processing is based and there is no other legal basis for the processing;
c) the Data Subject objects to the processing and there are no overriding legitimate grounds for the processing;
d) the personal data have been unlawfully processed;
(e) the personal data are subject to a legal obligation under European Union or Member State law applicable to the controller
must be deleted in order to be fulfilled.
8.4.2. The data necessary for the establishment, exercise or defence of legal claims shall be provided by the Data Subject to the Data Subject for this purpose.
request, nor is the Data Controller obliged to erase the personal data of the Data Subject or of another person.
the protection of the vital interests of a natural person, or Union or Member State law applicable to the controller
are necessary to fulfil the obligation under. However, as a general rule, after the retention period has expired, the Data Controller may, upon request
without deleting the data.
8.5. Right to restriction of processing
8.5.1 At the request of the Data Subject, the Controller shall restrict the processing if one of the following conditions is met:
(a) the Data Subject contests the accuracy of the personal data, in which case the restriction shall apply for the period of time during which.
allows the Data Controller to verify the accuracy of the personal data;
(b) the processing is unlawful and the Data Subject opposes the erasure of the data and requests instead that it be used for
restrictions on;
(c) the Controller no longer needs the personal data for the purposes of processing, but the Data Subject requests them for legal purposes
to bring, maintain or defend a claim;
(d) the Data Subject has objected to the processing; in this case, the restriction shall apply for the period during which.
it is not established whether the legitimate interests of the Data Controller prevail over the legitimate interests of the Data Subject;
8.5.2 If the processing is subject to restriction, such personal data shall, except for storage, only be disclosed to the Data Subject.
with the consent of, or for the purpose of bringing, asserting or defending legal claims or other natural or legal persons, or
for the protection of the rights of a person or for important public interests of the European Union or of a Member State
Data Controller.
8.5.3. The Data Controller shall inform the Data Subject who has contested the accuracy of the personal data and on this basis has restricted the
data processing, inform you in advance of the lifting of the restriction on processing.
8.6. Notification of the rectification or erasure of personal data or the restriction of processing
Commitment
The Data Controller shall notify the Data Subject and all recipients of the rectification, restriction and erasure,
to whom the data was previously transmitted. Notification may be waived if it proves impossible or disproportionate
requires effort. The Data Subject will be informed of these recipients by the Data Controller upon request.
8.7 Right to data portability
8.7.1 The Data Subject has the right to obtain the personal data concerning him or her which he or she has provided to the Data Controller.
in a structured, commonly used, machine-readable format, and the right to receive such data
to another controller without hindrance by the controller to whom the personal data are disclosed in order to
made available to you, if:
(a) the processing is based on the consent of the Data Subject or on a contract concluded with him or her; and
(b) the processing is carried out by automated means.
8.7.2 In the exercise of the right to data portability as set out above, the Data Subject has the right to request that, if it is necessary to.
technically feasible - request the direct transfer of personal data between data controllers.
8.8 Right to object
8.8.1.You may at any time object, on grounds relating to your particular situation, to the processing of your personal data on the basis of a legitimate interest.
against the treatment of.
8.8.2. In this case, the Controller may continue to process the personal data only if it can prove that the
processing is justified by compelling legitimate grounds which override the interests of the Data Subject,
rights and freedoms, or which are necessary to establish, exercise or defend legal claims
are related to.
9. Complying with the data subject's requests
9.1 The Controller shall provide the information and take the measures referred to in point 8 free of charge. If the Data Subject
your request is manifestly unfounded or excessive, in particular because of its repetitive nature, the Data Controller may, having regard to the
the administrative costs of providing the information or information or of taking the requested action:
a) charge a reasonable fee; or
(b) refuse to act on the request.
9.2. without undue delay, but no later than one month from the receipt of the request, the Data Controller shall.
inform the Data Subject of the action taken in response to the request, including the provision of copies of the data. Need
in the case of a complex application, taking into account the complexity of the application and the number of requests, this deadline is extended by two months
can be extended. The Data Controller shall inform the applicant of the extension of the time limit, stating the reasons for the delay.
inform the Data Subject within one month of receipt of the information. If the Data Subject has submitted the request by electronic means, the
request, the information shall be provided by the Data Controller by electronic means, unless the Data Subject requests otherwise.
9.3 If the Data Controller does not take action on the request of the Data Subject, without delay, but no later than the date of the request.
inform the Data Subject of the reasons for the failure to act within one month of receipt of the information; and
that the Data Subject may lodge a complaint with the supervisory authority indicated in point 10.2 and that the provisions of the same
you can exercise your right to a judicial remedy.
9.4. The Data Subject may submit requests to the Data Controller by any means that allows the identification of the Data Subject. A
the identification of the Data Subject submitting the request is necessary because the Data Controller will only send requests to those entitled to receive them.
you can do. If the Data Controller has reasonable doubts about the identity of the natural person making the request.
may request additional information necessary to confirm the identity of the Data Subject.
9.5. If the Data Subject wishes to submit his/her application by post, he/she may send it to the following address: 3, Szarvas Gábor utca, 6500 Baja, Hungary.
or send it electronically by e-mail to the following e-mail address: gallmed@gallmed.hu
A request sent by e-mail shall be considered as authentic by the Data Controller only if it has been sent to the Data Controller by the Data Subject
from the e-mail address you have provided and registered there, but the use of a different e-mail address does not
ignoring. In the case of e-mail, the date of receipt shall be deemed to be the first working day following the date of dispatch.
10. Enforcement
10.1 Any complaint by a data subject about the processing of his or her data may be addressed to the Data Controller, in particular by.
contact:
GALLMED Kft.
E-mail address: gallmed@gallmed.hu
Postal address: Hungary, 6500 Baja, Szarvas Gábor utca 3.
10.2. You can exercise your rights before a court of law, and you can also apply to the National Data Protection and
Freedom of Information Authority:
National Authority for Data Protection and Freedom of Information
Address: Hungary, 1055 Budapest, Falk Miksa utca 9-11.
Postal address: Hungary, 1363 Budapest, Pf. 9.
Telephone: +36 1 391 1400
Fax: +36 1 391 1410
E-mail: ugyfelszolgalat@naih.hu
Website:https://www.naih.hu/
If the court is chosen, the lawsuit will be brought, at the choice of the Data Subject, in the place of residence or domicile of the Data Subject.
can be brought in the court of the country of origin.
30 April 2025.
English (UK) 
Magyar 
Deutsch (Sie) 
Română 
Slovenčina 
Polski