GDPR
1. Processing data of contracting partners - keeping records of customers, suppliers
(1) In the context of the performance of a contract, for the purposes of the conclusion, performance and the termination of the contract, as well as for the purpose of granting a contractual discount, the Company processes the name, name at birth, date of birth, mother’s name, address, tax identification number, tax number, entrepreneur’s or self-employed farmer’s certificate number, personal identity card number, address, address of the registered office, address of the establishment, telephone number, e-mail address, website address, bank account number, customer number (customer number, order number), online identifier (list of customers, suppliers, regular customer lists) of the natural person contracted with it as a buyer or supplier. Such processing shall also be considered lawful if it is necessary for the purposes of taking steps at the request of the data subject prior to the conclusion of the contract. Recipients of personal data: employees of the Company performing customer service tasks, employees performing accounting and tax tasks, and data processors. Period for which the personal data will be stored: 5 years after termination of the contract.
(2) Prior to the start of the processing, the natural person concerned must be informed that the processing is based on the performance of a contract, which notice may also be provided in the contract. The data subject shall be informed of the transfer of his or her personal data to a processor. The wording of the data processing clause relating to a contract with a natural person is set out in Annex 6 to the present Policy.
2. Contact details of natural person representatives of legal person customers, buyers, suppliers
(1) Scope of the processed personal data: the name, address, telephone number, e-mail address, online identifier of the natural person.
(2) Purpose of processing personal data: performance of a contract with a legal entity partner of the Company, business relationship, legal basis: consent of the data subject.
(3) Recipients of personal data and the categories of recipients: employees of the Company performing customer service related tasks.
(4) Period for which the personal data will be stored: for a period of 5 years after the conclusion of the business relationship or the person’s capacity as a representative.
(5) Annex 5 of the present Policy provides a sample of the data collection form. This form shall be presented by the employee in contact with the customer, buyer or supplier to the person concerned and the employee shall ask for consent to the processing of his or her personal data by signing the declaration. The declaration shall be kept for the duration of the processing.
3. Processing of visitors' data on the Company's website - Information on the use of cookies
(1) “Cookies” are short data files that are placed on the user’s computer by the website visited. The purpose of the cookie is to make the given infocommunication or internet service easier and more convenient. Although there are several types, they can generally be divided into two broad categories: a temporary cookie, which is placed on the user’s device by the website only during a specific session (e.g. during the security identification of an online banking transaction), and a permanent cookie (e.g. a website’s language setting), which remains on the computer until the user deletes it. Pursuant to the European Commission’s guidelines cookies [unless strictly necessary for the use of the service] may be placed on the user’s device only with the user’s consent.
(2) Information about cookies that do not require the user’s consent should be provided during the first visit to the website. The complete text of the cookie notice does not need to be displayed on the website, it is sufficient for website operators to briefly summarise the substance of the information and provide a link to the full notice.
(3) For cookies that require consent, the information may also be linked to the first visit to the website, if the processing of data associated with the use of cookies starts as soon as the page is visited. Where the application of cookies is linked to the use of a function explicitly requested by the user, the information may also be provided in relation to the use of that function. In this case, it is not necessary for the complete text of the cookie notice to appear on the website, but a brief summary of the substance of the notice and a link to the full notice.
(4) Visitors to the website should be informed about the use of cookies in the Privacy Policy in Annex 2. With this Policy, the Company ensures that the visitor can be informed, before and at any time during the use of the information society services of the Website, of the types of data processed by the Company for which purposes, including the processing of data that cannot be directly linked to the user.
4. Registration on the Company's website
(1) When registering on the website, natural persons can give their consent to the processing of their personal data by ticking the relevant box. It is prohibited to tick the box in advance.
(2) Scope of the processed personal data: name (surname, first name), address, telephone number, e-mail address, online identifier of the natural person.
(3) Purpose of processing personal data:
1. Delivery of the services provided on the website.
2. Contact, by electronic, telephone, SMS, and postal means.
3. Providing information about the Company’s products, services, terms and conditions, promotions.
4. Promotional mailing of information by electronic and postal means.
5. Analysis of the use of the website.
(4) The legal basis for processing is the consent of the data subject.
(5) Recipients of personal data and the categories of recipients: employees of the Company performing tasks related to customer service and marketing activities, and employees of the Company’s IT service provider providing hosting services as data processors.
(6) Period for which the personal data will be stored: up until the registration/service is maintained or the data subject’s consent is withdrawn (request for deletion).
5. Data processing related to newsletter service
(1) When registering for the newsletter service on the website, the natural person can give his/her consent to the processing of his/her personal data by ticking the relevant box. It is prohibited to tick the box in advance. The Privacy Policy (Annex 2) must be made available by means of a link when subscribing. The data subject may unsubscribe from the newsletter at any time by using the “Unsubscribe” application or by making a written declaration or sending an e-mail, which shall constitute a withdrawal of consent. In such event, all data of the person who has unsubscribed shall be deleted immediately.
(2) Scope of the processed personal data: name (surname, first name), e-mail address of the natural person.
(3) Purpose of processing personal data:
1. Sending newsletters about the Company’s products and services
2. Sending promotional material
(4) Legal basis for processing: consent of the data subject.
(5) Recipients of personal data and the categories of recipients: employees of the Company performing tasks related to customer service, marketing activities, employees of the Company’s IT service provider as data processors for the purpose of providing hosting services,
(6) Period for which the personal data will be stored: until the newsletter service is provided or until the data subject’s consent is withdrawn (request for deletion).
6. Data processing in the Company's online shop
(1) In accordance with Article 13/A of Act CVIII of 2001 on certain aspects of electronic commerce services and information society services and Government Decree 45/2014 (26.II.) on the detailed rules of contracts between consumers and businesses, purchases made in the online shop operated by the Company constitute a contract.
(2) For the purposes of creating a contract for the provision of information society services, defining its content, amending it, monitoring its performance, invoicing the fees arising from it, and enforcing claims related thereto, the Company may process the natural personal data and address of the customer registering in the online shop, necessary for the identification of the customer, in accordance with paragraph 13/A(1) of Act CVIII of 2001, and subject to consent, the telephone number, e-mail address, bank account number, online identifier.
(3) For the purpose of invoicing, the Company may process personal data relating to the use of information society services, address, date, duration and place of use of the service, pursuant to Article 13/A(2) of Act CVIII of 2001.
(4) Recipients of personal data and the categories of recipients: employees of the Company performing tasks related to customer service and marketing activities, as data processors, employees of the Company’s tax and accounting company for the purpose of fulfilling tax and accounting obligations, employees of the Company’s IT service provider for the purpose of providing hosting services, employees of the courier service for the purpose of providing delivery data (name, address, telephone number).
(5) Duration of processing of personal data: until the registration / service is maintained or until the data subject’s consent is withdrawn (request for deletion), in case of purchase, for 5 years after the year of purchase.
(6) The Privacy Policy (Annex 2) must be made available with a link upon making a purchase in the online shop.
7. PROCESSING OF ORDER DATA
In accordance with our obligations under Act XXV of 2023 on complaints, whistleblowing and whistleblowing rules, we have contracted a company that manages our internal whistleblowing system – OfficeProtector.
Data processor details:
The name of the recipient/processor is OfficeProtector (Andrea Ivánka-Csontos ev.).
Scope of data: Complaint reporting data
Address: www.officeprotector.hu (5000 Szolnok, Dr. Kronberg J. 9.).
Link to fill in the complaint form: https://officeprotector.hu/bejelento-2/