Privacy Policy

Acceptance date: 2024-04-19

Data Administrator

Name: Pit Box Kft.

Registered office: 2600 Vác, Rózsa utca 3/A 1em. 2 att.

Postal address, complaint management: 2600 Vác, Rózsa utca 3/A 1em. 2ajt.

Email: sales@fansbrands.com

Phone number: +48 (22) 103-24-07

Website: https://fansbrands.pl/

Hosting provider

Name: UNAS Online Kft.

Mailing address: 9400 Sopron, Kőszegi út 14.

Email: unas@unas.hu

Phone number:

Name: Shopify Commerce Singapore Pte. Ltd.

Mailing Address: 77 Robinson Road, #13-00 Robinson 77, Singapore 068896

E-mail:..................

Telephone number :.................

Description of data processing activities performed as part of running an online store

This document contains all the important information regarding data processing in connection with the operation of the online store in accordance with the General Data Protection Regulation (2016/679) of the European Union (hereinafter referred to as the "Regulation" or "GDPR") and Act CXII of 2011 (hereinafter referred to as the "Privacy Act").

Information about the use of cookies

What is a cookie?

When you visit the website, the Data Controller uses cookies. A cookie is a packet of information consisting of letters and numbers sent to your browser by our website to save certain settings, facilitate the use of our website and help collect relevant statistical information about our visitors.

Some cookies do not contain personal data and are not suitable for identifying individual users, but some cookies contain a unique identifier, i.e. a secret sequence of numbers generated randomly, which will be stored on the user's device and thus ensure its identification. The duration of each cookie is given in the relevant description.

Legal background and legal basis of cookies:

The legal basis for processing is the user's consent in accordance with Article 6(1)(a) of the Regulation.

Main features of cookies used by the website: Necessary cookies:

If you do not accept the use of cookies, some functions will not be available to you.

Strictly Necessary Cookies : These cookies are essential for the use of the website and enable the use of its basic functions. In the absence of these cookies, several functions of the website will not be available to the user. The lifetime of these cookies is limited solely to the duration of the session.

Session cookies: These cookies store the user's location, browser language and payment currency. They last until you close your browser or for a maximum of 2 hours.

Age-restricted content cookies: These cookies record the fact that you have approved age-restricted content and that you are over 18, they last until you close your browser.

Cookies for recommended products: Saves the list of products to recommend, for the "Recommend to a friend" function. Their lifespan is 60 days.

Mobile version, design cookies: Detects the device used by the visitor and switches to full view on mobile devices. Their lifespan is 365 days.

Acceptance of cookie files: After entering the site, the user accepts the statement on storing cookies in the appropriate window. Their lifespan is 365 days.

Exit Cookies #2: Logs the visitor out after 90 days as per option #2. Their lifespan is 90 days.

Backend ID Cookies: An identifier for the backend server that serves the site. They last until you close your browser.

Statistical cookies:

Google Analytics Cookies: Google Analytics is a Google analytics tool that allows website and application owners to get a more accurate picture of visitor activity. The service may use cookies to collect information and report statistical data about site usage without individually identifying visitors to Google. Google Analytics primarily uses " ga" cookies. In addition to reporting statistical data about site usage, Google Analytics, in conjunction with the advertising cookies described above, may also be used to display more relevant ads on Google products (e.g. Google Search) and across the Internet.

Cookies to improve user experience : These cookies collect information about how a user uses a website, for example which pages they go to most often or what error messages they receive from a website. These cookies do not collect information that identifies a visitor, i.e. they work with completely generic, anonymous information. They use the data obtained from such information to improve the performance of the website. The life of these cookies is limited to the duration of the session only.

Referrer cookies : These record the external websites from which a visitor has reached the site. They last until the browser is closed .

Recently Viewed Product Cookies: Records the product that the visitor last viewed. They last for 60 days.

Recently Viewed Category Cookies: Records the last viewed category. Their lifespan is 60 days.

Shopping cart cookies: Records products added to the shopping cart. Their lifespan is 365 days.

Smart Offers Cookies: Records the conditions for displaying smart offers (e.g. whether the visitor has already been to the site, whether there is an order). They last for 30 days.

Marketing cookies:

Google Adwords Cookies When someone visits our website, the visitor's cookie ID will be added to a remarketing list. Google uses cookies - such as NID and SID cookies - in Google products, such as personalizing the ads you see on Google Search. Google uses these cookies, for example, to remember previous searches, interactions with certain advertisers' ads or search results or visits to advertisers' websites. AdWords conversion tracking uses cookies. To track sales and other conversions resulting from advertising, cookies are stored on a user's computer when they click on an ad. Some common ways to use cookies are: selecting ads based on what is relevant to a user, improving campaign performance reports, and avoiding the display of ads that a user has already seen.

Remarketing cookies: These cookies may be displayed to previous visitors or users when they browse other websites in the Google Display Network or search for terms related to its products or services.

Facebook Pixel (Facebook Cookies) Facebook Pixel is a code that allows a website to report on conversions, to compile target audiences and to provide the website owner with detailed analysis of how visitors use the website. Facebook Pixel allows personalized ads to be displayed to website visitors on the Facebook platform. You can read Facebook's privacy policy here: https://www.facebook.com/privacy/explanation

For more information on deleting cookies, please visit the following links:

Internet Explorer: http://windows.microsoft.com/en-us/internet-explorer/delete-manage-cookies#ie=ie-11 Firefox: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer

Mozilla: https://support.mozilla.org/hu/kb/weboldalak-altal-elhelyezett-sutik-torlese-szamito

Safari: https://support.apple.com/guide/safari/manage-cookies-and-website-data-sfri11471/mac Chrome: https://support.google.com/chrome/answer/95647

Edge: https://support.microsoft.com/hu-hu/help/4027947/microsoft-edge-delete-cookies

Data processed for the purpose of concluding and performing a contract

In order to conclude and execute a contract, several data processing cases may occur. We hereby inform you that data processing related to complaint management and administration related to warranty rights will only take place if you exercise one of these rights.

If you do not make a purchase through an online store but merely visit it, the provisions on data processing for marketing purposes may apply to you if you consent to the processing of your data for marketing purposes.

Data processing activities for the purpose of concluding and performing the contract in detail are:

Contact

If, for example, you contact us by email, contact form or by phone to inquire about a product. Prior contact is not necessary, you can place an order in the online shop at any time in the absence thereof.

Processed data

Data you provide when contacting us.

Data processing period

We only process data until the contact ends.

Legal basis for data processing

Voluntary consent given to the data controller by contacting us. [Data processing based on Article 6 paragraph 1 letter a) of the Regulation]

Registration on the website

By storing the data provided during registration, the Data Administrator can provide more convenient service (e.g. the data subject will not have to provide their data every time they make a purchase on the website). Registration is not a condition for concluding a contract

Processed data

During data processing, the Data Controller processes the name and surname, address, telephone number, e-mail address, characteristics of the purchased products and the date of purchase.

Data processing period

Until consent is withdrawn.

Legal basis for data processing

Voluntary consent of the user granted to the data controller through registration. [Data processing on the basis of Article 6 paragraph 1 letter a) of the Regulation].

Order processing

Data processing activities during order management required for the performance of the contract.

Processed data

During data processing, the Data Controller processes the name, address, e-mail address, characteristics of the purchased products, order number and date of purchase.

If you place an order in the online store, the processing and sharing of data is necessary for the execution of the contract.

Data processing period

We process data for 5 years in accordance with the civil law limitation period.

Legal basis for data processing

Performance of the contract. [Data processing pursuant to Article 6(1)(b) of the Regulation]

Issuing an invoice

Data processing is carried out for the purpose of issuing an invoice in accordance with the law and fulfilling the obligation to store an accounting document. According to Article 169, paragraphs 1-2 of the Accounting Act, economic organizations must store accounting documents directly and indirectly confirming accounting entries.

Processed data

Name, address, email address, telephone number.

Data processing period

Pursuant to Article 169 paragraph 2 of the Accounting Act, issued invoices must be stored for a period of 8 years from the date of issue.

Legal basis for data processing

In accordance with paragraph (1) of section 159 of Act CXXVII of 2007 on Value Added Tax, issuing an invoice is mandatory and, in accordance with paragraph 2 of Article 169 of the Accounting Act, issued invoices must be kept for a period of 8 years. [Data processing pursuant to Article 6 paragraph 1 letter c) of the Regulation].

Processing of data related to the delivery of products

Data processing takes place for the purpose of delivering the ordered product.

Processed data

Name, address, email address, telephone number. Data processing period

FansBRANDS® - Official Store for Motorsport Fans

Data processing takes place for the purpose of delivering the ordered product.

Legal basis for data processing

Performance of the contract. [Data processing pursuant to Article 6(1)(b) of the Regulation]

Recipients and entities processing data for the purpose of delivering goods

Recipient's name: GLS General Logistics Systems Hungary Csomag-Logisztikai Kft.

Registered office of recipient: 2351 Alsónémedi, GLS Európa u. 2.

Recipient's phone number: 06-29-88-67-00

Recipient's email address: info@gls-hungary.com

Recipient's website: https://gls-group.eu/HU/hu/home

The courier company participates in the delivery of the ordered product based on the agreement concluded with the Data Administrator. The courier company processes the data provided to it in accordance with the privacy policy available on its website.

Recipient name: UPS

Recipient's registered office: Atlanta, Egyesült Államok

Recipient's phone number: +36 1 877 0000

Recipient email address: https://www.ups.com/upsemail/input?loc=hu_HU

Recipient's website: https://www.ups.com/

Management of warranty and guarantee claims

When it comes to warranty and guarantee rights, we must act in accordance with Regulation 19/2014. (IV. 29.) of the Minister of National Economy, which specifies the method of managing such claims.

Processed data

When it comes to warranty and guarantee rights, we must act in accordance with Regulation 19/2014. (IV. 29.) of the Minister of National Economy.

According to the decree, we must register claims under warranty or guarantee of which we have been notified, in which we register:

name, surname, address and a statement of consent to the processing of data indicated in the register in accordance with the decree,
the name and purchase price of the material item sold under the contract concluded between us,
date of contract execution,
date of reporting the fault,
description of the fault,
the right that the user wishes to assert under the warranty or guarantee, and
the manner of handling a complaint under a warranty or guarantee or the justification for rejecting the entitlement that was to be claimed on the basis of the complaint.

If we take back a purchased Product from you, we must issue an acknowledgment of receipt, which must include the following information:

name, surname and address,
data required to identify the object,
the date you received the item, and
date when the repair can be accepted

Data processing period

The entrepreneur is obliged to keep the protocol of the complaint submitted by the consumer under the warranty or guarantee for a period of three years from the date of its preparation and to present it at the request of the inspection body in this respect.

Legal basis for data processing

The legal basis for data processing is compliance with the legal obligations specified in Regulation 19/2014 (IV. 29.) of the Minister of National Economy [paragraph (1) section 4. and paragraph (1) section 6] [Data processing in accordance with Article 6 paragraph 1 letter c) of the Regulation].

Managing Other Consumer Protection Complaints

The processing of data will be carried out for the purpose of managing consumer protection complaints. If a user contacts us with a complaint, the processing and sharing of data will be unavoidable.

Processed data

Buyer's name and surname, telephone number, e-mail address, content of complaint.

Data processing period

Consumer complaints are stored for 3 years under the Consumer Protection Act.

Legal basis for data processing

You can voluntarily decide whether you wish to lodge a complaint with us, but if you do so, we are obliged to store your complaint for a period of 3 years pursuant to paragraph (7) of section 17/A of the Consumer Protection Act CLV 1997 [Data processing pursuant to Article 6 paragraph 1 letter c) of the Regulation].

Data processed in connection with the possibility of verifying consent

After registration, placing an order or subscribing to the newsletter, the IT system stores the IT data related to the consent for evidentiary purposes.

Processed data

Date of consent and IP address of the data subject.

Data processing period

For legal reasons, consent must be verifiable later, which is why the data is stored for a limitation period after the end of data processing.

Legal basis for data processing

This obligation results from Article 7 paragraph 1 of the Regulation [Data processing on the basis of Article 6 paragraph 1 letter c) of the Regulation]

Data processing for marketing purposes

Data processing related to sending newsletters

Data processing takes place for the purpose of sending newsletters.

Processed data

Name, address, email address, telephone number.

Data processing period

until the data subject withdraws consent.

Legal basis for data processing

Voluntary consent given to the data controller by subscribing to the newsletter. [Data processing based on art. 6 sec. 1 letter a) of the Regulation]

Data processing related to sending and displaying personalized advertisements

Data processing takes place for the purpose of sending advertising content in line with the interests of the data subject.

Processed data

Name, address, email address, telephone number.

Data processing period

FansBRANDS® - Official store for motorsport fans

Until consent is withdrawn.

Legal basis for data processing

Voluntary, separate consent given to the data controller when collecting the data. [Data processing pursuant to Article 6(1)(a) of the Regulation].

Remarketing

Data processing takes place as part of remarketing activities, which are possible thanks to cookies.

Processed data

Data processed by cookies is specified in the cookie information.

Data processing period

The period of data storage for a given cookie. More information can be found here:

General information about Google cookies: https://www.google.com/policies/technologies/types/

Google Analytics Information: https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage?hl=hu

Facebook information: https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen

Legal basis for data processing

Voluntary consent of the user given to the data controller by using the website. [Data processing in accordance with Article 6 (1) (a) of the Regulation].

Lotteries

Data processing is carried out for the purpose of conducting the lottery.

Processed data

Name, surname, email address, telephone number.

Data processing period

The data will be deleted after the end of the lottery, with the exception of the winners' data, which the Data Controller is obliged to keep for 8 years in accordance with the Accounting Act.

Legal basis for data processing

Voluntary consent of the user given to the data controller by using the website. [Data processing in accordance with Article 6 (1) (a) of the Regulation].

Additional data processing activities

If the Data Controller intends to conduct further activities related to data processing, it will provide information in advance on the actual circumstances of data processing (legal basis and legal basis for data processing, scope of data processed, period of data processing).

Recipients of personal data

Activities of entities processing data in the scope of storing personal data

Name of the data processor: UNAS Online Kft.

Contact details of the data processor:

Telephone number of the entity processing the data:

E-mail address of the data processor : unas@unas.hu

Headquarters of the data processor: 9400 Sopron, Kőszegi út 14.

Website of the data processor: unas.hu

The data processor stores personal data on the basis of an agreement concluded with the Data Controller. The data processor is not authorized to access personal data.

Name of data processor: Shopify Commerce Singapore Pte. Ltd.

Contact details of the entity processing the data:

Telephone number of the entity processing the data:

E-mail address of the entity processing data :

Registered office of data processor : 77 Robinson Road, #13-00 Robinson 77, Singapore 068896

Website of the data processor : https://www.shopify.com/

The data processor stores personal data on the basis of an agreement concluded with the Data Controller. The data processor is not authorized to access personal data.

Activities of entities processing data related to sending newsletters

Name of the company operating the newsletter system : UNAS Online Kft.

Headquarters of the company operating the newsletter system: 9400 Sopron, Kőszegi út 14.

Telephone number of the company operating the newsletter system :

E-mail address of the company operating the newsletter system : unas@unas.hu

Website of the company operating the newsletter system : unas.hu

The data processor participates in sending newsletters based on an agreement concluded with the Data Controller. As part of this participation, the Data Processor processes the name, surname and address of the data subject to the extent necessary to send newsletters.

Activities of entities processing data related to sending newsletters

Name of the company operating the newsletter system : ActiveCampaign

Headquarters of the company operating the newsletter system: 150 North Michigan Avenue Suite 1230 Chicago, IL 60601 United States

Telephone number of the company operating the newsletter system : +1 (773) 904-0945

Email address of the company operating the newsletter system : privacy@activecampaign.com

Website of the company operating the newsletter system : https://www.activecampaign.com

Activities of entities processing data related to sending newsletters

Name of the company operating the newsletter system: Marketer

Headquarters of the company operating the newsletter system: Romania - Badea Cartan 66, District 2, Bucharest, Office 3, Zone II, Room 2, Bl. 40, Sc.A, Et.5, Ap.26,

Telephone number of the company operating the newsletter system: +40724470432

Email address of the company operating the newsletter system : iam@themarketer.com

Website of the company operating the newsletter system : https://themarketer.com/

Activities of entities processing data related to sending newsletters

Name of the company operating the newsletter system: Klavyio

Headquarters of the company operating the newsletter system: 49 Southwark Bridge Rd London SE1 9HH, United Kingdom

Telephone number of the company operating the newsletter system:

Email address of the company operating the newsletter system : sales@klaviyo.com

Website of the company operating the newsletter system : https://www.klaviyo.com/

Processing of data related to accounting

Name of the entity processing the data: P-Kontroll Bt.

Headquarters of the data processor: 2600 Vác, Pap Béla u. 10.

Telephone number of the entity processing the data: +36-27/316-210

Email address of the data processor : konyveles@pkontroll.hu

Website of the data processor : www.pkontroll.hu

The data processor participates in bookkeeping based on a written agreement concluded with the Data Controller. As part of this participation, the data processor processes the name, surname and address of the data subject, to the extent necessary to maintain accounting documentation, for a period consistent with art. 169 sec. 2 of the Accounting Act, and then immediately deletes them.

Activities of entities processing data related to invoicing

Name of the data processor: Innovip.hu Kft.

Headquarters of the data processor: 6723 Szeged, Gát utca 7/B.

Data processor 's telephone number : +36 20 367 6755 Data processor's e-mail: iroda@innovip.hu Data processor 's website : https://www.innovip.hu/

The Data Processor participates in the registration of accounting documents based on a written agreement concluded with the Data Controller. As part of this participation, the Data Processor processes the name, surname and address of the data subject, to the extent necessary for accounting records, for a period consistent with Article 169 paragraph 2 of the Accounting Act, and then immediately deletes them.

Activities of entities processing data related to invoicing

Name of the entity processing the data: Microsoft Dynamics 365 Business Central

Registered seat of data processor : Microsoft Building 92, NE 36th St, Redmond, WA 98052, United States

Telephone number of the data processor: +1 425-882-8080

Email address of the data processor:

Website of the entity processing the data: https://www.microsoft.com

Activities of entities processing data related to invoicing

Name of the entity processing the data: Odoo SA

Registered office of the data processor: Chaussée de Namur, 40 1367 Grand Rosière Belgium

Telephone number of the data processor : +32 2 616 8002

E-mail of the data processor : privacy@odoo.com

Website of the entity processing the data: https://www.odoo.com/

Activities of entities processing data related to invoicing

Name of the data processor: Billingo Technologies Zrt.

Headquarters of the data processor: 1133 Budapest, Árbóc utca 6.

Telephone number of the data processor: + 36-1/500-9491

E-mail address of the data processor : hello@billingo.hu

Website of the data processor : https://www.billingo.hu/

Activities of entities processing data related to the operation of the CRM system

Name of the data processor: UNAS Online Kft.

Headquarters of the data processor: 9400 Sopron, Kőszegi út 14.

Telephone number of the data processor:

E-mail address of the data processor : unas@unas.hu

Website of the data processor: unas.hu

The Data Processor participates in the registration of orders based on an agreement concluded with the Data Controller. As part of this participation, the Data Processor processes the name and surname, address, telephone number, order numbers and dates of the data subject during the civil limitation period.

Activities of entities processing data related to the operation of the CRM system

Name of the data processor: Innovip.hu Kft.

Headquarters of the data processor: 6723 Szeged, Gát utca 7/B.

Telephone number of the data processor : +36 20 367 6755

E-mail address of the data processor : iroda@innovip.hu

Website of the data processor : https://www.innovip.hu/

Activities of entities processing data related to the operation of the CRM system

Name of the entity processing the data: easySales

Registered seat of the data processor: Locotenent Stefan Marinescu 9, emelet 6, Bucharest - Romania

Data processor 's telephone number : +36213007056 Data processor's e-mail: contact@easy-sales.com Data processor 's website : https://easy-sales.com/hu

Activities of entities processing data related to the operation of the CRM system

Name of the entity processing the data: KOMPaaS.tech Kft

Registered office of the data processor: 1114 Budapest, Kemenes utca 8. félemelet 3. - Magyarország

Data processor telephone number : +36 1 4900999 Data processor email : support@mcntele.com Data processor website : https://kompaas.hu/

Activities of entities processing data related to the operation of the CRM system

Name of the entity processing the data: VIVnetworks.com sro

Registered office of the data processor: Jungmannovo náměstí 18, 110 00 Prague 1

Telephone number of the entity processing the data: +420 734 447 050

E-mail address of the entity processing the data: podpora@vivnetworks.com

Website of the data processor : https://www.vivnetworks.com/hu/

Activities of entities processing data related to the operation of the CRM system

Name of the entity processing the data: SC DECATHLON SRL

Registered office of the data processor: Militari Shopping, Bulevardul Iuliu Maniu 546-560, București 060032 - Romania

Data processor 's telephone number : +40 21 408 5000 Data processor's e-mail: contact@decathlon.ro Data processor 's website : https://www.decathlon.ro/

The data processor participates in the registration of orders on the basis of an agreement concluded with the Data Controller. In

During this participation, the Data Processor processes the name, address, telephone number, order numbers and dates of the data subject within the civil law limitation period.

Activities of entities processing data related to the operation of the CRM system

Name of the entity processing the data: Amazon.com

Registered office of data processor : 410 Terry Ave N, Seattle 98109, WA

Data processor telephone number : +1 (206 ) 266-4064 Data processor email : copyright@amazon.com Data processor website : https://www.amazon.com/

Activities of entities processing data related to the operation of the CRM system

Name of the data processor: Pepita Group Zrt.

Registered office of the data processor: 5520 Szeghalom, belterület hrsz 2619/58

Data processor 's telephone number : +36 1 510 07 60 Data processor's email: segitunk@pepita.hu Data processor 's website : https://pepita.hu/

Processing of data related to online payments

Name of data controller: Worldline SA

Registered office of the data controller: Tour Voltaire, 1 Place des Degrés, CS 81162, 92059 Paris la Défense Cedex

Data administrator telephone number:

Data administrator email:

Website of the data controller: https://www.six-payment-services.com/

The online payment service provider participates in the processing of online payments on the basis of a written agreement with the Data Controller, in order to transfer data to the online payment service provider during the purchasing process. As part of this participation, the online payment service provider processes the name and billing address of the data subject as well as the order number and date, in accordance with its own privacy policy.

Purpose of data transfer: to provide the online payment service provider with the transaction data necessary to execute the payment transaction initiated by the online payment service provider and related to the purchase.

Legal basis: performance of the contract concluded between the user and the Data Controller pursuant to Article 6 paragraph 1 letter b) of the Regulation, which includes payment by the buyer and for which, in the case of online payments, the transfer of data in accordance with this section is required.

Data administrator name: Stripe

Headquarters of the data controller: 354 Oyster Point Boulevard. South San Francisco, CA 94080

Data administrator telephone number: 888-926-2289

Data administrator email:

Website of the data controller: https://stripe.com/

Reliable Shop Program (Megbízható screw)

In order to operate the Megbízható Bolt program of www.arukereso.hu (Online Comparison Shopping Kft. 1074 Budapest, Rákóczi út 70-72., tax number: 24868291-2-42, company registration number: 01-09-186759), the buyer's e-mail address and the name of the purchased product will be transmitted to arukereso.hu . Purpose of data transmission: requesting and displaying customer reviews. Online Comparison Shopping Kft. processes the personal data transmitted in this way in accordance with the data processing and privacy policy of www.arukereso.hu. With respect to the data transmitted in this respect, Online Comparison Shopping Kft. qualifies as the data controller.

Transfer of data to third countries

The data processor below is located outside the European Union and processes data outside the European Union. The data processor is a member of the Privacy Shield list, which means that it ensures that data is processed with the protections provided for in the European Union. More information can be found here: www.privacyshild.gov

The Rocket Science Group LLC (MailChimp)

Cím: 1 North Dearborn Street, 5th floor Chicago, IL 60602 https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active

User rights during data processing

During the period of data processing, the user has the following rights in accordance with the provisions of the Regulation: the right to withdraw consent, access to personal data and information related to data processing, the right to rectify data, restriction of data processing, the right to delete data, the right to object, the right to data portability.

If you wish to exercise your rights, this will require your identification and the Data Controller must necessarily contact you. Therefore, for identification purposes, it will be necessary to provide personal data (but only data already processed by the Data Controller can serve as a basis for identification) and complaints regarding data processing will be available in the user's email account for the period specified in this Privacy Notice on complaints. If you are our customer and wish to identify yourself for the purpose of handling a complaint or managing a guarantee, we ask you to also provide your order ID for identification purposes. In this way, we will be able to identify you as our customer.

The data controller will respond to complaints regarding data processing within 30 days at the latest.

The right to withdraw consent

You have the right to withdraw your consent to the processing of your data at any time, in which case the data provided will be deleted from our system. However, please note that in the case of an order that has not yet been completed, withdrawing your consent may result in us not being able to deliver the order. In addition, if the purchase has already been completed, based on accounting regulations, we cannot remove the date related to invoicing from our systems, and if there is a remaining amount unpaid by you to us, we may process your data even if you withdraw your consent based on our legitimate interest in debt collection.

Access to personal data

The User has the right to obtain from the Data Controller confirmation as to whether or not his/her personal data are being processed and, in such a case, the right to: access the personal data being processed and receive from the Data Controller information on: the purposes of the data processing; the categories of personal data being processed; information on the recipients or categories of recipients to whom the personal data have been or will be disclosed; the envisaged period for which the personal data will be processed or, if this is not possible, the criteria used to determine that period; the existence of the User's right to request the Data Controller to rectify or erase personal data or to limit the processing of personal data relating to the User or to object to such processing; the right to lodge a complaint with a supervisory authority; if the personal data have not been collected from the data subject, any available information on their source; the existence of automated decision-making, including profiling, and, at least in these cases, meaningful information on the logic involved, as well as the significance and envisaged consequences of such processing for the User.

The purpose of exercising these rights may be to determine and verify the lawfulness of data processing, therefore, in the case of repeated requests for information, the Data Controller may charge a fair fee in exchange for providing information.

Access to personal data is provided by the Data Controller by sending the processed personal data and information by e-mail after identifying the user. If the user has registered, we provide access so that he can view and check his personal data by logging into his user account.

The request must state that you are requesting access to your personal data or information about data processing.

Right to rectification

The User has the right to immediately obtain from the data controller the rectification of inaccurate personal data concerning him/her.

The right to restrict data processing

The user has the right to request that the controller restrict the processing of the personal data if one of the following circumstances applies: the accuracy of the personal data is disputed by the user, for a period enabling the controller to verify the accuracy of the personal data, and if the exact data can be immediately determined, then the restriction will not take place; the processing of the personal data is unlawful and the user opposes the deletion of the personal data for any reason (for example, because the data is necessary for the possible assertion of claims) and instead requests the restriction of their use; the controller no longer needs the personal data for the purposes of processing, but they are required by the data subject for the establishment, exercise or defense of legal claims, or if the user has objected to the processing of the data, but the legitimate interest of the controller can also serve as a basis for the processing, the processing of the data must be restricted until it is determined whether the legitimate grounds of the controller override those of the user.

Where processing has been restricted, such personal data, with the exception of storage, may only be processed with the user's consent or for the establishment, exercise or defence of legal claims, or for the protection of the rights of another natural or legal person, or for important reasons of public interest of the Union or a Member State.

The data controller will inform the user before the processing restriction is lifted (at least 3 business days before the restriction is lifted).

The right to delete data - the right to be forgotten

The User has the right to request that the Data Controller delete his/her personal data without undue delay if one of the following circumstances applies: the personal data are no longer necessary for the purposes for which they were collected or otherwise processed by the Data Controller; the User withdraws his/her consent on which the processing is based and there is no other legal basis for the processing; the User objects to the processing based on a legitimate interest and there are no overriding legitimate grounds (i.e. legitimate interest) for the processing; the personal data have been processed unlawfully by the Data Controller, if this has been established on the basis of a complaint; the personal data must be deleted in order to comply with a legal obligation under Union law or the law of the Member State to which the Data Controller is subject.

If the Data Controller, based on any legal basis, has made personal data public and is obliged to delete the personal data due to any of the above grounds, the Data Controller, taking into account available technology and the cost of implementation, will take reasonable steps, including technical measures, to inform other data controllers processing the personal data that the user has requested the deletion by such controllers of any links to, or copies or replications of, that personal data.

Deletion does not apply to the extent that processing is necessary for the exercise of the right to freedom of expression and information or for compliance with a legal obligation which requires processing under Union or Member State law to which the Data Controller is subject (processing in the context of invoicing is one such case, as the storage of the invoice is provided for by law) or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller for the establishment, exercise or defence of legal claims (e.g. if the Data Controller has any claims against the user that have not yet been satisfied or a complaint management process is ongoing).

The right to object

The User has the right to object at any time - for reasons related to his/her particular situation - to the processing of his/her personal data based on legitimate interests. In such a case, the Data Controller will no longer process the personal data unless the Data Controller demonstrates compelling legitimate grounds for processing that override the interests, rights and freedoms of the data subject, or grounds for establishing, pursuing or defending claims.

Where personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing purposes, including profiling, to the extent that it is related to such direct marketing. If you object to the processing for direct marketing purposes, your personal data will no longer be processed for such purposes.

The right to data portability

If the data is processed by automated means or if the data management is based on the voluntary consent of the user, the user has the right to request the Data Controller to provide him with the data that the Data Controller will send to the user in xml, JSON or csv format and, if technically feasible, the user may request that the Data Controller transmit the data in this form to another data controller.

Automated decision making

The User has the right not to be subject to a decision based solely on automated processing (including profiling) which produces legal effects for him or her or significantly affects him or her in a similar manner. In such cases, the data controller shall implement appropriate measures to protect the rights and freedoms of the data subject and his or her legitimate interests, including at least the right to obtain human intervention on the part of the controller, to express his or her own point of view and to contest the decision.

The above does not apply if the decision

is necessary for the conclusion and performance of a contract between the user and the Data Controller;

is permitted by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard the rights and freedoms and legitimate interests of the user; lua is based on the user's explicit consent.

Reporting to the data protection registration system

According to the Privacy Act, the Data Controller must report certain data processing activities to the data protection registration system. This reporting obligation expired on May 25, 2018.

Registration number with NAIH (Hungarian National Authority for Data Protection and Freedom of Information) before 25 May 2018:

Data protection registration number : NAIH-103878/2016

Data security measures

The Data Administrator declares that it has taken appropriate security measures to protect personal data against unauthorized access, alteration, transfer, disclosure, deletion or destruction, as well as against accidental destruction and damage, as well as against loss of access due to changes in the technology used.

The Data Controller will make every effort within its organizational and technical capabilities to ensure that its data processors also apply appropriate data security measures when working with your personal data.

Remedies

If, in the user's opinion, the data controller has violated a legal provision on data processing or has failed to comply with any of the user's requests, the user may initiate an investigation procedure with the Hungarian National Office for Data Protection and Freedom of Information (mailing address:

H-1363 Budapest, Pf. 9., e-mail: ugyfelszolgalat@naih.hu, telephone numbers: +36 (30) 683-5969; +36 (30) 549-6838; +36 (1) 391 1400).

We also inform you that in the event of a breach of legal provisions regarding data processing or if the Data Controller fails to comply with any of the user's requests, the user may bring a civil lawsuit against the Data Controller in court.

Changes to privacy policy

The Data Controller reserves the right to change this information on data management in a way that does not affect the purpose and legal basis of data processing. Using the website after the change has entered into force means acceptance of the changed Privacy Notice.

If the Data Controller wishes to carry out further processing of the collected data for a purpose other than the purpose of its collection, the Data Controller shall inform the user before the commencement of further processing of the data about the purpose of the processing and the following information the envisaged period for which the personal data will be processed or, if this is not possible, the criteria used to determine this period the existence of the user's right to request from the Data Controller access to, rectification, erasure or restriction of processing of the personal data concerning the user, or to object to such processing in the case of processing based on a legitimate interest, or to request the provision of data portability in the case of processing based on consent or a contractual relationship in the case of processing based on consent, the right to withdraw consent at any time, the right to lodge a complaint with a supervisory authority whether the provision of the personal data results from legal provisions or a contractual obligation or is a condition for entering into a contract, and whether the user is obliged to provide the personal data and the possible consequences of not providing the data the existence of automated decision-making, including profiling, and, at least in these cases, meaningful information on the logic involved, as well as the significance and envisaged consequences of such processing for the user.

Data processing can only begin after this time and, in the case of data processing based on consent, in addition to providing the above information, the user's consent to data processing will also be required.