Privacy Policy

Date of receipt: 2024-04-19

Data controller

Name : Pit Box Kft .

Registered office: 2600 Vác, Rózsa utca 3/A 1em. 2 ajt.

Postal address, complaint handling: 2600 Vác, Rózsa utca 3/A 1em. 2ajt.

Email: sales@fansbrands.com

Telephone number : +420 ( 2 ) 288 814 19

Website : https://fansbrands.cz/

Hosting service provider

Name : UNAS Online Kft.

Postal address: Kőszegi út 14.

Email: unas@unas.hu

Telephone number:

Name : Shopify Commerce Singapore Pte. Ltd.

Postal Address : Robinson Road 77, # 13-00 Robinson 77, Singapore 068896

E-mail:

Phone number :

Description of data processing activities carried out within the framework of the operation of the online store

This document contains all relevant information on data processing related to the operation of the online store in accordance with the General Data Protection Regulation of the European Union (2016/679) (hereinafter referred to as: the Regulation or GDPR) and Act CXII of 2011 (hereinafter referred to as: the Personal Data Protection Act).

Information about the use of cookies

What is a cookie?

When you visit the website, the data controller uses cookies. A cookie is an information package consisting of letters and numbers that our website sends to your browser to save certain settings, make our website easier to use, and help us collect relevant statistical information about our visitors.

Some cookies do not contain personal data and are not suitable for identifying individual users, but some cookies contain a unique identifier, i.e. a randomly generated secret sequence of numbers that will be stored on your device and thus ensure your identification. The duration of each cookie is indicated in the relevant description.

Legal background and legal reasons for cookies:

The legal basis for processing is your consent pursuant to Article 6(1)(a) of the Regulation.

Main characteristics of cookies used on the website: Strictly necessary cookies:

If you do not agree to the use of cookies, some features will not be available to you.

Strictly Necessary Cookies : These cookies are essential for the use of the website and enable the use of basic website functions. In the absence of these cookies, several website functions will not be available to you. The lifespan of these cookies is limited solely to the duration of the session.

Session cookies: These cookies store the user's location, browser language, and payment currency. They last until the browser is closed or for a maximum of 2 hours.

Age - restricted content cookies: These cookies record the fact that age - restricted content has been approved and that the person is over 18 years old, their lifespan lasts until the browser is closed.

Product recommendation cookies: For the "Recommend to a friend" feature, records a list of products to recommend. Their lifespan is 60 days.

Mobile version, design cookies : On a mobile device , it detects the device the visitor is using and switches to full view. Their lifespan is 365 days.

Cookies for accepting cookies : When you arrive at the site , you will accept the cookie statement in the appropriate window. Their lifespan is 365 days.

Exit #2 cookies: Logs out the visitor after 90 days according to option #2. Their lifespan is 90 days.

Backend identifier cookies : An identifier of the backend server that serves the site. They last until the browser is closed.

Statistical cookies:

Google Analytics Cookies: Google Analytics is an analytics tool from Google that allows website and app owners to get a more accurate picture of their visitors' activities. The service may use cookies to collect information and create reports with statistical data about website usage without the need to individually identify visitors to Google. Google Analytics primarily uses " ga" cookies. In addition to reporting statistical data about website usage, Google Analytics, together with the advertising cookies described above, may also be used to display more relevant ads in Google products (e.g. Google search) and on the web.

Cookies to improve user experience : These cookies collect information about how a user uses a website, such as which pages the user visits most often or what error messages the user receives from the website. These cookies do not collect information that identifies the visitor , that is, they work with completely general, anonymous information. They use the data obtained from this information to improve the performance of the website. The lifespan of these cookies is limited solely to the duration of the session.

Referral cookies: Record the external website from which the visitor came to the site. They last until the browser is closed.

Last Viewed Cookies : Records the product the visitor last viewed. Their lifespan is 60 days.

Last viewed category cookies: Records the last viewed category. Their lifespan is 60 days.

Cart cookies : Records of products added to the cart. Their lifespan is 365 days.

Smart offer cookies : Records the conditions for displaying smart offers (e.g. whether the visitor has already been to the site, whether they have an order). Their lifespan is 30 days.

Marketing cookies:

Google Adwords Cookies When someone visits our website, the visitor's cookie identifier will be added to a remarketing list. Google uses cookies - such as NID and SID cookies - across Google products, for example to personalize the ads displayed on Google Search. For example, Google uses these cookies to remember your previous searches, interactions with certain advertisers' ads or search results, or visits to advertisers' websites. AdWords uses cookies for conversion tracking. To track sales and other conversions resulting from advertising, cookies are stored on the user's computer when the user clicks on an ad. Some common uses of cookies are: to select ads that are relevant to the user, to improve campaign performance reports, and to prevent the user from seeing ads that the user has already seen.

Remarketing cookies: These cookies may be displayed to previous visitors or users when they browse other websites on our website.

on the Google Display Network or search for terms related to its products or services.

Facebook pixel (Facebook cookies) Facebook pixel is a code that allows websites to prepare a conversion report, create target groups and provide website owners with detailed analysis of website usage by visitors. Facebook pixel allows you to display personalized ads to website visitors on the Facebook platform. You can read Facebook's privacy policy here: https://www.facebook.com/privacy/explanation.

For more information about deleting cookies, please visit the following links:

Internet Explorer: http://windows.microsoft.com/en-us/internet-explorer/delete-manage-cookies#ie=ie-11 Firefox: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer

Mozilla: https://support.mozilla.org/hu/kb/weboldalak-altal-elelézyett-sutik-torlese-szamito

Safari: https://support.apple.com/guide/safari/manage-cookies-and-website-data-sfri11471/mac Chrome: https://support.google.com/chrome/answer/95647

Edge: https://support.microsoft.com/hu-hu/help/4027947/microsoft-edge-delete-cookies

Data processed for the purpose of concluding and fulfilling a contract

Several cases of data processing may occur for the purpose of concluding and fulfilling the contract. We hereby inform you that data processing related to complaint handling and administration related to warranty rights will only be carried out if you exercise one of the rights listed.

If you do not make a purchase through the online store, but only come as a visitor, the provisions on data processing for marketing purposes may apply to you if you give us your consent for marketing purposes.

The data processing activities for the purpose of concluding and performing the contract in detail are:

Contact

For example, if you contact us via email, contact form or by phone with a question about a product. Prior contact is not necessary, you can order from the online store at any time if it is out of stock.

Processed data

Data you provided when contacting us.

Data processing time

We process the data only until the contact is terminated.

Legal basis for data processing

Your voluntary consent given to the data controller by contacting us. [Data processing pursuant to Article 6(1)(a) of the Regulation].

Website registration

By storing the data provided during registration, the data controller can provide more convenient services (e.g. the data subject will not have to provide their data every time they make a purchase on the website). Registration is not a condition for concluding a contract

Processed data

FansBRANDS® - The official fan store for motorsport

When processing data, the data controller processes your name, address, telephone number, email address, characteristics of the purchased products and date of purchase.

Data processing time

FansBRANDS® - The official fan store for motorsport

Until you withdraw your consent.

Legal basis for data processing

Your voluntary consent given to the data controller upon registration. [Data processing pursuant to Article 6(1)(a) of the Regulation].

Order processing

Data processing activities within the framework of order management that are necessary for the purposes of contract performance.

Processed data

FansBRANDS® - The official fan store for motorsport

When processing data, the data controller processes your name, address, email address, characteristics of the purchased products, order number and date of purchase.

If you place an order in the online store, the processing and provision of data is necessary for the performance of the contract.

Data processing time

FansBRANDS® - The official fan store for motorsport

We process the data for a period of 5 years in accordance with the civil law statute of limitations.

Legal basis for data processing

Performance of the contract. [Data processing pursuant to Article 6(1)(b) of the Regulation].

Issuing an invoice

The data processing is carried out for the purpose of issuing an invoice in accordance with the law and fulfilling the obligation to keep accounting documents. According to Section 169, paragraphs 1 to 2 of the Accounting Act, economic organizations must keep accounting documents that directly and indirectly support accounting records.

Processed data

FansBRANDS® - The official fan store for motorsport

Name, address, email address, phone number.

Data processing time

According to paragraph 2 of Section 169 of the Accounting Act, issued invoices must be kept for a period of 8 years from their issuance.

Legal basis for data processing

According to Section 159(1) of Act CXXVII of 2007 on Value Added Tax, issuing an invoice is mandatory.

and according to Section 169(2) of the Accounting Act, issued invoices must be kept for a period of 8 years. [Data processing pursuant to Article 6(1)(c) of the Regulation].

Processing of data related to the delivery of products

The data is processed for the purpose of delivering the ordered product.

Processed data

FansBRANDS® - The official shop for motorsport fans Name, address, email address, telephone number. Data processing time

FansBRANDS® - The official fan store for motorsport

The data is processed for the purpose of delivering the ordered product.

Legal basis for data processing

Performance of the contract. [Data processing pursuant to Article 6(1)(b) of the Regulation].

Recipients and processors of data for the delivery of goods

Recipient 's name : GLS General Logistics Systems Hungary Csomag-Logisztikai Kft.

Address of recipient: 2351 Alsonémedi, GLS Europe u. 2.

Recipient 's phone number : 06-29-88-67-00

Recipient 's email address : info@gls-hungary.com

Recipient 's website : https://gls-group.eu/HU/hu/home

The courier service participates in the delivery of the ordered product on the basis of a contract concluded with the data controller. The courier service processes the data provided to it in accordance with the personal data protection principles available on its website.

Receiver Name: UPS

Recipient's location: Atlanta, United States.

Recipient's phone number : +36 1 877 0000

Recipient 's email address : https://www.ups.com/upsemail/input?loc=hu_HU

Recipient 's website : https : //www.ups.com/

Management of warranty and guarantee claims

Regarding rights under warranty and guarantee, we must proceed in accordance with Decree 19/2014. (IV. 29.) of the Minister of National Economy, which determines the method of administering these claims.

Processed data

FansBRANDS® - The official fan store for motorsport

Regarding rights under the guarantee and liability, we must proceed according to Decree 19/2014. (IV. 29.) of the Minister of National Economy.

According to the decree, we must make a record of the notified guarantee or warranty claim, in which we will make an entry:

your name, address and a statement that you agree to the processing of your data listed in the record in accordance with the decree,
the name and purchase price of the tangible object sold under the contract concluded between us,
date of contract performance,
date of reporting the defect,
description of the defect,
the right you wish to exercise based on your right to a guarantee or warranty, and
the method of handling a warranty or guarantee claim or the justification for denying the right to be exercised based on the claim.

If we take over the product you purchased from us, we must issue you with a receipt, which must contain the following information:

your name and address,
data necessary to identify the object,
date of receipt of the item and
the date when you can take over the repaired object.

Data processing time

FansBRANDS® - The official fan store for motorsport

The entrepreneur is obliged to keep the record of the consumer's warranty or post-warranty claim for three years from the date of the record and to submit it in this context at the request of the supervisory authority.

Legal basis for data processing

The legal basis for data processing is compliance with the legal obligations set out in Decree 19/2014 (IV. 29.) of the Minister of National Economy [paragraph (1) of Section 4 and paragraph (1) of Section 6] [Data processing pursuant to Article 6(1)(c) of the Regulation].

Resolving other consumer protection complaints

The data processing is carried out for the purpose of handling complaints regarding consumer protection. If you contact us with a complaint, the processing and provision of data will be unavoidable.

Processed data

FansBRANDS® - The official fan store for motorsport

Buyer's name, phone number, email address, content of the complaint.

Data processing time

FansBRANDS® - The official fan store for motorsport

Consumer complaints are kept for 3 years under the Consumer Protection Act.

Legal basis for data processing

You may voluntarily decide whether to make a complaint to us, but if you do, we are required to retain your complaint for 3 years pursuant to paragraph (7) of Section 17/A of the Consumer Protection Act CLV of 1997 [Processing of data pursuant to Article 6(1)(c) of the Regulation].

Data processed in connection with the verifiability of consent

When registering, ordering or subscribing to a newsletter, the IT system stores data related to consent for record-keeping purposes.

Processed data

FansBRANDS® - The official fan store for motorsport

Date of consent and IP address of the data subject.

Data processing time

FansBRANDS® - The official fan store for motorsport

To comply with legal regulations, consent must be verifiable at a later date, therefore the data is retained for the period of limitation following the termination of data processing.

Legal basis for data processing

This obligation is set out in Article 7(1) of the Regulation [Processing of data pursuant to Article 6(1)(c) of the Regulation].

Data processing for marketing purposes

Processing of data related to sending newsletters

Data processing is carried out for the purpose of sending newsletters.

Processed data

FansBRANDS® - The official shop for motorsport fans Name, address, email address, telephone number. Data processing time

FansBRANDS® - Official Motorsport Fan Shop Until the data subject withdraws their consent. Legal basis for data processing

Your voluntary consent given to the data controller by subscribing to the newsletter. [Data processing pursuant to Article 6(1)(a) of the Regulation].

Processing of data related to sending and displaying personalized advertisements

The data processing is carried out for the purpose of sending advertising content in accordance with the scope of interest of the data subject.

Processed data

FansBRANDS® - The official shop for motorsport fans Name, address, email address, telephone number. Data processing time

FansBRANDS® - The official fan store for motorsport

Until you withdraw your consent.

Legal basis for data processing

Your voluntary, independent consent given to the data controller when collecting data. [Data processing pursuant to Article 6(1)(a) of the Regulation].

Remarketing

Data processing is carried out within the framework of remarketing, which is enabled by cookies.

Processed data

FansBRANDS® - The official fan store for motorsport

Data processed by cookies defined in the cookie notice.

Data processing time

The duration of data storage by a given cookie. More information is available here:

General information about Google cookies: https://www.google.com/policies/technologies/types/

Google Analytics information: https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage?hl=hu

Facebook information: https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen

Legal basis for data processing

Your voluntary consent given to the data controller when using the website. [Data processing pursuant to Article 6(1)(a) of the Regulation].

Bets

The data processing is carried out for the purpose of running the lottery.

Processed data

FansBRANDS® - The official fan store for motorsport

Name, email address, phone number.

Data processing time

FansBRANDS® - The official fan store for motorsport

The data will be deleted after the lottery ends, with the exception of the winners' data, which the data controller is obliged to retain for 8 years according to the Accounting Act.

Legal basis for data processing

Your voluntary consent given to the data controller when using the website. [Data processing pursuant to Article 6(1)(a) of the Regulation].

Other data processing activities

If the data controller intends to carry out further data processing activities, it shall provide information in advance about the actual circumstances of the data processing (legal background and legal basis for data processing, scope of data processed, duration of data processing).

Recipients of personal data

Activities of data processors when storing personal data

Name of the data processor : UNAS Online Kft.

Contact details of the data processor:

Telephone number of the data processor :

Data processor email : unas@unas.hu

Registered office of the data processor: 9400 Sopron, Kőszegi út 14.

Data processor website: unas.hu

The data processor stores personal data on the basis of a contract concluded with the data controller. The data processor is not authorized to access personal data.

Name of data processor : Shopify Commerce Singapore Pte . Ltd.

Contact details of the data processor :

Telephone number of the data processor :

Data processor email :

Registered office of the data processor : 77 Robinson Road, #13-00 Robinson 77, Singapore 068896.

Data processor website : https://www.shopify.com/

The data processor stores personal data on the basis of a contract concluded with the data controller. The data processor is not authorized to access personal data.

Data processors' activities related to sending newsletters

Name of the company operating the newsletter system : UNAS Online Kft .

Registered office of the company operating the information system: 9400 Sopron, Kőszegi út 14.

Telephone number of the company that operates the newsletter system :

E - mail address of the company operating the newsletter system : unas@unas.hu

Website of the company operating the newsletter system : unas.hu

The data processor participates in sending newsletters on the basis of a contract concluded with the data controller. As part of this participation, the data processor processes the name and address of the data subject to the extent necessary for sending the newsletters.

Data processors' activities related to sending newsletters

Name of the company that operates the newsletter system : ActiveCampaign

Registered office of the company operating the newsletter system : 150 North Michigan Avenue Suite 1230 Chicago, IL 60601 United States

Phone number of the company that operates the newsletter system : +1 ( 773 ) 904-0945

Email address of the company operating the newsletter system : privacy@activecampaign.com

Website of the company operating the newsletter system : https : //www.activecampaign.com

Data processors' activities related to sending newsletters

Name of the company operating the newsletter system: The Marketer

Registered office of the company operating the newsletter sending system : Badea Cartan 66 , District 2, Bucharest , Office 3 , Zone II, Room 2 , Bl. 40, Sc.A, Et.5, Ap.26,

Telephone number of the company that operates the newsletter system: +40724470432

Email address of the company operating the newsletter system : iam@themarketer.com

Website of the company operating the newsletter system : https : //themarketer.com/

Data processors' activities related to sending newsletters

Name of the company that operates the newsletter system: Klavyio

Registered office of the company operating the newsletter sending system : 49 Southwark Bridge Rd London SE1 9HH , UK

Telephone number of the company that operates the newsletter system:

Email address of the company operating the newsletter system : sales@klaviyo.com

Website of the company operating the newsletter system : https : //www.klaviyo.com/

Processing of accounting-related data

Name of the data processor : P - Kontroll Bt.

Registered office of the data processor: 2600 Vác, Pap Béla u. 10.

Telephone number of the data processor : + 36-27/ 316-210

Data processor email : konyveles@pkontroll.hu

Website of the data processor : www.pkontroll.hu

The Data Processor participates in the accounting process on the basis of a written contract concluded with the Data Controller. As part of this participation, the Data Processor processes the name and address of the data subject to the extent necessary for accounting records for a period in accordance with paragraph 2 of Section 169 of the Accounting Act and deletes them immediately thereafter.

Data processors' activities related to billing

Name of the data processor : Innovip.hu Kft.

Registered office of the data processor: 6723 Szeged, Gát utca 7/B.

Data processor 's phone number : + Data processor 's email : iroda@innovip.hu Data processor 's website : https : //www.innovip.hu/

The Data Processor participates in the recording of accounting documents on the basis of a written contract concluded with the Data Controller. As part of this participation, the Data Processor processes the name and address of the data subject to the extent necessary for accounting records for a period in accordance with paragraph 2 of Section 169 of the Accounting Act and deletes them immediately thereafter.

Data processors' activities related to billing

Name of data processor : Microsoft Dynamics 365 Business Central

Data Processor's Headquarters : Microsoft Building 92, NE 36th St, Redmond, WA 98052 , United States.

Data Processor Telephone Number : +1 425-882-8080

Data processor email:

Data processor website : https://www.microsoft.com

Data processors' activities related to billing

Name of data processor : Odoo SA

Registered office of the data processor: Rosière Belgium: Chaussée de Namur, 40 1367 Grand Rosière Belgium

Telephone number of the data processor : +32 2 616 8002

Data processor email : privacy@odoo.com

Data processor website : https://www.odoo.com/

Data processors' activities related to billing

Name of data processor : Billingo Technologies Zrt.

Registered office of the data processor: 1133 Budapest, Árbóc utca 6.

Telephone number of the data processor : + 36-1/ 500-9491

Data processor email : hello@billingo.hu

Data processor website : https://www.billingo.hu/

Data processors' activities related to the operation of the CRM system

Name of the data processor : UNAS Online Kft.

Registered office of the data processor: 9400 Sopron, Kőszegi út 14.

Data processor telephone number:

Data processor email : unas@unas.hu

Data processor website: unas.hu

The data processor participates in the registration of orders on the basis of a contract concluded with the data controller. As part of this participation, the data processor processes the name, address, telephone number, order numbers and dates of the data subject, within the civil statute of limitations.

Data processors' activities related to the operation of the CRM system

Name of the data processor : Innovip.hu Kft.

Registered office of the data processor: 6723 Szeged, Gát utca 7/B.

Telephone number of the data processor : +36 20 367 6755

Data processor email : iroda@innovip.hu

Data processor website : https://www.innovip.hu/

Data processors' activities related to the operation of the CRM system

Name of data processor : easySales

Registered office of the data processor: Stefan Marinescu 9, emelet 6, Bucharest - Romania.

Data processor 's phone number : + Data processor 's email : contact@easy-sales.com Data processor 's website : https : //easy-sales.com/hu

Data processors' activities related to the operation of the CRM system

Name of the data processor : KOMPaaS.tech Kft

Headquarters of the data processor: 1114 Budapest, Kemenes utca 8. félemelet 3. - Magyarország

Data processor phone number : + Data processor email : support@mcntele.com Data processor website : https://kompaas.hu/

Data processors' activities related to the operation of the CRM system

Name of data processor : VIVnetworks.com sro

Registered office of the data processor: Jungmannovo náměstí 18, 110 00 Prague 1

Telephone number of the data processor : +420 734 447 050

Data processor email : support@vivnetworks.com

Data processor website : https://www.vivnetworks.com/hu/

Data processors' activities related to the operation of the CRM system

Name of the data processor : SC DECATHLON SRL

Registered office of the data processor: Bulevardul Iuliu Maniu 546-560, București 060032 - Romania.

Data processor 's phone number : +40 21 408 5000 Data processor 's email : contact@decathlon.ro Data processor 's website : https://www.decathlon.ro/

The data processor participates in the registration of orders on the basis of a contract concluded with the data controller. In

During this participation, the processor processes the name, address, telephone number, order numbers and data of the data subject, within the civil statute of limitations.

Data processors' activities related to the operation of the CRM system

Name of data processor : Amazon.com

Data Processor's Registered Office : 410 Terry Ave N, Seattle 98109 , WA

Data Processor Phone Number : + ( 206 ) 266-4064 Data Processor Email : copyright@amazon.com Data Processor Website : https://www.amazon.com/

Data processors' activities related to the operation of the CRM system

Name of data processor : Pepita Group Zrt.

Registered office of the data processor: 5520 Szeghalom, belterület hrsz 2619/58

Data processor phone number : +36 1 510 07 60 Data processor email : segitunk@pepita.hu Data processor website : https://pepita.hu/

Processing of data related to online payments

Name of data controller : Worldline SA

Registered office of the data controller: 1 Place des Degrés, CS 81162, 92059 Paris la Défense Cedex.

Data controller telephone number:

Data controller email :

Website of the data controller : https://www.six-payment-services.com/

The online payment service provider participates in the processing of online payments on the basis of a written contract with the data controller, for which purpose data is transferred to the online payment service provider during the purchase process. As part of this participation, the online payment service provider processes the name and address of the data subject for billing purposes, as well as the order number and date, within the framework of its own data protection policy.

Purpose of data transfer: to provide the online payment service provider with transaction data necessary for a payment operation initiated with the online payment service provider and related to a purchase.

Legal basis: performance of a contract concluded between you and the data controller pursuant to Article 6(1)(b) of the Regulation, which includes a payment by the buyer and for which, in the case of online payment, the transfer of data pursuant to this section is required.

Name of the data controller: Stripe

Address of the data controller : 354 Oyster Point Boulevard. South San Francisco , CA 94080

Telephone number of the data manager : 888-926-2289

Data controller email:

Website of the data controller : https://stripe.com/

Reliable shop program (Megbízháto bolt)

In order to operate the Megbízható Bolt program of www.arukereso.hu (Online Comparison Shopping Kft. 1074 Budapest, Rákóczi út 70-72., tax number: 24868291-2-42, company registration number: 01-09-186759), the buyer's email address and the name of the purchased product will be transferred to arukereso.hu . Purpose of the transfer: to request and display customer feedback. Online Comparison Shopping Kft. processes the personal data transferred in this way in accordance with the Personal Data Processing and Privacy Policy of www.arukereso.hu. With regard to the data transferred in this scope, Online Comparison Shopping Kft. qualifies as a data controller.

Transfer of data to third countries

FansBRANDS® - Official Motorsport Store

The following processor is located outside the European Union and processes data outside the European Union. This processor is a member of the Privacy Shield list, which means that it ensures that data is processed with the safeguards provided in the European Union. Further information is available here: www.privacyshild.gov

The Rocket Science Group LLC (MailChimp)

Address: 1 North Dearborn Street, 5th floor Chicago, IL 60602 https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active

Your rights during data processing

During the processing of your data, you are entitled to the following rights under the provisions of the regulation:

right to withdraw consent

access to personal data and information related to data processing; right to rectification.

restriction of data processing, right to erasure.

right to object

the right to data portability.

If you wish to exercise your rights, this will require your identification and the Data Controller must necessarily communicate with you. Therefore, for identification purposes, it will be necessary to provide personal data (however, only your data already processed by the Data Controller can serve as the basis for identification) and your complaints regarding the processing of data will be available in your email account within the period specified in this Privacy Notice regarding complaints. If you have been our customer and want to identify yourself for the purposes of

For example, when handling complaints or managing a warranty, please also enter your order ID for identification. This way we can identify you as our customer.

The data controller will respond to complaints regarding data processing within 30 days at the latest.

Right to withdraw consent

You have the right to withdraw your consent to the processing of your data at any time, in which case the data provided will be deleted from our system. However, please note that in the case of an order that has not yet been processed, the withdrawal of consent may result in us not being able to complete the delivery of your order. Furthermore, if the purchase has already been completed, we cannot delete billing-related data from our systems due to accounting regulations, and if we have an unpaid amount, we may process your data even if you withdraw your consent based on a legitimate interest in debt collection.

Access to personal data

You have the right to obtain from the data controller confirmation as to whether your personal data is being processed, and in such a case you have the right to:

and obtain access to the personal data being processed, and

and receive information from the data controller about the following: the purposes of data processing;

the categories of personal data processed;

information about the recipients or categories of recipients to whom the personal data have been or will be disclosed;

the expected period of processing of the personal data, or, if this is not possible, the criteria used to determine this period;

the existence of your right to request from the data controller the rectification or erasure of personal data or the restriction of the processing of personal data concerning you, or to object to such processing;

the right to file a complaint with a supervisory authority;

where the personal data are not obtained from the data subject, all available information about their source;

the existence of automated decision-making, including profiling, and at least in these cases, meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for you.

The purpose of exercising these rights may be to determine and verify the lawfulness of data processing, therefore, in the event of repeated requests for information, the data controller may charge a reasonable fee for providing the information.

Access to personal data is provided by the data controller by sending you the processed personal data and information by e-mail after your identification. If you have registered, we provide you with access to view and control your personal data by logging into your user account.

In your request, please indicate that you are requesting access to personal data or information about data processing.

Right to correction

You have the right to request from the data controller the immediate correction of inaccurate personal data concerning you.

Right to restriction of data processing

You have the right to request from the controller restriction of processing if one of the following conditions applies:

you contest the accuracy of the personal data, for a period that allows the data controller to verify the accuracy of the personal data, and if the accuracy of the data can be ascertained immediately, then without limitation.

will take place;

the processing of the data is unlawful and you do not agree to the deletion of the personal data for any reason (for example, because the data is necessary for the exercise of a claim) and request the restriction of its use;

the controller no longer needs the personal data for the purposes of the processing, but the data subject requires them for the establishment, exercise or defence of legal claims, or

If you have objected to the processing of the data, but the legitimate interest of the data controller may also be a reason for the processing, the processing of the data must be restricted until it is determined whether the legitimate grounds of the data controller override the legitimate grounds relied on by you.

If processing has been restricted, these personal data, with the exception of their storage, are processed only with your consent or for the purpose of establishing, exercising or defending legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

The data controller will inform you before lifting the processing restriction (at least 3 working days before lifting the restriction).

Right to erasure - right to be forgotten

You have the right to obtain from the controller the erasure of personal data concerning you without undue delay where one of the following reasons applies:

the personal data are no longer necessary for the purposes for which they were collected or otherwise processed by the data controller;

you withdraw your consent on which the processing is based and there is no other legal ground for the processing;

you object to processing based on legitimate interest and there are no overriding legitimate reasons for the processing (i.e. legitimate interest),

personal data were processed unlawfully by the data controller, if this was established based on a complaint,

the personal data must be erased for compliance with a legal obligation laid down in Union or Member State law to which the data controller is subject.

Where the data controller has made the personal data public on any lawful basis and is obliged to erase the personal data for one of the reasons mentioned above, the data controller, taking into account available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform other data controllers processing the personal data that you have requested the erasure of any links to, or copies or replications of, those personal data by such controllers.

Erasure does not apply to the extent that processing is necessary:

for exercising the right to freedom of expression and information;

or compliance with a legal obligation which requires processing under Union or Member State law to which the controller is subject (processing of data in the context of invoicing is one of these cases, as the retention of the invoice is required by law), or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;

for the establishment, exercise or defence of legal claims (e.g. if the data controller has any claims against you that have not yet been satisfied or if a complaint procedure is ongoing).

Right to object

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on legitimate interests. In such a case, the data controller will no longer process these data.

personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defence of legal claims.

If personal data are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing purposes, including profiling to the extent that it is related to such direct marketing. If you object to processing for direct marketing purposes, the personal data will no longer be processed for such purposes.

Right to data portability

If the data processing is carried out by automated means or if the data management is based on your voluntary consent, you have the right to request the data controller to provide you with the data you have provided to him/her and which the data controller will send to you in an xml, JSON or csv format available to you and, if technically feasible, you may request that the data controller transmit the data in this form to another data controller.

Automated decision-making

You have the right not to be subject to a decision based solely on automated processing (including profiling) which produces legal effects concerning you or similarly significantly affects you. In such cases, the data controller shall implement suitable measures to safeguard the rights and freedoms and legitimate interests of the data subject, at least the right to obtain human intervention on the part of the controller, to express his or her point of view and to contest the decision.

The above does not apply if the decision:

it is necessary for the conclusion and performance of a contract between you and the data controller;

is permitted by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or

is based on your explicit consent.

Reporting to the data protection registration system

Under the Personal Data Protection Act, data controllers must report certain data processing activities to the data protection registration system. This reporting obligation ended on 25 May 2018.

Registration number with the NAIH (Hungarian National Office for Data Protection and Freedom of Information) until May 25, 2018:

Registration number for the protection of personal data : NAIH - 103878 / 2016

Data security measures

The Data Controller declares that it has taken appropriate security measures to protect personal data against unauthorized access, alteration, transfer, disclosure, deletion or destruction, as well as against accidental destruction and damage, as well as against inaccessibility due to changes in the technologies used.

The Data Controller will do everything within its organizational and technical capabilities to ensure that its data processors also take appropriate data security measures when working with your personal data.

Remedies

If, in your opinion, the data controller has violated the legal provisions regarding data processing or has failed to comply with any of your requests, you may initiate an investigation procedure with the Hungarian National Office for Data Protection and Freedom of Information (mailing address:

H-1363 Budapest, Pf. 9., e-mail: ugyfelszolgalat@naih.hu, telephone numbers: +36 (30) 683-5969 +36 (30) 549-6838;

+36 (1) 391 1400).

We would also like to inform you that in the event of a violation of data processing legislation or if the data controller has failed to comply with any of your requests, you may file a civil lawsuit against the data controller in court.

Change in privacy policy

The Data Controller reserves the right to amend this data protection information in such a way that the purpose and legal basis of the data processing are not affected. By using the website after the change comes into effect, you agree to the amended data protection information.

If the data controller wishes to carry out further data processing in relation to the collected data for a purpose other than the purpose for which it was collected, it will inform you of the purpose of the data processing and the following information before commencing further data processing:

the expected period of processing of the personal data, or, if this is not possible, the criteria used to determine this period;

the existence of your right to request from the data controller access to personal data, their rectification or erasure or restriction of processing of personal data concerning you, or to object to such processing in the case of data processing based on legitimate interest, or to request data portability in the case of data processing based on consent or a contractual relationship;

in the case of data processing based on consent, that you can withdraw your consent at any time, the right to lodge a complaint with a supervisory authority;

whether the provision of personal data is based on legal regulations or contractual obligations or is a prerequisite for concluding a contract, and whether you are obliged to provide personal data and what possible consequences may arise from failure to provide data;

Data processing can only begin then, and in the case of data processing based on consent, your consent to data processing will be required in addition to providing the above information.