DATA PROTECTION NOTICE

in which we inform you, as a visitor of our website and a user of our services, about our company's data management and data protection rules.

1. What basic principles do we follow during our data management?

Our company follows the following basic principles in its data management:

  • we handle personal data legally and fairly, as well as transparently for you.
  • we only collect personal data for specific, clear and legitimate purposes and do not process them in a way that is incompatible with the purposes.
  • the personal data we collect and manage are appropriate and relevant for the purposes of data management and are limited to what is necessary.
  • Our company takes all reasonable measures to ensure that the data we manage is accurate and, if necessary, up-to-date, and inaccurate personal data is deleted or corrected immediately.
  • we store personal data in such a way that you can only be identified for the time necessary to achieve the goals of personal data management.
  • by applying appropriate technical and organizational measures, we ensure adequate security of personal data against unauthorized or illegal processing, accidental loss, destruction or damage.
  • Our company your personal data
  • based on your prior information and voluntary consent and only to the extent necessary and in all cases for a specific purpose, i.e. we collect, record, systematize, store and use it.
  • in some cases, the processing of your data is based on legal regulations and is mandatory, in such cases we draw your attention to this fact.
  • and in certain cases, our Company or a third party has a legitimate interest in the management of your personal data, for example the operation, development and security of our website.

2. Who are we?

Company name: Üveges Anna Rebeka
Headquarters: 1041 Budapest, Károlyi István u. 27-29. 1st lph. 1st em. 6 a.
Website: https://uvegesanna.hu
Postal address: 1041 Budapest, Károlyi István u. 27-29. 1st lph. 1st em. 6 a.
E-mail address: info@uvegesanna.hu
Tax number: 59444615-1-41

Based on Article 37 of the GDPR, our company is not obliged to appoint a data protection officer

Our company's hosting provider:

Hosting provider name: NetMasters Europe Ltd.

Headquarters of the hosting service provider: 4200 Hajdúszoboszló, Diószegi S. u. 5.

Hosting provider's website: www.netmasters.hu

Hosting provider email address: szia@netmasters.hu

The data we manage:

We only ask our website visitors for their personal data if they want to register, log in, or participate in a prize draw.

We cannot link the personal data provided in connection with registration or the use of our marketing services, and the identification of our visitors is basically not our goal.

For questions about data management, you info@uvegesanna.hu you can request further information by e-mail or postal address, we will send you our answer within 15 days (but no more than 1 month) to the contact information you provided.

3. What are cookies and how do we manage them?

Cookies are small data files (hereinafter referred to as "cookies") that are transferred to your computer through the use of the website, saved and stored by your Internet browser. The majority of the most commonly used internet browsers (Chrome, Firefox, etc.) accept and enable the download and use of cookies by default, but it is up to you to refuse or block them by changing your browser settings, as well as the cookies already stored on your computer can delete it. The "help" menu item of each browser provides more information on the use of cookies.

There are cookies that do not require your prior consent. Our website provides brief information about these at the start of your first visit, such as authentication, multimedia player, load balancer, session cookies helping to customize the user interface, and user-centric security cookies.

Our Company will inform you about the cookies that require consent - if data management already starts when you visit the page - at the start of the first visit and we ask for your consent.

Our company does not use or allow cookies that allow third parties to collect data without your consent.

Acceptance of cookies is not mandatory, however, our Company does not assume responsibility if our website does not function as expected if cookies are not allowed.

What cookies do we use?

Name: _ga
Service provider: domained.hu
Target: Registers the unique identifier that generates statistical data on how the visitor uses the website.
Expiration date: 2 years
Type: HTTP

Name: _gat
Service provider: domained.hu
Target: Stores the throttle request rate used by Google Analytics.
Expiration date: Session
Type: HTTP

Name: _gid
Service provider: domained.hu
Target: Registers the unique identifier that generates statistical data on how the visitor uses the website.
Expiration date: Session
Type: HTTP

Name: _fbp
Service provider: domained.hu
Target: Used by Facebook to provide advertising products for a third party (e.g. real-time ads)
Expiration date: 3 months
Type: HTTP

Name: Fr
Service provider: facebook.com
Target: Facebook uses this cookie to offer a range of advertising products (such as real-time bidding from third-party advertisers)
Expiration date: 3 months
Type: HTTP

More details about third-party cookies here on this page you can read.

4. What else you need to know about our data management related to our website

You voluntarily provide us with your personal data during registration and contact with our Company, which is why we ask that you gradually ensure that your data is truthful, correct and accurate, because you are responsible for them. Incorrect, inaccurate or incomplete data can be an obstacle to the use of our services.

If you do not provide your own personal data, but someone else's, we assume that you have the necessary authorization.

You can withdraw your consent to data management at any time free of charge

  • by canceling the registration,
  • by withdrawing consent to data management, or
  • by withdrawing or requesting the blocking of consent to the management or use of any data that must be filled in during registration.

Registration of withdrawal of consent - for technical reasons 30 days old with a deadline, however, we would like to draw your attention to the fact that in order to fulfill our legal obligations or assert our legitimate interests, we may process certain data even after the withdrawal of consent.

In the event of the use of misleading personal data, or if one of our visitors commits a crime or attacks our Company's system, we will immediately delete the data of that visitor at the same time as canceling their registration, and - if necessary - we will keep them for the duration of the establishment of civil liability or the conduct of criminal proceedings.

5. What do you need to know about our data management for direct marketing and newsletter purposes?

You can give your consent for us to use your personal data for marketing purposes by making a statement during registration or later, by changing your personal data stored on the newsletter and/or direct marketing registration interface (i.e. by clearly declaring your intention to consent). In this case - until you withdraw your consent - we will also process your data for the purpose of direct marketing and/or sending newsletters and we will send you advertising and other mailings as well as information and offers and/or forward newsletters (Grtv. § 6).

You can give your consent to direct marketing and the newsletter together or separately, and you can withdraw it/them free of charge and at any time.

Cancellation of registration is always considered a withdrawal of consent. Withdrawal of consent to data management for direct marketing and/or newsletter purposes is not interpreted as withdrawal of consent to data management related to our website. How is this? What do we keep and on what basis if the newsletter consent has been revoked? In the case of contributions, each contribution is for a specific purpose, so registering tomorrow and signing up for the newsletter are two separate purposes, two separate databases, the two cannot be related.

Registration of withdrawal or cancellation of individual consents - for technical reasons 15 days old we undertake with a deadline.

6. What do you need to know about sweepstakes?

Our company can organize prize games with a campaign character, the specific conditions of which are contained in a separate regulation. The rules of the current campaign can always be found on the opening page of our website, in a centrally located link.

7. Other data management issues

We can only forward your data within the framework defined by law, and in the case of our data processors, we ensure by stipulating contractual conditions that they cannot use your personal data for purposes contrary to your consent. More information can be found in point 2.

Our company does not transfer data abroad.

The court, the prosecutor's office and other authorities (e.g. police, tax office, National Data Protection and Freedom of Information Authority) may contact our Company to provide information, provide data or make documents available. In these cases, we must fulfill our obligation to provide data, but only to the extent that is absolutely necessary to achieve the purpose of the request.

Our company's contributors and employees involved in data management and/or data processing are entitled to access your personal data to a predetermined extent - under the burden of confidentiality.

We protect your personal data with appropriate technical and other measures, as well as ensure the security and availability of the data, as well as protect them from unauthorized access, alteration, damage, disclosure and any other unauthorized use.

As part of organizational measures, we check physical access in our buildings, we continuously train our employees and keep paper-based documents locked away with appropriate protection. As part of the technical measures, we use encryption, password protection and anti-virus software. However, we draw your attention to the fact that data transmission via the Internet cannot be considered a fully secure data transmission. Our company does everything to make the processes as secure as possible, however, we cannot assume full responsibility for data transmission through our website, but we adhere to strict regulations regarding the data received by our company in order to protect your data and prevent illegal access.

Regarding security issues, we ask for your help in carefully keeping your existing access password to our website and not sharing this password with anyone.

8. What are your rights and remedies?

You about data management

  • you can request information
  • you can request the correction, modification or addition of your personal data managed by us,
  • you can object to data processing and request the deletion and blocking of your data (with the exception of mandatory data processing),
  • can take legal action in court,
  • can file a complaint with the supervisory authority or initiate a procedure (https://naih.hu/panaszuegyintezes-rendje.html).

Supervisory Authority: National Data Protection and Freedom of Information Authority

  • Headquarters: 1055 Budapest,
    Falk Miksa utca 9-11
  • Mailing address: 1363 Budapest, Pf.: 9.
  • Phone: +36 (1) 391-1400
  • Fax: +36 (1) 391-1410
  • E-mail: ugyfelszolgalat@naih.hu

Website: https://naih.hu/

Upon your request, we provide information about the data you manage or process by us - or by our commissioned data processor

  • about your data,
  • about their source,
  • the purpose and legal basis of data management,
  • duration, and if this is not possible, the criteria for determining this duration,
  • about the name and address of our data processors and their activities related to data management,
  • about the circumstances and effects of data protection incidents and the measures we have taken to avoid and prevent them, and
  • in the case of forwarding your personal data, about the legal basis of the data transfer and the recipient.

We will provide our information within 15 days (but no later than 1 month) of submitting the application. The information is free of charge, unless you have already submitted an information request to us for the same data area in the current year. The reimbursement you have already paid will be refunded in the event that the data was handled unlawfully or the request for information led to a correction. Information can only be refused in cases provided for by law by indicating the legal place, as well as by providing information about the possibility of legal remedies or turning to the Authority.

Our company will notify you and all those to whom it previously forwarded the data for the purpose of data management about the correction, blocking, marking and deletion of personal data, unless the failure to notify does not harm your legitimate interests.

If we do not comply with your request for correction, blocking or deletion, within 15 days (but no later than 1 month) after receiving the request, we will communicate the reasons for our refusal in writing or - with your consent - electronically, and inform you of the legal remedy in court, as well as the appeal to the Authority about the possibility.

If you object to the processing of your personal data, we will examine the objection within 15 days (but no later than 1 month) of submitting the request and inform you of our decision in writing. If we have decided that your protest is well-founded, in that case we will terminate the data management - including further data collection and data transmission - and block the data, as well as notify all those to whom the protest was made about the protest and the measures taken based on it. affected personal data was previously transmitted, and who are obliged to take measures to enforce the right to object.

We will refuse to comply with the request if we prove that the data processing is justified by compelling legitimate reasons that take precedence over your interests, rights and freedoms, or that are related to the presentation, enforcement or defense of legal claims. If you do not agree with our decision, or if we miss the deadline, you can go to court within 30 days from the notification of the decision or the last day of the deadline.

Adjudication of data protection lawsuits falls under the jurisdiction of the court, the lawsuit can also be initiated before the court of the residence or place of residence of the data subject - at the choice of the data subject. A foreign citizen can also file a complaint with the competent supervisory authority according to his place of residence.

We ask that you contact our company before filing your complaint with the supervisory authority or the court - in order to negotiate and resolve the problem as quickly as possible.

9. What are the main governing laws for our activities?

  • Regulation (EU) 2016/679 of the European Parliament and of the Council on the processing of personal data of natural persons (GDPR)
  • CXII of 2011 on the right to information self-determination and freedom of information. law - (Info tv.)
  • Act V of 2013 on the Civil Code (Ptk.)
  • CVIII of 2001 on certain issues of electronic commercial services and services related to the information society. law - (Eker tv.)
  • Act C of 2003 on electronic communications - (Ehtv)
  • CLV of 1997 on consumer protection. law (Fogiv tv.)
  • CLXV of 2013 on complaints and notifications of public interest. law. (Pktv.)
  • XLVIII of 2008 on the basic conditions and certain limitations of economic advertising activity. law (Grtv.)

10. Modification of data management information

Our company reserves the right to amend this Data Management Information, of which it will inform the affected parties in an appropriate manner. Publication of information related to data management by uvegesanna.hu takes place on the website.

Budapest, 08.01.2024.