Webpage: http://www.duplitec.hu
Data Protection Statement
Acceptance date: 2020-04-28
Data Controller: Duplitec Kft.
Headquarters: 1141 Budapest, Öv utca 35-37
Mailing address, complaint handling: 1141 Budapest, Öv utca 35-37
Email: office@duplitec.hu
Phone number: +36 1 61 62 210
Webpage: http://www.duplitec.hu
The data processing operations performed during the operation of the website
Cookies and information related to their use
What are cookies?
The Data Controller uses so-called cookies (cookies) when visiting the website. A cookie is a package of information consisting of letters and numbers that our website sends to your browser and stores on your device with the purpose of saving certain settings, facilitating the use of our website, and participating in collecting some relevant statistical information about our visitors.
The cookies (cookies) do not contain personal information and are not suitable for identifying individual users, but some of them contain an individual identifier - a secret, randomly generated number series - which is stored by your device, thus ensuring your identifiability. The duration of operation of individual cookies (cookies) is contained in the description of the respective cookies (cookies).
Legal background and basis of cookies
The legal basis for data processing is your consent based on Article 6 (1) (a) of the Regulation.
Main characteristics of cookies used by the website
If you do not accept the use of cookies, certain functions will not be available to you. For more information on deleting cookies, you can find the following links:
• Internet Explorer: http://windows.microsoft.com/en-us/internet-explorer/delete-manage-cookies#ie=ie-11
• Firefox: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer
• Mozilla: https://support.mozilla.org/hu/kb/weboldalak-altal-elhelyezett-sutik-torlese-szamito
• Safari: https://support.apple.com/kb/ph21411?locale=en_US
• Chrome: https://support.google.com/chrome/answer/95647
Data managed for the purpose of concluding and performing a contract
Several data managing instances may be realized for the purpose of concluding and performing a contract. We inform you that data management related to complaint handling and warranty administration will only take place if you exercise any of the aforementioned rights.
If you do not make a purchase through our webshop, but only visit it, the provisions regarding data management for marketing purposes may apply to you if you give us marketing consent.
Data management for the purpose of concluding and performing a contract in more detail:
Contact
If, for example, you contact us by e-mail, contact form, or phone with a question about a product.
Prior contact is not mandatory, you can order from the webshop at any time without it.
Managed data
The data you provided during the contact.
Duration of data management
We manage the data until the contact is closed.
Basis of data management
Your voluntary consent, which you give to the Data Controller by contacting us. [Data management under Article 6 (1) (a) of the Regulation]
Application for education on the website
By storing the data provided during the application, the Data Controller is authorized to prepare the educational contract and have the organizing officer contact you for the purpose of concluding the contract.
Managed data
During data management, the Data Controller manages your name, address, phone number, e-mail address, the name of the training, and the date of application.
Duration of data management
Until you withdraw your consent.
Basis of data management
Your voluntary consent, which you give to the Data Controller by applying. [Data management under Article 6 (1) (a) of the Regulation]
Processing the application
Data management activities necessary for the performance of the contract are carried out during the processing of applications.
Managed data
During data management, the Data Controller manages your name, address, phone number, e-mail address, the characteristics of the training, the contract number, and the date of application.
If you have applied through our website, data management and data provision are essential for the performance of the contract.
Duration of data management
We manage the data for 5 years according to the civil law of limitation.
Basis of data management
Contract performance. [Data management under Article 6 (1) (b) of the Regulation]
Issuing an invoice
Data management takes place for the purpose of issuing an invoice in accordance with the laws and fulfilling the accounting obligation to preserve the invoice.
Managed data
Name, address, e-mail address, phone number.
Duration of data management
We are obliged to preserve the issued invoices for 8 years from the date of issue, based on Section 169 (2) of the Accounting Act.
Basis of data management
The obligation to issue an invoice is mandatory based on Section 159 (1) of Act CXXVII of 2007 on value-added tax, and the invoice must be preserved for 8 years based on Section 169 (2) of Act C of 2000 on accounting. [Data management under Article 6 (1) (c) of the Regulation]
Data management related to goods delivery
Data management takes place for the purpose of delivering the ordered product.
Managed data
Name, address, e-mail address, phone number.
Duration of data management
The Data Controller manages the data for the duration of the delivery of the ordered goods.
Basis of data management
Contract performance. [Data management under Article 6 (1) (b) of the Regulation]
Warranty administration
Data management takes place for the purpose of handling warranty complaints. If you request warranty administration, data management and data provision are essential.
Managed data
Buyer's name, phone number, e-mail address, the content of the complaint.
Duration of data management
We preserve the warranty complaints for 5 years based on the law on consumer protection.
Basis of data management
It is your voluntary decision whether to contact us for warranty administration. However, if you contact us, we are obliged to preserve the complaint for 5 years based on Section 17/A (7) of Act CLV of 1997 on consumer protection. [Data management under Article 6 (1) (c) of the Regulation]
Handling other consumer protection complaints
Data management takes place for the purpose of handling consumer protection complaints. If you contact us with a complaint, data management and data provision are essential.
Managed data
Buyer's name, phone number, e-mail address, the content of the complaint.
Duration of data management
We preserve the complaints for 5 years based on the law on consumer protection.
Basis of data management
It is your voluntary decision whether to contact us with a complaint. However, if you contact us, we are obliged to preserve the complaint for 5 years based on Section 17/A (7) of Act CLV of 1997 on consumer protection. [Data management under Article 6 (1) (c) of the Regulation]
Data management related to the proof of consent
During registration, ordering, and subscribing to the newsletter, the IT system stores the data related to consent for later verifiability.
Managed data
The time of consent and the IP address of the person concerned.
Duration of data management
The data is stored for the duration of the data management, and after its termination, until the expiry of the limitation period.
Basis of data management
Article 7 (1) of the Regulation imposes this obligation. [Data management under Article 6 (1) (c) of the Regulation]
Marketing data management
Data management related to newsletter sending
Managed data
Name, address, e-mail address, phone number.
Duration of data management
Until you withdraw your consent.
Basis of data management
Your voluntary consent, which you give to the Data Controller by subscribing to the newsletter. [Data management under Article 6 (1) (a) of the Regulation]
Sending personalized advertisements and displaying them
Managed data
Name, address, e-mail address, phone number.
Duration of data management
Until you withdraw your consent.
Basis of data management
Your separate, voluntary consent, which you give to the Data Controller when providing the data. [Data management under Article 6 (1) (a) of the Regulation]
Remarketing
Data management takes place as a remarketing activity with the help of cookies.
Managed data
Data managed by the cookies specified in the cookie notice.
Duration of data management
The data storage period of the given cookie, more information is available here:
Google's general cookie information: https://www.google.com/policies/technologies/types/
Google Analytics information: https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage?hl=hu
Facebook information: https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen
Basis of data management
Your voluntary consent, which you give to the Data Controller by using the website. [Data management under Article 6 (1) (a) of the Regulation]
Game
Data management takes place for the purpose of organizing a game.
Managed data
Name, e-mail address, phone number.
Duration of data management
The data will be deleted after the game is closed, except for the data of the winner, which the Data Controller is obliged to preserve for 8 years based on the Accounting Act.
Basis of data management
Your voluntary consent, which you give to the Data Controller by using the website. [Data management under Article 6 (1) (a) of the Regulation]
Further data management
If the Data Controller intends to perform further data management, it will provide prior information about the essential circumstances of the data management (legal background and basis of data management, purpose of data management, scope of managed data, duration of data management).
You are informed that if the Data Controller is obliged to transfer data to authorities based on legal authorization, it will do so. The Data Controller keeps a record of data transmissions in accordance with the Infotv. (which authority, what personal data, on what legal basis, when the Data Controller transferred to the authority), the content of which it will inform you about upon request, except in cases where the law excludes its obligation to inform.
Data processing
The Data Controller uses the following data processors:
Name of the data processor: GLS General Logistics Systems Hungary Csomag-Logisztikai Kft.
Seat of the data processor: 2351 Alsónémedi, GLS Európa u. 2.
Phone number of the data processor: +36-29/88 66 70
E-mail address of the data processor: info@gls-hungary.com
The Data Processor cooperates with the Data Controller in delivering the ordered goods. During this, the Data Processor may manage the buyer's name, address, and phone number until the end of the calendar year following the dispatch of the postal item, after which it will delete them immediately.
Rights of the data subject
Within the duration of data management, you are entitled to the following rights under the Regulation:
• right to withdraw consent
• right to access personal data and information related to data management
• right to rectification
• right to restriction of data management
• right to erasure
• right to object
• right to data portability.
Right to withdraw consent
You are entitled to withdraw your consent to data management at any time, in which case we will delete the data from our systems. However, please note that in the case of an unfulfilled order, withdrawal may result in us not being able to fulfill the delivery to you. Also, if the purchase has already taken place, we cannot delete the data related to invoicing based on accounting regulations, and if you have an outstanding debt to us, we may still manage your data based on our legitimate interest in recovering the claim.
Right to access personal data
You are entitled to receive feedback from the Data Controller as to whether your personal data is being processed, and if data processing is taking place, you are entitled to:
• access the managed personal data and
• receive information from the Data Controller about:
o the purposes of data management;
o the categories of personal data managed about you;
o information about the recipients or categories of recipients to whom the personal data have been or will be disclosed;
o the planned duration of storage of personal data, or if this is not possible, the criteria for determining this duration;
o your right to request the Data Controller to rectify, erase, or restrict the processing of personal data, and in the case of data management based on legitimate interest, to object to the processing of personal data;
o the right to lodge a complaint with the supervisory authority;
o where the data has not been collected from you, any available information about their source;
o information about automated decision-making (if such a procedure is used), including profiling, and at least in these cases, information about the logic used and the significance and expected consequences of such data management for you.
The exercise of this right may be subject to a reasonable fee for the provision of information by the Data Controller, in the case of repeated requests for information.
Right to rectification
You are entitled to have the Data Controller rectify your inaccurate personal data without undue delay.
Right to restriction of data management
You are entitled to request the Data Controller to restrict data management if any of the following conditions are met:
• you dispute the accuracy of the personal data, in which case the restriction applies for the period that allows the Data Controller to verify the accuracy of the personal data, if the accurate data can be determined immediately, no restriction will be applied;
• data management is illegal, but you object to the deletion of the data for any reason (e.g., because the data is important for you to enforce a legal claim), so instead of deleting the data, you request restriction of use;
• the Data Controller no longer needs the personal data for the purpose of data management, but you request it for the purpose of enforcing, asserting, or defending legal claims;
• you have objected to data management based on legitimate interest, and it has not been determined yet whether the legitimate interests of the Data Controller override your legitimate interests.
If data management is restricted, such personal data may only be processed with your consent, or for the purpose of enforcing, asserting, or defending legal claims, or protecting the rights of another natural or legal person, or in the public interest of the Union or a Member State.
The Data Controller shall inform you in advance (at least 3 working days before the restriction is lifted) about the lifting of the restriction of data management.
Right to erasure - right to be forgotten
You are entitled to have the Data Controller erase your personal data without undue delay if any of the following reasons apply:
• the personal data are no longer necessary for the purpose for which they were collected or otherwise processed;
• you withdraw your consent and there is no other legal basis for data management;
• you object to data management based on legitimate interest, and there is no overriding legitimate reason for data management,
• the Data Controller has processed the personal data unlawfully, and this has been established in a complaint procedure,
• the erasure of personal data is required to fulfill a legal obligation under Union or Member State law applicable to the Data Controller.
Erasure does not apply if data management is necessary:
• for the exercise of the right to freedom of expression and information;
• for the purpose of fulfilling a legal obligation imposed on the Data Controller, or for the performance of a task carried out in the public interest;
• for the purpose of enforcing, asserting, or defending legal claims.
Right to object
You are entitled to object to the processing of your personal data based on legitimate interest at any time. In this case, the Data Controller may not process the personal data unless it proves that the data management is justified by compelling legitimate grounds that take precedence over your interests, rights, and freedoms, or are related to the enforcement, assertion, or defense of legal claims.
If personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing purposes, including profiling, to the extent that it is related to direct marketing. If you object to the processing of personal data for direct marketing purposes, the personal data may no longer be processed for such purposes.
Right to data portability
If data management is automated, or if data management is based on your voluntary consent, you are entitled to request the Data Controller to provide the data you have provided to the Data Controller in xml, JSON, or csv format, and if it is technically feasible, you can request the Data Controller to transfer the data in this format to another data controller.
Automated decision-making
You are entitled to not be subject to a decision based solely on automated data management (including profiling) that has legal effects on you or significantly affects you in a similar way. In such cases, the Data Controller is obliged to take appropriate measures to protect your rights, freedoms, and legitimate interests, including ensuring your right to human intervention by the Data Controller, to express your point of view, and to challenge the decision.
The above does not apply if the decision:
• is necessary for the conclusion or performance of a contract between you and the Data Controller;
• is authorized by Union or Member State law applicable to the Data Controller, which also lays down suitable measures to protect your rights, freedoms, and legitimate interests; or
• is based on your explicit consent.
Registration in the data protection register
Pursuant to the Infotv., the Data Controller was obliged to report certain data management to the data protection register. This reporting obligation ceased to exist on May 25, 2018.
Data security measures
The Data Controller declares that it has taken adequate security measures to protect personal data against unauthorized access, modification, transmission, disclosure, deletion, or destruction, as well as accidental loss or damage, and to ensure that the data cannot be accessed due to a change in the applied technique.
The Data Controller does everything in its power to ensure that its data processors also take adequate data security measures when working with your personal data.
Legal remedies
If you believe that the Data Controller has violated any provision of the law on data management, or has not fulfilled any of your requests, you can initiate an investigation by the National Authority for Data Protection and Freedom of Information (mailing address: 1530 Budapest, Pf.: 5., e-mail: ugyfelszolgalat@naih.hu).
We also inform you that if the Data Controller violates the provisions of the law on data management, or does not fulfill any of your requests, you can bring a civil action against the Data Controller before a court.
Modification of the data management information
The Data Controller reserves the right to modify this data management information in a way that does not affect the purpose and legal basis of data management. By using the website after the modification of the data management information, you accept the modified data management information.
If the Data Controller intends to perform further data management with the collected data for a purpose other than the purpose of collection, it will inform you about the purpose of data management and the following information before the further data management starts:
• the duration of storage of personal data, or if this is not possible, the criteria for determining this duration;
• your right to request the Data Controller to access personal data, rectify, erase, or restrict data management, and in the case of data management based on legitimate interest, to object to data management, as well as the right to data portability in the case of consent or contractual data management;
• if the data provision is based on consent, you may withdraw your consent at any time;
• the right to lodge a complaint with the supervisory authority;
• information about whether the provision of personal data is based on a legal or contractual obligation, or a condition for concluding a contract, and whether you are obliged to provide the personal data, as well as the possible consequences of not providing the data;
• information about automated decision-making (if such a procedure is used), including profiling, and at least in these cases, information about the logic used and the significance and expected consequences of such data management for you.
Data management can only start after this, and if the legal basis for data management is consent, you must also give your consent to data management.
This document contains all relevant information about data management related to the operation of the webshop, based on the European Union's General Data Protection Regulation (GDPR) and Act CXII of 2011 on the right to informational self-determination and freedom of information (Infotv.).
Mail remaining and post office delivery
We draw your attention to the fact that Magyar Posta Zrt. identifies the addressee in accordance with its currently effective data management information, so it may request the provision of your personal data during delivery, in the case of postal and post office delivery.