This document contains the information provided by Sporteex Marketing Kft. (hereinafter: Service Provider), as the operator of the website https://merchriotmsi2023.com/ (hereinafter: Data Controller) in relation to the processing of the personal data provided by the persons (hereinafter: Data Subject) who provide personal data on the website (hereinafter: Website).
Contact:
E-mail: info@merchriotmsi2023.com
This privacy notice has been prepared in accordance with the rules of the General Data Protection Regulation 2016/679 (hereinafter: Regulation).
1 Scope of data processed, legal basis, purpose and duration of processing
1.1 Registration
Description of the processing scope, the purpose of the processing and the scope of data processed
We provide a registration option on the Website to make subsequent orders faster for customers. However, registration is not a precondition for making a purchase, purchasing operations can also be completed without registration.
Your name, e-mail address, password and telephone number are processed for registration purposes and your orders are linked to your customer account.
Legal basis for processing
The legal basis for processing is your consent pursuant to Article 6 (1) (a) of the Regulation.
Duration of processing
The data processed for the purpose of registration will be processed until the registration is cancelled.
1.2 Data processed for the purpose of fulfilling an order
Description of the processing scope, the purpose of the processing and the scope of data processed
If you place an order for the product(s) available on the Website, we will need to process the data you provide in order to perform the resulting contract.
When you place an order, we will send you information about the order to your e-mail address, contact you by phone, if necessary, invoice you based on the information you provide and deliver the product(s) to the delivery address you provide.
Legal basis for processing
The legal basis for processing is the performance of the contract concluded with you, pursuant to Article 6 (1) (b) of the Regulation.
In the case of an invoice, pursuant to Section 159 (1) of the Act CXXVII of 2007 on Value Added Tax, the issuance of the invoice is mandatory and it shall be retained for 8 years pursuant to Section 169 (2) of the Act C of 2000 on Accounting [data processing pursuant to Article 6 (1) (c) of the Regulation].
Providing the data is a condition for the conclusion of the contract and is essential in order to complete the purchase.
Duration of processing
Your data on the invoice shall be retained for 8 years pursuant to Section 169 (2) of the Act C of 2000 on Accounting.
1.3 Processing of data when requesting a quotation
Description of the processing scope, the purpose of the processing
The Customer may submit a form of enquiry to the Data Controller.
The quotation form contains the following personal data:
The purpose of the processing is to ensure the request for a quotation.
Legal basis for processing
The legal basis for processing is your consent pursuant to Article 6 (1) (a) of the Regulation.
Duration of processing
Your data will be processed during the period of validity of the offer.
1.4 Sending newsletters
Description of the processing scope, the purpose of the processing and the scope of data processed
If you subscribe to the newsletter, your e-mail address and name will be used to send you direct marketing mails until you withdraw your consent.
Legal basis for processing
The legal basis for processing is your consent pursuant to Article 6 (1) (a) of the Regulation.
Duration of processing
Your data will be processed until your consent is withdrawn.
1.5 Data processed in the context of complaint handling
Description of the processing scope, the purpose of the processing and the scope of data processed
If we carry out any administration in relation to the service you have purchased or handle your complaint, we will also process personal data in the course of that administration.
Your name, contact details (e-mail address, telephone number, postal address) and your complaint will be processed in connection with the complaint.
The purpose of data processing is to ensure that guarantees and complaints are handled in accordance with the law.
Legal basis for processing
Whether or not you contact us with a complaint is a voluntary decision; however, if you contact us, we are obliged to retain the complaint for 5 years pursuant to Section 17/A (7) of the Act CLV of 1997 on Consumer Protection, which will make the processing of the data based on a legal obligation pursuant to Article 6 (1) (c) of the Regulation.
Duration of processing
Under the Consumer Protection Act, we have to retain the data for 5 years after the complaint has been made.
2 Data processors
When processing the data, we use Tárhelypark Kft. (registered office: H-1132 Budapest, Victor Hugo utca 18-22.; e-mail: info@tarhelypark.hu) as the data processor that provides the hosting service.
The technical service provider involved in the processing of the data in the course of the newsletter service is The Rocket Science Group LLC (registered office: 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308 USA; contact: https://mailchimp.com/contact/?primaryTopic=prospective), as the operator of Mailchimp newsletter sending service (https://mailchimp.com/contact/).
We use the services of the website szamlazz.hu for invoicing, provided to us by KBOSS.hu Kft. (info@szamlazz.hu, H-1031 Budapest, Záhony utca 7/C.).
Payment for the products is managed by OTP Mobil Kft. (registered office: H-1143 Budapest, Hungária krt. 17-19.) operating SimplePay payment system.
Product logistics and transport is provided by WEBSHIPPY Magyarország Kft. (registered office: H-1044 Budapest, Ezred utca 2. B2. ép. 13.).
3 Cookie data processing
Some parts of the Website use small data files (hereinafter: cookies) to identify you. By visiting the Website and using some of its functions, the Data Subject gives their consent to the storage of these cookies on their computer and access to them by the data controller.
You can use your browser software to set and block cookie-related activity. Please note, however, that in the latter case, without the use of cookies, you may not be able to use all the services of the Website.
The Service Provider may, as a technical intermediary, ensure that third parties cooperating with the Service Provider, in particular Google Inc., store cookies during the visit to the websites if the Data Subject has previously visited the Service Provider’s Website and may display an advertisement to the Data Subject on this basis.
You can also delete the cookie from your computer or set your browser to refuse the use of cookies. In addition, Google ensures that the user can disable the cookies set by Google by going to the page where you can opt out of the ads displayed by Google (http://www.google.hu/policies/technologies/ads/). By disabling or deleting cookies, the use of the websites may become more inconvenient for the Data Subject.
What are cookies and how do we manage them?
Cookies are small data files that are transferred to your computer through the Website, by using the Website, downloaded and stored by your Internet browser.
General tasks of the cookies:
Essential cookies:
Essential cookies help you to use the Website by enabling basic features such as site navigation and access to secure areas of the Website.
The Website cannot function properly without these cookies:
Cookie name | Cookie purpose | Lifespan |
woocommerce_cart_hash | WooCommerce cookie that stores the contents of the visitor’s shopping cart. | Until the end of the session. |
woocommerce_items_in_cart | WooCommerce cookie that stores the contents of the visitor’s shopping cart. | Until the end of the session. |
wordpress_logged_in_11066497019dcfcc564790d3e0758076 | WordPress cookie for logged in users. | Until the end of the session. |
wordpress_sec_11066497019dcfcc564790d3e0758076 | WordPress cookie that helps the user to log in to the website. | Until the end of the session. |
wp_woocommerce_session_11066497019dcfcc564790d3e0758076 | It generates a unique code for each user, so that it can distinguish the shopping cart data for each customer in the database. | 2 days |
In order to provide a personalised service, a small piece of data, a cookie, is placed on the user’s computer and read back during a subsequent visit. If the browser returns a previously saved cookie, the cookie management service provider has the possibility to link the user’s current visit to previous visits, but only for its own content.
Most commonly used web browsers (Chrome, Firefox, Edge, Explorer, Opera, Safari etc.) accept and allow the download and use of cookies by default, but it is up to you to modify your browser settings to refuse or block them, or to delete cookies already stored on your computer.
More information on the use of cookies is available in the ‘help’ Section of each browser.
Disabling cookies for specific browsers:
4 Your rights related to data processing
During the period of processing, you have the following rights under the Regulation:
If you intend to exercise your rights, this will involve identifying yourself and we will need to communicate with you. You will therefore be required to provide personal data for identification purposes (but identification will only be based on data that we already process about you) and your complaint about our processing will be available via our e-mail account for the period of time specified in this notice in relation to complaints.
We will respond to complaints about data processing within 30 days at the latest.
4.1 Right to withdraw your consent
You may withdraw your consent to data processing at any time, in which case the data will be deleted from our systems.
4.2 Access to personal data and information
You are entitled to receive feedback as to whether your personal data is being processed and, if it is, you are entitled to:
The purpose of exercising the right may be to ascertain and verify the lawfulness of the processing, and we may charge a reasonable fee for providing the information in exchange for repeated requests for information.
We ensure access to your personal data by sending you the personal data and information we process by e-mail after you have been identified.
Please indicate in your request whether you want access to your personal data or information on data processing.
4.3 Right to rectification
You are entitled to have inaccurate personal data relating to you corrected without delay at your request.
4.4 Righ to the restriction of data processing
You are entitled to have the processing of data restricted at your request if one of the following conditions is met:
If the processing is restricted, such personal data may be processed, except for storage, only with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for important public interests of the Union or of a Member State.
We will inform you in advance on lifting of the restriction of processing (at least 3 working days prior to the lifting of the restriction).
4.5 Right to erasure – right to be forgotten
You are entitled to have your personal data erased without undue delay if one of the following grounds applies:
If, for any lawful reason, we have disclosed personal data we hold about you and we are required to erase it for any of the reasons set out above, we will take reasonable steps, including technical measures, taking into account the available technology and the cost of doing so, to inform other data controllers processing the data that you have requested that links to or copies, counterparts of your personal data in question be erased. In principle, your personal data will not be disclosed.
Erasure does not apply where the processing is necessary for the following reasons:
4.6 Right to objection
You have the right to object to the processing of your personal data based on legitimate interests at any time on grounds relating to your particular situation. In this case, we may no longer process the personal data, unless we can prove that the processing is justified by compelling legitimate grounds which override your interests, rights and freedoms or are related to the establishment, exercise or defence of legal claims.
4.7 Right to data portability
Where the processing is necessary for the performance of a contract or is based on your voluntary consent, you have the right to request that the data you have provided to us is provided to you in a machine-readable format, which we will make available to you in xml, JSON or csv format, and, if technically feasible, you may request that we transfer the data in this format to another controller.
4.8 Legal remedies available
If you hold that we have violated a legal provision on data processing or have failed to comply with a request, you may initiate an investigation procedure with the National Authority for Data Protection and Freedom of Information (postal address: H-1363 Budapest, Pf.: 9, e-mail: ugyfelszolgalat@naih.hu) to stop the alleged unlawful processing.
You may also bring a civil action in court.
5 Data security
In the operation of IT systems, the necessary access rights management, internal organisation and technical solutions are in place to ensure that data cannot be accessed, deleted, retrieved from the system or modified by unauthorised persons. We also enforce data protection and data security requirements with our data processors.
We keep records of any data breaches and, if necessary, we will inform you of any data breach that occur.
6 Other provisions
We reserve the right to modify this Privacy Notice in a way that does not affect the purpose and legal basis of the processing.
However, if we intend to carry out further processing of the data collected for purposes other than those for which it was collected, we will inform you of the purposes of the processing and the following information before carrying out the further processing:
The processing can only start after the above information is provided, and if the legal basis for the processing is consent, you must also consent to the processing in addition to the provision of information.
This Privacy Notice is valid from 28.03.2023.