Privacy Policy

This document contains the information provided by Sporteex Marketing Kft. (hereinafter: Service Provider), as the operator of the website https://merchriotmsi2023.com/ (hereinafter: Data Controller) in relation to the processing of the personal data provided by the persons (hereinafter: Data Subject) who provide personal data on the website (hereinafter: Website).

Contact:

E-mail: info@merchriotmsi2023.com

This privacy notice has been prepared in accordance with the rules of the General Data Protection Regulation 2016/679 (hereinafter: Regulation).

1     Scope of data processed, legal basis, purpose and duration of processing

1.1   Registration

Description of the processing scope, the purpose of the processing and the scope of data processed

We provide a registration option on the Website to make subsequent orders faster for customers. However, registration is not a precondition for making a purchase, purchasing operations can also be completed without registration.

Your name, e-mail address, password and telephone number are processed for registration purposes and your orders are linked to your customer account.

Legal basis for processing

The legal basis for processing is your consent pursuant to Article 6 (1) (a) of the Regulation.

Duration of processing

The data processed for the purpose of registration will be processed until the registration is cancelled.

1.2   Data processed for the purpose of fulfilling an order

Description of the processing scope, the purpose of the processing and the scope of data processed

If you place an order for the product(s) available on the Website, we will need to process the data you provide in order to perform the resulting contract.

When you place an order, we will send you information about the order to your e-mail address, contact you by phone, if necessary, invoice you based on the information you provide and deliver the product(s) to the delivery address you provide.

Legal basis for processing

The legal basis for processing is the performance of the contract concluded with you, pursuant to Article 6 (1) (b) of the Regulation.

In the case of an invoice, pursuant to Section 159 (1) of the Act CXXVII of 2007 on Value Added Tax, the issuance of the invoice is mandatory and it shall be retained for 8 years pursuant to Section 169 (2) of the Act C of 2000 on Accounting [data processing pursuant to Article 6 (1) (c) of the Regulation].

Providing the data is a condition for the conclusion of the contract and is essential in order to complete the purchase.

Duration of processing

Your data on the invoice shall be retained for 8 years pursuant to Section 169 (2) of the Act C of 2000 on Accounting.

1.3   Processing of data when requesting a quotation

Description of the processing scope, the purpose of the processing

The Customer may submit a form of enquiry to the Data Controller.

The quotation form contains the following personal data:

  • name,
  • e-mail address,
  • message. 

The purpose of the processing is to ensure the request for a quotation.

Legal basis for processing 

The legal basis for processing is your consent pursuant to Article 6 (1) (a) of the Regulation.

Duration of processing

Your data will be processed during the period of validity of the offer.

1.4   Sending newsletters

Description of the processing scope, the purpose of the processing and the scope of data processed

If you subscribe to the newsletter, your e-mail address and name will be used to send you direct marketing mails until you withdraw your consent.

Legal basis for processing

The legal basis for processing is your consent pursuant to Article 6 (1) (a) of the Regulation.

Duration of processing

Your data will be processed until your consent is withdrawn.

1.5   Data processed in the context of complaint handling

Description of the processing scope, the purpose of the processing and the scope of data processed

If we carry out any administration in relation to the service you have purchased or handle your complaint, we will also process personal data in the course of that administration.

Your name, contact details (e-mail address, telephone number, postal address) and your complaint will be processed in connection with the complaint.

The purpose of data processing is to ensure that guarantees and complaints are handled in accordance with the law.

Legal basis for processing

Whether or not you contact us with a complaint is a voluntary decision; however, if you contact us, we are obliged to retain the complaint for 5 years pursuant to Section 17/A (7) of the Act CLV of 1997 on Consumer Protection, which will make the processing of the data based on a legal obligation pursuant to Article 6 (1) (c) of the Regulation.

Duration of processing

Under the Consumer Protection Act, we have to retain the data for 5 years after the complaint has been made.

2     Data processors

When processing the data, we use Tárhelypark Kft. (registered office: H-1132 Budapest, Victor Hugo utca 18-22.; e-mail: info@tarhelypark.hu) as the data processor that provides the hosting service.

The technical service provider involved in the processing of the data in the course of the newsletter service is The Rocket Science Group LLC (registered office: 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308 USA; contact: https://mailchimp.com/contact/?primaryTopic=prospective), as the operator of Mailchimp newsletter sending service (https://mailchimp.com/contact/).

We use the services of the website szamlazz.hu for invoicing, provided to us by KBOSS.hu Kft. (info@szamlazz.hu, H-1031 Budapest, Záhony utca 7/C.).

Payment for the products is managed by OTP Mobil Kft. (registered office: H-1143 Budapest, Hungária krt. 17-19.) operating SimplePay payment system.

Product logistics and transport is provided by WEBSHIPPY Magyarország Kft. (registered office: H-1044 Budapest, Ezred utca 2. B2. ép. 13.).

3     Cookie data processing

Some parts of the Website use small data files (hereinafter: cookies) to identify you. By visiting the Website and using some of its functions, the Data Subject gives their consent to the storage of these cookies on their computer and access to them by the data controller.

You can use your browser software to set and block cookie-related activity. Please note, however, that in the latter case, without the use of cookies, you may not be able to use all the services of the Website.

The Service Provider may, as a technical intermediary, ensure that third parties cooperating with the Service Provider, in particular Google Inc., store cookies during the visit to the websites if the Data Subject has previously visited the Service Provider’s Website and may display an advertisement to the Data Subject on this basis.

You can also delete the cookie from your computer or set your browser to refuse the use of cookies. In addition, Google ensures that the user can disable the cookies set by Google by going to the page where you can opt out of the ads displayed by Google (http://www.google.hu/policies/technologies/ads/). By disabling or deleting cookies, the use of the websites may become more inconvenient for the Data Subject.

What are cookies and how do we manage them?

Cookies are small data files that are transferred to your computer through the Website, by using the Website, downloaded and stored by your Internet browser.

General tasks of the cookies:

  • collect information about visitors and their devices;
  • remember the visitors’ individual preferences, which are/may be used, for example, when making an online transaction, so you don’t have to re-enter them again;
  • facilitate the use of the Website;
  • provide quality user experience.
  • We use the following cookies on the Website:

Essential cookies:

Essential cookies help you to use the Website by enabling basic features such as site navigation and access to secure areas of the Website.

The Website cannot function properly without these cookies:

Cookie name

Cookie purpose

Lifespan

woocommerce_cart_hash

WooCommerce cookie that stores the contents of the visitor’s shopping cart.

Until the end of the session.

woocommerce_items_in_cart

WooCommerce cookie that stores the contents of the visitor’s shopping cart.

Until the end of the session.

wordpress_logged_in_11066497019dcfcc564790d3e0758076

WordPress cookie for logged in users.

Until the end of the session.

wordpress_sec_11066497019dcfcc564790d3e0758076

WordPress cookie that helps the user to log in to the website.

Until the end of the session.

wp_woocommerce_session_11066497019dcfcc564790d3e0758076

It generates a unique code for each user, so that it can distinguish the shopping cart data for each customer in the database.

2 days

In order to provide a personalised service, a small piece of data, a cookie, is placed on the user’s computer and read back during a subsequent visit. If the browser returns a previously saved cookie, the cookie management service provider has the possibility to link the user’s current visit to previous visits, but only for its own content.

Most commonly used web browsers (Chrome, Firefox, Edge, Explorer, Opera, Safari etc.) accept and allow the download and use of cookies by default, but it is up to you to modify your browser settings to refuse or block them, or to delete cookies already stored on your computer.

More information on the use of cookies is available in the ‘help’ Section of each browser.

Disabling cookies for specific browsers:

4     Your rights related to data processing

During the period of processing, you have the following rights under the Regulation:

  • access to personal data and information on data processing,
  • right to rectification,
  • restriction of data processing,
  • right to erasure,
  • right to data portability,
  • right to objection,
  • right to withdraw your consent.

If you intend to exercise your rights, this will involve identifying yourself and we will need to communicate with you. You will therefore be required to provide personal data for identification purposes (but identification will only be based on data that we already process about you) and your complaint about our processing will be available via our e-mail account for the period of time specified in this notice in relation to complaints.

We will respond to complaints about data processing within 30 days at the latest.

4.1   Right to withdraw your consent

You may withdraw your consent to data processing at any time, in which case the data will be deleted from our systems.

4.2   Access to personal data and information

You are entitled to receive feedback as to whether your personal data is being processed and, if it is, you are entitled to:

  • obtain access to the personal data processed and
  • be informed of the following:
    • the purposes of the processing;
    • the categories of personal data processed about you;
    • information about the recipients or categories of recipients to whom or with whom we have disclosed or will disclose the personal data;
    • the planned period of storage of the personal data or, where this is not possible, the criteria for determining that period;
    • your right to request the rectification, erasure or restriction of the processing of personal data concerning you and to object to the processing of such personal data where there is a legitimate interest in the processing;
    • the right to lodge a complaint with a supervisory authority;
    • if the data was not collected from you, any available information about its source;
    • the fact of automated decision-making (if such a process is used), including profiling, and, at least in these cases, clear information about the logic used and the significance and likely consequences for you of such processing.

The purpose of exercising the right may be to ascertain and verify the lawfulness of the processing, and we may charge a reasonable fee for providing the information in exchange for repeated requests for information.

We ensure access to your personal data by sending you the personal data and information we process by e-mail after you have been identified.

Please indicate in your request whether you want access to your personal data or information on data processing.

4.3   Right to rectification

You are entitled to have inaccurate personal data relating to you corrected without delay at your request.

4.4   Righ to the restriction of data processing

You are entitled to have the processing of data restricted at your request if one of the following conditions is met:

  • you contest the accuracy of the personal data, in which case the restriction applies for the period of time that allows us to verify the accuracy of the personal data, if verification is not necessary, no restriction will be applied;
  • the processing is unlawful and you object to the deletion of the data and instead request the restriction of their use;
  • we no longer need the personal data for the purposes for which we are processing them, but you need them for the establishment, exercise or defence of legal claims; or
  • you have objected to the processing, but our legitimate interests may also justify the processing, in which case, until it is established whether our legitimate grounds prevail over your legitimate grounds, the processing must be restricted.

If the processing is restricted, such personal data may be processed, except for storage, only with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for important public interests of the Union or of a Member State.

We will inform you in advance on lifting of the restriction of processing (at least 3 working days prior to the lifting of the restriction).

4.5   Right to erasure – right to be forgotten

You are entitled to have your personal data erased without undue delay if one of the following grounds applies:

  • the personal data are no longer necessary for the purposes for which they were collected or processed;
  • you withdraw your consent and there is no other legal basis for the processing;
  • you object to processing based on legitimate interest and there is no overriding legitimate ground (i.e. legitimate interest) for the processing;
  • we processed the personal data were unlawfully and this was established on the basis of the complaint;
  • the personal data must be erased to comply with a legal obligation under EU or Member State law that applies to us.

If, for any lawful reason, we have disclosed personal data we hold about you and we are required to erase it for any of the reasons set out above, we will take reasonable steps, including technical measures, taking into account the available technology and the cost of doing so, to inform other data controllers processing the data that you have requested that links to or copies, counterparts of your personal data in question be erased. In principle, your personal data will not be disclosed.

Erasure does not apply where the processing is necessary for the following reasons:

  • to exercise the right to freedom of expression and information;
  • to comply with an obligation under EU or Member State law that requires the processing of personal data (such as processing in the context of invoicing, where the storage of the invoice is required by law) or for the performance of a task carried out in the public interest or in the exercise of public authority vested in the controller;
  • to bring, enforce or defend legal claims (e.g. if we have a claim against you and you have not yet fulfilled it, or if there is a pending consumer or data processing complaint).

4.6   Right to objection

You have the right to object to the processing of your personal data based on legitimate interests at any time on grounds relating to your particular situation. In this case, we may no longer process the personal data, unless we can prove that the processing is justified by compelling legitimate grounds which override your interests, rights and freedoms or are related to the establishment, exercise or defence of legal claims.

4.7   Right to data portability

Where the processing is necessary for the performance of a contract or is based on your voluntary consent, you have the right to request that the data you have provided to us is provided to you in a machine-readable format, which we will make available to you in xml, JSON or csv format, and, if technically feasible, you may request that we transfer the data in this format to another controller.

4.8   Legal remedies available

If you hold that we have violated a legal provision on data processing or have failed to comply with a request, you may initiate an investigation procedure with the National Authority for Data Protection and Freedom of Information (postal address: H-1363 Budapest, Pf.: 9, e-mail: ugyfelszolgalat@naih.hu) to stop the alleged unlawful processing.

You may also bring a civil action in court.

5     Data security

In the operation of IT systems, the necessary access rights management, internal organisation and technical solutions are in place to ensure that data cannot be accessed, deleted, retrieved from the system or modified by unauthorised persons. We also enforce data protection and data security requirements with our data processors.

We keep records of any data breaches and, if necessary, we will inform you of any data breach that occur.

6     Other provisions

We reserve the right to modify this Privacy Notice in a way that does not affect the purpose and legal basis of the processing.

However, if we intend to carry out further processing of the data collected for purposes other than those for which it was collected, we will inform you of the purposes of the processing and the following information before carrying out the further processing:

  • the period of storage of the personal data or, where this is not possible, the criteria for determining that period;
  • your right to request access to, the rectification, erasure or restriction of the processing of personal data concerning you and to object to the processing of such personal data where there is a legitimate interest in the processing; and, in the case of processing based on consent or a contractual relationship, the right to data portability;
  • in the case of processing based on consent, that you may withdraw your consent at any time;
  • the right to lodge a complaint with a supervisory authority;
  • whether the provision of the personal data is based on a legal or contractual obligation or is a precondition for the conclusion of a contract, whether you are under an obligation to provide the personal data and the possible consequences of not providing the data;
  • the fact of automated decision-making (if such a process is used), including profiling, and, at least in these cases, clear information about the logic used and the significance and likely consequences for you of such processing.

The processing can only start after the above information is provided, and if the legal basis for the processing is consent, you must also consent to the processing in addition to the provision of information.

This Privacy Notice is valid from 28.03.2023.