Privacy Statement
Data Processing Notice
for visitors and registered users of the
http://www.barcsmetal.hu
website.
Introduction
During the operation of the website, the service provider/controller manages the data of the persons visiting the site in order to provide them with a suitable service.
The service provider intends to comply fully with the legal requirements for the processing of personal data, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council.
This Data Processing Notice is based on Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of personal data and the free movement of data, subject to the content of the Hungarian Act CXII of 2011 on the right to informational self-determination and freedom of information.
Name of service provider, controller
Name / company name: | Barcs Metál Kft |
Headquarters: | 7570 Barcs, Drávapart 3. |
Tax number: | 11482831-2-14 |
Website name, address: | www.barcsmetal.hu |
Availability of the Data Processing Notice | www.barcsmetal.hu |
Contact details of the controller
Name / company name: | Barcs Metál Kft |
Headquarters: | 7570 Barcs, Drávapart 3. |
Mailing address: | 7570 Barcs, Pf.:7. |
E-mail: | [javascript protected email address] |
Phone: | +36 82 565-341 |
Definitions
• the General Data Protection Regulation (GDPR) is the new Data Protection Regulation of the European Union;
data processing: any operation or set of operations on personal data or data files, whether automated or non-automated, such as collecting, recording, organizing, sorting, storing, transforming or altering, retrieving, viewing, using, communicating, transmitting, distributing or by other means of access, coordination or interconnection, restriction, deletion or destruction;
data processor: any natural or legal person, public authority, agency or any other body which processes personal data on behalf of the controller;
personal data: any information relating to an identified or identifiable natural person (data subject); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier (such as a name, number, location data, online identifier, or one or more factors relating to the physical, physiological, genetic, mental, economic, cultural or social identity of the natural person)
controller: any natural or legal person, public authority, agency or any other body which alone or jointly with others determines the purposes and means of the processing of personal data; where the purposes and means of the processing are determined by Union or Member State law, the controller or the specific criteria for the designation of the controller may also be determined by Union or Member State law;
data subject's consent: a voluntary, specific and well-informed and clear statement of the data subject's intention to indicate his or her consent to the processing of personal data concerning him or her by means of a statement or an act which unequivocally expresses confirmation;
data protection incident: a security breach that results in the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or unauthorized access to, personal data that is transmitted, stored, or otherwise handled.
recipient: any natural or legal person, public authority, agency or any other body to whom personal data are disclosed, whether or not being a third party. Public authorities that may have access to personal data in the context of an individual investigation in accordance with Union or Member State law shall not be considered as recipients; the processing of such data by these public authorities must comply with the applicable data protection rules in accordance with the purposes of the processing;
third party: a natural or legal person, public authority, agency or any other body other than the data subject, the controller, the processor or persons who have been authorized to process personal data under the direct control of the controller or processor.
Data Processing Policy
The controller declares that he/she carries out the processing of personal data in accordance with the provisions of the Data Processing Notice and complies with the provisions of the relevant legislation, in particular the following:
The processing of personal data must be carried out lawfully and fairly and in a way that is transparent to the data subject.
Personal data may only be collected for specified, explicit and legitimate purposes.
The purpose of the processing of personal data must be adequate, relevant and and not excessive.
Personal information must be accurate and up to date. Inaccurate personal data must be deleted immediately.
Personal data must be stored in such a way as to enable identification of data subjects only for as long as is necessary. Personal data may be stored for a longer period only if the storage is for the purpose of archiving in the public interest, for scientific and historical research purposes or for statistical purposes.
The processing of personal data must be carried out in such a way as to ensure adequate security of the personal data, including protection against unauthorized or unlawful processing, accidental loss, destruction or damage, by means of appropriate technical or organizational measures.
The principles of data protection shall apply to all information concerning an identified or identifiable natural person.
Important Data Processing Information
The purpose of data processing is to enable the service provider/controller to provide appropriate additional services to the persons registered on the website during the operation of the website.
The legal basis for data processing is the consent of the data subject.
The persons involved in data processing are the registered users of the website.
Duration of data processing and deletion of data. The duration of data processing always depends on the specific user purpose, but the data must be deleted immediately if the original purpose has already been achieved. The consent of the data subject may be withdrawn at any time by the data subject by sending a letter to the contact e-mail address. If there is no legal obstacle to the deletion your data will be deleted.
The controller and its employees have the right to access the data.
The data subject may request from the controller access to, rectification, erasure or restriction of the processing of personal data concerning him or her, and may object to the processing of such personal data and to the data subject's right to data portability.
The data subject may withdraw his or her consent to the processing at any time, but this shall not affect the lawfulness of the processing carried out prior to the withdrawal.
The person concerned may exercise the right to lodge a complaint with the supervisory authority.
If the person concerned wishes to use the benefits of registration, ie to use the services of the website for this purpose, it is necessary to provide the requested personal data. The data subject is not obliged to provide personal data, and there are no adverse consequences for the non-provision of data. However, it is not possible to use certain functions of the website without registration.
The data subject shall have the right, at the request of the controller, to correct or supplement inaccurate personal data concerning him or her without undue delay.
The data subject shall have the right, at the request of the controller, to delete inaccurate personal data concerning him or her without undue delay, and the controller shall delete the personal data concerning him or her without undue delay, unless there are other legal grounds for processing.
Modification or deletion of personal data can be initiated by e-mail, phone or letter using the contact options provided above.
Registration on the website
The purpose of data processing is to provide additional services and contact.
The legal basis for registration data processing is your consent.
The persons involved in data processing are the registered users of the website.
Duration of data processing. The data will be processed until the consent is withdrawn. You can withdraw your consent to data processing at any time by sending an e-mail to the contact e-mail address.
The data will be deleted when the consent to the data processing is revoked. You may revoke your consent to data processing at any time by sending an email to your contact email address.
The controller and its employees have the right to access the data.
Method of data storage: electronic.
Modification or deletion of personal data can be initiated by e-mail, phone or letter using the contact options provided above.
The provision of personal data is absolutely necessary for identification in the databases and for keeping in touch. The exact company name and address are required for invoicing, which is a legal obligation.
Scope of data managed | The specific purpose of data processing |
Name | Name Identification, contact, invoicing. |
Company name | Identification, contact, invoicing. |
Address | Identification, contact, invoicing. |
Identification, contact. | |
Phone | Identification, contact. |
Date of registration | Technical information operation. |
IP address | Technical information operation. |
You can give your consent to the data processing by intentionally ticking the dedicated blank checkbox on the website.
You, as a data subject, may object to the processing of your personal data and are entitled to proceed in this regard in accordance with the above detailed Data Processing Information and this Notice and the legislation described in this Notice.
Placing an order
The purpose of data processing is to provide additional services, contact us and send a confirmation e-mail. We will only be able to fulfil your order if you provide your contact and billing information, which is strictly required for contact and billing.
The legal basis for data processing is your consent. In the case of invoicing, the data processing is based on a legal requirement.
The persons involved in data processing are the registered users of the website.
Duration of data processing. Data processing takes place until the revocation of a legal requirement or the withdrawal of consent. You can withdraw your consent to data processing at any time by sending an e-mail to the contact e-mail address.
The data will be deleted when the consent to the data processing is revoked. You may revoke your consent to data processing at any time by sending an email to your contact email address. The invoicing data can be deleted in accordance with legal regulations.
The controller and its employees have the right to access the data.
Method of data storage: electronic.
Modification or deletion of personal data can be initiated by e-mail, phone or letter using the contact options provided above.
Scope of data managed | The specific purpose of data processing |
Name | Identification, contact, invoicing. |
Company name | Identification, contact, invoicing. |
Address | Identification, contact, invoicing. |
Identification, contact. | |
Phone | Identification, contact. |
Details of the ordered product | Identification of the product. |
Date of registration | Technical information operation. |
IP address | Technical information operation. |
You can give your consent to the data processing by intentionally ticking the dedicated blank checkbox on the website.
The data subject may object to the processing of his or her personal data and is entitled to proceed in accordance with the data processing information detailed above and this prospectus, as well as the legislation described in the prospectus.
Invoicing
The purpose of data processing is to issue and send an electronic invoice as an e-mail attachment.
The legal basis for data processing is mandatory data processing based on legislation.
The parties involved in data processing are the service partners of the service provider.
Duration of data processing. Data processing takes place until the revocation of a legal requirement or the withdrawal of consent. You can withdraw your consent to data processing at any time by sending an e-mail to the contact e-mail address.
The data will be deleted when the consent to the data processing is revoked. You may revoke your consent to data processing at any time by sending an email to your contact email address. The invoicing data can be deleted in accordance with legal regulations.
The controller and its employees have the right to access the data.
Method of data storage: electronic.
Modification or deletion of invoice information can be initiated by e-mail, phone or a letter using the contact options provided above.
Scope of data managed | The specific purpose of data processing |
Name | Identification, contact, invoicing. |
Company name | Identification, contact, invoicing. |
Address | Identification, contact, invoicing. |
Identification, contact. | |
Phone | Identification, contact. |
Tax number/tax identifier | Identification of the customer. |
Invoice information | Identification of the invoice. |
Date of invoice | Technical information operation. |
You can give your consent to the data processing by intentionally ticking the dedicated blank checkbox on the website.
The data subject may object to the processing of his or her personal data and is entitled to proceed in accordance with the data processing information detailed above and this prospectus, as well as the legislation described in the prospectus.
Cookies
Cookies are placed by the websites visited on the user's computer and contain information such as web page settings or login status.
Cookies are therefore small files created by the websites you visit. Saving browsing data improves the user experience. With the help of cookies, the website remembers the settings of the web page and offers locally relevant content.
The website of the service provider sends a small file (cookie) to the computer of the visitors of the website in order to determine the fact and time of the visit. The service provider informs the visitor of the website about this.
The people involved in data processing are the visitors of the website.
The purpose of data processing is to provide additional services, identification, and tracking of visitors.
Legal basis for data processing. The user's consent is not required if the service provider absolutely needs the use of cookies.
The scope of the data: unique identification number, time, setting data.
The user has the option to delete cookies from the browsers at any time in the Settings menu.
Controllers are entitled to access the data. The controller does not process personal data by the usage of cookies.
Method of data storage: electronic.
When using Google Analytics:
Google Analytics uses internal cookies to generate reports for its customers about the habits of users of the website.
Google uses the information on behalf of the website operator to:
evaluate how users use the website. As an additional service, it prepares reports related to the activity of the website for the website operator in order to perform the additional services.
The data is stored in an encrypted format on Google’s servers to make it more difficult and prevent data misuse.
Google Analytics can be disabled as described below. Quote from the web page:
Website users who do not want Google Analytics to report JavaScript on their data can install the Google Analytics Opt-out Browser Add-on. The plugin prohibits Google Analytics JavaScript (ga.js, analytics.js, and dc.js) from sending information to Google Analytics. The browser add-on can be used in most newer browsers. The Google Analytics Opt-out Browser Add-on does not prevent data from being sent to the site itself and other web analytics services.
https://support.google.com/analytics/answer/6004245
Google's Privacy Policy: https://policies.google.com/privacy
Information on the use and protection of the data can be found in detail at the links above.
Privacy in detail:
Data Processor
Hosting provider:
Name/company name: | Wawona Internet Kft |
Headquarters: | H-7621 Pécs, Perczel M.u.35. |
Phone: | 06-72/227-718 |
E-mail: |
|
The information you provide is stored on a server operated by your hosting provider. The data can only be accessed by our employees and the employees operating the server, but they are all responsible for the secure handling of the data.
Name of the activity: hosting service, server service.
The purpose of data processing is to ensure the operation of the website.
Processed data: personal data provided by the data subject
Duration of data processing and deadline for deletion of data. Data processing until the end of the operation of the website or in accordance with the contractual agreement between the operator of the website and the hosting provider. If necessary, the person concerned may also request the deletion of his data by contacting the hosting provider.
The legal basis for data processing is the consent of the data subject or data processing based on law.
Rights related to data processing
Right to request information
Through the provided contact details, you can request information from us about what data our company handles for you, on what legal basis, for what data management purpose, from what source, for how long. Upon your request, we will send you the information immediately, but no later than 30 days, to the e-mail contact you provided.
Right to rectification
You can ask us to change any of your details via the contact details provided. We will take action on your request immediately, but within a maximum of 30 days, and we will send you information by e-mail.
Right of erasure
You can ask us to delete your data via the contact details provided. At your request, we will do this immediately, but within a maximum of 30 days, and we will send information to the email contact you provided.
Right of blocking
You can ask us to block your data via the contact details provided. The blocking lasts as long as the reason you specify requires the data to be stored. At your request, we will do this immediately, but within a maximum of 30 days, and we will send information to the email contact you provided.
Right to object
You can object to the data processing via the contact details provided. We will investigate the object as soon as possible, but no later than 15 days from the submission of the application, we will make a decision on the merits of it and we will inform you about its decision by e-mail.
Enforcement option concerning data processing
In case of any illegal data processing you experience, notify our company, so that you have the opportunity to restore the legal status in a short time. We will do our best to solve the problem outlined.
If you consider that the legal status cannot be restored, please notify the authority at the following contact details:
Hungarian National Authority for Data Protection and Freedom of Information
Postal address: 1530 Budapest, Pf .: 5.
Address: 1125 Budapest, Szilágyi Erzsébet avenue 22 / c
Phone: +36 (1) 391-1400
Fax: +36 (1) 391-1410
E-mail: customer service (at) naih.hu
URL https://naih.hu
coordinates: N 47°30'56 ''; E 18°59'57 ''
Legislation underlying data processing
• REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Regulation (EC) No 95/46 (general data protection regulation).
• 2011 CXII. Act on the right to informational self-determination and freedom of information.
• Act LXVI of 1995 on public documents, public archives and the protection of private archives
• Government Decree 335/2005 (XII. 29.) on the common provisions of the document management in public administrative bodies.
• Act CVIII of 2001 on certain issues of electronic commerce activities and information society services.
• Act C of 2003 on electronic communications.