PRIVACY NOTICE
This Privacy Notice provides information on the data processing activities implemented by etuHome - EMEAA Kft., as the Data Controller, in connection with the visit to the www.etuhome.hu website (hereinafter: Website), user registration, purchasing products, newsletter subscription, and related services.
1) Data Controller
|
Name of the data controller |
etuHome - EMEAA Kft. |
|
Headquarters and postal address |
1134 Budapest, Váci út 33. 1077 Budapest Király utca 33. |
|
Company registration number |
01-09-279742 |
|
Tax number |
25517974-2-41 |
|
Public tax ID number |
HU25517974 |
|
|
2) PROCESSED PERSONAL DATA
a) Visiting the Website
You may visit our website without providing any personal information, however, you may be required to provide personal information when using certain features of the website (such as creating a user account or purchasing a product).
b) Contacting us
You can contact us via the form on the Website or by sending a message to the e-mail address provided above.
|
Collected personal data |
Purpose of data processing |
Lawful basis for processing |
Retention period |
|
Surname and first name E-mail address, Subject (of inquiry), Message text
Optional: Company name, Phone number |
Contacting the data subject, answering requests |
in the case of a natural person data subject's consent
in the case of a non-natural person e.g., in the case of a contact person, our legitimate interest in the provision of the service |
Until withdrawal of consent, but not more than 1 year after contact |
c) Order - related data processing activities
During the purchase on the Website, in connection with the order, the Data Controller processing personal data for the following purposes. The possible consequence of failure to provide data is the failure of the contract, and thus the failure to place the order.
|
Collected personal data |
Purpose of data processing |
Lawful basis for processing |
Retention period |
|
Surname and first name
E-mail address, Phone number Address, Shipping address
Order ID
Order details (products ordered, order value, date, delivery details, payment method)
Data related to online payment * (Status, Amount, Transaction start time, Status, Authorization Code, Order Status, Server Store) |
Managing orders and creating records |
In the case of a natural person, performance of a contract under Article 6 (1) (b) of the GDPR
In the case of a legal person, a legitimate interest of the Data Controller under Article 6 (1) (f) GDPR |
5 years after the end of the contract |
|
Guarantee service |
compliance with a legal obligation under Article 6 (1) (c) of the GDPR |
8 years |
|
|
Issuance of an invoice |
8 years |
||
|
Delivery |
In the case of a natural person, performance of a contract under Article 6 (1) (b) of the GDPR
In the case of a legal person, a legitimate interest of the Data Controller under Article 6 (1) (f) GDPR |
5 years after the end of the contract |
|
|
Online payment |
* When providing online payment solutions, the Data Controller does not store or record credit card information.
d) Create a user account (registration)
The Website provides an opportunity for your visitors to create a user account to store their information to facilitate future purchases.
|
Collected personal data |
Purpose of data processing |
Lawful basis for processing |
Retention period |
|
Surname and first name E-mail address, Password (encrypted) |
Create a user account |
under Article 6 (1) (b) of the GDPR, Consent of the data subject |
Until 1 year from the last activity of the user (login) or user's deletion of the registered account |
e) Newsletter
When using the personal data provided when subscribing to a newsletter, we will treat it as set out below. You can unsubscribe by clicking on the unsubscribe button in the newsletter or based on a validation request.
|
Collected personal data |
Purpose of data processing |
Lawful basis for processing |
Retention period |
|
Surname and first name E-mail address |
Sending letters to subscribed users about news and events related to services |
Under Article 6 (1) (b) of the GDPR, Consent of the data subject |
Until withdrawal of consent |
f) Automated decision making and profiling
We will inform you that no automated decision-making or profiling will take place.
3) Data shared with
The data processing and controlling is subject to our employees who work on the operation, maintenance, and updating of the website and managing orders.
4) Data transfers (Data processors)
|
Data Processor |
Contact details |
Purpose of processing |
|
Process Solutions Kft. |
1134 Budapest, Váci út 33. |
Accounting services |
|
TNT Express Hungary Kft. |
1185 Budapest II. Logistics Center - Office Building, BUD International Airport Building 283. |
Delivering products to customers |
5) Information security
Our organization is committed to data security, considering the costs of the available technology and the implementation will take them to reasonably expect action - including technical measures - that allow you to have your personal data safe (e.g., antivirus, application firewall, access/privacy rights Controlling, etc.). To prevent unauthorized access or disclosure, we have set up appropriate physical, electronic, and management procedures to protect and secure collected data.
Our website uses SSL (Secure Socket Layer) encryption, which guarantees that the data forwarded on the internet are not accessed by third parties and cannot be altered by unauthorized persons. The status of active encrypted connection is verified by a certificate visible in the web browser when the Website is opened.
6) YOUR RIGHTS REGARDING YOUR PERSONAL DATA
You may request information at any time about your personal data we control and may request to correct, refine, delete or limit any of your data and to exercise any of the rights allowed by law.
Right to request information
You may request information via the contact details above about
- what personal data,
- on what legal reason,
- for what purpose,
- from what source,
- for how long is controlled,
- to who, when, on what legal basis the organization granted access to forwarded what personal information of the data subject.
While we make every effort to prevent this from happening, in the event of a privacy incident, if your personal information is compromised, we will send you information.
Right to rectification
The data subject may request in a written form to modify any of his or her data (for example the email address might be changed at any time). The organization will fulfill the request in less than a month and will inform the data subject about the change via email.
Right to erasure
If you do not want us to continue to process your data or you believe that we are processing it illegally, you can request the deletion of your personal data.
The Data Controller shall reject the data subject's request for deletion if the conditions for the further processing and storage of personal data are required by Article 17 (3) of the GDPR. If there is no such obligation, the Data Controller shall fulfill the request immediately, but not later than within one month, and shall notify the person concerned of the contact details provided for this purpose.
Right to restriction of processing
If the conditions set out in Article 18 of the GDPR are met, the data subject may request that his or her personal data be blocked by the Data Controller (clearly indicating the limited nature of the data processing and ensuring that it is treated separately from other data). The consequence of blocking is that personal data, with the exception of storage, may only be processed for the purposes specified in Article 18 (2) of the GDPR. The blocking shall be maintained by the Data Controller for the period specified in Article 18 (1) of the GDPR. The Data Controller shall inform the data subject in advance of the unblocking.
Data portability
The data subject may request that the Data Controller send his or her personal data concerning him or her to him or her in a structured, widely used, machine-readable format to the contact details provided for this purpose. The data subject has the right to transfer this data to another data controller and may request the Data Controller to transfer the data directly to the other data controller if this is technically feasible.
Right to object
You may object to the processing of your personal data in the legitimate interest. In this case, we may not further process your personal data unless it can be demonstrated that the processing is justified by compelling legitimate reasons which take precedence over your rights, interests, and freedoms or which relate to the submission, enforcement, or protection of legal claims.
Complaints and Remedies
If you have any questions or comments regarding this data management information or the handling of personal data, or the interpretation of laws and regulations, please feel free to contact us at our contact details above.
In connection with the processing of data, you can also appeal to the supervisory authority if, in your opinion, the processing of personal data concerning you violates the legal regulations governing data protection, and finally you can also apply to the Court.
|
Supervisory Authority: Hungarian National Authority for Data Protection and Freedom of Information / Nemzeti Adatvédelmi és Információszabadság Hatósága 1055 Budapest, Falk Miksa utca 9-11. Tel: +36 1 391 1400 Fax: +36 1 391 1410 Email: ugyfelszolgalat@naih.hu |