in which I inform you, as a visitor to my website and a user of my services, about my data management and data protection rules.
1. What principles do I follow in my data management?
I follow the following principles in my data management:
• I process personal data lawfully and fairly, and transparently for you.
• I collect personal data only for specified, explicit and legitimate purposes and do not process them in a way that is incompatible with those purposes.
• The personal data I collect and process are adequate and relevant for the purposes of the data management and are limited to what is necessary.
• I take all reasonable steps to ensure that the data I process is accurate and, where necessary, up-to-date, and that inaccurate personal data is deleted or rectified without delay.
• I store personal data in a form that allows you to be identified only for the time necessary to achieve the purposes for which the personal data are processed.
• I ensure the appropriate security of personal data against unauthorized or unlawful processing, accidental loss, destruction or damage of data by applying appropriate technical and organizational measures.
Your personal data:
• I process your personal data:
• Based on your prior informed and voluntary consent and only to the extent necessary, in each case for a purpose, i.e. I collect, record, organize, store and use it.
• In some cases, the processing of your data is based on legal requirements and is mandatory, in such cases I will specifically draw your attention to this fact.
• In some cases, I or a third party has a legitimate interest in the processing of your personal data, for example the operation, development and security of my website.
2. Who am I?
• Business name / My name: Boglárka Szendrei Milosevitsné
• Registered office: Portugal
• Website: szendreiboglarka.eu
• Postal address: Pracete Calouste Gulbenkian N20 4Dto, 2560-291, Torres vesras
• Email address: info@szendreiboglarka.eu
• Tax ID: ____________________
• Registration number (sole trader): ____________________
According to Article 37 of the GDPR, I am not obliged to appoint a data protection officer.
My hosting provider details:
• Hosting provider name: Rackhost Zrt.
• Hosting provider registered office: 6722 Szeged, Tisza Lajos körút 41.
• Hosting provider website: www.rackhost.hu
• Hosting provider email address: info@rackhost.hu [1, 2]
During the processing of data – in order to provide high-quality service to my customers – I use the following data processor:
• Name of data processor (1): Rackhost Zrt.
• Address (1): 6722 Szeged, Tisza Lajos körút 41.
• Responsibilities (1): Forwarding and storing messages and emails received via the contact form
If I modify the scope of my data processors, I will include the changes in this information.
The data I process:
I only ask visitors to my website for their personal data if they wish to register, log in or participate in a prize draw.
I cannot link the personal data provided in connection with registration or the use of my marketing services, and it is not my aim to identify my visitors.
If you have any questions about data processing, you can request further information by e-mailing info@szendreiboglarka.eu. I will send you my answer within 15 days (but no later than 1 month) to the contact information you provided.
3. What are cookies and how do I manage them?
Cookies are small data files stored on your computer by your browser. They may be saved when you use my website. Most browsers automatically accept them, but you can refuse, disable or delete them in your browser settings. You can find more information about managing cookies in the “help” menu of your browser.
There are cookies that do not require your prior consent. My website provides brief information about these at the beginning of your first visit, such as authentication, multimedia player, load balancer, session cookies that help customize the user interface, and user-centric security cookies.
I will inform you about cookies that require consent – if data processing begins when you visit the site – at the beginning of your first visit and ask for your consent.
I do not use or allow cookies that allow third parties to collect data without your consent.
Accepting cookies is not mandatory, but I do not assume responsibility if my website does not function as expected if cookies are not allowed.
What cookies do I use?
• Name: elementor
◦ Provider: szendreiboglarka.eu
◦ Purpose: Registers a unique identifier that generates statistical data on how the visitor uses the website.
◦ Expiration: work flow
(deleted when the browser is closed)
◦ Type: HTTP/Functional
• Name: wpemojisettingssupports
◦ Provider: szendreiboglarka.eu
◦ Purpose: Default cookie of the WordPress engine. It checks whether the visitor’s browser can properly display emoticons (emojis) and special characters on the page.
◦ Expiration: Session
◦ Type: HTTP/Functional
•
You can read more about third-party cookies on this page.
4. What else do you need to know about my data management related to my website?
You voluntarily provide me with personal data during registration or when contacting me, which is why I ask that you pay special attention to the authenticity, correctness and accuracy of your data when providing it, because you are responsible for them. Incorrect, inaccurate or incomplete data may prevent you from using my services.
If you provide personal data other than your own, I assume that you have the necessary authorization to do so.
You can withdraw your consent to data processing at any time free of charge:
• by deleting your registration,
• by withdrawing your consent to data processing, or
• by withdrawing or requesting the blocking of your consent to the processing or use of any data that must be filled in during registration.
For technical reasons, I undertake to register the withdrawal of consent within a 30-day period, but I draw your attention to the fact that I may process certain data even after the withdrawal of consent in order to fulfill my legal obligation or to assert my legitimate interests.
In the event of the use of misleading personal data, or if one of my visitors commits a crime or attacks my system, I will immediately delete the data of the given visitor at the same time as destroying their registration, or – if necessary – I will retain them for the duration of establishing civil liability or conducting criminal proceedings.
5. What do you need to know about my data processing for direct marketing and newsletter purposes?
You can give your consent to me using your personal data for marketing purposes by making a statement during registration or later, by modifying your personal data stored on the newsletter and/or direct marketing registration interface (i.e. by clearly stating your intention to consent). In this case – until the consent is withdrawn – I will also process your data for the purpose of sending direct marketing and/or newsletters, and I will send you advertising and other mailings, as well as information and offers and/or newsletters (Grtv. § 6).
You can give your consent for direct marketing and newsletters together or separately, and you can withdraw it/them free of charge and at any time.
I consider the cancellation of registration to be a withdrawal of consent in all cases. I do not interpret the withdrawal of consent for data processing for direct marketing and/or newsletter purposes as a withdrawal of other data processing consent related to my website.
How does this work? What and on what basis do I retain data if you have withdrawn your newsletter subscription?
In the case of individual contributions, each contribution is for a specific, specific purpose. General registration on the website (e.g. customer account) and subscribing to the newsletter are two separate purposes that run in separate databases, so the two are not related. If you unsubscribe from the newsletter, your data will be permanently deleted from the newsletter sending database. If you do not delete your existing general registration or customer account on the website, I will continue to process the data necessary for this on a separate legal basis for the purposes described there (e.g. keeping in touch, accessing previous orders).
I undertake to register the withdrawal of individual contributions or unsubscribes – for technical reasons – with a maximum deadline of 15 days.
6. What should you know about prize games?
I can organize prize games as a campaign, the individual conditions of which are contained in separate regulations. The rules of the current promotion can always be found on the home page of my website, in a clearly visible, centrally located link.
7. Other data processing issues
I can only transfer your data within the framework specified by law. In the case of my data processors, I ensure by stipulating strict contractual conditions that they cannot use your personal data for purposes contrary to your consent (further information can be found in point 2).
I do not transfer data abroad (to a third country).
The court, the prosecutor’s office and other authorities (e.g. the police, the tax office, the National Data Protection and Freedom of Information Authority) may contact me to provide information, disclose data or make documents available. In these cases, I must fulfill my obligation to provide data, but only to achieve the purpose of the request to the extent strictly necessary.
Any collaborators involved in my data management and/or data processing are entitled to access your personal data to a predetermined extent – subject to a strict confidentiality obligation.
I protect your personal data with appropriate technical and other measures and ensure the security and availability of the data, and I protect them from unauthorized access, alteration, damage, disclosure and any other unauthorized use.
As part of my technical and organizational measures, I use encryption, password protection and continuously updated anti-virus software, and I keep paper-based documents locked. However, I would like to draw your attention to the fact that data transmission via the Internet cannot be considered a completely secure data transmission. I will do everything in my power to make the processes as secure as possible, but I cannot assume full responsibility for data transmission via my website. However, I adhere to strict security standards in order to protect your data and prevent unlawful access.
Regarding security issues, I ask for your help in carefully keeping your access password to my website and not sharing this password with anyone.
8. What are your rights and legal remedies?
Regarding data processing, you can:
• request information,
• request the correction, modification, and completion of your personal data processed by me,
• object to data processing and request the deletion and blocking of your data (with the exception of mandatory, legally required data processing),
• seek legal remedies in court,
• file a complaint with the supervisory authority or initiate proceedings.
If you are a resident of Hungary, you can file a complaint with the Hungarian authority:
Supervisory Authority: National Data Protection and Freedom of Information Authority (NAIH) [1]
• Registered office: 1055 Budapest, Falk Miksa utca 9-11.
• Mailing address: 1363 Budapest, Pf.: 9.
• Telephone: +36 (30) 683-5969, +36 (30) 549-6838, +36 (1) 391-1400
• E-mail: ugyfelszolgalat@naih.hu
• Website: https://naih.hu/
The primary European supervisory authority competent according to the registered office of the Data Controller (Portugal): Comissão Nacional de Proteção de Dados (CNPD)
Registered office: Av. D. Carlos I, 134 – 1.º, 1200-651 Lisboa
Website: https://www.cnpd.pt/
At your request, I will provide information about the data I manage or that I – or my authorized data processor – processes:
• the data, their source,
• the purpose and legal basis of the data management,
• the duration (if this is not possible, the criteria for determining this period),
• the name, address of my data processors and their activities related to data processing,
• the circumstances, effects of any data protection incidents and the measures I have taken to address and prevent them, and
• in the event of the transfer of your personal data, the legal basis and recipient of the data transfer.
I will provide the information within 15 days (but no later than 1 month) of the submission of the request. The information is free of charge, unless you have already submitted a request for information to me regarding the same data set in the current year. I will refund any costs already paid by you in the event that I have processed the data unlawfully or the request for information led to a correction. I may refuse to provide information only in cases provided for by law, indicating the exact legal basis and explaining the possibility of judicial remedy or contacting the Authority.
I will notify you and all those to whom I have previously transferred the data for data processing purposes of the correction, blocking, marking and deletion of personal data, unless the failure to notify does not prejudice your legitimate interests.
If I do not comply with your request for correction, blocking or deletion, I will inform you in writing or – with your consent – electronically within 15 days (but no later than 1 month) of receipt of the request of the reasons for my refusal and inform you of the possibility of legal recourse in court and of contacting the Authority.
If you object to the processing of your personal data, I will examine the objection within 15 days (but no later than 1 month) of the submission of the request and will inform you of my decision in writing. If I decide that your objection is well-founded, I will terminate the data processing – including further data collection and transmission – and block the data, and I will notify all those to whom I have previously transmitted the personal data affected by the objection of the objection and of the measures taken on its basis.
I may refuse to comply with the request if I can prove , that the data processing is justified by compelling legitimate grounds which override your interests, rights and freedoms, or which are related to the establishment, exercise or defence of legal claims. If you disagree with my decision or if I miss the deadline, you may apply to the court within 30 days of the notification of the decision or the last day of the deadline.
The adjudication of data protection lawsuits falls within the jurisdiction of the court. The lawsuit may also be initiated – at your choice – before the court of your place of residence or stay. A foreign citizen may also lodge a complaint with the supervisory authority competent for his/her place of residence.
Before lodging a complaint with the supervisory authority or court – in order to facilitate consultation and resolve the problem as quickly and amicably as possible – I ask you to contact me at the contact details provided.
9. What are the main legal provisions governing my activities?
• European Union and International regulations:
• Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR)
Portuguese legislation (according to the registered office of the Data Controller):
• Lei n.º 58/2019, de 8 de agosto (Lei da proteção de dados pessoais)
• Decreto-Lei n.º 7/2004, de 7 de janeiro (Lei do Comércio Eletrónico)
• Lei n.º 41/2004, de 18 de agosto (Proteção de dados nas comunicações eletrónicas)
Hungarian legislation (for the protection of service users):
• Act CXII of 2011 on the right to informational self-determination and freedom of information (Info tv.)
• Act V of 2013 on the Civil Code (Ptk.)
• Act CVIII of 2001 Act on Electronic Commerce Services (Eker Act)
• Act XLVIII of 2008 on the Basic Conditions of Economic Advertising (Grtv)
10. Amendment of the Data Processing Information
I reserve the right to amend this Data Processing Information, of which I will inform the data subjects in an appropriate manner. Information on data processing and the current text are published on the website szendreiboglarka.eu.
