Data Management Policy

 

Data Management Contractor: VCode Kft. 32513109-2-15

Name of the entity:  VCode Kft. 32513109-2-15          

Address of the entity: 4400 Nyíregyháza Bocskai út 18-20

 

 

Contact details

You can contact our company via email at cet@cet.hu or by phone at +36 28 200 190. In such instances, we process your email address or phone number solely in connection with your inquiry. This data processing is based on the company's legitimate business interests.

We collect and process personal data only in accordance with the law.

We send direct marketing (DM) communications only with your explicit consent, whereas system messages may be sent without such consent.

We store data with the highest possible level of security.

We transfer personal data to third parties only with your consent.

We provide you information regarding your stored personal data upon request, and you may also request the deletion of your data any time via our contact channels.

Central European Trading Kft. (2100 Gödöllő, Kőrösi Csoma utca 42. ; tax ID: 13898641-2-13) (hereinafter referred to as the "Service Provider" or "Data Controller") hereby declares to accept provisions of this notice as follows:

Section 20 (1) of Act CXII. of 2011 on the Freedom of Information Act  stipulates that the relevant party (in this case, the user of the webshop; hereinafter referred to as the "User") must be informed prior to the commencement of data processing as to whether the data processing is based on consent or it is mandatory.

Prior to the commencement of data processing, the User must be clearly and comprehensively informed of all facts relating to the processing of their data, including, -in particular- the purpose and legal basis of the data processing, the identity of the parties authorized to process the data, and the duration of the data processing.

 

Pursuant to Section 6(1) of the Freedom of Information Act, the User must also be informed that personal data may be processed even if obtaining the User’s consent is impossible or would entail disproportionate cost, and the processing of the personal data

• legally necessary for compliance of data submission by the data controller, or

• necessary for the purposes of the legitimate interests pursued by the controller or by a  third party,

 and the pursuit of such interests is proportionate to the restriction of the right to the protection of personal data.

The information provided must also cover the User’s rights and legal remedies regarding the data processing in question.

If informing the User individually is impossible or would involve disproportionate cost (such as in the case of an online store), the information may also be provided by making the following details publicly available:

a) the fact of data collection,

b) the scope 

c) the purpose of data collection,

d) the duration of data processing,

e) the identity of the potential data controllers’ authorized to access the data,

f) description of the User’s rights and legal remedies regarding the data processing  and

g) the registration number of the data processing, if the processing is subject to registration in the data protection register.

This privacy notice governs data processing for the following websites:    https://cet.hu/ or https://, and is based on the content requirements specified above. The notice is available at the following address:   https://cet.hu/Adatvedelem

Amendments to the notice take effect upon publication at the address above.

 

Definitions (Section 3)

1. User:  any natural person identified or—directly or indirectly—identifiable on the  basis of personal data;
2. Personal data: data relating to the data subject—in particular the User’s name, identification number, and information characteristic of one or more factors specific to their physical, physiological, mental, economic, cultural, or social identity—as well as any conclusion drawn from such data concerning the relevant party;
3. Data controller: the natural or legal person, or organization without legal personality, which, alone or jointly with others, determines the purposes of the processing of data, makes and implements decisions regarding data processing (including the means used), or has such decisions implemented by a data processor commissioned;
4. Data handling: any operation or set of operations performed, regardless of the procedure, such as in particular the collection, recording, organization, storage, alteration, use, retrieval, transmission, disclosure, alignment or combination, blocking, erasure, and destruction of data, as well as the prevention of the further use of data, taking photos, sound-, or image recordings, and the recording of physical characteristics suitable for identifying a person (e.g., fingerprints or palm prints, DNA samples, iris images);
5. Data processing: the performance of technical tasks related to data processing operations, regardless of the method or tools used to carry out the operations or the location of such performance, provided that the technical task is performed on the data;
6. Data processor: a natural or legal person, or an organization without legal personality, that processes data based on a contract concluded with the data controller—including contracts concluded pursuant to statutory provisions;
7. Data protection incident: the unlawful processing of personal data, including in particular unauthorized access, alteration, transmission, disclosure, deletion, or destruction, as well as accidental destruction or damage.

 

Data processing related to the operation of the webshop

 Pursuant to Section 20(4) of Act CXII. of 2011 on the Freedom of Information Act, the following must be specified regarding data processing associated with the operation of the webshop:

a) the fact of data collection,

b) the scope of the data subjects,

c) the purpose of data collection,

d) the duration of data processing,

e) the identity of potential data controllers authorized to access the data,

f) a description of the data subjects' rights regarding data processing.

 

The fact of data collection, the scope of the data processed, and the purpose of data processing:

 

Personal data	Purpose of data processing
Name and Surname	Necessary for keeping in touch, for the purchase itself and for issuing an invoice
E-mail	Necessary for contacting in writing
Telephone	Keeping in touch more efficiently related to delivery, invoicing or any other issues.
Name and address for invoicing	Necessary for issuance of invoices; formation of the contract, determination and modification of its terms, monitoring of its performance, invoicing of fees arising therefrom, and enforcement of related claims.
Name and address for delivery	Necessary for delivery at place.
Date of purchase	Execution of the technical operation.
IP address at the purchase