Privacy statement

Privacy statement for visitors and users of the http://www.szvarians.hu website.

Introduction

The service provider / controller processes the personal data of visitors to the website for the purpose of providing them with suitable services.

The service provider intends to fully comply with the relevant provisions of law pertaining to the processing of personal data, and especially with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council.

This privacy statement was drawn up on the basis of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, also with attention to the provisions of CXII of 2011 on the Right of Informational Self-Determination and on Freedom of Information.

The name of the service provider, controller

Company name:	Sz.Variáns Kft.
Registered seat:	4030 Debrecen Vikár Béla utca 4/B.
Tax number:	11559443-2-09
Name and address of website:	www.szvarians.hu
The location of the Privacy Statement:	www.szvarians.hu/adatvedelmi-tajekoztato

The contact information of the controller

Company name:	Sz.Variáns Kft.
Registered seat:	4030 Debrecen Vikár Béla utca 4/B.
Postal address:	4030 Debrecen Vikár Béla utca 4/B.
E-mail:	szvarians@szvarians.hu
Phone:	52/502-860, 1/785-8685

Definitions

GDPR (General Data Protection Regulation), the new data protection regulation of the European Union;

processing: any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

processor: a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

personal data: information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

controller: the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;

consent of the data subject: any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;

personal data breach: a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed;

recipient: a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing;

third party: a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.

The principles of processing

The controller declares that it processes the data of natural persons in accordance with the Privacy Statement, and complies with the relevant provisions of law, with special attention to the following:

Personal data shall be processed lawfully and fairly, in a manner that is transparent to data subjects.
Personal data may only be collected for certain, clear and lawful purposes.
The purpose of the processing of personal data shall be relevant and only to the necessary extent.
The personal data shall be accurate and up to date. Inaccurate personal data shall be deleted without delay.
Personal data shall be stored in such a way that data subjects may be identified only for the necessary length of time. The storage of personal data for a longer time may only take place for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes.
Personal data shall be processed in a manner that ensures the appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.
The principles of data protection shall apply to any information concerning an identified or identifiable natural person.

Important information on data processing

The purpose of data processing is to enable the service provider / controller to provide suitable additional services for visitors of the website during the operation of the latter.

The legal basis for processing is the consent of the data subject.

The scope of data subjects shall be users (visitors) of the website, as well as persons requesting quotations.

The duration of the data processing and the erasure of data. The duration of the data processing shall be always a function of the specific purpose of use, but the data shall be deleted without delay once the given purpose has been achieved. The data subject may revoke his consent to the processing data at any time, by way of a message sent to the e-mail address provided as contact. If there is no legal obstacle to the deletion, the personal data shall be erased.

The controller and its employees may have access to the data.

The data subject may request from the controller access to and rectification or erasure of personal data or restriction of processing concerning the data subject or to object to processing as well as the right to data portability.

The data subject may revoke his consent to the processing of data at any time; however, this shall not affect the affect the lawfulness of the processing of data based on consent before such revocation.

The data subject shall have the right to lodge a complaint with a supervisory authority.

If the data subject wishes to use the advantages offered by way of requesting a quotation, i.e. wishes to use this service of the website, it is necessary to enter the required personal data. The data subject is not required to supply personal data, and the failure to supply such data may not have any adverse consequences on him. The use of certain functions of the website, however, is not possible without providing the personal data.

The data subject shall have the right to obtain from the controller, without undue delay, the rectification or the supplementation of inaccurate personal data concerning him or her.

The data subject shall have the right to obtain from the controller the erasure of any inaccurate personal data concerning him or her without undue delay and the controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies:

The rectification or erasure of personal data may be initiated via e-mail, telephone or postal mail, using the contact information provided above.

Requesting a quotation via the website

The purpose of the data processing is the provision of additional services and establishing contact.

The legal basis for the data processing is your consent.

The scope of data subjects shall be users (visitors) of the website.

The duration of the data processing. The data processing shall take place until you revoke your consent. You may revoke your consent to the data processing at any time, by way of a message sent to the e-mail address provided as contact.

The deletion of the data shall take place upon the revocation of the consent. You may revoke your consent to the data processing by way of writing to the e-mail address provided as contact.

The controller and its employees may have access to the data.

The storage method of the data: electronic.

The rectification or erasure of personal data may be initiated via e-mail, telephone or postal mail, using the contact information provided above.

The provision of personal data is indispensable for identification in the databases and for maintaining contact. The precise company name and address are necessary for invoicing, based on a statutory obligation.

Scope of the controlled data	The specific purpose of the processed data
Name	Identification, maintaining contact, invoicing
Company name	Identification, maintaining contact, invoicing
E-mail address	Identification, maintaining contact
Telephone number	Identification, maintaining contact
IP address	Technical information operation

The user may give his consent to the processing of data by way of marking the empty checkbox located on the website for this specific purpose.

You, as a data subject, may object to the processing of your personal data; in this respect you have the right to the data processing information and this privacy statement, as well as to the procedure written in the provisions of law referred to in the information.

The submission of a request for a quotation

The purpose of the data processing is the provision of additional service, establishing contact and the sending of a confirmation e-mail. We can only fulfil your request for a quotation if your provide your contact information, which are indispensable for maintaining contact and for subsequent invoicing.

The legal basis for the data processing is your consent. In case of invoicing, the processing of data is base on a provision of law.

The scope of data subjects shall be the users (visitors) of the website.

The duration of the data processing. The data processing is a statutory requirement, and shall take place until you revoke your consent. You may revoke your consent to the data processing at any time, by way of a message sent to the e-mail address provided as contact.

The deletion of the data shall take place upon the revocation of the consent. You may revoke your consent to the data processing by way of writing to the e-mail address provided as contact. The deletion of invoicing data may occur pursuant to the relevant provision of law.

The controller and its employees may have access to the data.

The storage method of the data: electronic.

The rectification or erasure of personal data may be initiated via e-mail, telephone or postal mail, using the contact information provided above.

Scope of the controlled data	The specific purpose of the processed data
Name	Identification, maintaining contact, invoicing
Company name	Identification, maintaining contact, invoicing
E-mail address	Identification, maintaining contact
Telephone number	Identification, maintaining contact
IP address	Technical information operation

The user may give his consent to the processing of data by way of marking the empty checkbox located on the website for this specific purpose.

The data subject may object to the processing of your personal data; in this respect you have the right to the data processing information and this privacy statement, as well as to the procedure written in the provisions of law referred to in the information.

Sending of quotations

As the operators of the website, we declare that, in the course of providing the information and descriptions displayed, we fully comply with the relevant provisions of law. We further declare that, in the course of requesting quotations via the website, we are not able to verify the authenticity of the contact information and to determine whether the information provided apply to a private individual or a company. We handle companies getting into contact with us as customer partners.

The purpose of the processing is the sending of professional materials, information and our response to a request for quotations.

The legal basis for the data processing is your consent.

We inform you that in case you wish to receive a quotation from us, you need to provide the required data. In case the data are not provided, we are unable to send a quotation.

The deletion of the data shall take place upon the revocation of the consent. You may revoke your consent to the data processing by way of writing to the e-mail address provided as contact.

The controller and its employees may have access to the data.

The storage method of the data: electronic.

The rectification or erasure of data may be initiated via e-mail, telephone or postal mail, using the contact information provided above.

Scope of the controlled data	The specific purpose of the processed data
Name	Identification, maintaining contact
Company name	Identification, maintaining contact
E-mail address	Identification, maintaining contact
Telephone number	Identification, maintaining contact
IP address	Technical information operation

The e-mail address – serving the purpose of maintaining contact – is indispensable for the quotation or relevant professional information to be sent to you.

Cookies

Cookies are placed on the user’s computer by the websites visited, and they contain information such as the page settings or the login status.

Cookies are, therefore, small-sized files created by the websites. They enhance the user experience by saving browsing data. With the help of cookies, the website remembers the settings, and will offer locally relevant content.

The website of the service provider places a small file (cookie) on the device of the visitors, in the interest of record the fact and time of the visit to the website. The service provider informs the visitor of the website of this.

The scope of data subjects shall be users (visitors) of the website.

The purpose of the processing is to provide additional services, identification and tracking of the visitors.

The legal basis of the processing. The consent of the user is not necessary in case the use of the cookies is indispensable for the service provider.

The scope of the data processed: unique identification number, timestamp, setting data.

The user has the option to delete the cookies from the browsers at any time in the Setting menu item.

The controllers entitled to access the data. The controller does not process any personal data when cookies are used.

The storage method of the data: electronic.

Social media sites

Social media sites are a media tool where content may be distributed via social media users. Social media uses the internet and online opportunities to enable users to become editors of content from simple users of content.
Social media include such applications where user-generated content can be found, such as Facebook, Google+, Twitter, Pinterest, etc. The forms of appearance of social media may include public speeches, lectures, presentations, descriptions of products or services.

The forms of information appearing in social media include forums, blog entries, images, videos or audio materials, message boards, e-mail messages, etc.

In accordance with the above, the scope of the processed data, in addition to personal data, may also include the public profile picture of the user.

The scope of the data subjects: all registered users.

The purpose of the data collection: the promotion of the web page or the related website.

The legal basis for processing: the voluntary consent of the data subject.

The duration of the processing: in accordance with the regulations on the given social media site.

The deadline for the deletion of the data: in accordance with the regulations on the given social media site.

Persons entitled to have access to the data: in accordance with the regulations on the given social media site.

Rights related to the processing of data: in accordance with the regulations on the given social media site.

The storage method of the data: electronic.

It is important to note that whenever the user uploads or submits personal data, he or she gives a consent to the operator of the social media site, valid for the whole world, to store or use such content. Therefore, it is important to verify that the user has full authority to use the given information that is published.

Google Analytics

Our website uses the Google Analytics application.

When Google Analytics is used:

On the basis of the internal cookies, Google Analytics prepares a report for its clients concerning the habits of the users of the website.

On commission from the operator of the website, Google uses such information to evaluate how the users are using the website. As a further service, it also prepares reports for the operator of the website concerning the activities on the website, in order for the operator to offer additional services.

The data are stored on Google’s servers in an encoded format, in order to make it difficult and ultimately to prevent any abuse of the data.

Google Analytics may be banned as follows: Quotation from the site:

Users who do not want Google Analytics to prepare a report on their visits can install the Google Analytics Opt-out browser add-on. This browser add-on instructs the scripts of Google Analytics JavaScript (ga.js, analytics.js, and dc.js) not to transfer any traffic information to Google. The add-on can be used in most recent browsers. The Google Analytics Opt-out Browser Add-on does not prevent the sending of data for the website and other internet analysis services.
https://support.google.com/analytics/answer/6004245?hl=hu

Google’s Privacy Policy: https://policies.google.com/privacy?hl=hu

Detailed information on the use and protection of the data can be found at the above URL.

More detailed information on privacy:
https://static.googleusercontent.com/media/www.google.com/en//intl/hu/policies/privacy/google_privacy_policy_hu.pdf

Data processors

Hosting service provider:

Company name: FutureWeb Design Ltd.
Registered seat: 3529 Miskolc, Csabai kapu 55. 2. em. 3.
Tax number: 22787958-2-05
Phone: +36 70/397-3-297
E-mail: info@futureweb.hu
Web: www.futureweb.hu
The location of the privacy statement: http://www.futureweb.hu/adatvedelmi-tajekoztatok

The data provided by you are stored on the server operated by the hosting service provider. Access to such data is restricted to our staff as well as the staff of the hosting service provider operating the server, who are collectively responsible for the safe processing of the data.

The name of the activity: hosting service, server operation service.

The purpose of the processing: ensuring the operation of the website.

The scope of the data processed: personal data provided by the data subject.

The duration of the data processing and the deletion of data. Until the end of the operation of the website, or in accordance with the contractual agreement between the operator of the website and the hosting service provider. If necessary, the data subject may also request the deletion of his/her data by contacting the hosting service provider.

The legal basis of the processing: the consent of the data subject, as well as processing based on a provision of law.

Rights related to processing

Right to request information
You can request information from us via the points of contact indicated concerning what data are processed by our company, on what legal basis, for what purpose, from what source and for what duration. We will send the information requested without delay, but in any case within 30 days, to the e-mail address you provided.

Right to rectification
Using the points of contact, you can request that any of your data be rectified. We will take the necessary measures without delay, but in any case within 30 days, and send information to the e-mail address you provided.

Right to erasure
Using the points of contact, you can request that any of your data be erased. We will comply with such without delay, but in any case within 30 days, and send information to the e-mail address you provided.

Right to restriction
Using the points of contact, you can request that any of your data be restricted. The duration of the restriction of your data shall be until such restriction is necessary based on the reasons you provided. We will comply with such without delay, but in any case within 30 days, and send information to the e-mail address you provided.

Right to objection
Using the points of contact, you can object against the processing of your data. We will examine your objection without delay, but in any case within 15 days, determine if it is well-founded, and inform you of the decision via e-mail.

The enforcement of rights related to the processing of your data
If you become aware of any unlawful processing of data, please notify our company as, in order to make it possible to restore lawfulness as soon as possible. We will do everything in order to ensure that the problem outlined is resolved.

If, in your opinion, the lawful situation cannot be restored, please notify the authority at the following points of contact:

National Authority for Data Protection and Freedom of Information
Mailing address: 1530 Budapest, P.O. Box 5.
Address: 1125 Budapest, Szilágyi Erzsébet fasor 22/c
Phone: +36 (1) 391-1400
Fax: +36 (1) 391-1410
E-mail: ugyfelszolgalat@naih.hu
Website: https://naih.hu
Coordinates: É 47°30’56”; K 18°59’57”

Provisions of law serving as the foundation for the processing

REGULATION (EU) NO 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (the General Data Protection Regulation)
Act CXII of 2011 on Informational Self-Determination and Freedom of Information
Act LXVI of 1995 on Public Documents, Public Archives and the Protection of Private Archival Materials
Government Decree 335/2005 (XII. 29.) on the general requirements pertaining to filing systems used by agencies performing public functions.
Act CVIII of 2001 on certain issues of electronic commerce services and information society services-
Act C of 2003 on electronic communications.