Data protection

Privacy Policy

for visitors and registered users of the http://www.cbdkiraly.hu website.

Introduction

During the operation of the website, the service provider / data controller manages the data of the persons registered on the website in order to be able to provide them with a suitable service.

The service provider intends to comply fully with the legal requirements for the processing of personal data, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council.

This data management information was prepared pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of personal data of natural persons and on the free movement of data, subject to Annex CXII of 2011. the content of the law on the right to information self-determination and freedom of information.

Name of service provider, data controller

Name / company name:


Dr. Jánosné Szinák EV

headquarters:


1133 Budapest, Kárpát utca 2.

Tax number:


56379673-1-41

Registration number (NAIH):


55019723

Website name, address:


www.cbdkiraly.hu

Availability of the data management information:


E-mail: info@cbdkiraly.hu

Contact details of the data controller

Name / company name:


Dr. Jánosné Szinák EV

headquarters:


1133 Budapest, Kárpát utca 2.

Mailing address:


1133 Budapest, Kárpát utca 2.

E-mail:


info@cbdkiraly.hu

Phone:


+36706373339

Definitions

the General Data Protection Regulation (GDPR) is the new Data Protection Regulation of the European Union;

"data management" means any operation or set of operations on personal data or data files, whether automated or non-automated, such as collecting, recording, organizing, segmenting, storing, transforming or altering, retrieving, accessing, using, communicating, transmitting, disseminating or otherwise by making available, harmonizing or linking, restricting, deleting or destroying;

data processor: any natural or legal person, public authority, agency or any other body which processes personal data on behalf of the controller;

personal data: any information relating to an identified or identifiable natural person (data subject); identifies a natural person who, directly or indirectly, in particular by reference to an identifier such as name, number, location, online identifier or one or more factors relating to the physical, physiological, genetic, mental, economic, cultural or social identity of the natural person identified;

"controller" means the natural or legal person, public authority, agency or any other body which alone or jointly with others determines the purposes and means of the processing of personal data; where the purposes and means of the processing are determined by Union or Member State law, the controller or the specific criteria for the designation of the controller may also be determined by Union or Member State law;

data subject's consent: a voluntary, specific and well-informed and unambiguous statement of the data subject's consent to indicate his or her consent to the processing of personal data concerning him or her, by means of a statement or an unequivocal statement of confirmation;

data protection incident: a breach of security resulting in the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or unauthorized access to, personal data transmitted, stored or otherwise handled.

recipient: any natural or legal person, public authority, agency or any other body to whom personal data are disclosed, whether a third party or not. Public authorities that may have access to personal data in the framework of an individual investigation in accordance with Union or Member State law shall not be considered as recipients; the processing of such data by these public authorities must comply with the applicable data protection rules in accordance with the purposes of the processing;

third party: a natural or legal person, public authority, agency or any other body other than the data subject, the controller, the processor or persons who have been authorized to process personal data under the direct control of the controller or processor.

Privacy Policy

The data controller declares that he / she handles personal data in accordance with the provisions of the data management information and complies with the provisions of the relevant legislation, in particular with regard to the following:

The processing of personal data must be carried out lawfully and fairly and in a way that is transparent to the data subject.

Personal data may only be collected for specified, explicit and legitimate purposes.

The purpose of the processing of personal data must be appropriate and relevant and only to the extent necessary.

Personal information must be accurate and up to date. Delete inaccurate personal information immediately
need.

Personal data must be stored in a form which permits identification of data subjects for no longer than is necessary. Personal data may be stored for a longer period only if the storage is for archiving purposes in the public interest, for scientific and historical research purposes or for statistical purposes.

The processing of personal data must be carried out in such a way as to ensure adequate security of the personal data, including protection against unauthorized or unlawful processing, accidental loss, destruction or damage, by means of appropriate technical or organizational measures.

The principles of data protection shall apply to all information concerning an identified or identifiable natural person.

Important data management information

The purpose of data management is to enable the service provider / data controller to provide appropriate additional services to the persons registered on the website during the operation of the website.

The legal basis for data processing is the consent of the data subject.

The persons involved in data management are the registered users of the website.

Duration of data management and deletion of data. The duration of data management always depends on the specific user purpose, but the data must be deleted immediately if the original purpose has already been achieved. The consent of the data subject may be withdrawn at any time by the data subject by sending a letter to the contact e-mail address. If there is no legal impediment to the deletion, then your data will be deleted.

The data controller and its employees have the right to access the data.

The data subject may request from the controller access to, rectification, erasure or restriction of the processing of personal data concerning him or her and may object to the processing of such personal data and to the data subject's right to data portability.

The data subject may withdraw his or her consent at any time, but this shall not affect the lawfulness of the data processing carried out prior to the withdrawal.

The person concerned may exercise the right to lodge a complaint with the supervisory authority.

If the person concerned wishes to take advantage of the benefits of registration, ie to use the services of the website in this direction, it is necessary to provide the requested personal data. The data subject is not obliged to provide personal data, and there are no adverse consequences for the non-provision of data. However, it is not possible to use certain functions of the website without registration.

The data subject shall have the right, at the request of the controller, to correct or supplement inaccurate personal data concerning him or her without undue delay.

The data subject shall have the right, at the request of the controller, to delete inaccurate personal data concerning him or her without undue delay, and the controller shall delete personal data concerning him or her without undue delay, unless there are other legal grounds for processing.

Modification or deletion of personal data can be initiated by e-mail, telephone or letter using the contact options provided above.

Registration on the website

The purpose of data management is to provide additional services and contact.

The legal basis for registration data management is your consent.

The persons involved in data management are the registered users of the website.

Duration of data management. The data will be processed until the consent is withdrawn. You can withdraw your consent to data management at any time by sending an e-mail to the contact e-mail address.

The data will be deleted when the consent to the data processing is revoked. You can withdraw your consent to data management at any time by sending an email to your contact email address.

The data controller and its employees have the right to access the data.

Method of data storage: electronic.

Modification or deletion of personal data can be initiated by e-mail, telephone or letter using the contact options provided above.

The provision of personal data is absolutely necessary for identification in the databases and for keeping in touch. The exact company name and address are required for invoicing, which is a legal obligation.

Scope of managed data


The specific purpose of the data management data

Name


Identification, contact, invoicing.

Company name


Identification, contact, invoicing.

Title


Identification, contact, invoicing.

E-mail


Identification, contact.

Phone


Identification, contact.

Date of registration


Technical information operation.

IP address


Technical information operation.

You can give your consent to the data management by intentionally checking the empty checkbox on the website and specifically for this purpose.

You, as an individual, may object to the processing of your personal data, in this respect the data processing detailed above
information and the procedure in accordance with this prospectus and the legislation described in the prospectus.

Place an order

The purpose of data management is to provide additional services, contact us and send a confirmation e-mail. We will only be able to fulfill your order if you provide your contact and billing information, which is absolutely necessary for contact and billing.

The legal basis for data processing is your consent. In the case of invoicing, the data management is based on a legal requirement.

The persons involved in data management are the registered users of the website.

Duration of data management. Data processing takes place until a legal requirement or the withdrawal of consent. You can withdraw your consent to data management at any time by sending an e-mail to the contact e-mail address.

The data will be deleted when the consent to the data processing is revoked. You can withdraw your consent to data management at any time by sending an email to your contact email address. Billing data can be deleted in accordance with legal regulations.

The data controller and its employees have the right to access the data.

Method of data storage: electronic.

Modification or deletion of personal data can be initiated by e-mail, telephone or letter using the contact options provided above.

Scope of managed data


The specific purpose of the data management data

Name


Identification, contact, invoicing.

Company name


Identification, contact, invoicing.

Title


Identification, contact, invoicing.

E-mail


Identification, contact.

Phone


Identification, contact.

Ordered product details


Product identification.

Date of registration


Technical information operation.

IP address


Technical information operation.

You can give your consent to the data management by intentionally checking the empty checkbox on the website and specifically for this purpose.

The data subject may object to the processing of his or her personal data, in this respect he or she is entitled to proceed in accordance with the data management information detailed above and this prospectus and the legislation described in the prospectus.

Invoicing

The purpose of data management is to issue and send an electronic invoice as an e-mail attachment.

The legal basis for data management is mandatory data management based on legislation.

The parties involved in data management are the service partners of the service provider.

Duration of data management. Data processing takes place until a legal requirement or the withdrawal of consent. You can withdraw your consent to data management at any time by sending an e-mail to the contact e-mail address.

The data will be deleted when the consent to the data processing is revoked. You can withdraw your consent to data management at any time by sending an email to your contact email address. Billing data can be deleted in accordance with legal regulations.

The data controller and its employees have the right to access the data.

Method of data storage: electronic.

Modification or deletion of account information can be initiated by e-mail, telephone or letter using the contact options provided above.

Scope of managed data


The specific purpose of the data management data

Name


Identification, contact, invoicing.

Company name


Identification, contact, invoicing.

Title


Identification, contact, invoicing.

E-mail


Identification, contact.

Phone


Identification, contact.

Tax number / tax ID


Customer identification.

Account data


Account identification.

Date of issue of the invoice


Technical information operation.

You can give your consent to the data management by intentionally checking the empty checkbox on the website and specifically for this purpose.

The data subject may object to the processing of his or her personal data and in this respect is entitled to proceed in accordance with the data processing information detailed above and this prospectus and the legislation described in the prospectus.

Send newsletter

As the operator of the website, we declare that we fully comply with the relevant legal provisions during the information and descriptions published by us. We further declare that when subscribing to the newsletter, we are not in a position to verify the authenticity of the contact details or to establish that the information provided relates to an individual or business. We treat companies that contact us as customer partners.

The purpose of data management is to send professional brochures, electronic messages containing advertisements, information, newsletters, about which you can unsubscribe at any time without consequences. You can also unsubscribe without any consequences if your business has in the meantime been terminated, left the business, or someone has provided us with your contact information.

The legal basis for data processing is your consent. We inform you that the user may consent in advance and expressly to the use of the service provider's advertising offers, information and other information.
Please contact us at the e-mail address you provided during registration. As a result, the user may consent to the service provider processing the necessary personal data for this purpose.

We inform you that if you want to receive a newsletter from us, you must provide the necessary information. If we do not provide the information, we will not be able to send you a newsletter.

Duration of data management. The data will be processed until the consent is withdrawn. You can withdraw your consent to data management at any time by sending an e-mail to the contact e-mail address.

The data will be deleted when the consent to the data processing is revoked. You can withdraw your consent to data management at any time by sending an email to your contact email address.

Consent can also be revoked based on the link in the newsletters sent out.

The data controller and its employees have the right to access the data.

Method of data storage: electronic.

Modification or deletion of data can be initiated by e-mail, telephone or letter using the contact options provided above.

Data controller registration number:


NAIH- ..................



The data processor used:


https://tarhelypark.hu



Scope of managed data


The specific purpose of the data management data

Name


Identification, contact.

E-mail


Identification, contact.

Date of subscription


Technical information operation.

IP address


Technical information operation.

Please note that neither your username nor your email address is required to include personally identifiable information. For example, your username or email address does not need to include your name. You are completely free to choose a user name or email address that contains information about your identity. The e-mail address used for contact is absolutely necessary for the newsletter or professional information sent to you to reach its destination.

Cookies

Cookies are placed by the websites visited on the user's computer and contain information such as the page's settings or login status.

Cookies are therefore small files created by the websites you visit. Saving your browsing data improves the user experience. With the help of cookies, the website remembers the settings of the website and offers locally relevant content.

The website of the service provider sends a small file (cookie) to the computer of the visitors of the website in order to determine the fact and time of the visit. The service provider informs the visitor of the website about this.

The people involved in data management are the visitors of the website.

The purpose of data management is additional services, identification, and tracking of visitors.

Legal basis for data management. The user's consent is not required if the service provider absolutely needs the use of cookies.

The scope of the data: unique identification number, time, setting data.

The user has the option to delete cookies from the browsers at any time in the Settings menu.

Data controllers are entitled to access the data. The use of cookies does not process personal data by the data controller.

Method of data storage: electronic.

Community sites

A social site is a media tool where a message is disseminated through social users. Social media uses the Internet and online publishing opportunities to move users from content recipients to content editors.

Social media is an interface for web applications that contain user-generated content, such as Facebook, Google+, Twitter, Pinterest, and more.

Social media appearances include public speaking, lectures, presentations, products or services.

Social media information can take the form of forums, blog posts, images, videos, and audio, message boards, e-mail messages, and more.

As mentioned above, the scope of the managed data can be not only personal data but also the user's public profile picture.

Stakeholders: all registered users.

The purpose of data collection is to promote the website or a related website.

The legal basis for data processing is the voluntary consent of the data subject.

Duration of data management: according to the regulations that can be viewed on the given social site.

Deadline for deleting data: according to the regulations that can be viewed on the given social site.

They have the right to get acquainted with the data: according to the regulations that can be viewed on the given social site.

Rights related to data management: according to the regulations that can be viewed on the given social site.

Method of data storage: electronic.

It is important to note that when a user uploads or submits any personal information, he or she gives the social network operator permission to store and use such content worldwide.

That is why it is very important to make sure l whether the user has full authority to communicate the published information.

Google Analytics

Our website uses Google Analytics.

When using Google Analytics:

Google Analytics uses internal cookies to generate reports for its customers about the habits of users of the website.

Google uses the information on behalf of the website operator to:

evaluate how users use the website. As an additional service, it prepares reports related to the activity of the website for the website operator in order to perform the additional services.

The data is stored in an encrypted format on Google’s servers to make it more difficult and prevent data misuse.

Here's how to disable Google Analytics. Quote from the page:

Website users who do not want Google Analytics to report JavaScript on their data can install the Google Analytics Disable Browser Add-on. The plugin prohibits Google Analytics JavaScript (ga.js, analytics.js, and dc.js) from sending information to Google Analytics. The browser extension can be used in most newer browsers. The Google Analytics Disable Browser Add-on does not prevent data from being sent to the site itself and other web analytics services.

HYPERLINK “https://support.google.com/analytics/answer/6004245” https://support.google.com/analytics/answer/6004245?hl=en_GB

Google Privacy Policy: HYPERLINK “https://policies.google.com/privacy” https://policies.google.com/privacy?hl=en

Information on the use and protection of the data can be found in detail at the links above.

Privacy in detail:

HYPERLINK “https://static.googleusercontent.com/media/www.google.com/en//intl/en/policies/privacy/google_privacy_policy_en.pdf” https://static.googleusercontent.com/media/www.google .com / en // intl / en / policies / privacy / google_privacy_policy_hu.pdf

data Processors

Hosting provider: tárhelypark.hu

Name / company name:


3 in 1 Hosting Bt.

headquarters:


2310 Szigetszentmiklós, Dévai utca 10 / A

Phone:


+ 36/21 / 200-0040

E-mail:


admin@megacp.com

The information you provide is stored on a server operated by your hosting provider. The data can only be accessed by our employees and the employees operating the server, but they are all responsible for the secure handling of the data.

Name of the activity: hosting service, server service.

The purpose of data management is to ensure the operation of the website.

Data processed: personal data provided by the data subject

Duration of data management and deadline for deletion of data. Data management until the end of the operation of the website or in accordance with the contractual agreement between the operator of the website and the hosting provider. If necessary, the person concerned may also request the deletion of his data by contacting the hosting provider.

The legal basis for data processing is the consent of the person concerned and data processing based on law.

Rights related to data management

Right to request information

You can request information from us through the contact details provided, what data of our company, on what legal basis, for what data management purpose, from what source, for how long. Upon your request, we will send you information immediately, but within 30 days, to the e-mail contact you provided.

Right to rectification

You can ask us to change some of your details via the contact details provided. We will take action on your request immediately, but within a maximum of 30 days, and we will send you information by e-mail.

Right of cancellation

You can ask us to delete your data via the contact details provided. At your request, we will do this immediately, but within a maximum of 30 days, and we will send information to the email contact you provided.

Right to lock

You can ask us to lock your data via the contact details provided. The lock lasts as long as the reason you specify requires the data to be stored. At your request, we will do this immediately, but within a maximum of 30 days, and we will send information to the email contact you provided.

Right to protest

You can object to the data processing via the contact details provided. We will investigate the protest as soon as possible, but no later than within 15 days from the submission of the application, we will make a decision on its merits and we will inform you about its decision by e-mail.

Possibility of data management enforcement

In the event of any illegal data processing you experience, notify our company so that you can restore the lawful status in a short time. We will do our best to solve the problem outlined.

If in your opinion the legal status cannot be restored, please notify the authority at the following contact details:

National Data Protection and Freedom of Information Authority

Postal address: 1530 Budapest, Pf .: 5.

Address: 1125 Budapest, Szilágyi Erzsébet avenue 22 / c
Phone: +36 (1) 391-1400
Fax: +36 (1) 391-1410
E-mail: customer service (at) naih.hu
URL https://naih.hu
coordinates: N 47 ° 30’56 ”; E 18 ° 59’57 ”

Legislation underlying data management

REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Regulation (EC) No 95/46 Data Protection Regulation).

2011 CXII. Act on the Right to Information Self-Determination and Freedom of Information.

Act LXVI of 1995 on Public Documents, Public Archives and the Protection of Private Archival Material. law.

335/2005 on the general requirements for the document management of bodies performing public tasks. (XII. 29.) Government Decree.

CVIII of 2001 Act on Certain Issues in Electronic Commerce Services and Information Society Services.

Act C of 2003 on Electronic Communications.