Controller: Unilub Kft.
Registered seat and mailing address: HU-1137 Budapest, Carl Lutz rakpart 29.
Phone number: +36 30 892-1400
Hosting provider1: DigitalOcean LLC
Registered seat and mailing address: 101 6th Ave, New York, NY 10013, USA
Hosting provider2: MPC Hardver Kft.
Registered seat and mailing address: 3300 Eger, Petőfi Sándor utca 19.
Phone number: +36 36 786 071
The Hosting provider stores personal data on the basis of a contract concluded the Controller. The Hosting provider are not entitled to access personal information.
Description of the data management during the operation of the webshop
Data management for contracting and performance
For contracting and performance there are several data management cases could be implemented. We would like to inform you that warranty administration and complaint handling will only take place if you exercise one of your rights.
If you do not make any purchase in the webshop, you are only a visitor. If you give us consent for marketing purposes, you accept the marketing purpose data management.
Data management for contracting and performance in more detail:
If you have any questions about products or services, you can contact the Controller via email, phone.
Data: Data required for contact.
Data management duration: The Controller managed the data until the contact is completed.
Data management legal basis: You agree to provide data to the Controller.
The Controller can provide more convenient service by storing the registration data, thereby the registered user does not have to enter their data when making another purchase. Registration is a condition of the contract.
Data: Name, billing and delivery address, phone number, email address.
Data management duration: Until your consent withdrawal.
Data management legal basis: Your voluntary consent which provide to the Controller by the registration.
During the order processing, the Controller has to manage data.
Data: Name, billing and delivery address, tax number, excise number (if you have), phone number, email address, purchased product features, order number and date of purchase. If you have placed an order in the webshop data management is essential to fulfill the contract.
Data management duration: The data is processed for 5 years according to the civil law limitation period.
Data management legal basis: Fulfill the contract.
The Controller needs to issue the appropriate invoice and keep the accounting documents in accordance with the law. Based on the Accounting Act section 169. § (1)-(2) paragraphs, companies must keep the accounting document to support the accounting records.
Data: Name, address, e-mail address, phone number.
Data management duration: The issued invoices based on the Accounting Act section 169 § (2) and it must be kept for 8 years from the date of issue of the invoice.
Data management legal basis: Based on the Value Added Tax (VAT) Act 2007 CXXVII. Section 159. § (1), issue of an invoice is obligatory and based on the Accounting Act 2000 C Act 159. § (1) paragraph, it must be kept for 8 years.
Freight data management
Data: Name, address, e-mail address, phone number.
Data management duration: The Controller manages the data for the duration of the delivery of the ordered goods.
Data management legal basis: Fulfill the contract.
Freight data management data processors
Data processor: Schenker Kft.
Registered seat and mailing address: 2310 Szigetszentmiklós, Leshegy út 30. Prologis Park Budapest-Sziget, DC4
Data processor e-mail address: firstname.lastname@example.org
Data processor phone number: +36 1 2787 878
Consumer Protection complaint manage
The data management process is in place to handle consumer complaints. If you make a complaint to us, data management and provision of data is essential.
Data: Your name, phone number, email address, content of complaint.
Data management duration: Warranty complaint retained for 5 years based on the Consumer Protection Act.
Data management legal basis: It is your voluntary decision. If you contact us with a complaint based on the Consumer Protection Act 1997 CLV. Act 17/A. § (7), we must retain for 5 years.
Marketing purposes for data management
Newsletter data management
Data: Name, address, e-mail address, phone number, business classification.
Data management duration: Until the withdrawal of the data subject’s consent
Data management legal basis: Your voluntary consent, which is given to the Controller by subscribing to the newsletter.
The data management process takes place in order to conduct the sweepstakes.
Data: Name, email address, phone number.
Data management duration: The data will be deleted after the closing of the prize draw, except for the data of the winner. The Controller obliged to keep for 8 years according to the Law of Accounting.
Data management legal basis: Your voluntary consent.
Other data management
If the Controller wishes to perform further data processing, it has to provide preliminary information on the essential circumstances of the data management (legal background and legal basis of data management, purpose of data management scope of data processed, duration of data management). We would like to inform you that the Controller must comply with the written data request based on legal authorization.
The Controller inform us from data transmission in accordance with the Infotv. 15. § (2)-(3) paragraph (to which authority, what personal data, on what legal basis, when was transmitted by the Controller) and the Controller provides this content if you request unless its disclosure is excluded by law.
Your data processing rights
Within the period of data processing, you have the following rights in accordance with legal regulations.
- Right to withdraw
- Right to acces personal data
- Right to rectification
- Right to restriction of processing
- Right to erasure
- Right to object
If you wish to exercise your rights, it involves your identification and the Controller must communicate with you. Personal data will need to be provided for identification purposes, If you have been our customer and you would like to identify yourself for complaint or warranty purposes, please also provide your order ID for identification. Using this, we can also identify you as a customer.
Complaints related to data management will be answered by the Controller within 30 days.
Right to withdraw consent
You have the right to withdraw your consent to data management at any time in which case the data provided will be deleted from our systems. Please note that in case of an unfulfilled order, the cancellation may result in not being able to deliver to you. If the purchase has already made, we will not be able to delete billing information from our system because of the accounting rules. Furthermore, if you owe us, we may process your information later.
Right to access personal data
You have the right to receive feedback from the Controller about processing of your data. You have the right to access personal data and ask the Controller to inform the following information:
- Data management purposes
- Categories of personal information
- Information on the recipients or categories of recipients with whom the personal data have been or will be communicated by the Controller
- The intended period for the personal data
- Your right to request the Controller to rectify, delete or restrict your personal data and may object to the use of personal data.
- The right to a complaint to the supervisory authority
- If the data was not collected from you, all available information about their source
- The fact of automated decision-making (if you used such a procedure), including profiling and similar situations what the consequences and data management will be for you.
The Controller may charge a fair fee for the provision of the information, if you ask multiple times.
Access to personal data is ensured by the Controller by sending you email with the information after your identification.
Right to rectification
You have the right, to request the Controller to correct inaccurate personal data concerning you without delay.
Right to restriction of processing
You have the right, at the request of the Controller to restrict the data processing.
Right to erasure
You have the right that the Controller without undue delay delete your personal data where certain conditions are met:
If the personal date is no longer necessary
You withdraw it and there is no other legal basis for data processing
You object to the processing of data on the basis of a legitimate interest and there is no legitimate reason for data processing.
The Controller processed the personal data unlawfully and this complaint found.
The personal data must be deleted in order to fulfill a legal obligation under Union or Member State law applicable to the Controller.
If the Controller disclosed personal data for any reason, the Controller obliged to delete for any of the reasons indicated above. Furthermore, the Controller obliged to inform other Controllers to your request.
Deletion does not apply, if the data processing is necessary in some cases.
Right to object
You have the right to object at any time for reasons related to your situation to the processing of your personal data based on a legitimate interest. In this case the Controller can no longer processed personal data, expect if data processing is justified by compelling legitimate reasons which take precedence over your interests, rights and freedoms or related to the submission, enforcement or defense of claims.
If your personal data is processed for the purpose of direct business acquisition you have the right to object at any time, then personal data may no longer be processed for this purpose.
Data security measure
The Controller declares that it has taken appropriate security measures to protect personal data against unauthorized access, alteration, transmission, disclosure, deletion or destruction, as well as accidental destruction and damage and against becoming inaccessible as a result of a change in the technology used. The controller ensure that they apply appropriate data security measures when working with your personal data.
If you believe that the Controller has violated any legal provision on data processing or has not complied your request then the interest of elimination of alleged unlawful data processing. You can seek a judicial remedy in Hungary at the Nemzetei Adatvédelmi és Információszabadság Hatóság (NAIH)(mailing address: 1363 Budapest, Pf. 9., e-mail: email@example.com ). We also inform that any violation of the legal provisions on data processing or if the Controller has not complied with any of its requests, you may institute civil proceedings in court against the Controller.