Terms of purchase

TERMS AND CONDITIONS

 

This document will not be filed, it will be concluded only in electronic form, it is not considered a written contract, it is written in Hungarian, and it does not refer to a code of conduct. If you have any questions about the operation of the webshop, the ordering and delivery process, we are available at the contact details provided.

The scope of this General Terms and Conditions covers legal relationships on the Service Provider's website (https://flashprotein.hu) and its subdomains. These terms and conditions are continuously available from the following website: https://flashprotein.hu/szerzodesi-feltelek/and can be downloaded from the following link: https://www.flashprotein.hu/szerzodesi-feltelek/

1. Service provider data:

Name and seat of the service provider: Flash Partner Kft. / 2613 Rád, József Attila utca 15. (mailing address only.)

Contact information of the service provider, regularly used electronic mail address for contact with users: info@flashprotein.hu

Company registration number: 13 09 196678

Tax number: 26590525-2-13

Registering authority: Company Court of the Capital City Court

Language of the contract: Hungarian

Data of the hosting provider:

• Magyar Hosting Kft. H-1132 Budapest, Victor Hugo u. 18-22.

Phone: +36 1 700 2323

• UNAS Online Kft. 9400 Sopron, Kőszegi út 14.

tel.: +36-99/200-200

Data management information: https://www.flashprotein.hu/adatkezelesi-tajekoztato

E-mail: info@flashprotein.hu

1. Basic provisions:

2.1. Questions not regulated in these Regulations, as well as the interpretation of these Regulations, are governed by Hungarian law, in particular Act V of 2013 on the Civil Code ("Civil Code") and electronic commercial services, information society-related services

CVIII. (Elker. tv.) Act and 45/2014 on the detailed rules of contracts between the consumer and the business. (II. 26.) to the relevant provisions of Government Decree. The mandatory provisions of the relevant legislation apply to the parties without special stipulations.

2.2. These Regulations are effective from February 25, 2019 and will remain in effect until revoked. The Service Provider is entitled to unilaterally modify the Regulations. The Service Provider will publish the amendments on the website 14 (fourteen) days before their entry into force. By using the website, users accept that all regulations related to the use of the website automatically apply to them.

2.3. If the User enters the website operated by the Service Provider or reads its content in any way - even if he is not a registered user of the website, he acknowledges that the provisions of the Regulations are binding on him. If the User does not accept the conditions, he is not entitled to view the content of the website.

2.4.

1. Registration/purchase

3.1. By purchasing/registering on the website, the user declares that he has read and accepts the terms of these terms and conditions and the Data Management Information published on the website, and consents to data management.

3.2. During the purchase/registration, the user is obliged to provide his own real data. In case of untrue data provided during the purchase/registration or related to another person, the resulting electronic contract is null and void. The Service Provider excludes its responsibility if the User uses its services on behalf of another person, with the data of another person.

3.3. The Service Provider shall not be held responsible for delivery delays or other problems or errors that can be traced back to wrongly and/or inaccurately provided data by the User.

3.4. The Service Provider shall not be held liable for damages resulting from the User forgetting their password, or if it becomes accessible to unauthorized persons for any reason not attributable to the Service Provider.

1. Range of products and services available for purchase:

4.1. The displayed products can only be ordered online. The prices displayed for the products are in HUF and include the statutory VAT, but do not include the home delivery fee. No separate packaging costs will be charged.

4.2. In the webshop, the Service Provider displays the name and description of the product in detail, and displays photos of the products. The images displayed on the product data sheet may differ from the real ones and may be used as illustrations. We are not responsible for the difference between the image displayed in the webshop and the actual appearance of the product.

4.3. If a promotional price is introduced, the Service Provider will fully inform Users about the promotion and its exact duration.

4.4. If, despite all the care taken by the Service Provider, an incorrect price is displayed on the Web Store, especially with regard to the obviously incorrect, e.g. for a price of HUF "0" or HUF "1" that is significantly different from the well-known, generally accepted or estimated price of the product, or which may appear due to a system error, then the Service Provider is not obliged to deliver the product at the wrong price, but can offer delivery at the correct price, upon knowledge of which the Customer may abandon his intention to purchase.

4.5. In the case of an incorrect price, there is a striking disparity in value between the real and stated price of the product, which an average consumer needs to notice immediately. Based on Act V of 2013 on the Civil Code (Ptk.), the contract is created by the mutual and unanimous expression of the will of the parties. If the parties cannot agree on the contractual terms, i.e. there is no declaration expressing the will of the parties mutually and unanimously, in that case we cannot speak of a validly concluded contract from which rights and obligations arise. Based on this, an order confirmed at an incorrect/wrong price is considered a void contract.

1. Order process

5.1. After registration, the user logs into the webshop/or can start shopping without registration.

5.2. The user selects the quantity, packaging, and flavor of the product to be purchased.

5.3. The user places the selected products in the basket. The user can view the contents of the basket at any time by clicking on the "view basket" icon.

5.4. If the User wants to add another product to the basket, he selects the "continue shopping" button. If you don't want to buy an additional product, check the quantity of the product you want to buy. You can delete the contents of the basket by clicking the "delete - X" icon. To finalize the quantity, the User clicks on the "update/update cart" icon.

5.5. The user selects the delivery address and then the delivery/payment method, the types of which are as follows:

5.5.2. Shipping cost:

Up to 5 kg package size:

Home delivery: HUF 1,390 (gross) (with GLS courier service)

In the case of a larger package (which far exceeds the average order size), the Service Provider applies individual pricing (e.g. free delivery).

5.6. If there is an error or deficiency in the products or prices in the webshop, we reserve the right to make corrections. In such a case, we inform the customer of the new data immediately after the error is recognized or modified. After that, the user can confirm the order once more or withdraw from the contract.

5.7. The total amount to be paid includes all costs based on the summary of the order and the confirmation letter. The customer will receive the invoice electronically (at the email address specified during the order) or in the delivered package, in accordance with the chosen delivery and payment conditions. The user is obliged to inspect the package in front of the courier upon delivery, and in case of possible damage to products or packaging, he is obliged to request a report, in case of damage, he is not obliged to accept the package. The Service Provider does not accept subsequent complaints without a protocol! Packages are delivered on working days between 8 a.m. and 5 p.m. according to the delivery partner's schedule.

5.8. After entering the data, the User can send his order by clicking on the "send order" button, but before that, he can check the entered data one more time, send a comment with his order, or send us an e-mail with any other requests or comments related to the order.

5.9. Correction of data entry errors: Before closing the order process, the user can always go back to the previous phase, where he can correct the entered data.

5.10. The user will receive a confirmation by email after sending the order. If this confirmation is not received by the User within the expected deadline depending on the nature of the service, but no later than 48 hours after the User's order has been sent, the User shall be released from the binding offer or contractual obligation. The order and its confirmation shall be deemed to have been received by the Service Provider or the User when it becomes available to him. The Service Provider excludes its responsibility for confirmation if the confirmation is not received on time because the User entered the wrong e-mail address during registration, or because the storage space belonging to the account is full, the User is unable to receive messages.

5.11. The user acknowledges that the confirmation described in the previous point is only an automatic confirmation and does not create a contract. The contract is created when the Service Provider, after the automatic confirmation mentioned in the previous point, notifies the User in another e-mail about the fulfillment of the order.

1. Processing and fulfillment of orders

6.1. Orders are processed during business hours. It is also possible to place the order outside of the times marked as processing the order, if it is done after the end of working hours, it will be processed the following day. The service provider's customer service will always confirm electronically when it can fulfill your order.

6.2. General deadline, within 3-5 working days from confirmation.

6.3. Based on the sales contract, the Service Provider is obliged to transfer the ownership of the item, and the User is obliged to pay the purchase price and take delivery of the item.

6.4. If the seller is a business and the buyer is a consumer, and the seller undertakes to deliver the item to the buyer, the risk of damage passes to the buyer when the buyer or a third party designated by him takes possession of the item. The risk of damage is transferred to the buyer upon handover to the carrier, if the carrier was commissioned by the buyer, provided that the carrier was not recommended by the seller.

6.5. If the seller is a business and the buyer is a consumer, unless otherwise agreed by the parties, the seller (according to these terms and conditions: Service Provider) is obliged to make the item available to the buyer (User) without delay, but no later than thirty days after the conclusion of the contract.

6.6. In case of delay by the Service Provider, the User is entitled to set an additional deadline. If the seller does not perform within the additional deadline, the buyer is entitled to withdraw from the contract.

6.7. The User is entitled to withdraw from the contract without setting an additional deadline if

1. a) the Service Provider refused to fulfill the contract; obsession
2. b) the contract should have been performed at the specified performance time - and not at another time - according to the agreement of the parties or due to the recognizable purpose of the service.

6.8. If the Service Provider does not fulfill its obligations under the contract because the product specified in the contract is not available, it is obliged to inform the User immediately and refund the amount paid by the User without delay.

1. Right of withdrawal

7.1. Directive 2011/83/EU of the European Parliament and the Council, as well as Regulation 45/2014 on the detailed rules of contracts between consumers and businesses. (II.26.) Pursuant to the regulations of the Government Decree, the Consumer may withdraw from the contract without giving reasons within 14 days of receiving the ordered product, or return the ordered product. In the absence of this information, the Consumer is entitled to exercise his right of withdrawal up to 1 year.

7.2. The period open for exercising the right of withdrawal expires 14 days after the day on which the Consumer, or a third party indicated by him, other than the carrier, receives the product.

7.3. The consumer can also exercise his right of withdrawal in the period between the date of conclusion of the contract and the day of receipt of the product.

7.4. The cost of returning the product must be borne by the consumer, the company did not undertake to bear this cost.

7.5. In the case of exercising the right of withdrawal, the Consumer will not be charged any costs other than the cost of returning the product, but the Service Provider may demand compensation for material damage resulting from improper use.

7.6. The Consumer is not entitled to the right of withdrawal in the case of a non-pre-manufactured product that was produced based on the instructions or at the express request of the consumer, or in the case of a product that was clearly tailored to the consumer.

7.7. The consumer may also not exercise his right of withdrawal

in the case of a contract for the provision of services, after the completion of the service as a whole, if the company began the performance with the express, prior consent of the consumer, and the consumer has acknowledged that he loses his right of termination after the completion of the service as a whole;

     with regard to a product or service, the price or fee of which depends on the possible fluctuation of the money market, which cannot be influenced by the company, even during the deadline for exercising the right of withdrawal;

     regarding a perishable product or a product that retains its quality for a short time;

     with regard to a product with closed packaging that cannot be returned after being opened after delivery for reasons of health protection or hygiene;

     with regard to a product which, due to its nature, is inseparably mixed with another product after delivery;

     with regard to an alcoholic beverage, the actual value of which depends on market fluctuations in a manner beyond the company's control, and the price of which was agreed upon by the parties when concluding the sales contract, but the performance of the contract only takes place after the thirtieth day from the conclusion of the contract;

     in the case of a business contract in which the business visits the consumer at the express request of the consumer in order to carry out urgent repair or maintenance work;

     with regard to the sale and purchase of audio and video recordings in sealed packaging, as well as copies of computer software, if the consumer has opened the packaging after delivery;

     with regard to newspapers, magazines and periodicals, with the exception of subscription contracts;

     in the case of contracts concluded at a public auction;

     with the exception of housing services, in the case of a contract for the provision of accommodation, transport, car rental, catering or a service related to leisure activities, if a deadline or deadline for performance defined in the contract has been agreed;

     with regard to digital data content provided on a non-physical data carrier, if the business has started performance with the express, prior consent of the consumer, and the consumer has simultaneously declared with this consent that he/she will lose his/her right of withdrawal after the start of performance.

7.8. Following the return of the product/or the receipt of the cancellation statement, the Service Provider shall refund the amount paid to the Consumer, including the delivery fee, without delay, but within 14 days at the latest, in accordance with the above legislation.

7.9. During the refund, we use the same payment method as the payment method used during the original transaction, unless the Consumer expressly consents to the use of another payment method; due to the application of this refund method, the Consumer will not be charged any additional costs.

7.10. The consumer is obliged to return the goods without undue delay, but in no case later than 14 days from the date of sending the notice of withdrawal from the contract to the Service Provider, or deliver them to the Service Provider's address.

7.11. In the case of written cancellation, the consumer must send the cancellation statement within 14 days.

7.12. The consumer complies with the deadline if he returns or hands over the product(s) before the end of the 14-day period.

7.13. The consumer bears only the direct cost of returning the product, unless the company has undertaken to bear this cost.

7.14. The Service Provider is not obliged to reimburse the Consumer for the additional costs resulting from the choice of a delivery method other than the cheapest standard delivery method offered by the Service Provider.

7.15. The consumer can only be held responsible for the decrease in value of the goods if it occurred due to handling other than that necessary to determine the nature, properties and functioning of the goods.

7.16. The Service Provider may withhold the refund until the goods(s) have been returned, or the Consumer has not provided proof that they have been returned: the earlier of the two dates shall be taken into account.

7.17. If the Consumer wishes to exercise his right of withdrawal, he may indicate this in writing (using the attached data sheet) or by phone at one of the Service Provider's contacts. In the case of a written notification by post, we take into account the time it was sent to the post, and in the case of a notification by telephone, the time it was sent by telephone. In case of notification by post, the Service Provider accepts notification as registered mail or package. You can return the ordered product to the Consumer Service Provider by post or using a courier service.

7.18. The consumer must pay particular attention to the intended use of the product, because the compensation for damages resulting from improper use is the responsibility of the consumer!

7.19. 45/2014 on the detailed rules of contracts between the consumer and the business. (II.26.) Government decree is available here.

7.20. Directive 2011/83/EU of the European Parliament and of the Council is available here.

7.21. The consumer can also contact the Service Provider with other complaints at the contact details provided in these Regulations.

7.22. The right of withdrawal applies only to Users who qualify as consumers according to the Civil Code.

7.23. The right of withdrawal does not belong to the company, i.e. a person who is involved in his profession, independent occupation or business activity.

7.24. The procedure for exercising the right of withdrawal:

7.24.1. If the Consumer wishes to use the right of withdrawal, he must indicate his intention to withdraw via the contact details of the Service Provider.

7.24.2. The consumer exercises his right of withdrawal within the deadline if he sends his withdrawal statement before the end of the 14th day from the receipt of the product. In case of cancellation in writing, it is enough to send the cancellation statement within 14 days. In the case of notification by post, the date of posting is taken into account, in the case of notification via email or fax, the time of sending the email or fax is taken into account.

7.24.3. In case of cancellation, the Consumer is obliged to return the ordered product to the address of the Service Provider without delay, but no later than within 14 days from the date of communication of the cancellation statement. The deadline is considered met if you send the product before the 14-day deadline (so it does not have to arrive within 14 days). The customer bears the costs incurred in connection with the return of the goods due to the exercise of the right of withdrawal.

7.24.4. However, the Service Provider is not obliged to reimburse the Consumer for the additional costs resulting from the choice of a delivery method other than the cheapest standard delivery method offered by the Service Provider. The Consumer also exercises his right of withdrawal in the period between the date of conclusion of the contract and the date of receipt of the product.

7.24.5. When buying and selling several products, if the individual products are delivered at different times, the customer can exercise the right of withdrawal within 14 days of receiving the last delivered product or product consisting of several items or pieces.

1. Warranty, guarantee

Defective performance

The obligee performs incorrectly if, at the time of performance, the service does not meet the quality requirements established in the contract or legislation. The obligee does not perform incorrectly if the right holder knew of the error at the time of the conclusion of the contract, or should have known of the error at the time of the conclusion of the contract.

In a contract between a consumer and a business, the stipulation that deviates from the provisions of this chapter on accessory warranty and guarantee to the disadvantage of the consumer is null and void.

Accessories warranty

8.1. In what cases can the User exercise his accessory warranty right?

In the event of defective performance by the Service Provider, the User may assert a warranty claim against the Service Provider in accordance with the rules of the Civil Code.

8.2. What rights does the User have based on his accessory warranty claim?

The User may - at his or her choice - make use of the following accessory warranty claims: he or she may request repair or replacement, unless the fulfillment of the claim chosen by the User is impossible or would involve disproportionate additional costs for the company compared to the fulfillment of other demands. If you did not or could not ask for the repair or replacement, you can request a proportional reduction of the compensation, or the user can repair the defect at the company's expense, or have it repaired by someone else, or - as a last resort - withdraw from the contract. You can switch from your chosen accessory warranty right to another one, but the cost of the switch is borne by the User, unless it was justified or the company provided a reason for it.

8.3. What is the time limit for the User to assert his accessory warranty claim?

The user is obliged to report the error immediately after its discovery, but no later than within two months from the discovery of the error. At the same time, we would like to draw your attention to the fact that you can no longer assert your accessory warranty rights beyond the two-year limitation period from the completion of the contract.

8.4. Who can you enforce your accessory warranty claim against?

The User can enforce his accessories warranty claim against the Service Provider.

8.5. What other conditions are there for asserting your accessory warranty rights?

Within six months from the date of delivery, there is no other condition for validating the accessory warranty claim beyond the notification of the defect, if the User proves that the product or service was provided by the company operating the webshop. However, after six months from the date of performance, the User is obliged to prove that the error recognized by the User was already present at the time of performance.

Product warranty

8.6. In what cases can the User exercise his product warranty right?

In the event of a defect in a movable thing (product), the User may assert a warranty claim for accessories or a product warranty, according to his choice.

8.7. What rights does the User have based on his product warranty claim?

As a product warranty claim, the User may only request the repair or replacement of the defective product.

8.8. In which case is the product considered defective?

The product is defective if it does not meet the quality requirements in force at the time it was placed on the market, or if it does not have the properties described by the manufacturer.

8.9. In what time frame can the User enforce his product warranty claim?

The User may assert a product warranty claim within two years of the product being placed on the market by the manufacturer. After this deadline, you will lose this right.

8.10. Against whom and under what other conditions can you enforce your product warranty claim?

You may only exercise your product warranty claim against the manufacturer or distributor of the movable item. The User must prove the defect of the product in the event of a product warranty claim.

8.11. In what cases is the manufacturer (distributor) exempt from product warranty obligations?

The manufacturer (distributor) is only released from its product warranty obligation if it can prove that:

– the product was not manufactured or marketed as part of its business activities, or

- the defect was not recognizable according to the state of science and technology at the time of placing it on the market or

- the defect of the product results from the application of legislation or mandatory official regulations.

It is sufficient for the manufacturer (distributor) to prove one reason for exemption.

Please note that due to the same defect, you cannot assert an accessory warranty claim and a product warranty claim at the same time, parallel to each other. However, if your product warranty claim is successfully asserted, you can assert your accessory warranty claim for the replaced product or repaired part against the manufacturer.

Warranty

8.12. In what cases can the consumer exercise his warranty right?

In case of faulty performance, the Service Provider is obliged to provide a warranty based on the mandatory warranty for individual consumer durables if the user is considered a consumer.

8.13. What rights are the user entitled to under the warranty and within what time frame?

The warranty period is one year. The warranty period begins on the day the consumer product is handed over to the consumer, or if the distributor or his representative performs the commissioning.

8.14. When is the company released from its warranty obligation?

The Service Provider is exempted from its warranty obligation only if it proves that the cause of the defect arose after performance. We would like to draw your attention to the fact that due to the same defect, you cannot assert a claim for accessory warranty and warranty, or a claim for product warranty and warranty at the same time, in parallel with each other, but otherwise, the consumer is entitled to the rights arising from the warranty regardless of the rights described in the product and accessory warranty chapters.

8.15 The service provider does not have a warranty beyond the warranty period (professionally expected lifetime) for damages resulting from natural wear and tear/obsolescence.

8.16. The service provider is also not responsible for any warranty or guarantee for damages caused by incorrect or negligent handling after the risk of damage has passed, excessive use, impacts other than those specified, or other improper use of the products.

8.17. If the consumer asserts a replacement request within three working days of the purchase (commissioning) due to the failure of the consumer product, the Service Provider is obliged to replace the consumer product, provided that the failure prevents the intended use.

1. 9. Procedure in the event of a warranty claim

9.1. In a contract between a consumer and a business, the agreement of the parties may not deviate from the provisions of the regulation to the detriment of the consumer.

9.2. It is the consumer's duty to prove the conclusion of the contract (with an invoice or even just a receipt).

9.3. The costs related to the fulfillment of the warranty obligation are borne by the Service Provider (§ 6:166 of the Civil Code).

9.4. The Service Provider is obliged to take a record of the consumer's reported warranty or guarantee claim.

9.5. A copy of the protocol must be made available to the consumer immediately and in a verifiable manner.

9.6. If the Service Provider is unable to make a statement on the fulfillment of the consumer's warranty or guarantee claim when reporting it, it is obliged to notify the consumer of its position - in the case of rejection of the claim, the reason for the rejection and the possibility of turning to the conciliation body - within five working days, in a verifiable manner.

9.7. The Service Provider is obliged to keep the protocol for three years from the date of its recording and present it at the request of the inspection authority.

9.8. The Service Provider must endeavor to carry out the repair or replacement within fifteen days at most.

1. Miscellaneous Provisions

10.1. The service provider is entitled to use a contributor to fulfill its obligations. You are fully responsible for its illegal behavior, as if you had committed the illegal behavior yourself.

10.2. If any part of these Regulations becomes invalid, illegal or unenforceable, the validity, legality and enforceability of the remaining parts will not be affected.

10.3. If the Service Provider does not exercise its right under the Regulations, the failure to exercise the right cannot be considered a waiver of that right. A waiver of any right is only valid if expressly stated in writing. The fact that the Service Provider does not strictly adhere to an essential condition or stipulation of the Regulations on one occasion does not mean that it renounces to insist on strict compliance with the given condition or stipulation in the future.

10.4. The Service Provider and the User try to settle their disputes amicably.

1. Procedure for handling complaints

11.1. The aim of our store is to fulfill all orders in good quality, with the complete satisfaction of the customer. If the User has any complaints about the contract or its performance, he can communicate his complaint to the above telephone number, e-mail address, or by letter.

11.2. The service provider examines the verbal complaint immediately and remedies it as necessary. If the customer does not agree with the handling of the complaint, or the immediate investigation of the complaint is not possible, the Service Provider will immediately record the complaint and its position on it, and hand over a copy of it to the customer.

11.3. The Service will respond to the written complaint in writing within 30 days. He gives reasons for his position rejecting the complaint. The record of the complaint and a copy of the response will be kept by the Service Provider for five years and presented to the inspection authorities upon their request.

11.4. We would like to inform you that if your complaint is rejected, you can initiate the procedure of an official or conciliation body with your complaint, as follows:

11.5. The Consumer can file a complaint with the consumer protection authority:

387/2016 on the appointment of the consumer protection authority. (XII. 2.) Pursuant to the government decree, or the district office of the county seat, the Pest County Government Office acts with national competence at the second level. http://jarasinfo.gov.hu

11.6. In the event of a complaint, the Consumer has the opportunity to contact a conciliation body, whose contact information can be found here:

11.7. The conciliation board is responsible for settling consumer disputes outside of court proceedings. The task of the conciliation board is to attempt to reach an agreement between the parties for the purpose of settling the consumer dispute, and in the event of this being unsuccessful, it makes a decision on the matter in order to ensure simple, fast, efficient and cost-saving enforcement of consumer rights. At the request of the consumer or the Service Provider, the conciliation board provides advice on the rights and obligations of the consumer.

11.8. In the event of a cross-border consumer dispute related to an online sales or online service contract, the procedure is solely the responsibility of the conciliation body operating under the Budapest Chamber of Commerce and Industry.

11.9. In the event of a complaint, the Consumer can use the EU online dispute resolution platform. Using the platform requires a simple registration in the European Commission's system by clicking here. After that, after logging in, the consumer can submit a complaint via the online website, which has the following address: http://ec.europa.eu/odr

11.10. The service provider has an obligation to cooperate in the conciliation board procedure. As part of this, you must send your response to the conciliation board and ensure the participation of the person authorized to establish a settlement at the hearing. If the company's seat or location is not registered in the county of the chamber that operates the territorially competent conciliation body, the company's obligation to cooperate extends to offering the possibility of concluding a written agreement that meets the consumer's needs.

1. Data protection

The website's data management information is available on the following page: https://www.flashprotein.hu/privacy-policy

 

Introduction

 

Flash Partner Kft. (hereinafter: Service Provider, data manager) submits to the following information.

REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL On the protection of natural persons with regard to the processing of personal data and on the free flow of such data and on the repeal of Regulation 95/46/EC (General Data Protection Regulation) (April 2016) 27.), we provide the following information.

This data management information sheet regulates the data management of the following pages: www.flashprotein.hu

The data management information is available from the following website: www. flashprotein.hu/adatvedelem

Amendments to the prospectus will take effect upon publication at the above address.

 

The data controller and its contact details:

 

Name: Flash Partner Kft.

Headquarters: 2613 Rád, József Attila utca 15.

E-mail: info@flashprotein.hu

 

Concept definitions

 

  "personal data": any information relating to an identified or identifiable natural person ("data subject"); a natural person can be identified directly or indirectly, in particular on the basis of an identifier such as name, number, location data, online identifier or one or more factors relating to the physical, physiological, genetic, mental, economic, cultural or social identity of the natural person identifiable;

  "data management": any operation or set of operations performed on personal data or data files in an automated or non-automated manner, such as collection, recording, organization, segmentation, storage, transformation or change, query, insight, use, communication, transmission, distribution or otherwise by making available, coordinating or connecting, limiting, deleting or destroying;

  "data controller": the natural or legal person, public authority, agency or any other body that determines the purposes and means of processing personal data independently or together with others; if the purposes and means of data management are determined by EU or member state law, the data controller or the special aspects regarding the designation of the data controller may also be determined by EU or member state law;

"data processor": the natural or legal person, public authority, agency or any other body that processes personal data on behalf of the data controller;

  "recipient": the natural or legal person, public authority, agency or any other body to whom or to which the personal data is communicated, regardless of whether it is a third party. Public authorities that have access to personal data in accordance with EU or Member State law in the context of an individual investigation are not considered recipients; the management of said data by these public authorities must comply with the applicable data protection rules in accordance with the purposes of data management;

  "consent of the data subject": the voluntary, specific and clear declaration of the will of the data subject based on adequate information, with which the data subject indicates by means of a statement or an act clearly expressing the confirmation that he gives his consent to the processing of personal data concerning him;

  "data protection incident": a breach of security that results in the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or unauthorized access to, personal data transmitted, stored or otherwise handled.

Principles for handling personal data

 

Personal data:

 

  its handling must be carried out legally and fairly, as well as in a transparent manner for the data subject ("legality, fair procedure and transparency");

  be collected only for specific, clear and legitimate purposes, and they should not be handled in a way that is incompatible with these purposes; in accordance with Article 89 (1), further data processing for the purpose of archiving in the public interest, for scientific and historical research purposes or for statistical purposes is not considered incompatible with the original purpose ("purpose limitation");

  they must be appropriate and relevant for the purposes of data management and must be limited to what is necessary ("data sparing");

  they must be accurate and, where necessary, up-to-date; all reasonable measures must be taken to promptly delete or correct personal data that is inaccurate for the purposes of data processing ("accuracy");

  its storage must take place in a form that allows the identification of the data subjects only for the time necessary to achieve the goals of personal data management; personal data may be stored for a longer period only if the personal data will be processed in accordance with Article 89 (1) for the purpose of archiving in the public interest, for scientific and historical research purposes or for statistical purposes, the rights of the data subjects and subject to the implementation of appropriate technical and organizational measures required to protect your freedoms ("limited storage capacity");

  must be handled in such a way that adequate security of personal data is ensured through the application of appropriate technical or organizational measures, including protection against unauthorized or unlawful processing, accidental loss, destruction or damage of data ("integrity and confidentiality").

The data controller is responsible for compliance with the above, and must also be able to prove this compliance ("accountability").

 

 

 

Data management

 

Data management related to online store operation

 

  The fact of data collection, the scope of processed data and the purpose of data management:

 

 

„Lorem ipsum dolor sit amet, consectetur adipiscing elit. Ut elit tellus, luctus nec ullamcorper mattis, pulvinar dapibus leo.”

 

Neither the username nor the e-mail address is required to contain personal data.

 

1. Scope of stakeholders: All stakeholders registered/purchased on the webshop website.

 

1. Duration of data management, deadline for deletion of data: Immediately upon cancellation of registration. Based on Article 19 of the GDPR, the data controller informs the data subject electronically of the deletion of any personal data provided by the data subject. If the data subject's deletion request also covers the e-mail address he/she has provided, the data controller will also delete the e-mail address after the information has been provided. Except in the case of accounting documents, since these data must be kept for 8 years based on § 169 (2) of Act C of 2000 on accounting.

 

The accounting documents directly and indirectly supporting the bookkeeping (including ledger accounts, analytical and detailed records) must be kept in legible form for at least 8 years, in a way that can be retrieved by reference to the accounting records.

 

1. The person of the possible data controllers entitled to access the data, the recipients of the personal data: The personal data can be handled by the employees of the data controller, in compliance with the above principles.
2. Description of the rights of data subjects related to data management:

 

• The data subject may request from the data controller access to personal data relating to him, their correction, deletion or restriction of processing, and
• you can object to the processing of such personal data, as well as
• the data subject has the right to data portability and to withdraw consent at any time.

 

1. The data subject can initiate access to personal data, their deletion, modification or restriction of processing, portability of data, objection to data processing in the following ways:

• by post at 2613 Rád, József Attila utca 15
• by e-mail at the e-mail address info@ flashprotein.hu,

1. Legal basis for data management:

 

1. Article 6, paragraph (1) point b) of the GDPR,

 

1. CVIII of 2001 on certain issues of electronic commerce services and services related to the information society. Act (hereinafter: Elker Law) 13/A. Section (3):

 

For the purpose of providing the service, the service provider may process the personal data that is technically absolutely necessary for the provision of the service. If the other conditions are the same, the service provider must choose and in any case operate the tools used in the provision of services related to the information society in such a way that personal data is only processed if this is absolutely necessary for the provision of the service and the fulfillment of other objectives defined in this law necessary, but also in this case only to the extent and for the necessary time.

 

1. In case of issuing an invoice in accordance with the accounting legislation, point c) of Article 6 (1).

 

1. In case of enforcement of claims arising from the contract, Act V of 2013 on the Civil Code 6:21. according to § 5 years.

 

6:22 a.m. § [Prescription]

(1) If this law does not provide otherwise, claims become time-barred within five years.

(2) The statute of limitations begins when the claim becomes due.

(3) The agreement to change the limitation period must be in writing.

(4) An agreement excluding the limitation period is void.

 

1. We inform you that

 

• data management is necessary to fulfill the contract.
• you must provide personal data so that we can fulfill your order.
• failure to provide data will result in us not being able to process your order.

 

 

 

 

Data processors used:

 

Transport

 

1. Activity provided by data processor: Delivery of products, transport

 

1. Name and contact information of data processor:

 

SPRINTER Futárszolgált Kft. (Pick Pack Point)

Headquarters: 1097 Budapest, Táblás u 39.

Tax number: 12263840-4-43

Phone number: 06-1/803-6300

E-mail: pickpackpont@sprinter.hu

Website: http://www.pickpackpont.hu/

 

FoxPost Zrt.

3200 Gyöngyös, Batsányi János utca 9.

Telephone: 06-1-999-0-369

Customer service address: 1097 Budapest, Táblás utca 36-38. The building

E-mail: info@foxpost.hu

 

GLS General Logistics Systems Hungary Csomag-Logisztikai Kft.,

2351 Alsónémedi, GLS Európa utca 2.

 

Warehousing, logistics:

Webshop Partner Kft.

2133 Sződliget, Petőfi S. u. 9.

 

1. The fact of the data management, the scope of the managed data: Delivery name, delivery address, telephone number, e-mail address.

 

1. Scope of stakeholders: All stakeholders requesting home delivery.

 

1. Purpose of data management: Delivery of the ordered product to your home.

 

1. Duration of data management, deadline for deleting data: It lasts until the home delivery is completed.

 

1. Legal basis for data processing: Article 6, paragraph 1, point b).

 

Hosting provider

 

1. Activity provided by data processor: Storage service

 

1. Name and contact information of data processor:

• Magyar Hosting Kft. H-1132 Budapest, Victor Hugo u. 18-22.

Phone: +36 1 700 2323; info@tarhely.com

Data protection information: https://www.tarhely.com/adatvedelem

• UNAS Online Kft. 9400 Sopron, Kőszegi út 14. unas@unas.hu; +36-99/200-200

Data protection information: https://unas.hu/adatkezelesi-tajekoztato

 

1. The fact of the data management, the scope of the managed data: All personal data provided by the data subject.

 

1. Scope of stakeholders: All stakeholders using the website.

 

1. Purpose of data management: Making the website available and operating it properly.

 

1. Duration of data management, deadline for data deletion: Data management lasts until the termination of the agreement between the data controller and the storage provider, or until the deletion request addressed to the storage provider by the data subject.

 

1. Legal basis for data processing: points c) and f) of Article 6 (1) and CVIII of 2001 on certain issues of electronic commerce services and services related to the information society. Act 13/A. (3) of §

 

Recipients with whom personal data is communicated (Data transfer):

 

Online payment

 

1. Activity provided by the Recipient: Online payment

Online bank card payments are made through Barion's system. The bank card data will not reach the merchant. Barion Payment Zrt, which provides the service, is an institution under the supervision of the Magyar Nemzeti Bank, license number: H-EN-I-1064/2013.

 

1. Recipient name and contact information:

 

  Barion Payment Zrt.

                License number: H-EN-I-1064/201

                Institution ID: 25353192

                Phone: + 36 1 464 70 99

                Email: support@barion.com

                General Terms and Conditions: https://www.barion.com/hu/vasarlok/arak-vasarlonk/

PayPal

              Parent company: eBay Incorporated

              Headquarters: San Jose, California, USA

              Availability: https://www.paypal.com/hu

 

1. The fact of the data management, the scope of the managed data: Billing data, name, e-mail address

 

1. Scope of stakeholders: All stakeholders who choose to pay on the website.

 

1. Purpose of data management: Conducting online payments, confirming transactions and fraud monitoring to protect users

 

1. Duration of data management, data deletion deadline: It lasts until the online payment is completed.

 

1. Legal basis for data processing: Article 6, paragraph 1, point b) of the GDPR. Data processing is necessary for online payment at the request of the data subject.

 

1. Rights of the data subject:

 

the. You can find out about the conditions of data management,

1. You have the right to receive feedback from the data controller as to whether your personal data is being processed, and you have the right to access all information related to data processing.
2. You have the right to receive your personal data in a segmented, widely used, machine-readable format.
3. You are entitled to have your inaccurate personal data corrected without undue delay upon your request.

 

 

Management of cookies

Cookies specific to online stores are the so-called "cookie used for a password-protected session", "cookies required for the shopping cart" and "security cookies", the use of which does not require prior consent from the data subjects.

 

1. The fact of the data management, the scope of the managed data: Unique identification number, dates, times

 

1. Scope of stakeholders: All stakeholders visiting the website.

 

1. Purpose of data management: Identification of users, registration of the "shopping basket" and tracking of visitors.

 

1. Duration of data management, deadline for data deletion:

 

  The person of the possible data controllers entitled to access the data: The data controller does not manage personal data through the use of cookies.

  Description of data processing rights of data subjects: The data subject has the option to delete cookies in the Tools/Settings menu of browsers, usually under the settings of the Data Protection menu item.

  Legal basis for data management: Consent from the data subject is not required if the sole purpose of using cookies is the transmission of information via an electronic communication network or if the service provider absolutely needs it to provide a service related to the information society specifically requested by the subscriber or user.

Using Google Adwords conversion tracking

 

  The data controller uses the online advertising program called "Google AdWords", and also uses Google's conversion tracking service within its framework. Google conversion tracking is an analytics service of Google Inc. (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; "Google").

  When a User accesses a website through a Google ad, a cookie required for conversion tracking is placed on their computer. The validity of these cookies is limited and they do not contain any personal data, so the User cannot be identified by them.

  When the User browses certain pages of the website and the cookie has not yet expired, both Google and the data controller can see that the User has clicked on the ad.

  Each Google AdWords customer receives a different cookie, so they cannot be tracked through the websites of AdWords customers.

The information - obtained with the help of conversion tracking cookies - serves the purpose of creating conversion statistics for customers who choose AdWords conversion tracking. In this way, clients are informed about the number of users who click on their ad and are redirected to a page with a conversion tracking tag. However, they do not get access to information that could identify any user.

  If you do not want to participate in conversion tracking, you can refuse this by disabling the installation of cookies in your browser. After that, you will not be included in the conversion tracking statistics.

  Further information and Google's data protection declaration are available at www.google.de/policies/privacy/

Application of Google Analytics

 

  This website uses Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses so-called "cookies", text files that are saved on your computer, thus facilitating the analysis of the use of the website visited by the User.

  The information created by cookies related to the website used by the User is usually sent to and stored on one of Google's servers in the USA. By activating IP anonymization on the website, Google shortens the User's IP address beforehand within the member states of the European Union or in other states that are parties to the Agreement on the European Economic Area.

  The full IP address is transmitted to a Google server in the USA and shortened there only in exceptional cases. On behalf of the operator of this website, Google will use this information to evaluate how the User used the website, to prepare reports related to website activity for the website operator, and to provide additional services related to website and Internet use.

  Within the scope of Google Analytics, the IP address transmitted by the User's browser is not combined with other Google data. The User can prevent the storage of cookies by setting their browser accordingly, but please note that in this case, not all functions of this website may be fully usable. You can also prevent Google from collecting and processing the User's website usage data (including IP address) through cookies by downloading and installing the browser plugin available at the following link. https://tools.google.com/dlpage/gaoptout?hl=en

Newsletter, DM activity

 

  XLVIII of 2008 on the basic conditions and certain limitations of economic advertising activity. Pursuant to § 6 of the Act, the User may give prior and express consent to contact the Service Provider with its advertising offers and other mailings at the contact details provided during registration.

  In addition, the Customer may, bearing in mind the provisions of this information, consent to the Service Provider managing his personal data necessary for sending advertising offers.

The Service Provider does not send unsolicited advertising messages, and the User may unsubscribe from the sending of offers free of charge without limitation or justification. In this case, the Service Provider will delete all personal data necessary for sending advertising messages from its records and will not contact the User with further advertising offers. Users can unsubscribe from advertisements by clicking on the link in the message.

  The fact of data collection, the scope of processed data and the purpose of data management:

Personal data Purpose of data management

Name, e-mail address. Identification, enabling subscription to the newsletter.

Date of subscription Technical operation performed.

The IP address at the time of registration Execution of a technical operation.

 

  Scope of stakeholders: All stakeholders who subscribe to the newsletter.

  Purpose of data management: sending electronic messages containing advertising (e-mail, SMS, push message) to the person concerned, providing information about current information, products, promotions, new functions, etc.

  Duration of data management, deadline for deletion of data: data management lasts until withdrawal of consent, i.e. until unsubscription.

1. Person of possible data controllers entitled to access the data, recipients of personal data: Personal data can be handled by the sales and marketing staff of the data controller, in compliance with the above principles.
2. Description of the rights of data subjects related to data management:

  The data subject may request from the data controller access to personal data relating to him, their correction, deletion or restriction of processing, and

• you can object to the processing of such personal data, as well as
• the data subject has the right to data portability and to withdraw consent at any time.

  The data subject can initiate access to personal data, their deletion, modification or limitation of processing, portability of data, objection to data processing in the following ways:

by post at 2613 Rád, József Attila utca 15

via e-mail at the e-mail address info@flashprotein.hu,

  The person concerned can unsubscribe from the newsletter at any time, free of charge.

  Legal basis for data management: the consent of the data subject, points a) and f) of Article 6 (1) and XLVIII of 2008 on the basic conditions and certain limitations of economic advertising activities. § 6 (5) of the Act:

The advertiser, the advertising service provider, or the publisher of the advertisement - within the scope specified in the consent - keeps a record of the personal data of the persons who have given their consent.

The data recorded in this register - relating to the recipient of the advertisement - can only be handled in accordance with the consent statement, until it is revoked, and can only be transferred to third parties with the prior consent of the person concerned.

 

  We inform you that

  data processing is based on your consent.

• you must provide personal data if you wish to receive a newsletter from us.
• failure to provide data will result in us not being able to send you a newsletter.

Complaint handling

 

  The fact of data collection, the scope of processed data and the purpose of data management:

 

 

  Scope of stakeholders: All stakeholders who purchase on the webshop website and complain about quality.

 

1. Duration of data management, deadline for erasure of data: Copies of the minutes, transcripts and the response to the objection taken in the CLV of 1997 on consumer protection. Act 17/A. § (7) must be kept for 5 years.

 

1. Person of the possible data controllers entitled to access the data, recipients of the personal data: Personal data can be handled by the sales and marketing staff of the data controller, in compliance with the above principles.

 

1. Description of the rights of data subjects related to data management:

 

• The data subject may request from the data controller access to personal data relating to him, their correction, deletion or restriction of processing, and
• you can object to the processing of such personal data, as well as
• the data subject has the right to data portability and to withdraw consent at any time.

The data recorded in this register - relating to the recipient of the advertisement - can only be handled in accordance with the consent statement, until it is revoked, and can only be transferred to third parties with the prior consent of the person concerned.

 

  We inform you that

  data processing is based on your consent.

• you must provide personal data if you wish to receive a newsletter from us.
• failure to provide data will result in us not being able to send you a newsletter.

Complaint handling

 

  The fact of data collection, the scope of processed data and the purpose of data management:

 

 

  Scope of stakeholders: All stakeholders who purchase on the webshop website and complain about quality.

 

1. Duration of data management, deadline for erasure of data: Copies of the minutes, transcripts and the response to the objection taken in the CLV of 1997 on consumer protection. Act 17/A. § (7) must be kept for 5 years.

 

1. Person of the possible data controllers entitled to access the data, recipients of the personal data: Personal data can be handled by the sales and marketing staff of the data controller, in compliance with the above principles.

 

1. Description of the rights of data subjects related to data management:

 

• The data subject may request from the data controller access to personal data relating to him, their correction, deletion or restriction of processing, and
• you can object to the processing of such personal data, as well as
• the data subject has the right to data portability and to withdraw consent at any time.

1. The data subject can initiate access to personal data, their deletion, modification or restriction of processing, portability of data, objection to data processing in the following ways:

by post at 2613 Rád, József Attila utca 15

via e-mail at the e-mail address info@flashprotein.hu,

 

1. Legal basis for data management: Article 6 (1) point c) and CLV of 1997 on consumer protection. Act 17/A. (7) of §

 

1. We inform you that

 

• the provision of personal data is based on a contractual obligation.
• the processing of personal data is a prerequisite for the conclusion of the contract.
• you must provide personal data so that we can handle your complaint.
• failure to provide data will result in us not being able to handle your complaint.

 

 

Community sites

 

  The fact of the data collection, the scope of the processed data: Facebook/Google+/Twitter/Pinterest/Youtube/Instagram, etc. the name registered on social networking sites and the user's public profile picture.

 

1. Scope of stakeholders: All stakeholders who have registered on Facebook/Google+/Twitter/Pinterest/Youtube/Instagram, etc. on social networking sites and “liked” the website.

 

1. Purpose of data collection: To promote the sharing or "liking" of certain content elements, products, promotions or the website itself on social networks.

 

1. The duration of data management, the deadline for data deletion, the identity of possible data managers entitled to access the data and the description of the rights of the data subjects: The data subject can find out about the source of the data, its management, the method of transfer and its legal basis on the given social media page. Data management takes place on social networking sites, so the duration and method of data management, as well as the options for deleting and modifying data, are governed by the regulations of the respective social networking site.
2. The legal basis for data management: the voluntary consent of the concerned person to the management of his personal data on social networking sites.

 

 

 

Customer relations and other data management

 

  If a question arises when using our data management services, or if the data subject has a problem, you can contact the data manager using the methods provided on the website (telephone, e-mail, social media sites, etc.).

 

1. The data controller processes received e-mails, messages, on the phone, on Facebook, etc. data provided, together with the name and e-mail address of the interested party, as well as other voluntarily provided personal data, will be deleted after a maximum of 2 years from the date of data communication.

 

1. We provide information on data management not listed in this information when the data is collected.

 

1. The Service Provider is obliged to provide information, communicate and hand over data, or make documents available in the event of an exceptional official request, or in the case of requests from other bodies based on the authorization of the law.

 

1. In these cases, the Service Provider only releases personal data to the requester - if he has specified the exact purpose and the scope of the data - to the extent and to the extent that is absolutely necessary to achieve the purpose of the request.

 

Rights of data subjects

 

  Right of access

You are entitled to receive feedback from the data controller as to whether your personal data is being processed, and if such data processing is underway, you are entitled to access the personal data and the information listed in the regulation.

 

1. Right to rectification

You have the right to request that the data controller correct inaccurate personal data concerning you without undue delay. Taking into account the purpose of data management, you are entitled to request the completion of incomplete personal data, including by means of a supplementary statement.

 

1. Right to erasure

You have the right to request that the data manager delete your personal data without undue delay, and the data manager is obliged to delete your personal data without undue delay under certain conditions.

 

1. The right to be forgotten

If the data controller has disclosed the personal data and is required to delete it, it will take reasonable steps, including technical measures, taking into account the available technology and the costs of implementation, to inform the data controllers that you have requested the personal data in question. the deletion of links or duplicates of these personal data.

 

1. The right to restrict data processing

 

You have the right to have the data controller restrict data processing at your request if one of the following conditions is met:

• You dispute the accuracy of the personal data, in which case the limitation applies to the period that allows the data controller to check the accuracy of the personal data;
• the data processing is illegal and you object to the deletion of the data and instead request the restriction of its use;
• the data controller no longer needs the personal data for the purpose of data management, but you require them to submit, enforce or defend legal claims;
• You objected to data processing; in this case, the limitation applies to the period until it is determined whether the legitimate reasons of the data controller take precedence over your legitimate reasons.

 

1. The right to data portability

You have the right to receive the personal data about you that you have provided to a data controller in a segmented, widely used, machine-readable format, and you have the right to transfer this data to another data controller without being hindered by the data controller whose provided the personal data to you (...)

1. Right to protest

You are entitled to object at any time to the processing of your personal data by (…), including profiling based on the aforementioned provisions, for reasons related to your own situation.

 

1. Protest in the event of direct business acquisition

If personal data is processed for direct business acquisition, you have the right to object at any time to the processing of your personal data for this purpose, including profiling, if it is related to direct business acquisition. If you object to the processing of personal data for direct business purposes, then the personal data may no longer be processed for this purpose.

 

1. Automated decision-making in individual cases, including profiling

You have the right not to be subject to the scope of a decision based solely on automated data management, including profiling, which would have legal effects on you or would similarly significantly affect you.

The previous paragraph does not apply if the decision:

• Necessary to conclude or fulfill the contract between you and the data controller;
• its execution is made possible by EU or member state law applicable to the data controller, which also establishes appropriate measures for the protection of your rights and freedoms, as well as your legitimate interests; obsession
• Based on your express consent.

 

Action deadline

 

The data controller will inform you of the measures taken following the above requests without undue delay, but in any case within 1 month from the receipt of the request.

 

If necessary, this can be extended by 2 months. The data controller will inform you of the extension of the deadline, indicating the reasons for the delay, within 1 month of receiving the request.

 

If the data controller does not take measures following your request, it will inform you without delay, but at the latest within one month of the receipt of the request, of the reasons for the failure to take action, as well as the fact that you can file a complaint with a supervisory authority and exercise your right to judicial redress.

Security of data management

 

The data manager and the data processor implement appropriate technical and organizational measures, taking into account the state of science and technology and the costs of implementation, as well as the nature, scope, circumstances and purposes of data management, as well as the variable probability and severity of the risk to the rights and freedoms of natural persons. , to guarantee a level of data security appropriate to the degree of risk, including, among others, where appropriate:

 

the. pseudonymization and encryption of personal data;

 

1. ensuring the continuous confidentiality, integrity, availability and resilience of the systems and services used to manage personal data;

 

1. in the event of a physical or technical incident, the ability to restore access to and availability of personal data in a timely manner;

 

1. a procedure for regularly testing, assessing and evaluating the effectiveness of technical and organizational measures taken to guarantee the security of data management.

 

 

Informing the data subject about the data protection incident

 

If the data protection incident likely entails a high risk for the rights and freedoms of natural persons, the data controller shall inform the data subject of the data protection incident without undue delay.

 

In the information provided to the data subject, the nature of the data protection incident must be clearly and comprehensibly described, and the name and contact details of the data protection officer or other contact person providing additional information must be provided; the likely consequences of the data protection incident must be described; the measures taken or planned by the data controller to remedy the data protection incident must be described, including, where applicable, measures aimed at mitigating any adverse consequences resulting from the data protection incident.

 

The data subject does not need to be informed if any of the following conditions are met:

• the data controller has implemented appropriate technical and organizational protection measures and these measures have been applied to the data affected by the data breach, in particular those measures - such as the use of encryption - that make them unintelligible to persons not authorized to access personal data the data;
• after the data protection incident, the data controller has taken additional measures to ensure that the high risk to the rights and freedoms of the data subject is unlikely to materialize in the future;
• providing information would require a disproportionate effort. In such cases, the data subjects must be informed through publicly published information, or a similar measure must be taken that ensures similarly effective information to the data subjects.

 

If the data controller has not yet notified the data subject of the data protection incident, the supervisory authority, after considering whether the data protection incident is likely to involve a high risk, may order the data subject to be informed.

 

 

Reporting a data protection incident to the authority

 

The data controller shall report the data protection incident to the competent supervisory authority pursuant to Article 55 without undue delay and, if possible, no later than 72 hours after becoming aware of the data protection incident, unless the data protection incident is likely to pose no risk to the rights of natural persons and freedoms. If the notification is not made within 72 hours, the reasons justifying the delay must also be attached.

 

 

Possibility of filing a complaint

 

You can file a complaint with the National Data Protection and Freedom of Information Authority against possible violations of the data controller:

 

National Data Protection and Freedom of Information Authority (Nemzeti Adatvédelmi és Információszabadság Hatóság)

1125 Budapest, Szilágyi Erzsébet fasor 22/C.

Mailing address: 1530 Budapest, PO Box: 5.

Telephone: +36 -1-391-1400

Fax: +36-1-391-1410

E-mail: ugyfelszolgalat@naih.hu

Final word

 

During the preparation of the information sheet, we paid attention to the following legislation:

 

• REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL on the protection of natural persons with regard to the processing of personal data and on the free flow of such data, as well as on the repeal of Regulation 95/46/EC (General Data Protection Regulation) (2016 April 27)
• CXII of 2011. Act - on the right to self-determination of information and freedom of information (hereinafter: Infotv.)
• CVIII of 2001 Act - on certain issues of electronic commercial services and services related to the information society (mainly § 13/A)
• XLVII of 2008 law - on the prohibition of unfair commercial practices towards consumers;
• XLVIII of 2008 Act - on the basic conditions and certain limitations of economic advertising (especially § 6.a)
• 2005 XC. Act on Electronic Freedom of Information
• Act C of 2003 on electronic communication (specifically § 155.a)
• 16/2011. s. Opinion on the EASA/IAB Recommendation on Best Practices for Behavioral Online Advertising
• The recommendation of the National Data Protection and Freedom of Information Authority on the data protection requirements of prior information
• Regulation (EU) 2016/679 of the European Parliament and of the Council (April 27, 2016) on the protection of natural persons with regard to the processing of personal data and on the free flow of such data, and on the repeal of Regulation 95/46/EC