Privacy Policy

Acceptance date: November 18th, 2019

Table of contents

  • Privacy policy
    • Data processor information
    • Legal background, legal basis, purpose, scope of personal data processed and duration of data processing
    • Data processing
    • Rights of the data subject

Data processor

Name: Eszközbeszerzés Kft.

Registered seat: Hungary, 6065 Lakitelek, Szikra Tanya 195.

Mailing address, handling complaints: Hungary, 6065 Lakitelek, Szikra Tanya 195.

Phone: +36 30 5090620

Website: www.scriptngo.com

Hosting provider

Name: Contabo GmbH

Registered seat: Aschauer Straße 32a, 81549 Munich, Germany

Mailing address: Aschauer Straße 32a, 81549 Munich, Germany

E-mail address:info@contabo.com

Phone: +49 89 3564717 70

Description of data processing during the webshop operation

Information concerning cookies

What is a cookie?

The data processor uses so called cookies when visiting the web site. A cookie is an information package consisting of letters and numbers sent by our homepage to your browser in order to save some settings, to facilitate the use of our web site and help us to collect some relevant statistical information on our visitors.

Some cookies do not contain personal information and are not suitable to identify the specific user, but others do contain personal identificators – a secret number randomly created – that ist stored by your machine, ensuring thus your identification. The functioning period of some cookies are contained in their description.

Legal background and legal base of cookies:

Legal base of the data processing is you consent according to § 6. (1) of the Regulation.

Main features of the cookies used by the website:

Remarketing cookies: For previous visitors or users when searching in the Google Display Net, can appear when searching expressions related to the products or services.

Cookie strictly necessary for functioning: These cookies are imperative for the use of the web site and allow the use of basic functios of the web site. Without these, numerous functions of the web site are not available. The lifespan of this type of cookies is limited to the working time.

Cookie to improve the user experience: These cookies collect informations on the use of the web site by user, such as what web site he visits most frequently or what error messages he receives from the web site. These cookies do not collect identification information of the visitor, meaning that is working with completely general and anonymous information. Tha data collected from these are used to improve the performance of the web site. The lifespan of this type of cookies is limited to the working time.

If you don´t accept the use of cookies, some functions will not be available fo you. Detailed information on cookies can be found at:

Data processed in order to conclude and execute the contract

In order to conclude and execute the contract, more data processing cases may appear. We inform you that data processing related to complaints, warranty issues occurs only if you apply some of the rights above.

If you don’t buy from the webshop and only visit it, only the marketing related data processing mentioned above may apply to you if you agree with the marketing purpose.

Data processing in order to conclude and execute the contract detailed:

Contact:

If you contact us via e-mail, contact form or phone with questions on a product.

Previous contact is not required; you can order any time from the web shop without contact.

Processed data

The data given when in contact.

Duration of the data processing

Data is only processed until the end of contact.

Legal basis of data processing

The voluntary consent given to the Data Processor at first contact. [Section 6 (1) a) of the Regulation]

Registration on the website

By saving the data given at registration, the Data processor can provide more comfortable services (e.g. the data does not have to be entered again with any new purchase by the same person).

Processed data

During data processing the Data processor processes your address, phone number, e-mail address, features of the purchased product, date and hour of the purchase.

Duration of the data processing

The data is stored until consent is withdrawn.

Legal basis of data processing

The voluntary consent given to the Data Processor at first contact. [Section 6 (1) a) of the Regulation]

Order processing

Data processing activities required to concluded the contract during order processing.

Processed data

During data processing the Data processor processes your address, phone number, e-mail address, features of the purchased product, date and hour of the purchase.

If you have placed an order on the webshop then data processing and data entry are required to conclude the contract.

Duration of data management

The data is stored for a prescription perios of 5 years according to the Civil Code.

Legal basis of data processing

Execution of the contract [Section 6 (1) a) of the Regulation]

Issuance of the invoice

The data processing process takes place in order to issue the invoice according to legl provisions and the obligation to keep accounting documents. According Section 169. (1) and (2) of Sztv., companies are obliged to keep accounting documents and proving documents.

Processed data

Name, address.

Duration of data processing

According to Section 169. (2) of Sztv., issued invoices must be kept for 8 years from issuance.

Legal basis of data processing

According to Section 159. (1) of the Act No. CXXVII. from 2007 on VAT, issuance of invoices is compulsory and according to Section 169. (1) of the Accounting Act No. C from 2000, they must be kept for 8 years from the date os issuance [data processing according to Section 6. (1) c) of the Regulation].

Data processing related to delivery

The data processing process takes palce in order to delivered the product that was ordered.

Processed data

Name, address, e-mail address, phone number.

Duration of data processing

The data processor processes the data until the ordered products are delivered.

Legal basis of the data processing

Execution of the contract [Section 6 (1) b) of the Regulation]

Warranty processing

The data processing process is in place as a guarantee. If you have requested a warranty service, data processing and data entry are necessary.

Processed data

Name of customer, phone number, e-mail address, content of the complaint.

Duration of data processing

According to Consumer Protection Act, warranty complaints must be kept for 5 years.

Legal basis of data processing

Contacting us for warranty issues is your voluntary decision; but if you contact us, according to Section 17/A (7) of the Act No. CLV from 1997 on consumer protection we are obliged to keep the claim for 5 years [data processing according to Section 6. (1) c) of the Regulation].

Processing other consumer protection complaints

Data processing process is carried out in order to process consumer protection complaints. If you contact us with a complaint, data processing and giving personal data are necessary.

Processed data

Name of customer, phone number, e-mail address, content of the complaint.

Duration of data processing

According to Consumer Protection Act, warranty complaints must be kept for 5 years.

Legal basis of data processing

Contacting us for warranty issues is your voluntary decision; but if you contact us, according to Section 17/A (7) of the Act No. CLV from 1997 on consumer protection we are obliged to keep the claim for 5 years [data processing according to Section 6. (1) c) of the Regulation].

Data processing in relation to burden of proof of consent

At registration, order, newsletter registration the informational system saves informatic data related to consent for subsequent proof.

Processed data

Acceptance date and IP address.

Duration of data processing

According to legal provisions, we are obliged to be able to subsequently prove the consent given; hence, the storage duration of this data is the prescription period after termination of the data processing.

Legal basis of data processing

This obligation is stipulated in Section 7. (1) of the Regulation [data processing according to Section 6. (1) c) of the Regulation].

Data processing for marketing reasons

Data processing related to newletters

Processed data

Name, e-mail address.

Duration of the data processing

Until the withdrawal of consent by those affected.

Legal basis of data processing

Your consent by registration to the newsletter of the Data Processor [data processing according to Section 6. (1) a) of the Regulation].

Remarketing

Data processing as remarketing activity is done by cookies.

Processed data

Data processed by the cookies in the information on cookies.

Duration of data processing

Storage duration of cookie data, detailed information can be found here:

Google’s general information on cookies: https://www.google.com/policies/technologies/types/

Google Analitycs information: https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage?hl=hu

Facebook information: https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen

Legal basis of data processing

Your voluntary consent by registration to the newsletter given to the Data processor [data processing according to Section 6. (1) a) of the Regulation].

Prize games

Data processing is used to help conduct the prize games.

Processed data

Name, e-mail address, phone number.

Duration of data processing

Data is erased after termination of the game, excepting the data of the winner, which the Data processor is obliged to keep for 8 years according to Accounting Act.

Legal basis of data processing

Your voluntary consent by use of the website that is given to the Data processor [data processing according to Section 6. (1) a) of the Regulation].

Processing other data

If the Data processor wants to process other data, he will inform your beforehand on important circumstances of data processing (legal background and legal basis of the data processing, processed data and duration of data processing.

We inform you that the Data processor is obliged to fulfill the written data requests of the authorities based on legal warrant. According to Section 15. (2) and (3) of the Information Act, the Data processor shall keep evidence of the data transmitted (to which authority, on what legal basis, when transmitted); on request, the Data processor will inform on the content of these data, excepting if forbidden by legal provisions.

Calling the services of the Data processor and our legal activity related to data processing

Data processing for storage of personal data

Name of data processor:

Contact information of the data processor:

Phone:

E-mail address:

Registered seat:

The Data processor carries out the storage of personal data based on a contract. He has no right to identify personal data.

Data processing activity related to product delivery

Name of data processor:

Registered seat of data processor:

Data processor’s phone number:

Data processor’s e-mail address:

The Data processor cooperates with the data processor for delivery of the ordered products. Within this cooperation, the Data processor can process the name, address and phone number of the buyer until the end of the calendar year of the shipment of the package and shall erase them after that immediately.

Data processing activity related to newsletter

Name of the company operating the newsletter sending system:

Headquarters of the company operating the newsletter sending system:

Phone of the company operating the newsletter sending system:

E-mail address of the company operating the newsletter sending system:

The Data processor cooperates with the data manager in order to end the newsletter. Within this cooperation, the Data processor processes as necessary, the name and the e-mail address of the person involved and erases these immediately on request of the person involved.

Data processing related to online payment

Name of the data processor: PayPal

Headquarters of the data processor: 2211 North First Street San Jose, California 95131

Phone number of the data processor: PayPal Resolution Center (https://www.paypal.com/us/smarthelp/contact-us)

E-mail address of the data processor: PayPal Resolution Center (https://www.paypal.com/us/smarthelp/contact-us)

The data processor cooperates with the data manager in the execution of online payment. In doing so the data processor shall manage the billing name and address, the order number and the date of the data subject withinh the civil statute of limitations.

Your rights during data processing

During your personal data processing, according to provisions of the Regulation you have the following rights:

  • withdrawal of consent
  • access to information concerning personal data and data processing
  • right to correction
  • limitation of data processing
  • right of erasure
  • right to appeal
  • right to mobility.

If you want to enforce your rights, you shall identify yourself and have to communicate with the Data processor. In order to do so, the personal data is required for identification (identification can be made only based on the data that the Data processor processes anyway), in the e-mail account of the Data processor all your complaints related to the data processing of hereby information are available within the stipulated complaint time. If you are the buyer and would like to identify yourself in order to solve any financial or warranty issues, please indicate the order identification as well. With this, we are able to identify you as buyer.

The Data processor shall answer to the complaints related to the data processing within a maximum 30 days.

Withdrawal of consent

You have the right to withdraw consent of data processing at anytime; in this case, we will erase all data within our system. Please consider that in case of orders not executed the withdrawal can lead to the impossibility of product delivery. Furthermore, if the purchase has already taken place, according to accounting provisions, we cannot erase invoicing data from our systems, or if you have debts towards us we are not able to process the necessary data in order to cash in the debts in case of the withdrawal of the consent.

Access to personal data

You have the right to receive confirmation from the Data processor if your personal data is processed and if it is, you have the right to:

  • receive access to the personal data, and
  • the data processor must inform you on the following:
    • the goal of data processing;
    • categories of personal data processed;
    • information on the category of recipient(s), with whom the data processor has or will share your personal data
    • estimated duration of data storage, or if this is not possible, the criteria of establishing this duration;
    • your right to request the correction, erasure or limitation of processing of your personal data and your right to appeal the processing of your personal data;
    • right to file a complaint with the surveilling authority;
    • if the data was not collected directly from you, all information regarding the source;
    • on the automated decision (if such a procedure took place), including your profile, as well as the applied logic to do so and information regarding this, the importance and consequences of the data processing.

The goal of enforcing these rights is to establish and verify the legality of the data processing; for this reason, in case of more information requests the Data processor may invoice the justified expenses for such information.

Access to the personal data is granted by the Data processor by an e-mail sent to you after identification that contains the processed personal data and information. If you are registered, the access in granted by accessing your user account where you can see and verify your personal data processed.

Please mention in the application if you request access to the personal data or if you request information related to the processed data.

Right to correction

You have to right to request an immediate correction from the data processor concerning any incorrect personal data.

Right to restrict the data processing

You have the right to restrict data processing based on an application, if one of the conditions below apply:

  • you dispute the preciseness of the data processing; in this case, the limitation of data processing refers to the period that allows the Data processor to verify the preciseness of the personal data and if the precise data can be established immediately, there is no limitation;
  • data processing is not legal but you verify for whatever reason the erasure (e.g. because the data is important to you because of your legal claims), so you do not request the erasure but rather the limitation of its use;
  • the data processor does not need anymore the personal data for the indicated processing, but you request it for presentation, to make use of or defend certain legal claims;
  • you made an appeal against the data processing but the justified right of the data processor may motivate the data processing; in this case, until it is not established whether the justified reasons of the data processor prevail in front of your rights, the data processing must be limited.

If the data processing is restricted, the data (except storage) can be processed only with the consent of the person involved and only for the presentation, to make use of or protection of legal claims or protection of the rights of other natural or legal person or in the public interest of the European Union or a member state.

The Data processor informs you at least 3 working days before suspending the restriction of data processing.

Right of erasure and to forget

You have the right to request that the data processor erase without undue delay your personal data in case of one of the following reasons:

  • personal data is no longer necessary for the reason it was collected and processed previously;
  • you withdraw consent and the data processing loses its legal basis;
  • you dispute the data processing based on a legal basis, and there is no prevailing right to process (justified interest);
  • the data processor processed the data in an unlawful way, and this has been established after a complaint;
  • personal data must be erased in order to meet the legal obligation of the European legislation or the legislation of a Member State concerning the data processor.

If the data processor has made your personal data public for any reaosn, and it is required to delete said data based on the reasons above, taking into account the technology available and the cost of implementation, it must take reassonable steps, including technical measures to inform other data processors, that you have requested that all links to this data and any and all duplications be erased.

The data shall not be erased, if data processing is necessary to ensure:

  • the right to freedom of expression and information;
  • to fulfill an obligation under EU or Member State law applicable to the data manager for the processing of personal data (in this case data processing during billing is required, because it is required by law to save the invoice), or in the case of public interest or the exercise of public authority;
  • to file, enforce or defend legal claims (e.g. if the data manager has a claim against you that has not yet been fulfilled, or a consumer data processing complaint is pending).

Right to protest

You have the right to protest anytime against the personal data processing based on a legal basis. In this case, the Data processors cannot process the personal data further, except if he proves that the processing is motivated by legal obligations prevailing in front of your rights, interests and freedoms or if they are related to presentation, or to make use or protect certain legal claims.

If the personal data processing is carried out for reasons of business acquisition, you have the right to protest at any time against the processing of your personal data for this reason, including profile creation, if this is related to business acquisition. If you protest against the processing of your personal data due to business acquisition, your personal data cannot be processed for this reason anymore.

Right to mobility

If the data processing is done automatically or if the data processing is based on your consent, you have the right to request that the data processor transmit the requested data to another data processor in the same format as made available: xml, JSON or csv, if this is technically possible.

Automated decisions

You have the right to choose that the effects of decisions based on the completely automatic data processing not be extended over you (including profile creation), including any legal consequences that may influence you severely. In these cases, the data processor is obliged to take adequate measures for protecting the rights, freedoms and interests of the persons involved, including the right to human intervention, freedom of expression and presentation of a dispute against the decision.

These are not applicable if the decision is:

  • necessary for the conclusion or execution of the contract between you and the data processor;
  • allowed by legal provisions of the European Union or the Member State, that establishes adequates measures to protect your rights, freedoms and interest; or
  • based on your explicit consent.

Registration into the data protection registry

According to provisions of the Information Act, the Data processor has to register some data processing into the data protection registry. This obligation ended on May 25th, 2018.

Data protection measures

The Data processor declares that he took adequate measures for protecting personal data against unauthorized access, modification, transmission, publishing, erasing or destruction as well as against accidental destruction and deterioration and the impossibility of accessing them due to technical changes.

The Data processor takes all necessary and adequate organizational and technical measures to protect your personal data during processing.

Legal action

If you believe that the data processor breached a legal provision concerning data processing or did not fulfill a demand, you can request the launch of legal action in front of the National Data Protection and Freedom of Information Authority (mailing address: 1530 Budapest, Pf.: 5., e-mail: ugyfelszolgalat@naih.hu) in order to stop the presumed unlawful data processing.

Along with this, we inform you that in case of a breach of the legal provisions concerning data processing or if the data processor did not fulfill a demand, you may take civil action against it as well.

Modification of data processing information

The data processor reserves the right to modify data processing information without influencing the goal and the legal basis of the data processing. By using the website after it has entered into force you agree the modified information on data processing.

If the Data processor wants to process data with a goal other then data gathering, he will inform you on the purpose of the data processing and the following information:

  • duration of data storage and if this is not possible, criteria of establishing the duration;
  • your right to request that the data processor grant access to your personal data, their correction and erasing or restriction of their processing, and in case of processing due to justified interests you can appeal against processing of the personal data, and in case of data processing based on a contract or consent you can request data mobility;
  • in the case of data processing based on consent, your right to withdraw said consent at any time;
  • the right to file a complaint with the supervising authority;
  • whether providing personal data is based on a legal provision or it is a condition to conclude the contract, or if you are obliged to provide personal data and what consequences not providing them may have;
  • on automated decisions (if there such a procedure in place), including profile creation, the logic applied respectively in these cases and information related to the importance of such data processing and its consequences on you.

The data processing may only start after the conditions above are met, and if the legal basis of the data processing is consent, then your consent is required before any data is processed.

This document hereby contains all relevant information related to the functioning of the website according to General Rules on Data Protection No. 679/2016 of the European Union (hereinafter referred to as GPD Rules) as well as the Act No. CXII. from 2011 (hereinafter referred to as Infotv.).

Sample declaration of withdrawal

Recipient: (address: …………………………., e-mail: ……………………..)

I/We, the undersigned, hereby declare that I/we would like the exercise my/our right to withdrawal/cancellation with regard to the contract for the purchase of the following product(s) and/or service(s):

……………………………………………………………………………………………………………

Effective date of the contract/delivery date: …………………………………………………………

Name of consumer(s): …………………………………………………………………………………

Address of consumer(s): …………………………………………………………………………………

I request that you transfer the purchase price to the following bank account (to be filled in if you would like the purchase price to be paid back by bank transfer): ……………………….……………………………………….

Signature of consumer(s): (only if the declaration is made in paper form) …………………………………

Date:……………………………..

Send this to a friend