Privacy Policy

1. General guidelines

• We collect and process personal data only in accordance with applicable laws.
• We share personal data with third parties only with consent.
• Under no circumstances do we sell the personal data we process to third parties.
• We store data as securely as possible.
• We send newsletters only to those who have given prior and explicit consent.
• Data subjects may request access to, correction of, or deletion of their stored data at any time.

2. Our company (data controller, Service Provider] details, contact information

Name of the data controller: Beregszászi Pro-Dent Kft.
Contact details of the data controller: 1075 Budapest, Síp utca 6. 1. em. 7.
Phone: +36 70 7500 333
E-mail: @email
Web: https://www.vorosvaridental.hu
Tax number: 29169102-1-42

The Service Provider reserves the right to amend this Data Processing Notice, and will inform data subjects in an appropriate manner. Information related to data processing is published on the LINK GOES HERE website.

3. Definitions under the GDPR (Regulation]

3.1. data subject/User: any identified or identifiable natural person who can be identified, directly or indirectly, in particular by reference to personal data;

3.2. personal data: any data relating to the data subject – in particular the data subject’s name, identification sign, and one or more factors specific to the physical, physiological, mental, economic, cultural or social identity of that person – as well as any inference that can be drawn from it regarding the data subject;

3.3. consent: any freely given and specific indication of the data subject’s wishes, based on appropriate information, by which they give unambiguous consent to the processing of personal data relating to them – either in full or for certain operations;

3.4. data controller: the natural or legal person, or an organization without legal personality, who or which alone or jointly with others determines the purposes of the processing of personal data, makes and implements decisions regarding processing (including the means used], or has them implemented by a processor;

3.5. data processing: any operation or set of operations performed on data, regardless of the procedure applied, including in particular collection, recording, organization, storage, alteration, use, retrieval, transfer, disclosure, alignment or combination, restriction, erasure and destruction, as well as preventing further use of the data; making photo, audio or video recordings; and recording physical characteristics suitable for identification (e.g., fingerprint or palm print, DNA sample, iris image];

3.6. data transfer: making data accessible to a specified third party;

3.7. disclosure: making data accessible to anyone;

3.8. data erasure: rendering data unrecognizable in such a way that its restoration is no longer possible;

3.9. data processing (by a processor): performing technical tasks related to data processing operations, regardless of the method and tools used to carry out the operations and the place of application, provided that the technical task is performed on the data;

3.10. data processor: the natural or legal person, or an organization without legal personality, who or which processes data on the basis of a contract – including a contract concluded pursuant to a legal provision;

3.11. personal data breach: unlawful processing or handling of personal data, including in particular unauthorized access, alteration, transfer, disclosure, erasure or destruction, as well as accidental destruction and damage.

4. Scope of processed data, purpose, duration, and the processor of the data

Data subjects: All users registered/purchasing on the webshop website.

We share personal data exclusively with the third party indicated in the “Processor of the given personal data” column, for the purpose of fulfilling contractual obligations.

Details and tasks of data processors used during processing

Hosting provider
Name: InfoNetfort Kft.
Address: 7900 Szigetvár, Szent István ltp 17. IV/25.
Phone: +36-30/530-2953
E-mail: @email
Web: www.netfort.hu
Tax number: 26648082-2-02
Company registration number: 02 09 084205

Accounting services
 

Courier service
 

Direct marketing, newsletter
Name: 
Address: 

4.1 Contact form:

Data subjects: Persons who contact us by phone, e-mail, or via the contact form.

We do not share personal data with third parties.

5. Newsletter, direct marketing activity

We send newsletters only to Users who have given prior and explicit consent. Consent is provided via the “Newsletter subscription” form.

Data subjects: All data subjects subscribed to the newsletter.

Operator of the newsletter system and processor of the data:
Name: 
Address: 

5.1 Procedure for withdrawing consent (unsubscribe]
The data subject may unsubscribe from the newsletter at any time, free of charge. Unsubscribing can be done via the link included in the newsletters, or by e-mail sent to EMAIL ADDRESS GOES HERE .

6. Cookies (sütik] management

6.1 What is a cookie?

During visits to the website, the Data Controller uses so-called cookies (sütik]. A cookie is an information package consisting of letters and numbers that our website sends to the data subject’s browser in order to save certain settings, facilitate the use of our website, and help us collect certain relevant, statistical information about our visitors. Cookies (sütik] do not contain personal information and are not suitable for identifying an individual user. Cookies (sütik] often contain a unique identifier - a secret, randomly generated sequence of numbers - that is stored on the data subject’s device.
Some cookies (sütik] expire after closing the website, while others are stored on your computer for a longer period.

6.2. Legal background and legal basis for cookie management

Cookies typical for webshops include “cookies used for password-protected sessions”, “cookies required for the shopping cart”, and “security cookies”, the use of which does not require prior consent from data subjects.

Fact of processing, scope of processed data: Unique identifier, dates, times

Data subjects: All visitors to the website.

Purpose of processing: Identifying users, tracking visitors.

Legal basis for processing: consent of the data subject in accordance with Section 5. § (1] (a] of the Infotv.

6.3 Duration of processing, deadline for deletion of data: the website uses the following cookies:

• Security cookies: __cfduid, _biz_flagsA, _biz_nA 3, _biz_pendingA, _biz_sid, _biz_uid
• Google Analytics cookies: _ga, _gid
• Cookies required for proper use of the site: 

Possible data controllers entitled to access the data: The data controller does not process personal data through the use of cookies.

Description of data subjects’ rights regarding processing: Data subjects have the option to delete cookies in the Tools/Settings menu of their browsers, usually under the Privacy settings.
If the data subject does not accept the use of cookies, certain functions will not be available to the data subject. More information about deleting cookies can be found at the following links:
    • Internet Explorer: http://windows.microsoft.com/en-us/internet-explorer/delete-managecooki…
    • Firefox: https://support.mozilla.org/en-US/kb/cookies-information-websites-store…
    • Chrome: https://support.google.com/chrome/answer/95647?hl=en
    • Safari: https://support.apple.com/kb/ph21411?locale=en_US

7. Google Analytics

7.1. This website uses Google Analytics, a web analytics service provided by Google Inc. (\"Google\"]. Google Analytics uses so-called \"cookies\", text files that are stored on your computer and enable analysis of how Users use the website.
7.2. Information generated by cookies about the use of the website is usually transmitted to and stored on a Google server in the USA. With IP anonymization enabled on the website, Google will shorten the User’s IP address within Member States of the European Union or other states party to the Agreement on the European Economic Area beforehand.
7.3. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the website operator, Google will use this information to evaluate the User’s use of the website, compile reports on website activity for the website operator, and provide other services relating to website and internet usage.
7.4. Within Google Analytics, the IP address transmitted by the User’s browser is not merged with other Google data. The User can prevent the storage of cookies by adjusting browser settings; however, please note that in this case not all functions of the website may be fully usable. The User can also prevent Google from collecting and processing data generated by cookies relating to the User’s website use (including the IP address], by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=hu

8. Google Adwords conversion tracking and remarketing

8.1. The data controller uses the online advertising program called \"Google AdWords\" and, within its framework, uses Google’s conversion tracking service. Google conversion tracking is an analytics service of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; \"Google\"].
8.2. When a User reaches a website via a Google advertisement, a cookie required for conversion tracking is placed on their computer. These cookies have limited validity and do not contain any personal data, so the User cannot be identified by them.
8.3. When the User browses certain pages of the website and the cookie has not yet expired, both Google and the data controller can see that the User clicked on the advertisement.
8.4. Each Google AdWords client receives a different cookie, so they cannot be tracked across the websites of AdWords clients.
8.5. The information obtained using conversion tracking cookies serves to create conversion statistics for clients who choose AdWords conversion tracking. Clients learn the number of users who clicked on their advertisement and were redirected to a page tagged for conversion tracking. However, they do not receive information that could identify any user.
8.6. If you do not wish to participate in conversion tracking, you can refuse it by disabling the installation of cookies in your browser. You will then not be included in conversion tracking statistics.
8.7. Further information and Google’s privacy statement are available on the following page: www.google.de/policies/privacy/

8.8. Google Adwords Remarketing

8.9. Processing as a remarketing activity is carried out using cookies.

Processed data
Data processed by the cookies specified in the cookie notice.
Duration of processing
The data storage duration of the given cookie, more information is available here:
Google general cookie notice: https://www.google.com/policies/technologies/types/
Google Analytics notice:
https://developers.google.com/analytics/devguides/collection/analyticsj…
Legal basis for processing
Voluntary consent of the data subject, which the data subject provides to the Service Provider by using the website.

9. Rights of data subjects

9.1 Right to information
Upon the data subject’s request, the Service Provider, as data controller, provides information about the data processed by it and/or processed by the processor engaged by it, their source, the purpose, legal basis and duration of processing, the name and address of the processor and its activities related to processing, the circumstances and effects of any personal data breach and the measures taken to address it, and, in the case of data transfer, its legal basis and the recipient. The data controller provides the information in a comprehensible form, in writing upon the data subject’s request, within the shortest possible time, but no later than 30 days from submission of the request. This information is free of charge if the person requesting the information has not submitted a request for information relating to the same scope of data to the data controller in the current year. In other cases, the Service Provider sets a cost reimbursement.

9.2 Right to rectification
The Service Provider rectifies personal data if it does not correspond to reality and the correct personal data is available to it.

9.3 Right to restriction
The Service Provider restricts personal data if the data subject requests it, or if, based on available information, it can be assumed that erasure would violate the data subject’s legitimate interests. Restricted personal data may be processed only for as long as the processing purpose exists that prevented erasure. The Service Provider marks personal data it processes if the data subject disputes its accuracy, but the inaccuracy or inexactness of the disputed personal data cannot be clearly established.

9.4 Right to erasure
The Service Provider erases personal data if processing is unlawful, the data subject requests it, the processed data is incomplete or incorrect - and this condition cannot be lawfully remedied - provided that erasure is not excluded by law, the purpose of processing has ceased, or the statutory storage period has expired, or erasure has been ordered by a court or the National Authority for Data Protection and Freedom of Information.

9.5 Procedural rules
The data controller has 30 days to erase, restrict or rectify personal data. If the data controller does not comply with the data subject’s request for rectification, restriction or erasure, it shall communicate the reasons for refusal in writing or, with the data subject’s consent, electronically within 30 days. The Service Provider notifies the data subject and all those to whom the data was previously transferred for processing about the rectification, restriction, marking, and erasure. Notification may be omitted if, considering the purpose of processing, it does not harm the data subject’s legitimate interests.

9.6 Objection
The data subject may object to the processing of their personal data if

a] the processing or transfer of personal data is necessary exclusively for the performance of a legal obligation applicable to the data controller or for the enforcement of the legitimate interests of the data controller, the data recipient or a third party, except where processing is ordered by law;

b] in other cases specified by law.

The Service Provider examines the objection within the shortest possible time from submission, but no later than 15 days, makes a decision on its merits, and informs the applicant of its decision in writing. If the data controller finds the objection to be justified, it terminates processing - including further data collection and transfer - and restricts the data, and notifies all those to whom the personal data concerned by the objection was previously transferred and who are obliged to take measures to enforce the right to object.

If the data subject does not agree with the data controller’s decision, they may turn to court within 30 days from communication of the decision.

The Service Provider may not erase the data subject’s data if processing is ordered by law. However, the data may not be transferred to the recipient if the data controller agreed with the objection or if the court established the validity of the objection.

9.7. Right to data portability
If processing is carried out by automated means, or if processing is based on the data subject’s
voluntary consent, the data subject has the right to request the Data Controller to provide the data
provided by the data subject to the Data Controller in xml, JSON, or csv
format, if technically feasible, and may request that the Data Controller transfer the data in this format to another data controller.

9.8 Compensation and non-pecuniary damages
The Service Provider compensates for damage caused to others by unlawful processing of the data subject’s data or by violating data security requirements. In the event of a violation of the data subject’s personality rights, the data subject may claim non-pecuniary damages (Civil Code 2:52. §]. The data controller is also liable vis-à-vis the data subject for damage caused by the processor. The data controller is exempt from liability if the damage was caused by an unavoidable external cause outside the scope of processing.

The data controller does not compensate for damage and no non-pecuniary damages may be claimed to the extent that the damage or the infringement was caused by the data subject’s intentional or grossly negligent conduct.

9.9 Right to go to court
In the event of infringement of their rights, the data subject may turn to court against the data controller. The court proceeds in the matter as a priority.

9.10 Complaint
A complaint may be submitted to the National Authority for Data Protection and Freedom of Information:

Name: National Authority for Data Protection and Freedom of Information
Registered office: 1125 Budapest, Szilágyi Erzsébet fasor 22/C.
Mailing address: 1530 Budapest, Pf.: 5.
Phone: +361/391-1400
Fax: +361/391-1410
E-mail: @email
Website: http://www.naih.hu

10. Data security

The Service Provider designs and implements data processing operations in a way that ensures protection of data subjects’ privacy.

The Service Provider and, within its scope of activity, the processor ensures data security, takes the necessary technical and organizational measures, and establishes procedures required to enforce the Infotv. and other data and secrecy protection rules.

The Service Provider protects data with appropriate measures in particular against unauthorized access, alteration, transfer, disclosure, erasure or destruction, as well as accidental destruction and damage, and against inaccessibility resulting from changes in the applied technology.

During data processing, the Service Provider maintains:
    • confidentiality: protects information so that only those authorized can access it
    • integrity: protects the accuracy and completeness of information and processing methods
    • availability: ensures that when an authorized user needs it, they can actually access the desired information and that the related tools are available.

The IT system and network of the Service Provider and its partners involved in processing
are protected against computer-assisted fraud, espionage, sabotage, vandalism, fire and flood,
as well as computer viruses, computer break-ins and denial-of-service attacks.
The operator ensures security through server-level and application-level protection procedures.

11. Applicable legislation used for this Data Processing Notice

    • Act CXII of 2011 – on the Right to Informational Self-Determination and Freedom of Information (Infotv.]
    • Act V of 2013 – the Civil Code (Ptk.]
    • Act CLV of 1997 – on Consumer Protection (Fgytv.]
    • Act XIX of 1998 – on Criminal Procedure (Be.]
    • Act CVIII of 2001 – on Electronic Commerce Services and Certain Issues of Information Society Services (Eker. tv.]
    • Act C of 2003 – on Electronic Communications (Eht.]
    • Act XLVIII of 2008 – on the Basic Conditions and Certain Restrictions of Economic Advertising Activity (Grt.]
    • Recommendation of the National Authority for Data Protection and Freedom of Information on the data protection requirements of prior information
    • GDPR, Regulation (EU) 2016/679 of the European Parliament and of the Council on the processing of personal data of natural persons, on their protection and on the free movement of data

DATE