Contents
- Privacy Notice
- Controller information
- Legal background, legal basis and purpose of data processing via website, scope of personal data concerned, processing period
- Data processing
- Data security measures
- Rights of the data subject
- Remedy
Name and contact details of Controller
Name of Controller: Nortene Home Depot Eastern Europe Kft. (Hereinafter: the ‘Controller’)
Mailing address: 2730 Albertirsa Baross utca 85/2
Email address: infohungary@nortene.com
Telephone number. +36 53 570 090
Website: http://www.intermaskft.hu
Legal background, legal basis and purpose of data processing via website, scope of personal data concerned, processing period
Cookies information
What is a cookie?
Cookies are used when you visit our website. A cookie is an information package of letters and numbers that is sent to your browser in order to save certain settings and facilitate the use of our website, while helping us to collect some relevant statistical information on visitors to our website. Cookies contain no personal information and are not suitable to identify individual users. Cookies frequently contain a unique identifier, i.e. an encrypted, randomly generated string of numbers that is stored on your device. Some cookies cease to exist after closing the browser, while others are stored on your computer for a longer period of time.
Legal background and legal basis for using cookies:
The legal background of data processing is provided by Act CXII of 2011 on informational self-determination and freedom of information (Privacy Act), as well as Act CVIII of 2001 on certain issues of electronic commerce services and information society services. The legal basis for data processing shall be your consent supplied in accordance with Article 5 (1) a) of the Privacy Act.
Main features of cookies used by our website:
Google Adwords cookie: when you visit our website, your cookie ID is added to a remarketing list. Google uses cookies, like NID and SID to personalise adverts in Google products, such as those displayed in Google searches. These cookies are used, for example, to remember your recent searches and your former interactions with the adverts of certain advertisers or your search results, as well as your visits made to the advertisers’ websites. The AdWords conversion tracking function uses cookies. It saves cookies on your computer device to track advertisement notices and other conversions when your click on an advert. Frequent ways of using cookies: selecting adverts based on relevant preferences of a specific user, optimizing reports on campaign performance, avoiding displays of adverts already viewed by a user.
Google Analytics cookie: Google Analytics is an analytical tool that helps website and application owners to get a more accurate idea of visitor activities. This service may use cookies in order to collect information and prepare reports on website usage based on relevant statistical data, without personally identifying any visitor for Google. The main cookie used by Google Analytics is ‘__ga’. In addition to website usage reports based on statistical data, Google Analytics, along with some advert cookies described above, can also be used in order to display more relevant advertisements in Google products (e.g. Google search) and across the internet.
Cookie used for product recommendation: This cookie records the list of products wished to be recommended in the ‘Recommend to a Friend’ function. It remains active for a period of 60 days.
If you choose to disable cookies, you will be unable to access certain functions. For more detailed information on how to delete cookies please click on the following links:
- Internet Explorer: http://windows.microsoft.com/en-us/internet-explorer/delete-manage-cookies#ie=ie-11
- Firefox: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer
- Chrome: https://support.google.com/chrome/answer/95647?hl=en
Data processing related to orders and issue of invoices
Legal background and legal basis for data processing:
The legal background of data processing is provided by Act CXII of 2011 on informational self-determination and freedom of information (Privacy Act), as well as Act C of 2000 on accounting (Accounting Act). The legal basis for data processing shall be your consent supplied in accordance with Article 5 (1) a) of the Privacy Act, and in the event of withdrawing your consent, the fulfilment of legal obligations stipulated in the Accounting Act, imposed on Controller pursuant to Article 6 (5) a) of the Privacy Act.
Purpose of data processing:
Issue of invoices and fulfilment of obligation to retain accounting documents in accordance with the law. Pursuant to Article 169 (1)-(2) of the Accounting Act, economic entities should retain any direct or indirect accounting evidence supporting their bookkeeping accounts.
Scope of processed data:
Name, address, email address, telephone number.
Duration of data processing:
Pursuant to Article 169 (2) of the Accounting Act, any invoice should be retained for a period of 8 years upon issuance. Please note that if you withdraw you consent as regards invoicing, Controller may retain your personal data obtained in the course of issuing invoice(s) for a period of 8 years, in accordance with Article 6 (5) a) of the Privacy Act.
Data processing related to transportation of goods
Legal background and legal basis for data processing:
The legal background of data processing is provided by Act CXII of 2011 on informational self-determination and freedom of information (Privacy Act). The legal basis for data processing shall be your consent supplied in accordance with Article 5 (1) a) of the Privacy Act.
Purpose of data processing:
As regards transportation of goods, the purpose of data processing is to ship any ordered items in accordance with your requirements, assisted by our contractual partner.
Scope of processed data:
Name, address, email address, telephone number.
Duration of data processing:
Controller shall process data during the period required for shipping the ordered goods.
Data processing related to sending newsletters
Legal background and legal basis for data processing:
The legal background of data processing is provided by Act CXII of 2011 on informational self-determination and freedom of information (Privacy Act), as well as Act XLVIII of 2008 on the basic requirements and certain restrictions of commercial advertising activity (Commercial Advertisement Act). The legal basis for data processing shall be your consent supplied in accordance with Article 5 (1) a) of the Privacy Act and Article 6 (1)-(2) of the Commercial Advertisement Act.
Purpose of data processing:
The purpose of data processing is to provide you with information on most recent best offers and discounts. Please note that in addition to our own, the newsletters contain advertisements of other economic entities as well, without transferring your personal data to any of these entities.
Scope of processed data:
Name, address, email address, telephone number.
Duration of data processing:
Until withdrawal of your consent.
Data processing related to sending and displaying personalised advertisements
Legal background and legal basis for data processing:
The legal background of data processing is provided by Act CXII of 2011 on informational self-determination and freedom of information (Privacy Act), as well as Act XLVIII of 2008 on the basic requirements and certain restrictions of commercial advertising activity (Commercial Advertisement Act). The legal basis for data processing shall be your consent supplied in accordance with Article 5 (1) a) of the Privacy Act and Article 6 (1)-(2) of the Commercial Advertisement Act.
Purpose of data processing:
The purpose of data processing is to supply you with personalised offers best suited to your needs and preferences.
Scope of processed data:
Name, address, email address, telephone number.
Duration of data processing:
Until withdrawal of your consent.
Data processing related to registration
Legal background and legal basis for data processing:
The legal background of data processing is provided by Act CXII of 2011 on informational self-determination and freedom of information (Privacy Act), as well as Act V of 2013 on the Civil Code (Civil Code Act). The legal basis for data processing shall be your consent supplied in accordance with Article 5 (1) a) of the Privacy Act.
Purpose of data processing:
Retaining the data supplied during registration facilitates more convenient services to be provided by Controller (e.g. it will not be necessary for data subjects to resupply information when initiating additional purchase transactions).
Scope of processed data:
In the course of data processing the scope of data managed by Controller shall include your name, home address, telephone number, email address, features of the purchased product(s), and the date of purchase.
Duration of data processing:
Until withdrawal of your consent.
Additional data processing
In the event that Controller wishes to perform additional data processing, it will be required to issue prior notice of any material condition (legal background, legal basis and purpose of data processing, scope of processed data, processing period).
Please note that Controller shall be required to comply with any legally authorised written request for data submitted by the relevant authorities. Controller shall keep record of any data transmission in accordance with Article 15 (2)-(3) of the Privacy Act (receiving authority, type of personal data, legal basis, date of transfer), and it shall provide information on the content of such data transmission upon your request, except where prohibited by the law.
Use of processors and their activities in relation to data processing
Data processing aimed at storing personal data
Data processing activity related to transportation of goods
Data security measures
Controller declares to have implemented adequate security measures in order to protect personal data from unauthorised access, modification, transmission, disclosure, deletion or destruction, accidental loss or damage, as well as inaccessibility resulting from change in the applied technology.
Your rights in relation to data processing
During the processing period you shall be entitled to the following:
- right to information,
- right to correct data,
- right to delete data,
- right to block data,
- right to object.
During the processing period you may request Controller to provide information as regards processing of your personal data. Controller shall supply information on your processed data, the purpose, legal basis and period of data processing, and in the event of transmitting your data, also on the recipient and the purpose of transmission of such data as soon as possible, but no later than 25 days upon submitting your request in writing, in a clear and understandable manner.
During the processing period you may request Controller to correct your personal data. Controller shall comply with such requests within 15 days.
You may request Controller to delete your personal data, with an obligation to comply within a period of 15 days. Your right to delete data shall not apply to cases where Controller is legally bound to retain personal data, or it may continue to process such data in accordance with Article 6 (5) of the Privacy Act (e.g. in relation to invoicing).
You may request Controller to block personal data if the final deletion of data would violate the legitimate interests of the concerned party. Any personal data blocked in this manner may only be processed as long as the reason preventing the deletion of such data exists.
You may object to the processing of your personal data
- if the processing or transmitting of such data is exclusively required to fulfil a legal obligation relevant for Controller or to enforce the legitimate interest of Controller or any recipient or third party, except for mandatory data processing, and in the event specified in Article 6 (5) of the Privacy Act;
- if the utilisation or transmission of personal data is performed for the purposes of direct marketing, opinion polling or scientific research, without your consent received.
Controller shall examine your objection in the shortest possible period, but no later than 15 days upon submission of your request, and shall decide as to its justification and notify you of the relevant decision in writing. If your request to correct, block or delete personal data is not satisfied by Controller, it shall notify the factual and legal reasons for rejection in writing, or if consented by electronic means, within a period of 25 days upon receipt of the relevant request.
Remedy
If you are of the opinion that Controller has violated a legal provision in relation to data processing or has failed to satisfy you request, you may initiate proceedings with the National Authority for Data Protection and Freedom of Information (Hungarian abbreviation: NAIH) in order to terminate such presumed illegal data processing (mailing address: 1530 Budapest, Pf.: 5., e-mail: ugyfelszolgalat@naih.hu).
Furthermore, please be informed that if any legal provision relevant for data processing has been violated, or if Controller has failed to satisfy any of your requests, you may initiate legal action against Controller.
Application to register for data protection purposes
According to the provisions of the Privacy Act, Controller should report certain data processing events to the applicable data protection register.
Controller’s NAIH licence number: NAIH-113679/2017.
Modification of Privacy Notice
Controller reserves the right to modify this Privacy Notice. You shall accept our modified Privacy Notice by using the website upon such modification has become effective.