DATA MANAGEMENT
Privacy Policy
Effective:As of 20 May 2018, until revocation.
SUMMARY
This Policy ensures in accordance with the rules of the EU General Data Protection Regulation 2016/679/EU (“GDPR”) that natural persons learn about our data processing principles and rules prior to the use of all services provided by Acryl World Kft. (hereinafter referred to as: “Company”, “Service Provider”, “Data Controller”).
The publisher of this information, at the same time the Data Controller is:
- Company name: Acryl World Kft.
- Registered seat address: H-2151 Fót, Petőfi S. u. 20.
- E-mail: iroda@acrylworld.hu
- Phone: +36 70 436 5265, +36 27 538 920 and 921
- Tax number: 23026115-2-13
- Company registration number: 13-09-142065
- Bank account number: 11722003-20166951
- Represented by: NAGY Tímea Anna
- E-mail: nagytimeaanna@acrylworld.hu
- Data protection contact: iroda@acrylworld.hu
In all cases, external service providers will be required to sign a written service contract and the data processed by them may be stored by them until the contract is terminated.
- Our Company’s IT service provider: Top-Immo Hungary Kft.
- Accounting service provider: Mini Control Kereskedelmi és Szolgáltató Bt.
- Payroll accounting: BALOGH SÁNDORNÉ
- Invoicing partner: We do not use a data processor to handle invoicing.
- Banking partner: OTP Bank Nyrt.
- Storage space service provider: EVOLUTIONET Kft.
- Postal services, delivery, mail orders: Magyar Posta Zrt., DPD Hungary
- Voucher card provider: CafeT-Rend Kft.
INTRODUCTION
The purpose of this website service is to enable visitors of the site to learn about the Company and its services and to obtain insights into our products, services and to be able to contact our Company.
By providing any personal data or information you – as a visitor or user visiting the website – declare to understand and expressly accept the version of this Policy effective at the date of providing such data or information.
Acryl World Kft. is committed to protecting the privacy of its customers and partners.Data security for our sites is important to us: our pages are SSL certified.
As a user, when signing up, you must indicate by ticking the check box or in any other written form whether you accept the rightful use and handling of your personal information required for such purpose.
DEFINITIONS CONTAINED IN THE POLICY: https://www.naih.hu/adatvedelmi-szotar.html
OUR DATA PROCESSING PRINCIPLES: Protecting your data is of paramount importance to us. We process your personal data lawfully and fairly, in a transparent manner, we collect them for a specific, unambiguous and legitimate purpose only, limit them to the required data volume, and store them safely and with limited storability.
DATA MANAGEMENT
- Processing and maintaining records of contractual partners’ data: The Company processes the data of the natural persons contracted by it under the title of performance of contract.
- Contact details of natural person representatives of legal entity customers, buyers, suppliers: Compliance with a contract concluded with a legal entity partner of the Company, business relations
- Visitor data processing (cookies) on the Company’s website: In accordance with general online practice, our Company also uses cookies on its website. We will inform you about the management of the cookies before you visit our site. Accepting or enabling cookies is optional. Please note that certain website features or features may not work properly without cookies.
- Data processing related to professional materials, information and business contact services based on the contact panel: business relationship regarding services contained in the message features, including the sending of non-regular quotations, business offers, excluding regular newsletters.
- Title: managing photos and video recordings on the website: Photos and corporate image and service videos or purchased Shutterstock for royalty-free images or images with settled royalty status
- Complaints management, questions, problems, contact: Complaints management, questions, problems, contact. Identification, management of quality complaints, issues and problems that arise with regard to ordered products
- Data processing for compliance with tax and accounting obligations
INFORMATION ABOUT THE RIGHTS OF DATA SUBJECTS
Data subjects may request information on the processing of their personal data and may request the rectification or, with the exception of mandatory data processing, the cancellation, revocation of their personal data, may exercise their right to data portability and right to protest as indicated at data recording or at the above mentioned contact details of the Data Controller.
- Right of prior information: (Regulation Article 13-14)
- Right of access by the data subject: (Regulation Article 15)
- Right to rectification: (Regulation Article 16)
- Right to erasure (‘right to be forgotten’) (Regulation Article 17)
- Right to restriction of processing: (Regulation Article 18)
- Notification obligation regarding rectification or erasure of personal data or restriction of processing: (Regulation Article 19)
- Right to data portability: (Regulation Article 20)
- Right to object: (Regulation Article 6 (1) (e) or (f) and Regulation Article 21)
- Automated individual decision-making, including profiling: (Regulation Article 22)
- Restrictions:In accordance with the rights and obligations set out in Article 12-22 and Article 34 and as specified in Articles 12-22: (Regulation Article 23)
- Communication of a personal data breach to the data subject: (Regulation Article 34)
- Right to lodge a complaint with a supervisory authority: (right to legal remedies by the authorities): (Regulation Article 77)
- Right to an effective judicial remedy against a supervisory authority: (Regulation Article 78)
- Right to an effective judicial remedy against a controller or processor: (Regulation Article 79)
THE DATA CONTROLLER’S MEASURES: The Data Controller shall, without undue delay, but in any event within one month following the receipt of the request, inform the data subjects about the measures taken in respect of their request to exercise their rights.
Judicial enforcement: The Data Controller must demonstrate that data processing is in compliance with the law. The data importer has to prove the legality of the transfer of data. The action is governed by the jurisdiction of the court. Action may be initiated before the court of domicile or residence of the data subject, at the choice of the data subject.
Communication of a personal data breach to the data subject: If the privacy incident is likely to pose a high risk to the rights and freedoms of natural persons, the Data Controller shall inform the data subject of the privacy incident without undue delay.
Compensation for damages and tort: The Data Controller shall be liable for any damage caused to a data subject as a result of unlawful processing of the data subject’s data or by any breach of data security requirements. If the Data Controller violates the personality right of the data subject by unlawful handling of the data concerned or by breach of the requirements of data security, the data subject may claim tort from the Data Controller. No compensation shall be payable and no tort can be claimed in so far as the damage is caused by the deliberate or gross negligent conduct of the injured party or the infringement due to a violation of personality rights has been caused by the deliberate or gross negligent conduct of the data subject.
Privacy Contact: If you wish to enforce your rights regarding your data, please write to iroda@acrylworld.hu and we will address your request.
Legal remedies: You have the right to file a claim against a Data Controller and you have the right to lodge a complaint with your supervisory authority of your place of residence if you consider that the processing of your personal data is in violation of applicable laws.
In cases determined under Article 21 of the Privacy Act, you may protest against the processing of your personal data. At the National Authority for Data Protection and Freedom of Information (http://naih.hu/; H-1530 Budapest, Pf.: 5.; phone: +36-1-391-1400; fax: +36-1-391-1410; e-mail: ugyfelszolgalat@naih.hu), via a notification anyone can initiate an investigation by claiming that there has been an infringement regarding the processing of personal data, or there is an imminent risk thereof existing. In the event of a violation of your rights, you may also apply to a court.
Detailed rights and remedies for data processing are described in detail in the full version of the Privacy Policy and Subsections 13-17 and 30 of the Privacy Act.
Modification of Privacy Policy: The Data Controller reserves the right to modify this Privacy Policy. You accept the modified Privacy Policy by using the website after the modification has taken effect.
Cookie information and deletion
We will inform you about the management of the cookies before you visit our site.
Accepting or enabling cookies is optional. You can reset your browser settings to reject all cookies or to indicate when a cookie is just being sent by the system. Most browsers accept cookies automatically as default, but they can usually be changed to prevent automatic acceptance and they offer options every time.
DATA PROCESSED BY US
Processing and keeping records of contractual partners requesting advertisements
The purpose of personal data processing is:The Company processes the data of the natural persons contracted by it as buyers, suppliers under the title of performance of contract.
- The kind of personal data we process: the name, birth name, date of birth, address, address, address of registered seat or site, telephone number, e-mail address, website address, bank account number, customer number (client number, order number), online ID of the data subject
- Legal basis for processing personal data: is based on the legal title of “performance of the contract”. This data management is considered lawful even if the data processing is necessary to take steps at the data subject’s request before the contract is concluded
- The recipients of the personal data and the categories of recipients: the Company’s employees, accountants, tax administrators and data processors performing customer services tasks.
- Period for personal data storage: Until the date when the data subject withdraws their consent, in the absence thereof the data will be deleted by the Company 5 years after the termination of the account, based on Article 6:22 of Act V of 2013 on the Hungarian Civil Code (“Civil Code”). Data shall be retained by the Company pursuant to Article 169 of Act C of 2000 on Accounting, but in such case the Company will only delete the data, irrespective of the data subject’s consent, 8 years after the termination of the account. In practice this is the case if the data are part of the supporting documents for accounting, for example, in the documents relating to the conclusion of the contract between the Company and the Customer (e.g. in an order), or if they are shown on the invoice issued.
- Scope of data subjects: customers coming from the website
Contact details of natural person representatives of legal entity customers, buyers, suppliers
The purpose of personal data processing is: Compliance with a contract concluded with a legal entity partner of the Company, business relations.
- Scope of personal data processed: name, phone number, e-mail address, online ID
- Legal basis for processing personal data: performance of the contract
- The recipients of the personal data and the categories of recipients: the Company’s employees, accountants, tax administrators and data processors performing customer services tasks.
- Period for personal data storage:for a period of 5 years from the date of establishment of the business relationship or the quality of the data subject as a representative.
- Scope of data subjects: non-natural person buyers, customers, those requesting quotations, business contact representatives
Data processing related to professional materials, information and business contact services based on the contact panel
A natural person who registers on the website for a contact service can enter their consent to the processing of their personal data by ticking the relevant box.
Purpose of processing the personal data: business relationship regarding services contained in the message features, including the sending of non-regular quotations, business offers, excluding regular newsletters.
- The data subjects concerning the personal data are: all natural person contact persons of natural companies who have given their consent on the website.
- The scope of personal data that may be processed: the name, e-mail address, phone number of the natural person and any data provided by them about themselves
- Legal basis of data processing: consent of the data subject.
- The recipients of the personal data and the categories of recipients: employees of the Company performing tasks related to customer services and marketing, as data processor the employees of the Company’s IT Service Provider, for the purpose of providing hosting services
- Period for personal data storage: for as long as the cooperation exists, or until the cancellation request regarding the data subject’s consent.
Managing photos and video recordings on the website
- Data management objective: Photos and corporate image and services demo videos
- Data processed: photo taken or video recording made of the natural person
- Legal basis:consent of the data subject Laid down by Article 2:48 of the Civil Code
In the case of corporate films and image films to be found on our website, consent could be given by implication, or verbally, after the participants have been informed about the purpose of filming and that a film or video recording is being shot that will appear on the Company’s website and be used as a reference at the filmmaker (YouTube, Instagram, Facebook, website)
- Scope of the data subjects: natural persons, employees who participate in the company’s feature films.
- Period for processing:The footage, unless it is of historical significance will be retained for max. 5 years, the consent to the film cannot be revoked subsequently, the period for processing shall be as long as it is published on the website and at the reference site
Legal basis for other images: purchased Shutterstock for royalty-free images or images with settled royalty status
Data processing related to a newsletter service
Currently we do not have a newsletter on our site, if we offer such service in the future, you may sign up for such service by ticking the relevant check box.
- The purpose of personal data processing is:Sending of newsletters and promotional materials regarding the Company’s products and services, networking data supply via e-mail
- Scope of the data subjects: natural persons registering for newsletters
- Objective:Newsletter, E-D
- Data processed: name, e-mail address, subject of registration, IP address, click
- Legal basis: Consent of the data subject, which can be provided by the natural person who registers on the website regarding the processing of their personal data by ticking the relevant box.
- Recipients:Employees of the Company performing tasks related to the Company’s customer services and marketing, as data processor the employees of the Company’s IT Service Provider performing hosting services
Duration:For as long as the registration/service exists, or until the revocation of (cancellation request concerning) the data subject’s consent. Until the consent of the data subject is withdrawn.
Pursuant to Article 6 of Act XLVIII of 2008 on the Fundamental Terms and Certain Limitations of Economic Advertising Activities, the User may preliminarily and expressly consent to being contacted by the Service Provider with promotional offers and other items via the contact details provided during registration. The Service Provider will not send unsolicited advertising messages and, without limitation or justification, the User may unsubscribe from offers being sent free of charge. In this case, the Service Provider shall delete all personal data required for the sending of advertisement messages from their register and shall not contact the User with any other promotional offers. The natural person registering for the newsletter service on the website may provide their consent to the processing of their personal data by ticking the relevant box.
Complaints management, questions, problems, contact
- The purpose of personal data processing is: Complaints management, questions, problems, contact. Identification, management of quality complaints, issues and problems that arise with regard to ordered products
- Scope of the data subjects: All data subjects making purchases, requesting quotes, submitting quality complaints, making complaints or contact with the Data Controller as a service provider.
- Data processed: name, e-mail address, phone number, invoicing name and address
- Legal basis: consent of the data subject Article 6 (1) c), Article 5 (1) of the Privacy Act, and Article 17/A (7) of Act CLV Act of 1997 on Consumer Protection. Personal data may be processed by the sales and marketing staff of the Data Controller, while respecting the above principles.
Copies of the minutes, transcripts and replies thereto regarding the complaint raised shall be retained for 5 years, pursuant to Article 17/A (7) of Act CLV Act of 1997 on Consumer Protection. Otherwise, 2 years or until contact is needed.
Please be informed that the provision of personal data is based on a contractual obligation. The processing of personal data is a precondition for the conclusion of the contract. You are required to provide personal data for us to be able to handle your complaint. Failure to submit data has the effect of us not being able to handle the complaint you submitted to us.
Data processing for compliance with tax and accounting obligations
The Company processes the statutory data of natural persons entering a business relationship with the Company as buyers, as suppliers, under the title of the fulfillment of legal obligations, for the purpose of compliance with statutory tax and accounting obligations (accounting, taxation). Based on Articles 169 and 202 of Act CXXVII of 2017 in particular: tax number, name, title, taxation status, according to Article 167 of Act C of 2000 on Accounting.
- The data processed are determined in the Accounting Act: tax number, name, address, taxation status, name, address, name of person or organization ordering the economic transaction, signatures of persons effecting payment and verifying execution of order, as well as, depending on the organization, the signature of inspector; in certificates of movements of inventories and cash handling certificates, the signature of recipient, and the signature of payer in counter-receipts; entrepreneurial ID card number, primary producer’s ID card number, tax identification number.
- Its duration is 8 years after termination of legal relationship providing the legal grounds.
- Recipients of personal data: The Company’s employees and Data Processors responsible for taxation, accounting, payroll and Social Security tasks.
