Privacy
This English text is a translation provided for convenience. In the event of any discrepancy, the Hungarian version shall prevail.
The Service Provider's data processing principles are in line with the data protection legislation in force, in particular the following:
- Regulation (EU) 2016/679 of the European Parliament and of the Council ("General Data Protection Regulation" or "GDPR")
- Act CXII of 2011 on the Right of Informational Self-Determination and on Freedom of Information
- Act CVIII of 2001 on Certain Issues of Electronic Commerce Services and Information Society Services (in particular Section 13/A)
- Act XLVII of 2008 on the Prohibition of Unfair Business-to-Consumer Commercial Practices
- Act XLVIII of 2008 on the Basic Requirements and Certain Restrictions of Commercial Advertising Activities (in particular Section 6)
- Act XC of 2005 on the Freedom of Electronic Information
- Act C of 2003 on Electronic Communications (specifically Section 155)
- Opinion 16/2011 on the EASA/IAB Best Practice Recommendation on Online Behavioural Advertising
- the E-Commerce Act; Act LXIII of 1992 on the Protection of Personal Data and the Publicity of Data of Public Interest; Act VI of 1998 on the Protection of Individuals with regard to Automatic Processing of Personal Data
- Act XL of 2001 on Communications; and
- Act CLV of 1997 on Consumer Protection; Government Decree 151/2003 (IX.22.); and GKM Decree 49/2003 (VII.30.)
Definitions
Data subject/User: any natural person who is identified or can be identified, directly or indirectly, on the basis of specific personal data;
Personal data: data that can be linked to the data subject – in particular the data subject's name, identification number, and one or more factors specific to their physical, physiological, mental, economic, cultural or social identity – as well as any conclusion about the data subject that can be drawn from the data;
Special categories of data:
a) personal data relating to racial origin, nationality, political opinion or party affiliation, religious or other philosophical beliefs, membership of an interest-representation organisation, or sex life;
b) personal data relating to health or addictions, and personal data relating to criminal offences;
Consent: a voluntary and explicit expression of the data subject's will, based on appropriate information, by which they give their unambiguous agreement to the processing of personal data relating to them, either in full or for specific operations.
Objection: a statement by the data subject objecting to the processing of their personal data and requesting that the processing be terminated and the processed data be erased;
Controller: the natural or legal person, or organisation without legal personality, which alone or jointly with others determines the purpose of the data processing, makes and implements the decisions concerning the processing (including the means used), or has them implemented by a processor it has engaged;
Data processing (handling): any operation or set of operations performed on data, regardless of the procedure used, in particular collection, recording, registration, organisation, storage, alteration, use, retrieval, transmission, disclosure, alignment or combination, blocking, erasure and destruction, as well as preventing further use of the data, taking photographs or making audio or video recordings, and recording physical characteristics suitable for identifying a person (e.g. fingerprints or palm prints, DNA samples, iris images);
Data transfer: making data accessible to a specific third party;
Disclosure: making data accessible to anyone;
Data erasure: making data unrecognisable in such a way that it can no longer be restored;
Data marking: attaching an identifying mark to data in order to distinguish it;
Data blocking: attaching an identifying mark to data in order to restrict its further processing permanently or for a specified period;
Data destruction: the complete physical destruction of the data carrier containing the data;
Technical data processing: the performance of technical tasks related to data processing operations, regardless of the method and means used to carry out the operations and of the place of application, provided that the technical task is performed on the data;
Processor: the natural or legal person, or organisation without legal personality, which processes data on the basis of its contract with the controller – including contracts concluded pursuant to a provision of law;
Data owner: the body performing public duties which produced the data of public interest that must be published electronically, or in the course of whose operation such data was generated;
Data publisher: the body performing public duties which – if the data owner does not publish the data itself – publishes on a website the data sent to it by the data owner;
Data set: the totality of data processed in a single register;
Third party: a natural or legal person, or organisation without legal personality, other than the data subject, the controller or the processor;
Commercial advertising: any communication, information or form of presentation intended to promote the sale or other use of a marketable movable item that can be taken into possession – including money, securities and financial instruments, and natural forces that can be utilised as things – (hereinafter together: product), a service, real estate or a right of pecuniary value (hereinafter all of these together: goods), or, in connection with this aim, to promote the name, designation or activity of an undertaking or to increase awareness of goods or trade marks (hereinafter: advertising).
EEA State: a Member State of the European Union and any other State party to the Agreement on the European Economic Area, as well as any State whose nationals enjoy the same legal status as nationals of a State party to the Agreement on the European Economic Area on the basis of an international treaty concluded between the European Union and its Member States and a State not party to that Agreement;
Third country: any State that is not an EEA State.
Principles, data protection, purpose and legal basis of data processing
The legal basis for data processing on the website is the User's consent, Section 5(1) of the Info Act, and Section 13/A(3) of Act CVIII of 2001 on Certain Issues of Electronic Commerce Services and Information Society Services.
WayteQ Europe Kft. treats the data it receives through its websites as confidential. Personal data may be processed only for a specific purpose, for the exercise of a right or the fulfilment of an obligation. At every stage, the data processing must comply with its purpose, and the collection and processing of the data must be fair and lawful. The collection and processing of personal – identifying – data required while using the website complies with the Hungarian data protection regulations in force (Act LXIII of 1992 on the Protection of Personal Data and the Publicity of Data of Public Interest). The pages of the WayteQ Europe Kft. webshop can also be browsed without registration, i.e. without providing any personal data.
Only personal data that is essential for achieving the purpose of the processing and suitable for achieving that purpose may be processed. Personal data may be processed only to the extent and for the time necessary to achieve the purpose.
We record personal data (name, home address, postal address, telephone number) only if you provided any of them during registration. During registration you only need to provide data that is strictly necessary for fully serving your order and for any later contact (e.g. in the event of a complaint).
Personal data may be processed if the data subject consents to it, or if it is ordered by an Act or – on the basis of authorisation by an Act, within the scope specified therein – by a local government decree for a purpose based on public interest.
If the data subject is unable to give consent owing to incapacity or for any other unavoidable reason, the data subject's personal data may be processed, for as long as the obstacles to consent exist, to the extent necessary to protect the vital interests of the data subject or of another person, and to avert or prevent an imminent danger to the life, physical integrity or property of persons.
The validity of a legal declaration containing the consent of a minor data subject who has reached the age of 16 does not require the consent or subsequent approval of their legal representative.
If the purpose of consent-based data processing is the performance of a written contract concluded with the controller, the contract must contain all the information that the data subject needs to know with regard to the processing of personal data under this Act, in particular the definition of the data to be processed, the duration of the processing, the purpose of use, the fact and recipients of any data transfer, and the fact that a processor is used. The contract must state unambiguously that by signing it the data subject consents to the processing of their data as set out in the contract.
The data subject's consent shall be deemed to have been given in respect of personal data communicated by them in the course of a public appearance or handed over by them for the purpose of disclosure.
In case of doubt, it shall be presumed that the data subject has not given consent.
Scope of the data processed
Data required for registration: e-mail address, display name, password, surname, first name, billing address, postcode, mobile phone number.
Further data that may be stored: different or additional delivery addresses, customer group classification. The IP address of our registered customers at the time of purchase is stored for identification purposes.
Data subjects concerned
We store only the data of registered customers; we do not ask visitors to the website for the data listed above ("Scope of the data processed").
Persons entitled to access the data, data transfer
The data provided can be seen by our company's customer service staff for the purposes of fulfilling orders, order status notifications and invoicing.
Legal basis for the data processing: the User's consent, Section 5(1) of the Info Act, and Section 13/A(3) of Act CVIII of 2001 on Certain Issues of Electronic Commerce Services and Information Society Services.
In the operation of our webshop it is unavoidable that external partners appear in the data processing chain as processors.
In our case these are the following:
RACKFOREST ZRT. Address: 1132 Budapest,
Victor Hugo utca 11.
5. em. B05001.
Tax number: 32056842-2-41
Central telephone number:
+36 1 211 0044
E-mail: info@rackforest.com
The operating partner of our website: T-Pax Szolgáltató Korlátolt Felelősségű Társaság
Registered office: 1119 Budapest, Allende park 10. 1. em. 6.
For personal data processed in the systems of External Service Providers, the External Service Providers' own privacy notices apply. After 25 May 2018, the External Service Providers record, handle and process the personal data on their behalf in accordance with the provisions of the GDPR and make a declaration to this effect to the controllers.
Data security
The Service Provider takes all necessary security steps and organisational and technical measures to ensure the highest level of security of personal data and to prevent its unauthorised alteration, destruction and use.
The Service Provider takes all necessary measures to ensure data integrity, i.e. the accuracy, completeness and up-to-date status of the personal data it handles and/or processes, and so that any changes to it can be verified.
The Service Provider protects the data with appropriate measures, in particular against unauthorised access, alteration, transfer, disclosure, erasure or destruction, as well as against accidental destruction or damage and against becoming inaccessible as a result of changes in the technology used.
The Service Provider does everything it can to preserve the authenticity and confidentiality of the data processed, and to ensure that data subjects and authorised persons always have access to it.
The Service Provider therefore reserves the right, if it detects a security gap in its system on the part of its customers or partners, to inform its customers and partners of it and at the same time to restrict access to the Service Provider's system and services, or certain functions thereof, until the security gap has been eliminated.
Legal remedies
Legal remedies and means of enforcing rights
The User may object to the processing of their personal data if
a) the processing or transfer of the personal data is necessary solely for the fulfilment of a legal obligation applicable to the Service Provider, or for the enforcement of a legitimate interest of the Service Provider, the data recipient or a third party, unless the data processing was ordered by law;
b) the personal data is used or transferred for the purposes of direct marketing, public opinion polling or scientific research;
c) in other cases specified by law.
The Service Provider examines the objection within the shortest possible time from the submission of the request, but within no more than 15 days, decides whether it is well founded and informs the applicant of its decision in writing. If the Service Provider establishes that the data subject's objection is well founded, it terminates the data processing – including any further data collection and data transfer – and blocks the data, and notifies of the objection and of the measures taken on the basis of it all those to whom it previously transferred the personal data affected by the objection and who are obliged to take action to enforce the right to object.
If their rights are infringed, the User may bring an action against the Service Provider before a court. The court deals with the case as a matter of priority. Remedies may be sought and complaints may be lodged with the Hungarian National Authority for Data Protection and Freedom of Information:
Nemzeti Adatvédelmi és Információszabadság Hatóság
1125 Budapest, Szilágyi Erzsébet fasor 22/C.
Postal address: 1530 Budapest, Postafiók: 5.
Phone: +36-1-391-1400
Fax: +36-1-391-1410
E-mail: ugyfelszolgalat@naih.hu
Disagreement with the above constitutes an obstacle to using the site. If the User enters the website operated by the Service Provider or reads its content in any way – even if they are not a registered user of the webshop – they accept the provisions of these Regulations as binding on themselves. If the User does not accept the terms, they are not entitled to view the content of the webshop.
The Service Provider reserves all rights with regard to the webshop website, any part of it and the content appearing on it, as well as the distribution of the website.
Legal remedies – Conciliation Board
Information on the possibility of involving a Conciliation Board
(pursuant to Act CXXXVII of 2015)
If you have a legitimate consumer complaint against our webshop and our webshop rejects that complaint, you are also entitled to turn to the Conciliation Board competent for your place of residence or stay. A condition for initiating conciliation board proceedings is that the consumer (buyer) has attempted to settle the dispute directly with the business concerned. At the consumer's request to that effect, the conciliation board named in the consumer's request is competent for the proceedings instead of the board otherwise competent.
The conciliation board is competent for the out-of-court settlement of consumer disputes. The task of the conciliation board is to attempt to bring about an agreement between the parties in order to settle the consumer dispute; if this is unsuccessful, it makes a decision in the case in order to ensure the simple, fast, effective and cost-efficient enforcement of consumer rights. At the request of the consumer or the business, the conciliation board gives advice on the rights of the consumer and the obligations incumbent on the consumer.
Conciliation board proceedings are initiated at the consumer's request. The request must be submitted in writing to the chair of the conciliation board: the requirement of written form may be met by letter, telegram, telex or fax, or by any other means that enables the recipient to store the data addressed to them permanently for a period appropriate to the purpose of the data, and to display the stored data in unchanged form and with unchanged content.
The request must contain:
a) the consumer's name and place of residence or stay,
b) the name and registered office of the business involved in the consumer dispute,
c) a brief description of the consumer's position, the facts supporting it and the evidence thereof,
d) the consumer's statement on the attempt to settle the dispute,
e) the rejected complaint,
f) the consumer's statement that they have not initiated mediation proceedings or civil litigation in the matter,
g) a motion for a decision.
The request must be accompanied by the document, or a copy (extract) of it, whose content the consumer refers to as evidence, in particular the business's written statement rejecting the complaint or, failing that, any other written evidence available to the consumer of the attempt at the required consultation.
If the consumer acts through an authorised representative, the authorisation must be attached to the request.
More information about the Conciliation Boards is available here: http://www.bekeltetes.hu .
More information about, and contact details of, the regionally competent Conciliation Boards are available here: http://www.bekeltetes.hu/index.php?id=testuletek .
We draw our Customers' attention to the fact that since 15 February 2016 they have also been able to submit their complaints through the online dispute resolution platform. The website of the European Online Dispute Resolution Platform is available here:
https://webgate.ec.europa.eu/odr/main/index.cfm?event=main.home.show&lng=EN
Imprint
Operator details:
WayteQ Europe Korlátolt Felelősségű Társaság
Registered office: 1119 Budapest, Fehérvári út 85/C
Company registration number: 01-09-915743
Registered by: Company Registry Court of Budapest-Capital Regional Court
Tax number: 14699517-2-43
Contact: info@wayteq.eu
Tel: (+36-1) 21-73-632
Fax: (+36-1) 21-73-619
Hosting provider's contact details:
RACKFOREST ZRT.
Address: 1132 Budapest,
Victor Hugo u. 11.
5. em. B05001.
Tax number: 14671858-2-41
Phone: +36 1 211 0044
E-mail: info@rackforest.com