Ágnes Vágó (Postal Code: 6120, City: Kiskunmajsa, Mikes Kelemen street 6.) (Data controller) respect the constitutional law of the protection of personal data meaning that every person has the right to manage the publishing and use of their personal data. Any necessary collection of personal data during your visit on my website happens in accordance with Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016(General Data Protection Regulation, GDPR).
The Customer accepts the GTC and the data protection principles by browsing the website and registering their order.
We’ll summarize the most important parts of the Privacy Statement below.
DATA CONTROLLER'S INFORMATION:
Name: Agnes Vago
Place: 6120 Kiskunmajsa, Mikes Kelemen u.6.
registration number: 53616269
VAT number: 69738571-1-23
E-mail: info@agnesvago.com
Phone: +36 30 887 9462
Website: www.agnesvago.com
DATA PROCESSING RELATED TO SHIPPING OF THE PRODUCT
The processing of data is based on Act CXII of 2011 on Informational self-determination and freedom of information of Hungary. The legal basis of management of data is based on the consent of the visitor of the webshop.
Objective of data processing:
During shipping the objective of data processing is for the Hungarian Post, or GLS Hungary dispatch to deliver the product to the Customer.
Personal data processed:
Name, address, email, phone number.
Duration of data processing:
The data controller manages the data until the delivery of the ordered product(s).
DATA PROCESSING IN RELATION TO NEWSLETTERS
Subscription to the newsletter is voluntary and can be withdrawn any time. Only subsrcibers will be sent newsletters!
Legal base of data processing:
2011. CXII. law (Information law), and the law of 2008. XLVIII. of Hungary. The legal base is the Customers consent in accordance with 2011. CXII. law 5. para (1), and 2008. XLVIII. law 6. para (1)-(2).a
Objective of data processing:
The objection of data processing is informing the subscripter of any new offers or sales.
Personal data processed:
Name, address, email, phone number.
Time of data processing:
Until the data subject withdraws their constent.
DATA PROCESSING IN RELATION TO THE SENDING AND SHOWING OF PERSONALIZED ADS
Our newsletter delivery system is MailChimp, which makes it available for visitors to voluntarily choose subscription to our newsletter. Only subscribers will be sent newsletters! Unsubscribing is available at any time by the link available on the newsletter, or by sending an email to info@agnesvago.com.
Information of the newsletter delivery system:
MailChimp
Attn. Privacy Officer
privacy@mailchimp.com
675 Ponce de Leon Ave NE, Suite 5000
Atlanta, GA 30308 USA
LEGAL BASE OF DATA PROCESSING
2011. CXII. law (Information law), and the law of 2008. XLVIII. of Hungary. The legal base is the Customers consent in accordance with 2011. CXII. law 5. para (1), and 2008. XLVIII. law 6. para (1)-(2).a
Objective of data processing:
The objective of the data processing is to show offers that are closest to Your interests.
Personal data processed:
Name, Address, Phone number, charactersitics of the products previously bought, date of ordering.
Time of data processing:
Until the data subject withdraws their constent.
DATA PROCESSING IN RELATION TO THE INVOICE
Legal base of data processing:
Legal base of data processing: 2011. CXII. law (Information law), and the law of 2008. XLVIII. of Hungary. The legal base is the Customers consent in accordance with 2011. CXII. law 5. para (1), and 2008. XLVIII. law 6. para (1)-(2).a
Objective of data processing:
The objective of data processing is to issue an invoice in accordance with the related laws, and to meet the obligation of storing accounting documents.
Personal data processed:
Name, address, e-mail, phone number.
Time of data processing:
According to law 169. para (2), invoices must be kept for 8 years after issuing. We’d like to inform our Customers that if they withdraw their constent to the issuing of an invoice, the Data controller is obligated to store personal data according to Information law 6. para (5).
FURTHER DATA MANAGEMENT
Data processing relating to the storage of personal data
Data processor: Dotroll Kft., (Tárhelyszolgáltató)
1148 Budapest, Fogarasi út 3-5.
Phone: +36-1-432-3232
Mail: support@dotroll.com
The task of the data processor is to store personal data, and they are not permitted to learn about the personal data stored.
Data processing in relation to shipping
Data processor: Magyar Posta Zrt.
1138 Budapest, Dunavirág u. 2-6.
Phonea: +36-1-767-8200
Email: ugyfelszolgalat@posta.hu
The data processor contributes to the delivery of the ordered product, and therefore Is allowed to manage the Customer’s name, address, and phone number until the delivery, after which they immediately delete the information.
Data management related to accounting
Data Processor: Anikó Kuklis
6120 Kiskunmajsa, Rákóczi u.25.
Phone: +36-70-701-5051
Task of the data processor: the data processor contributes to the management of accounting documents. During the accounting process, they are privy to the data subject’s name, and address in accordance with 169. para (2), and after the legal obligation is over, they immediately delete the information.
Data management in relation to the operating of the webshop
Data processor: Ecwid, Inc., (Webáruház szolgáltató)
687 S. Coast Highway 101, Encinitas, California 92024, USA
Email: privacy@ecwid.com
Provides the technical means for operating the webshop.
Data management in relation to online banking services
Data processor: Paypal (Europe) S.a.r.l. et Cie, S.C.A.
22-24 Boulevard Royal L-2449, Luxemburg
A PayPal Inc. ( PayPal (Europe) S.à r.l. et Cie, S.C.A. PayPal is situated in the United States Of America, California.
Email: dpo@paypal.com
Provides the online banking service.
(activities: profiling, advertising, analysing service, behavioural advertising)
Google LLC and Facebook Inc. are included of the list of USA-Privacy Shield, based on Article 45 of GDPR and Commission Implementation Decision 2016/1260, meaning that data transfer to these companies does not count as data transfer to countries outside of the EU, and it’s not necessary to ask for specific consent from the data subject for the data transfer, and transfer is allowed based on Article 45 of the GDPR. These companies undertaken to comply with the GDPR. The addressed of the transfer counts as separate data controllers in regards to the transferred personal data.
INFORMATION ABOUT THE USE OF COOKIES
The website uses cookies that collect data. For example: Google LLC, Pinterest, Facebook, Instagram. These companies have undertaken to comply with GDPR.
What is cookie?
The data controller uses cookies during the visit of the website. Cookies are data packets made from letters and numbers that our website sends to Your browser with the objective of saving some of its settings, make it easier to use our website, and contribute to gathering relevant, statistical data about our visitors. The cookies don’t contain personal information, and they can’t be used to identify the users. Cookies often contain specific identification – a hidden, randomly generated code of numbers – that Your device stores. Some cookies are deleted upon exiting the website, while others are stored for longer on Your device.
Types of cookies
Google Analytics cookie: This cookie is the analytics tool of Google, that helps the owners of websites and apps to see a more detailed picture about their visitors’ activities. The service uses cookies to gather information and make a report to Google about the statistics of the website’s usage without identifying the visitors. The main cookie used is the “__ga” cookie. Besides the reports made from website usage statistics Google Analytics – similarly to advertising cookies mentioned above – can be used to show more relevant ads on Google-products (like Google search) and on the internet.
Cookies necessary for operation: These cookies are needed to operate the website and make it possible to use the basic functions of the site. Without these, many of the website functions become unavailable. These type of cookies are only for the duration of the current session.
Cookies for the enrichment of user-experience:These cookies gather information about the users website usage, for example the websites most often visited by the user, or the websites that send the most error messages to them. These cookies don’t collect information that may be used to identify the user, they work only with general, anonymus information. We use the information gathered from these cookis for the betterment of our website. These type of cookies are only for the duration of the current session.
Session cookie: These cookies store the visitor’s location, the language of the browser, the currency of the payment, and they exist until the browser is closed, but for 2 hours at maximum.
Functional cookie:These cookies make it possible for the website to store some previously entered data, for example the visitor’s personal settings.
Last viewed cookies: Stores the last viewed product. They exist for 60 days.
Accept cookies cookie: When visiting the website, the visitor accepts the statement about the use of cookies. They exist for 365 days.
Targeting cookies: These cookies aren’t placed by agnesvago.com, but by the embedded service providers’ controllers (for example, the Facebook like button). These cookies help these companies show offers to you that are closest to your interest throught their own sites. During the providing of these services the website can cooperate with third parties, but the website can only give out personal data to these third parties with the user’s prior notification and agreement, or on legal basis.
The website does not sell, loan, or spread the information gathered by these cookies, except for the necessary amount for the providing of the aforementioned services, to which you were given prior information about, and to which your voluntarily consented to. The website may include links to websites owned by unrelated, third party websites. The website does not check the use of this information by third parties, in every relevant case the third parties’ privacy statement is applicable, for which the website does not take responsibility and can’t be legally accounted for.
If you do not accept cookies, some functions will not be available to you. Cookies affecting your device can be controlled in your browser.
You can learn about the deletion of cookies on the following links:
Internet Explorer: http://windows.microsoft.com/en-us/internet-explorer/delete-manage-cookies#ie=ie-11
Firefox: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer
Chrome: https://support.google.com/chrome/answer/95647?hl=en
RIGHTS OF THE DATA SUBJECT
You can exercise your right on the following address: info@agnesvago.com
Within the processing of personal data, You have the right to:
1 Rights to information
Within the duration of the data processing you have the right to ask for information about the management of your personal data from the data controller. The controller is obliged to inform you about the managed personal data, the objective of managing, the legal basis, duration, and, if applicable, the transfer of the data in regards of to whom and why the information was transferred to. The controller must give a written answer as soon as possible, but within 25 days.
2 Right to rectification:
Within the duration of data management, you have the right to ask for the rectification of inaccurate personal data. The data controller must correct the data in question within 15 days.
3 Right to erasure:
You have the right to ask for the deletion of your personal data, and the controller has 15 days to comply with your request. The right to erasure does not extend to cases when the controller is legally obligated to store the information, or to cases where the controller has the right to further data processing in accordance with the Information law 6. para (5) (for example, in relation to invoice).
4. Right to restriction:
You can ask for the restriction of your personal data in cases there’s a legal basis for it.
5. Right to data portability:
You can ask to directly transmit the personal data stated by you to another controller. In case of such request, we comply in accordance with law, and notify you of the actions taken within a month.
6. Right to withdrawal of consent:
We manage your personal data based on your consent. You have the right to withdraw your consent at any time, but it does not affect the legality of the management of data before the withdrawal.
8. Right to objection:
If, based on the aforementioned information, your data is managed based on legitimate intent, you have the right to object to it. You can object to profiling as well. In case of objection, the relevant personal data will no longer be processed.
INFORMATION IN RELATION TO MINORS
We kindly ask our visitors under the legal age to use our website only with parental supervision! It is not the objective of the webshop to directly sell to minors, or to gather information about them! In case the visitor is under the age of 18 (or partially or fully incapacitated and is under guardianship), but they’re above the age of 14, they can not individually order from the webshop! In this case the legal guardian of the child is required to fill out the form “Informed consent of the legal representative” (available here) prior to the order, and their consent is also necessary, which they have to send to the data controller to one of the aforementioned addresses. Consent also means taking full responsibility for the orders of the child in the webshop. If these conditions are not met, the Seller has the right to withdraw from the fulfilment of the order. In this case, any personal data related to the order is immediately deleted.
DATA SECURITY MEASURES
The data controller declares that they took the necessary measures for the protection of personal data from unauthorised access, modification, transfer, publication or deletion, or accidental destruction or damage, or unavailability from the change of the applied technology.
IN CASE OF A PRIVACY INCIDENT
In accordance with the law, we notify the supervisory authority of the incident within 72 hours of learning about it, and we register it. In cases declared in the law, we also notify the data subjects.
MODIFICATION OF THE PRIVACY STATEMENT
The data controller has the right to one-sidedly modify the current privacy statement. The current statement, and any modifications are published on Ágnes Vágó’s website. The modifications enter into force upon publication..
2019.05.07.
© 2019 Agnes Vago. All rights reserved