Privacy Policy

Date of acceptance: 2024-04-23

Data controller

Name: Pit Box Kft.

Registered office: 2600 Vác, Rózsa utca 3/A 1em. 2ajt.

Postal address, complaint management: 2600 Vác, Rózsa utca 3/A 1em. 2ajt.

Email: sales@fansbrands.com

Telephone number : +49 (3221) 324-90-02

Website: https://fansbrands.de/

Hosting service providers

Name: UNAS Online Kft.

Postal address : 9400 Sopron, Kőszegi út 14.

Email: unas@unas.hu

Phone number:

Name: Shopify Commerce Singapore Pte. Ltd.

Postal address : 77 Robinson Road, #13-00 Robinson 77, Singapore 068896

E-mail:

Phone number:

Description of the data processing activities carried out in the context of the operation of the webshop

This document contains all relevant information on data processing related to the operation of the webshop in accordance with the General Data Protection Regulation (2016/679) of the European Union (hereinafter: Regulation or GDPR) and Act CXII of 2011 (hereinafter: Data Protection Act).

Information about the use of cookies

What is a cookie?

When you visit the website, the data controller uses cookies. A cookie is a string of letters and numbers that is sent from our website to your browser to store certain settings, facilitate the use of our website, and help us collect relevant statistical information about our visitors.

Some cookies do not contain personal information and cannot identify individual users. However, some cookies contain a unique identifier, a secret, randomly generated string of numbers stored by your device that allows you to identify yourself. The duration of each cookie is specified in the respective description.

Legal background and legal basis of cookies:

The legal basis for the processing is your consent pursuant to Article 6(1)(a) of the Regulation.

Main characteristics of the cookies used by the website: Strictly necessary cookies:

If you do not accept the use of cookies, certain functions will not be available to you.

Strictly necessary cookies : These cookies are essential for the use of the website and enable basic functionality. Without these cookies, several features of the website will not be available. The lifetime of these cookies is limited exclusively to the duration of the session.

Session cookies: These cookies store the user's location, browser language, and payment currency. They last until the browser is closed or for a maximum of two hours.

Age - restricted content cookies : These cookies store the fact that consent to age-restricted content has been given and that the person concerned is over 18 years old; their lifespan lasts until the browser is closed.

Recommended product cookies: These store the list of products to be recommended via the "Recommend a friend" feature. Their lifespan is 60 days.

Mobile version, design cookies: These recognize the device used by the visitor and switch to full view on the mobile device. Their lifespan is 365 days.

Acceptance of cookies : Upon accessing the website, you accept the cookie policy displayed in the appropriate window. Cookies last for 365 days.

Exit #2 cookies: Logs the visitor out after 90 days, according to option #2. Their lifetime is 90 days.

Backend identifier cookies: Identifier of the backend server serving the website. Their lifetime lasts until the browser is closed.

Statistical cookies:

Google Analytics cookies: Google Analytics is Google's analytics tool that allows website and application operators to gain a more accurate picture of their visitors' activities. The service may use cookies to collect information and compile reports containing statistical data on website usage, without individually identifying visitors for Google. Google Analytics primarily uses " .ga" cookies. In addition to reporting statistical data on website usage, Google Analytics, together with the advertising cookies described above, can also be used to deliver more relevant ads on Google properties (such as Google Search) and across the web.

Cookies to improve user experience: These cookies collect information about how the user uses the website, for example, which pages the user visits most often or what error messages they receive from the website. These cookies do not collect any information that identifies the visitor; they work with completely general, anonymous information. They use the data obtained from this information to improve the website's performance. The lifetime of these cookies is limited exclusively to the duration of the session.

Referrer cookies: These store the external websites from which the visitor came to the website. Their lifespan lasts until the browser is closed.

Last viewed product cookies : These store the last product viewed by the visitor. Their lifespan is 60 days.

Cookies for the last category viewed: These store the last category viewed. Their lifespan is 60 days.

Shopping cart cookies: Records the products added to the shopping cart. Their lifespan is 365 days.

Smart Offer cookies : Records the conditions for displaying smart offers (e.g., whether the visitor has already been to the website, whether they have placed an order). Their lifespan is 30 days.

Marketing cookies:

Google Adwords cookies When someone visits our website, the visitor's cookie identifier is added to the remarketing list. Google uses cookies—such as NID and SID cookies—in Google products for purposes such as personalizing the ads shown on Google Search. Google uses these cookies to do things like remember your previous searches, interactions with certain advertisers' ads or search results, or visits to advertisers' websites. AdWords conversion tracking uses cookies. To track sales and other conversions resulting from advertising, cookies are stored on the user's computer when the user clicks on the ad. Some common ways cookies are used include: selecting ads based on what is relevant to the individual user, improving campaign performance reports, and avoiding showing ads the user has already seen.

Remarketing cookies: These cookies can be shown to previous visitors or users when they visit other websites in

the Google Display Network or search for terms related to its products or services.

Facebook Pixel (Facebook Cookies) The Facebook Pixel is a piece of code that allows the website to generate a conversion report, compile audiences, and provide the website owner with detailed analytics on how visitors use the website. The Facebook Pixel enables personalized ads to be displayed to website visitors on the Facebook platform. You can read Facebook's privacy policy here: https://www.facebook.com/privacy/explanation

For more information on deleting cookies, please see the following links:

Internet Explorer: http://windows.microsoft.com/en-us/internet-explorer/delete-manage-cookies#ie=ie-11 Firefox: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer

Mozilla: https://support.mozilla.org/hu/kb/weboldalak-altal-elhelyezett-sutik-torlese-szamito

Safari: https://support.apple.com/guide/safari/manage-cookies-and-website-data-sfri11471/mac Chrome: https://support.google.com/chrome/answer/95647

Edge: https://support.microsoft.com/hu-hu/help/4027947/microsoft-edge-delete-cookies

Data processed for the purpose of concluding and fulfilling the contract

Data processing may occur in several cases for the conclusion and fulfillment of the contract. We inform you that data processing in connection with complaint management and the administration of warranty rights will only occur if you exercise one of the aforementioned rights.

If you do not purchase through the webshop but only come as a visitor, the provisions on data processing for marketing purposes may apply to you if you give us your consent for marketing purposes.

Data processing activities for the purpose of concluding and fulfilling the contract are in detail:

contact

If you contact us, for example, by email, contact form, or phone with a product inquiry, prior contact is not necessary; you can always order through the webshop.

Processed data

The data you provide when contacting us.

Period of data processing

We only process the data until the contact is terminated.

Legal basis for data processing

Your voluntary consent, which you have given to the controller by contacting us. [Data processing pursuant to Article 6(1)(a) of the Regulation].

Registration on the website

By storing the data provided during registration, the controller can offer a more convenient service (e.g., the data subject does not have to provide their data each time they make a purchase on the website). Registration is not a prerequisite for concluding a contract.

Processed data

FansBRANDS® - Official Motorsport Fan Shop

When processing data, the controller processes your name, address, telephone number, email address, the characteristics of the purchased products and the date of purchase.

Period of data processing

FansBRANDS® - Official Motorsport Fan Shop

Until you revoke your consent.

Legal basis for data processing

Your voluntary consent, which you have given to the controller through registration. [Data processing pursuant to Article 6(1)(a) of the Regulation].

Processing the order

Data processing activities within the scope of order processing that are necessary for the purpose of contract fulfilment.

Processed data

FansBRANDS® - Official Motorsport Fan Shop

During data processing, the data controller processes your name, address, email address, characteristics of the purchased products, order number and date of purchase.

When you place an order in the web shop, data processing and the provision of data are essential for the fulfillment of the contract.

Period of data processing

FansBRANDS® - Official Motorsport Fan Shop

We process the data for 5 years in accordance with the civil law limitation period.

Legal basis for data processing

The performance of the contract. [Data processing pursuant to Article 6(1)(b) of the Regulation].

Issuing the invoice

Data processing is carried out for the purpose of issuing a legally compliant invoice and fulfilling the obligation to retain the accounting document. According to paragraphs (1)-(2) of Section 169 of the Accounting Act, economic organizations must retain accounting documents that directly and indirectly support bookkeeping.

Processed data

FansBRANDS® - Official Motorsport Fan Shop

Name, address, email address, telephone number.

Period of data processing

According to paragraph (2) of Section 169 of the Accounting Act, invoices issued must be kept for 8 years after they are issued.

Legal basis for data processing

According to paragraph (1) of Section 159 of Act CXXVII of 2007 on Value Added Tax, the issuance of an invoice is mandatory

and pursuant to Section 169(2) of the Accounting Act, issued invoices must be retained for 8 years. [Data processing pursuant to Article 6(1)(c) of the Regulation].

Data processing in connection with product delivery

The data processing is carried out for the purpose of delivering the ordered product.

Processed data

FansBRANDS® - Official Motorsport Fan Shop Name, address, email address, telephone number. Period of data processing

FansBRANDS® - Official Motorsport Fan Shop

The data processing is carried out for the purpose of delivering the ordered product.

Legal basis for data processing

The performance of the contract. [Data processing pursuant to Article 6(1)(b) of the Regulation].

Recipients and data processors for the delivery of goods

Name of the beneficiary : GLS General Logistics Systems Hungary Csomag-Logisztikai Kft.

Registered office of the recipient: 2351 Alsónémedi, GLS Európa u. 2.

Recipient 's telephone number : 06-29-88-67-00

Recipient 's email address : info@gls-hungary.com

Recipient 's website : https://gls-group.eu/HU/hu/home

The courier service participates in the delivery of the ordered product based on its contract with the data controller. The courier service processes the data provided to it in accordance with the privacy policy available on its website.

Recipient Name: UPS

Registered office of the recipient: Atlanta, Egyesült Államok

Recipient 's telephone number : +36 1 877 0000

Recipient 's email address : https://www.ups.com/upsemail/input?loc=hu_HU

Recipient 's website : https://www.ups.com/

Management of warranty and guarantee claims

Regarding warranty and guarantee rights, we must proceed in accordance with Decree 19/2014 (April 29) of the Minister of National Economy, which establishes the method of managing such claims.

Processed data

FansBRANDS® - Official Motorsport Fan Shop

Regarding warranty and guarantee rights, we must comply with Decree 19/2014 (April 29) of the Minister of National Economy.

According to the decree, we must record the warranty or guarantee claim that has been notified to us, which we do:

Your name, address and the declaration that you agree to the processing of your data indicated in the record pursuant to the Decree,
Name and purchase price of the material item sold under the contract concluded between us,
Date of contract fulfillment,
Date of notification of the defect,
Description of the error,
the right you wish to assert based on your guarantee or warranty rights, and
the manner in which the guarantee or warranty claim is processed or the reasons for the rejection of the right to be asserted on the basis of the claim.

When we take delivery of the purchased product from you, we must issue a receipt which must include the following:

Your name and address,
Data necessary to identify the object,
the date of receipt of the item and
the date on which you can accept the repaired item.

Period of data processing

FansBRANDS® - Official Motorsport Fan Shop

The company is obliged to keep the record of the warranty or guarantee claim submitted by the consumer for three years and to present it to the supervisory authority upon request.

Legal basis for data processing

The legal basis for data processing is compliance with the legal obligations established by Decree 19/2014 (IV. 29.) of the Minister of National Economy [paragraph (1) section 4. and paragraph (1) section 6] [data processing pursuant to article 6, paragraph 1, letter c of the Regulation].

Processing of other consumer protection complaints

Data processing is carried out for the purpose of handling complaints regarding consumer protection. If you contact us with a complaint, data processing and the provision of data are unavoidable.

Processed data

FansBRANDS® - Official Motorsport Fan Shop

Buyer's name, telephone number, email address, content of the complaint.

Period of data processing

FansBRANDS® - Official Motorsport Fan Shop

Consumer complaints are retained for 3 years under the Consumer Protection Act.

Legal basis for data processing

You can voluntarily decide whether to lodge a complaint with us, but if you do so, we are obliged to keep your complaint for a period of 3 years in accordance with paragraph (7) of Section 17/A of the Act CLV of 1997 on Consumer Protection [data processing pursuant to Article 6(1)(c) of the Regulation].

Data processed in connection with the verifiability of consent

When registering, placing an order or subscribing to a newsletter, the IT system stores the IT data associated with the consent for evidential purposes.

Processed data

FansBRANDS® - Official Motorsport Fan Shop

The date of consent and the IP address of the data subject.

Period of data processing

FansBRANDS® - Official Motorsport Fan Shop

Since the consent must be verifiable later due to legal requirements, the data will be stored for the limitation period after the data processing has ended.

Legal basis for data processing

This obligation is laid down in Article 7(1) of the Regulation [data processing pursuant to Article 6(1)(c) of the Regulation].

Data processing for marketing purposes

Data processing in connection with the sending of newsletters

The data processing is carried out for the purpose of sending newsletters.

Processed data

FansBRANDS® - Official Motorsport Fan Shop Name, address, email address, telephone number. Period of data processing

FansBRANDS® - Official Motorsport Fan Shop until the data subject withdraws their consent. Legal basis for data processing

Your voluntary consent, which you have given to the controller by subscribing to the newsletter. [Data processing pursuant to Article 6(1)(a) of the Regulation].

Data processing in connection with the sending and display of personalized advertising

The data processing is carried out for the purpose of sending advertising content that corresponds to the area of interest of the data subject.

Processed data

FansBRANDS® - Official Motorsport Fan Shop Name, address, email address, telephone number. Period of data processing

FansBRANDS® - Official Motorsport Fan Shop

Until you revoke your consent.

Legal basis for data processing

Your voluntary, separate consent, which you gave to the data controller when collecting the data. [Data processing pursuant to Article 6(1)(a) of the Regulation].

Remarketing

The data processing takes place as part of a remarketing activity that is made possible by cookies.

Processed data

FansBRANDS® - Official Motorsport Fan Shop

Data processed by the cookies defined in the cookie notice.

Period of data processing

The duration of data storage by the respective cookie. Further information can be found here:

General cookie information from Google: https://www.google.com/policies/technologies/types/

Google Analytics information: https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage?hl=hu

Facebook information: https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen

Legal basis for data processing

Your voluntary consent, which you have given to the controller by using the website. [Data processing pursuant to Article 6(1)(a) of the Regulation].

Competitions

The data processing is carried out for the purpose of conducting the competition.

Processed data

FansBRANDS® - Official Motorsport Fan Shop

Name, email address, telephone number.

Period of data processing

FansBRANDS® - Official Motorsport Fan Shop

The data will be deleted after the competition has ended, with the exception of the winners' data, which the data controller must retain for 8 years in accordance with the Accounting Act.

Legal basis for data processing

Your voluntary consent, which you have given to the controller by using the website. [Data processing pursuant to Article 6(1)(a) of the Regulation].

Further data processing activities

If the controller intends to carry out further data processing operations, he shall inform the data controller in advance about the specific circumstances of the data processing (legal background and legal basis of the data processing, scope of the data processed, duration of the data processing).

Recipients of personal data

Activities of data processors for the storage of personal data

Name of the data processor: UNAS Online Kft.

Contact information of the data processor:

Data processor’s telephone number:

Email of the data controller: unas@unas.hu

Registered office of the data processor: 9400 Sopron, Kőszegi út 14.

Data processor's website: unas.hu

The data processor stores personal data on the basis of a contract concluded with the data controller. The data processor is not authorized to access the personal data.

Name of the data processor: Shopify Commerce Singapore Pte. Ltd.

Contact information of the data processor:

Data processor’s telephone number:

Email of the data controller :

Registered office of the data processor: 77 Robinson Road, #13-00 Robinson 77, Singapore 068896

Website of the data controller: https://www.shopify.com/

The data processor stores personal data on the basis of a contract concluded with the data controller. The data processor is not authorized to access the personal data.

Activities of data processors in connection with the sending of newsletters

Name of the company operating the newsletter system: UNAS Online Kft.

Registered office of the company operating the newsletter system: 9400 Sopron, Kőszegi út 14.

Telephone number of the company that operates the newsletter system:

Email address of the company operating the newsletter system: unas@unas.hu

Website of the company operating the newsletter system: unas.hu

The controller participates in the distribution of the newsletter within the framework of a contract concluded with the controller. Within the scope of this participation, the data processor processes the name and address of the data subject to the extent necessary for sending the newsletter.

Activities of data processors in connection with the sending of newsletters

Name of the company that operates the newsletter system: ActiveCampaign

Registered office of the company operating the newsletter system: 150 North Michigan Avenue Suite 1230 Chicago, IL 60601 United States

Telephone number of the company that operates the newsletter system: +1 (773) 904-0945

Email address of the company that operates the newsletter system: privacy@activecampaign.com

Website of the company that operates the newsletter system: https://www.activecampaign.com

The controller participates in the distribution of newsletters within the framework of a contract concluded with the controller. Within the scope of this participation, the data processor processes the name and address of the data subject to the extent necessary for sending the newsletter.

Activities of data processors in connection with the sending of newsletters

Name of the company operating the newsletter system: The Marketer

Registered office of the company operating the newsletter system: Romania - Badea Cartan 66, District 2, Bucharest, Office 3, Zone II, Room 2, Bl. 40, Sc.A, Et.5, Ap.26,

Telephone number of the company operating the newsletter system: +40724470432

Email address of the company that operates the newsletter system: iam@themarketer.com

Website of the company that operates the newsletter system: https://themarketer.com/

Activities of data processors in connection with the sending of newsletters

Name of the company operating the newsletter system: Klavyio

Registered office of the company operating the newsletter system: 49 Southwark Bridge Rd London SE1 9HH, UK

Telephone number of the company that operates the newsletter system:

Email address of the company operating the newsletter system: sales@klaviyo.com

Website of the company that operates the newsletter system: https://www.klaviyo.com/

Data processing in accounting

Name of the data processor: P-Kontroll Bt.

Registered office of the data controller: 2600 Vác, Pap Béla u. 10.

Data processor's telephone number: +36-27/316-210

Email of the data controller : konyveles@pkontroll.hu

Website of the data controller : www.pkontroll.hu

The data processor participates in accounting within the framework of a written contract concluded with the controller. Within the scope of this participation, the data processor processes the name and address of the data subject, to the extent necessary for accounting purposes, for the period pursuant to Section 169 (2) of the Accounting Act and deletes them immediately thereafter.

Activities of data processors in connection with invoicing

Name of the data processor: Innovip.hu Kft.

Registered office of the data processor: 6723 Szeged, Gát utca 7/B.

Data Controller 's telephone number : +36 20 367 6755 Data Controller's email address: iroda@innovip.hu Data Controller's website: https://www.innovip.hu/

The data processor participates in the collection of accounting documents within the framework of a written contract concluded with the controller. As part of this participation, the data processor processes the name and address of the data subject, to the extent necessary for accounting purposes, for the period pursuant to Section 169, Paragraph 2 of the Accounting Act and deletes them immediately thereafter.

Activities of data processors in connection with invoicing

Name of the data processor: Microsoft Dynamics 365 Business Central

Registered office of the data processor: Microsoft Building 92, NE 36th St, Redmond, WA 98052, United States

Data processor's telephone number: +1 425-882-8080

Email of the data controller:

Website of the data controller: https://www.microsoft.com

Activities of data processors in connection with invoicing

Name of the data processor: Odoo SA

Registered office of the data controller : Chaussée de Namur, 40 1367 Grand Rosière Belgium

Data Controller 's telephone number : +32 2 616 8002 Data Controller 's email address : privacy@odoo.com Data Controller's website: https://www.odoo.com/

Activities of data processors in connection with invoicing

Name of the data processor: Billingo Technologies Zrt.

Location of the data processor: 1133 Budapest, Árbóc utca 6.

Data processor's telephone number: +36-1/500-9491

Email of the data controller : hello@billingo.hu

Website of the data controller: https://www.billingo.hu/

Activities of data processors in connection with the operation of the CRM system

Name of the data processor: UNAS Online Kft.

Registered office of the data processor: 9400 Sopron, Kőszegi út 14.

Data processor’s telephone number:

Email of the data controller : unas@unas.hu

Data processor's website: unas.hu

The data processor participates in the collection of orders within the framework of a contract concluded with the controller. Within the scope of this participation, the data processor processes the name, address, telephone number, order numbers, and data of the data subject within the civil law limitation period.

Activities of data processors in connection with the operation of the CRM system

Name of the data processor: Innovip.hu Kft.

Registered office of the data processor: 6723 Szeged, Gát utca 7/B.

Data processor's telephone number: +36 20 367 6755

Email of the data controller : iroda@innovip.hu

Website of the data controller: https://www.innovip.hu/

Activities of data processors in connection with the operation of the CRM system

Name of the data processor: easySales

Registered office of the data controller : Locotenent Stefan Marinescu 9, emelet 6, Bucharest - Romania

Telephone number of the data controller : +36213007056

Data processor's email address: contact@easy-sales.com

Data processor's website: https://easy-sales.com/hu

Activities of data processors in connection with the operation of the CRM system

Name of the data processor: KOMPaaS.tech Kft

Registered office of the data controller : 1114 Budapest, Kemenes utca 8. félemelet 3. - Magyarország

Telephone number of the data controller : +36 1 4900999

Data controller 's email address : support@mcntele.com

Website of the data controller: https://kompaas.hu/

Activities of data processors in connection with the operation of the CRM system

Name of the data processor: VIVnetworks.com sro

Registered office of the data processor: Jungmannovo náměstí 18, 110 00 Praga 1

Telephone number of the data controller : +420 734 447 050

Email of the data controller : podpora@vivnetworks.com

Website of the data controller: https://www.vivnetworks.com/hu/

Activities of data processors in connection with the operation of the CRM system

Name of the data processor: SC DECATHLON SRL

Registered office of the data processor: Militari Shopping, Bulevardul Iuliu Maniu 546-560, București 060032 - Romania

Telephone number of the data controller : +40 21 408 5000

Email of the data controller: contact@decathlon.ro

Website of the data controller: https://www.decathlon.ro/

Activities of data processors in connection with the operation of the CRM system

Name of the data processor: Amazon.de

Registered office of the data processor: 410 Terry Ave N, Seattle 98109, WA

Data processor 's telephone number : +1 (206) 266-4064

Data processor email: copyright@amazon.com

Data processor's website: https://www.amazon.com/

Activities of data processors in connection with the operation of the CRM system

Name of the data processor: Pepita Group Zrt.

Registered office of the data processor: 5520 Szeghalom, belterület hrsz 2619/58

Telephone number of the data controller : +36 1 510 07 60

Email of the data controller: segitunk@pepita.hu

Website of the data controller: https://pepita.hu/

The data processor participates in the collection of orders within the framework of a contract concluded with the controller. As part of this participation, the data processor processes the name, address, telephone number, order, and email address of the data subject.

Numbers and dates, within the civil limitation period.

Data processing in connection with online payment

Name of the data controller: Worldline SA

Registered office of the data controller : Tour Voltaire, 1 Place des Degrés, CS 81162, 92059 Paris la Défense Cedex

Telephone number of the controller:

Email of the data controller:

Website of the controller : https://www.six-payment-services.com/

The online payment service provider participates in the execution of online payments under a written contract with the data controller, for which purpose the data is transmitted to the online payment service provider during the purchase process. As part of this participation, the online payment service provider processes the name and address of the data subject, as well as the order number and date, in accordance with its own privacy policy.

Purpose of data transmission: Transmission of transaction data to the online payment service provider that is required for the payment process initiated with the online payment service provider and associated with the purchase.

Legal basis: Performance of the contract concluded between you and the controller pursuant to Article 6(1)(b) of the Regulation, which involves a payment by the buyer and for which, in the case of an online payment, the data transfer in accordance with this section is necessary.

Name of the data controller: Stripe

Registered office of the controller : 354 Oyster Point Boulevard, South San Francisco, CA 94080

Telephone number of the data controller: 888-926-2289

Email of the data controller:

Website of the controller : https://stripe.com/

Reliable Charging Program (Megbízható Bolt)

For the purpose of operating the Megbízható Bolt program at www.arukereso.hu (Online Comparison Shopping Kft., 1074 Budapest, Rákóczi út 70-72, Tax ID: 24868291-2-42, Company Registration Number: 01-09-186759), the buyer's email address and the name of the purchased product are transmitted to arukereso.hu . The purpose of the data transmission is to collect and display customer feedback. Online Comparison Shopping Kft. processes the personal data thus transmitted in accordance with www.arukereso.hu's Data Processing and Privacy Policy. Online Comparison Shopping Kft. is considered the data controller with regard to the data transmitted in this context.

Data transfer to third countries

FansBRANDS® - Official Motorsport Shop

The following processor is located outside the European Union and processes data outside the European Union. The processor is a member of the Privacy Shield list, which means that it ensures that data is processed with the safeguards provided for in the European Union. Further information can be found here: www.privacyshield.gov

The Rocket Science Group LLC (MailChimp)

Cím: 1 North Dearborn Street, 5th Floor Chicago, IL 60602 https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active

Your rights in the context of data processing

During the data processing period, you have the following rights in accordance with the provisions of the Regulation:

Right to withdraw consent

Access to personal data and information related to data processing Right to rectification

Restriction of data processing, right to erasure

Right of objection

Right to data portability.

If you wish to exercise your rights, you will need to identify yourself, and the controller will necessarily need to communicate with you. For identification purposes, you will therefore need to provide personal data (however, only your data already processed by the controller can serve as a basis for identification). Your complaints regarding data processing will be available in your email account within the deadline specified in this Privacy Policy for complaints. If you were our customer and wish to identify yourself for complaint handling or warranty management purposes, please also provide your order ID for identification purposes. This will allow us to identify you as our customer.

The controller will respond to complaints about data processing within 30 days at the latest.

Right to withdraw consent

You have the right to withdraw your consent to data processing at any time; in this case, the submitted data will be deleted from our systems. However, please note that in the case of an unfulfilled order, withdrawing your consent may prevent us from completing the delivery of your order. Furthermore, if the purchase has already been completed, accounting regulations prevent us from deleting the data related to invoicing from our systems. If you still owe us a balance, we may still process your data even if you withdraw your consent, based on our legitimate interest in debt collection.

Access to personal data

You have the right to obtain confirmation from the controller as to whether or not your personal data is being processed and, where this is the case, you have the right to:

a to obtain access to the personal data processed, and

a to obtain from the data controller information on the following points: the purposes of the data processing;

the categories of your personal data processed;

Information about the recipients or categories of recipients to whom the personal data have been or will be disclosed;

the envisaged period for which personal data will be processed, or, where that is not possible, the criteria used to determine that period;

the existence of your right to request the controller to rectify or erase personal data

data or the restriction of processing of personal data concerning you or to object to such processing; the right to lodge a complaint with a supervisory authority;

where the personal data were not collected from the data subject, any available information as to their source;

the existence of automated decision-making, including profiling, and – at least in those cases – meaningful information about the logic involved, as well as the significance and likely consequences of such processing for you.

The purpose of exercising these rights may be to establish and verify the lawfulness of data processing; therefore, in the event of multiple requests for information, the controller may charge a reasonable fee for providing the information.

The controller ensures access to personal data by sending you the processed personal data and information by email after your identification. If you have registered, you can view and review your personal data by logging into your user account.

Please indicate in your request that you wish to access personal data or information about data processing.

Right to rectification

You have the right to request the controller to immediately rectify any inaccurate personal data concerning you.

Right to restriction of data processing

You have the right to request the controller to restrict processing if one of the following applies:

the accuracy of the personal data is contested by you, for a period enabling the controller to verify the accuracy of the personal data and, if the accuracy of the data can be established immediately, no restriction shall be applied;

the data processing is unlawful and you oppose the erasure of the personal data for any reason (e.g. because the data is necessary for the possible assertion of a claim) and request the restriction of its use instead;

the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject to assert, exercise or defend legal claims, or

If you have objected to data processing, but the legitimate interest of the controller can also serve as a reason for doing so, data processing must be restricted until it can be determined whether the legitimate reasons of the controller outweigh the legitimate reasons you have stated.

Where processing has been restricted, such personal data may – with the exception of storage – only be processed with your consent or for the establishment, exercise or defense of legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

You will be informed by the controller before the restriction of processing is lifted (at least 3 working days before the restriction is lifted).

Right to erasure - Right to be forgotten

You have the right to request the controller to immediately erase your personal data if one of the following reasons applies:

the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed by the controller;

you withdraw your consent on which the processing is based and there is no other legal ground for the processing;

you object to processing on the basis of a legitimate interest and there are no overriding legitimate grounds (i.e. a legitimate interest) for the processing,

the personal data were processed unlawfully by the controller, if this was established on the basis of the complaint,

the personal data must be erased to fulfil a legal obligation under Union or Member State law to which the controller is subject.

Where the controller has made the personal data public and is obliged to erase the personal data for one of the aforementioned reasons, the controller, taking into account available technology and the cost of implementation, shall take appropriate measures, including technical ones, to inform other data controllers which process the personal data that you have requested the erasure by such controllers of all links to these personal data or of all copies or replications of these data.

The deletion does not apply if the processing is necessary:

for the exercise of the right to freedom of expression and information;

or to fulfill a legal obligation required by Union or Member State law to which the controller is subject (data processing for invoicing purposes is one of these cases, as the retention of the invoice is required by law), or to perform a task carried out in the public interest or in the exercise of official authority vested in the controller;

to assert, exercise or defend legal claims (e.g. if the controller has claims against you that have not yet been fulfilled or if he or she is conducting a complaints procedure).

Right to object

You have the right to object at any time to the processing of personal data concerning you based on legitimate interests, for reasons related to your particular situation. In this case, the controller will no longer process the personal data unless the controller can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or the processing serves to assert, exercise, or defend legal claims.

If personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing purposes; this also applies to profiling insofar as it is related to such direct marketing. If you object to processing for direct marketing purposes, the personal data will no longer be processed for these purposes.

Right to data portability

Where data processing is carried out by automated means or where data management is based on your voluntary consent, you have the right to request from the data controller the data you have made available to the data controller, whereby the data controller shall provide you with this data in xml, JSON or csv format and you may, where technically feasible, request that the data controller transmit the data in this form to another data controller.

Automated decision-making

You have the right not to be subjected to a decision based solely on automated processing (including profiling) which produces legal effects concerning you or similarly significantly affects you. In these cases, the controller shall implement suitable measures to safeguard the rights and freedoms and legitimate interests of the data subject, at least the right to obtain human intervention on the part of the controller, to express his or her point of view and to contest the decision.

The above does not apply if the decision:

is necessary for the conclusion and performance of the contract between you and the data controller;

is permitted by Union or Member State law to which the controller is subject and which also lays down

appropriate measures to safeguard your rights and freedoms and your legitimate interests; or is based on your explicit consent.

Notification to the data protection registration system

Under the Data Protection Act, data controllers must report certain data processing activities to the Data Protection Registration System. This reporting requirement ended on May 25, 2018.

Registration number at the NAIH (Hungarian National Authority for Data Protection and Freedom of Information) before 25 May 2018:

Data Protection Registration Number : NAIH-103878/2016

Data security measures

The controller declares that it has taken appropriate security measures to protect personal data against unauthorized access, alteration, transmission, disclosure, erasure or destruction, as well as against accidental destruction and damage and against inaccessibility due to changes in the technology used.

The controller will do everything within its organizational and technical capabilities to ensure that its data processors also take appropriate data security measures when working with your personal data.

Remedial measures

If you believe that the controller has violated a legal provision related to data processing or has failed to comply with one of your requests, you can initiate an investigation procedure with the Hungarian National Authority for Data Protection and Freedom of Information to stop the allegedly unlawful data processing (postal address: H-1363 Budapest, Pf. 9., e-mail: ugyfelszolgalat@naih.hu, telephone numbers: +36 (30) 683-5969 +36 (30) 549-6838;

+36 (1) 391 1400).

We would also like to inform you that in the event of a breach of the legal provisions on data processing or if the controller has not complied with one of your requests, you may file a civil lawsuit against the controller in court.

Change to the Privacy Policy

The controller reserves the right to change this data management information in a manner that does not affect the purpose and legal basis for data processing. By using the website after the change comes into effect, you accept the amended privacy notice.

If the controller wishes to further process the collected data for a purpose other than that for which it was collected, he will inform you of the purpose of the data processing and the following information before further data processing begins:

the envisaged period for which personal data will be processed, or, where that is not possible, the criteria used to determine that period;

the existence of your right to request from the controller access to, rectification or erasure of, or restriction of processing of personal data concerning you, or to object to such processing where the data processing is based on a legitimate interest, or to request data portability where the data processing is based on consent or a contractual relationship;

in the case of data processing based on consent, that you can withdraw your consent at any time, the right to lodge a complaint with a supervisory authority;

whether the provision of personal data is based on a legal or contractual obligation or is a prerequisite for entering into a contract, and whether you are obliged to provide personal data and what the consequences of failure to provide data may be;

the existence of automated decision-making, including profiling, and, at least in those cases, meaningful information about the logic involved, as well as the significance and likely consequences of such processing for you.

Only then may data processing begin, and in the case of data processing based on consent, in addition to providing the above-mentioned information, your consent to data processing is also required.