Home

PRIVACY POLICY
THE RIGHTS OF NATURAL PERSONS CONCERNED
PERSONAL DATA SHOULD BE TAKEN INTO ACCOUNT


SUMMARY

The purpose of this Prospectus is to capture the data protection and management principles applied by Datakart Ltd. and the company's privacy and management policy, which is recognized by the company as a data controller with binding force.
Datakart Ltd. (1046 Budapest, Mikszáth u. 48, hereinafter the Company) collects and manages personal data only in accordance with the law. Direct marketing letter will be sent only if you have a separate consent. We may also send information about the computer system without consent. We do everything we can to keep the data secure. Third party personal data will be transferred only with consent. Anyone can give you information about the data stored on it, and can also contact us at any time to cancel the data.

INTRODUCTION

REGULATION (EU) No 2016/67 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL ("the Regulation"), concerning the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Regulation 95/46 / the Data Controller shall take appropriate measures to provide the data subject with all the information regarding the processing of personal data in a concise, transparent, understandable and easily accessible form, in a clear and unambiguous manner, and that the Data Controller shall facilitate the exercise of the rights of the data subject.
The obligation to inform the data subject in advance of the information on the right to information self-determination and the freedom of information in CXII. law also provides.

By following the information provided below, we comply with this statutory obligation.

The information shall be disclosed on the company's website or sent to the person concerned upon request.

This Privacy Policy describes the data management of the following websites: https://www.datakart.hu and is based on the content specification above.

 

CHAPTER I
THE DATABASE TITLE, DEFINITIONS

The publisher of this information, at the same time the Data Manager:
Company Name: Datakart Kft.
Headquarters: 1046 Budapest, Mikszáth u. 48th
Business Registration Number: 01 09 566187
Tax number: 12213474-2-41
Representative: Zsolt Szabady
Phone number: +36309773567
E-mail address: This email address is being protected from spambots. You need JavaScript enabled to view it.
Website: www.datakart.hu
(hereinafter referred to as "the Company")


Interpretative concepts

1. concerned / user: any natural person identified or identified, directly or indirectly, by any identified personal data;

2. personal data: data relating to the data subject, in particular the name, identifying mark, and the knowledge of one or more physical, physiological, mental, economic, cultural or social identities of the data subject, and the deduction from the data to the data subject;

3. Data controller means a natural or legal person or an organization without legal personality, who either independently or with others determines the purpose of data management, makes and executes decisions on data handling (including the equipment used), or with a data processor enforce;

4. data management: irrespective of the method used, any operation of the data or all of the operations, such as collecting, capturing, recording, systematizing, storing, modifying, using, querying, transmitting, publishing, aligning or interconnecting, blocking, deleting and destroying any of the operations , as well as preventing the further use of data, taking photographs, sound or images, and recording physical features (such as finger or palm print, DNA pattern, iris image) for identifying the person;

5. processing of data: carrying out technical tasks related to data management operations, irrespective of the method and device used to carry out operations and the place of application, provided that the technical task is carried out on the data;

6. "data processor" means a natural or legal person or an organization without legal personality who, by virtue of a contract concluded with the data controller, including the conclusion of a contract by law, processes data;

7. privacy incident: the unauthorized handling or processing of personal data, including unauthorized access, alteration, transmission, disclosure, deletion or destruction, as well as accidental destruction or damage.
Web shop management data management


II. CHAPTER
INSURANCE OF LEGALITY OF DATA MANAGEMENT

1. Data management based on the consent of the person concerned

(1) If the Company wishes to perform data-based data management, the consent of the person concerned for handling his or her personal data shall be requested by the content and information contained in the data request form specified in the data management rules.

2. A consent shall also be deemed to be given to the person concerned when viewing a relevant box when viewing the Company's Internet site, making technical adjustments to the use of information society services, and any other statement or action that is relevant to that context the consent of the person concerned is clearly indicated for the intended treatment of his / her personal data. Silence, the foreground square or non-action is therefore not a consent.

3. Contribution shall cover all data management activities for the same purpose or purposes. If data management serves multiple purposes at a time, the consent must be given for all data management purposes.

4. If the consent of the party concerned is provided in the context of a written statement that applies to other matters, such as the conclusion of a contract of sale or service, the request for consent must be presented in a clearly distinct manner from these other cases, in a clear and easily accessible form, with simple language. Any part of such a declaration containing the consent of the person concerned that violates the Decree shall not have binding force.

(5) The Company may not conclude a contract to fulfill its obligation to provide personal data which are not necessary for the performance of the contract.

(6) The withdrawal of consent should be allowed in the same simple way as the granting of the consent.

(7) If the personal data has been collected with the consent of the data subject, the data controller may handle the data recorded without the need for a different legal provision for the fulfillment of the legal obligation that he or she may have, without further special consent and withdrawal of the consent of the person concerned

2. Data management based on the fulfillment of a legal obligation

(1) In the case of data processing based on a legal obligation, the provisions of the applicable law shall govern the scope of the manageable data, the purpose of data management, the length of the data storage, and the addressees.
(2) Data management based on the fulfillment of a legal obligation is independent of the consent of the party concerned, as data management is defined by law. Before contacting data, the data subject must be informed beforehand that data management is compulsory and that the data subject is required to be clearly and thoroughly informed of all the facts related to his or her data management, including the purpose and legal basis of data management, data handling and data processing, the duration of the data handling, if the personal data of the person concerned are handled by the data controller on the basis of the legal obligation that he or she is responsible for, and on who will know the data. The information should also include the rights and remedies available to the data subject in question. In the case of mandatory data handling, information may also be disclosed by making public the reference to the legal provisions containing the foregoing information.

3. Facilitating the Rights of the Rights

In all data management of the Company, it is obliged to ensure the exercise of the rights of the data subject.

4. Duration of data handling, deadline for deleting data

The Company manages personal data for the duration and duration of the service, but up to 90 days.

5. The person who is able to know the data

Personal data can be handled by the sales and marketing staff of the controller, while respecting these principles.

6. Describe the rights of data subjects involved in data management

You can initiate the deletion or modification of your personal data in the following ways:
- by post at the address,
- by e-mail at the e-mail address,
- by phone on the number.

III. CHAPTER
VISITING DATA MANAGEMENT ON THE HOME OF THE COMPANY - APPLICATION OF COOKIE


1. General information about cookies

The Data Managers will install a small data packet (so-called "cookie") on the user's computer for customized service. The purpose of the cookie is to ensure that the site operates at the highest level, to provide personalized services and to increase the user experience. The user can delete the cookie from your computer or set up your browser to disable cookies. By prohibiting the use of cookies, the User acknowledges that without the cookie the operation of the site is incomplete
Accepting or enabling cookies is optional. You can reset your browser settings to reject all cookies or to indicate when a cookie is just being sent. Most browsers accept cookies automatically as default, but they can usually be changed to prevent automatic acceptance and offer options every time.
However, we also note that certain site features or services may not function properly without cookies.

2. Information on the cookies used on the Company's website and on the data generated during the visit

2.1. The data link handled during the visit: The website of our Company may use the web site to record and manage the following information about the visitor and the device he / she browses:

  • the IP address used by the visitor,
  • browser type,
  • features of the operating system of the device used for browsing (configured language)
  • visit date,
  • the visited (sub) page, feature or service.
  • click.

These data are kept for up to 90 days and can be used primarily to test security incidents.

2.2. Cookies on the website

2.2.1. Technically indispensable sessions are sessions
The purpose of data management is to ensure the proper functioning of the website. These cookies are needed to allow visitors to browse the web site, seamlessly and fully utilize its features, services available through the website, including - in particular - a comment by a visitor on a particular site or the identity of a logged in user during a visit . By using cookies, you do not manage your personal data with the data handler. An affected person has the option to delete cookies in the Tools / Preferences menu of browsers, usually under the Privacy menu item. No consent is required if the sole purpose of the use of cookies is the need to provide the information society service explicitly required by the communication via the electronic communications network or by the subscriber or user
The legal basis for this data management is the 2001 CVIII., On certain electronic commerce services and information society services. Law 13 / A. (3), according to which the service provider may treat the personal data necessary for the provision of the service for the purpose of providing the service technically indispensable for the provision of the service. If the other conditions are identical, the service provider must choose and always operate the tools used to provide the information society service in such a way that personal data is processed only if it is strictly necessary for the provision of the service and for the fulfillment of other purposes set out in this Act required, but in this case also to the extent and time required.

2.2.3. Use Google Adwords Conversion Tracking
2.2.3.1. The online ad program "Google AdWords" is used by the data handler and uses Google's conversion tracking feature within its framework. Google conversion tracking is Google Inc.'s analytics service (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; "Google").
2.2.3.2. When a user reaches a web site through a Google ad, a conversion tracking cookie will be placed on your computer. These cookies have limited validity and do not contain any personal information, so the User can not be identified by them.
2.2.3.3. When the user browses on certain pages of the website and the cookie has not expired, Google and the data administrator can see that the user clicked on the ad.
2.2.3.4. Each Google AdWords customer receives a different cookie so they can not be tracked through the AdWords clients' websites.
2.2.3.5. The information, obtained through conversion tracking cookies, is intended to make conversion statistics for your AdWords conversion tracking customers. Customers will then be informed about the number of users who have been passed on their ad-click and conversion-tagged page. However, they do not have access to information that could identify any user.
2.2.3.6. If you do not want to participate in conversion tracking, you can reject this by blocking the ability to install cookies in your browser. Then you will not be included in conversion tracking statistics.
2.2.3.7. For more information and Google Privacy Statement, visit www.google.de/policies/privacy/
2.2.4. Use Google Analytics
2.2.4.1. This site uses Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses "cookies" to use text files that are saved to your computer to help you analyze a user-visited web page.
2.2.4.2. Information generated by cookies associated with a web site used by the User is usually stored and stored on a US server in Google. By activating IP anonymization on a web site, Google has previously abbreviated the IP address of the User within the Member States of the European Union or in other States party to the Agreement on the European Economic Area.
2.2.4.3. The transfer and shortening of the entire IP address to Google's US server will only take place in exceptional cases. On behalf of this operator of this site, Google will use this information to evaluate how the User has used the Website and to report to the website operator about reports related to the activity of the website and to perform additional services related to website and Internet usage.
2.2.4.4. In Google Analytics, you do not associate the IP address that is transmitted by the user's browser with other Google data. The storage of cookies can be prevented by setting the Browser's settings correctly, but please note that in this case, you may not be able to fully use all of this feature on this site. You can also prevent Google from collecting and processing cookie information (including your IP address) on the User's website usage by downloading and installing the browser plug-in available on the link below. https://tools.google.com/dlpage/gaoptout?hl=hu

3. Social Pages

3.1. Act CXII of 2011 on the right to information self-determination and freedom of information In accordance with Article 20 (1) of the Act on the Rights of the Child, it is necessary to define the following in relation to the processing of social networking sites:
(a) the fact of collecting data,
b) the circle of stakeholders,
(c) the purpose of the collection of data,
(d) the duration of the processing,
(e) the person who is able to access the data,
(f) a description of the data rights of the data subject.
3.2. The fact of data collection, the range of data being processed: Facebook / Google + / Twitter / Pinterest / Youtube / Instagram, etc. registered on social network pages or the user's profile profile.
3.3. Stakeholders: All those who are registered on Facebook / Google + / Twitter / Pinterest / Youtube / Instagram and so on. social networking sites, and "copied" the web site.
3.4. The aim of the data collection is to share, or "file", the popularity of certain content elements, products, actions of the web site or the website itself on social networking sites.
3.5. Information about the source of data, how to handle it, how it is handed over and how to transfer it, and to find out about the legal basis of the data on the given social networking site. Data management takes place on social networking sites, so the duration of the data handling, the ways of deleting and modifying the data are governed by the rules of the respective community site.
3.6. The legal basis for data handling is the volunteer's consent to managing your personal information on social networking sites.

4. Customer relations and other data management

4.1. If the data handler is questioned when using our services, he / she may have a problem with the person concerned, he or she may contact the data manager using the methods provided on the website (phone, email, social networking sites, etc.).
Act CXII of 2011 on the right to information self-determination and freedom of information (1) of the Act on the Rights of the Child, it is necessary to define in relation to data management related to attachment:
(a) the fact of collecting data,
(b) the circle of stakeholders,
(c) the purpose of the collection of data,
(d) the duration of the processing,
(e) the person who is able to access the data,
(f) a description of the data rights of the data subject.

  • The fact of the data collection, the scope of the data being processed and the purpose of data management:
  • Personal Data The purpose of data management
  • Wire and First Name Required to be contacted.
  • E-mail Address Contact.
  • Touch Phone
  • The email address does not need to contain personal information.

4.2. Data Manager is the received email, messages, phone, Facebook, etc. the information provided will be deleted with the name and email address of the interested party as well as other voluntarily entered personal data, not later than two years from the date of disclosure.
4.3. Data management not listed in this information is provided when data is included.
4.4. The Service Provider is obliged to provide information, communicate, transfer or provide documentation on the basis of an exceptional authority request or the authorization of the law in case of request of other bodies.
4.5. In these cases, the Service Provider shall, to the extent that it indicates the exact purpose and scope of the data, issue personal data only to and to the extent that it is indispensable to achieve the purpose of the request.
4.6. External Providers: Data Managers in connection with the provision of Services often use Outbound Services, which are handled by Data Managers with External Providers. For Personal Data handled by External Service Providers, the terms and conditions of the External Service Providers' own privacy policy are governed. The Data Managers shall do their best to ensure that the External Service Provider manages the personal data transmitted to you in accordance with the law and uses them solely for the purposes specified by the User or for the purposes set out in this Prospectus. After the 25th of May, 2018, External Service providers record, manage and process personal data transmitted and processed or processed by Data Managers in accordance with the provisions of the GDPR. processed and made a statement to the Data Managers. The Data Managers will inform the Users of the Data Transfers for Outbound Services.
There are External Providers that none of the Data Managers are contracted for
regardless of whether they have access to the Site / Services, whether or not they have access to the User's Contribution (eg through the connection of their Individual Account to the Service), or to any User's or Website Services collects data from user activities that can be used to identify the user on a case-by-case basis, either individually or with other data collected by this external service provider. Such External Providers may, in particular but not limited to: Facebook Ireland LTD., Google LLC, Instagram LLC., Infogram Software Inc., PayPal Holdings Inc., Pinterest Europe Ltd., Playbuzz Ltd., Twitter International Company, Vimeo INC., YouTube LLC .
E External Service Providers will transfer their Personal Data to their personal data according to their own privacy policy.

5. Data security

5.1. The data controller plans and executes the data management operations to ensure that the privacy of the individuals concerned is protected.
5.2. The data controller ensures the security of the data (password, antispyware), takes technical and organizational measures and establishes the procedural rules necessary to enforce Info Info and other privacy and data protection rules.
5.3. Data is protected by appropriate measures by the data controller in particular

  • unauthorized access,
  • change,
  • Forwarding,
  • disclosure,
  • deletion or destruction,
  • Accidental Injury and Injury,
  • against the unavailability of the technology used.

5.4. The data controller shall ensure by means of an appropriate technical solution that the data stored in the records can not be directly linked and assigned to the data subject.
5.5. To prevent unauthorized access to personal data, to alter the data and to prevent unauthorized disclosure or use of the data, the data controller shall ensure:
the development, operation of the appropriate IT and technical environment,

  • the controlled selection, supervision,
  • detailed operational, risk management and service procedures.

5.6. Based on the above, the provider ensures that the data he manages

  • be available to the holder,
  • authenticity and authentication are ensured,
  • its unaltered nature can be justified.

5.7. The IT system of the data controller and its hosting provider protects inter alia

  • computer fraud,
  • espionage,
  • computer viruses,
  • spam,
  • hacks
  • and other attacks.

6. User rights, how to enforce them

6.1 The User may request that any Data Administrator informs him that he or she manages the User's personal data and, if so, has access to the Personal Data he or she manages.
You can view the access control system settings of the Personal Data Services that are provided by the User in connection with the given Service or on the Profile Pages for each Services.
Regardless of the User's Personal Data Handling at any time in writing, any Data Handler may request information by e-mail. The information request sent by the letter will be considered credible by the Data Manager if the User is clearly identifiable on the basis of the request sent. E-mail information is only considered credible by the Data Manager if it is sent by the User to a registered e-mail address but this does not preclude the Data Manager from identifying the User before providing the information.
The request for information may include the data of the User managed by the Data Managers, their source, the purpose, legal basis, duration of the Data Processing, the names and addresses of any Data Processing, data management related activities and, in the case of the transfer of Personal Data to whom and for what purpose and user information.
6.2 The User may request the correction or modification of the Personal Data processed by the Data Managers. Taking into account the purpose of Data Management, the User may request the addition of incomplete Personal Data.
The personal data provided by the User in connection with the given Service can be changed in the access control system settings of the Services or in the profile pages associated with each Service. After completing a request to modify your personal data, the previous (deleted) data can no longer be recovered.
6.3 The User may request the deletion of the Personal Data handled by the Data Managers.8
Cancellation may be refused (i) for the purpose of exercising the right to freedom of expression and access to information, or (ii) where the law governing the processing of Personal Data is authorized; and (iii) submitting, enforcing, or protecting legal claims. In any case, the Data Managers inform the User of the denial of the cancellation request, indicating the reason for the cancellation of the deletion. After the request for deletion of personal data, previous (deleted) data can no longer be recovered.
6.4 The User may request that his or her Personal Data Management is restricted by the Data Managers if the User disputes the accuracy of the Personal Data Handled. In this case, the restriction applies to the time that Data Managers can control the accuracy of Personal Data. The Data Managers will indicate the Personal Data they are handling if the User disputes the correctness or accuracy, but the incorrect or imprecise nature of the disputed Personal Data can not be clearly identified.
The User may request that his or her Personal Data is handled by Data Managers even if Data Management is unlawful but the User opposes the deletion of the treated Personal Data and instead asks for their use limitation.
You may also request that your Personal Data is handled by Data Managers when the purpose of the Privacy Policy is met but the User requires their Data Handlers to submit, enforce, or protect legal claims.
6.5 The User may request that the Data Managers make available to the User and the User
Personal data handled by an automated user will be handed over to the other data handler in a handwritten widely used machine-readable format and / or transferred to another data handler.
6.6 The User may object to the processing of Personal Data (i) if the processing of Personal Data is only required to comply with the Legal Obligations of the Data Managers or to enforce the legitimate interests of Data Managers or third parties; (ii) if the purpose of Data Management is to direct business acquisition, polling or scientific research; or (iii) if Data Management is performed in the interest of a public interest task. The Data Managers will examine the legality of the User's protest and if the grounds of protest
establish that Data Management is terminated and the Personal Data processed is blocked, and any protest and any actions taken under it shall be notified to all persons for whom the Personal Data affected by the protest has been forwarded

7. Remedies

7.1. You may object to your personal data being handled if
(a) the processing or transmission of personal data is solely necessary to fulfill the legal obligation of the Service Provider or to enforce the legitimate interests of the Provider, Data Provider or third party, unless data management is prescribed by law;
(b) the use or transmission of personal data is done for direct business acquisition, polling or scientific research;
c) in other cases specified by law.
7.2. The Service Provider shall examine the protest within the shortest possible time but not later than 15 days from the submission of the request, and shall make a decision on its validity and shall inform the applicant in writing. If the Service Provider determines the validity of the protest of the person concerned, data management, including further data collection and data transfer, will terminate and lock the data, and inform the protest and the measures taken on the basis of those who have previously forwarded the personal data affected by the protest, and who are obliged to take action to enforce the right to protest.
7.3. If the User Service provider disagrees with the decision of the User, he or she may appeal to the court within 30 days from the date of its communication. The court proceeds out of order.
7.4. You can lodge a complaint against a possible infringement of the data controller with the National Data Protection and Information Authority:
National Privacy and Freedom Authority
1125 Budapest, Szilágyi Erzsébet fasor 22 / C.
Postal address: 1530 Budapest, Mailbox: 5.
Phone: +36 -1-391-1400
Fax: + 36-1-391-1410
E-mail: This email address is being protected from spambots. You need JavaScript enabled to view it.

8. Judicial enforcement

8.1. The data controller must demonstrate that data management is in compliance with the law. The data collector has to prove the legality of the transfer of data.
8.2. The trial is governed by the jurisdiction of the court. The case may be initiated before the tribunal of the domicile or place of residence of the person concerned, according to his choice.
8.3. The lawsuit may also be party to lawsuits. The Authority may intervene for the sake of the merits of the matter concerned.
8.4. If the court upholds the request, the data controller is required to provide information, correction, blocking, deleting, decoding the automated data processing, taking into account the right of protest of the data subject, and the data requested by the data sender.
8.5. If the court rejects the request of the data sender, the data controller shall cancel the personal data of the data subject within 3 days of the delivery of the judgment. The data controller is also required to delete the data even if the data sender does not appear before the court within the specified deadline.
8.6. The court may order the disclosure of its judgment by publishing the identity of the data controller if it is required by data protection interests and by a larger number of protected rights of the data subject.

9. Damages and damages

9.1. If the data controller violates the personality right of the data subject by unlawful handling of the data concerned or breaches of the requirements of data security, the data subject may be subject to a charge for damages.
9.2. The controller is liable for the damage caused by the data processor to the data subject and the data controller is obliged to pay to the data subject the personal injury violation caused by the data processor. The Data Controller is exempt from liability for damages and damages if it proves that the damage or damage to the personality of the person concerned is caused by an unavoidable cause outside the scope of the data processing.
9.3. No compensation is required and no damages can be claimed in so far as the damage caused by the injured party or the infringement of the right to privacy was caused by the deliberate or gross negligent conduct of the person concerned.

10. Modification of the Data Handling Notice

10.1. The Data Controller reserves the right to modify this Prospectus at any time by its unilateral decision.

10.2. The User accepts the applicable provisions of the Prospectus at the next entry, and there is no need to request the consent of each User.


Done, Budapest, May 24, 2018