Privacy Policy
1. INTRODUCTION
We adhere to the following principles regarding the storage of personal data:
- we only request and store personal data strictly necessary for operation
- we only use personal data for the smooth operation of the service, compliance with legal regulations, and our own protection, and do not share it with others
- Act CXII of 2011 – on the right to informational self-determination and freedom of information;
- Act V of 2013 – Civil Code (Ptk.);
- Act C of 2000 – on accounting (Számv. tv.);
- Act CVIII of 2001 – on certain issues of electronic commercial services and information society services (Eker. tv.);
- Act C of 2003 – on electronic communications (Eht.);
- Act XLVIII of 2008 – on the basic conditions and certain restrictions of economic advertising activity (Grt.).
A pengemedia.hu (Operator details: Nagy László Ev., Registered office: 1139 Budapest, Teve utca 1/ D/2 6th floor 61. door; tax number: 66109158-1-41., hereinafter referred to as “Service Provider” or “Data Controller”), as data controller, acknowledges the content of this legal notice as binding. It undertakes that all data processing related to its activities complies with the expectations set out in this policy and in the applicable laws. The data protection policies related to the Service Provider’s data processing are continuously available on the www.pengemedia.hu website. The Operator reserves the right to change this notice at any time. Of course, it will inform its audience of any changes in due time. If you have any questions regarding this notice, please write to us at hello@pengemedia.hu or any of our contact details. The Operator is committed to protecting the personal data of its customers and partners, and considers it extremely important to respect the right of its customers to informational self-determination. The Service Provider treats personal data confidentially and takes all security, technical and organizational measures to guarantee the security of the data. The Data Controller describes its data processing principles below, presenting the expectations it has formulated and adheres to for itself as a data controller. Its data processing principles are in line with the applicable data protection laws, including in particular the following:
Service Provider, as data controller, details:
Service provider’s website: pengemedia.hu
Service provider’s name: Nagy László Ev.
Service provider’s registered office: 1139 Budapest, Teve utca 1/ D/2 6th floor 61. door;
Tax number: 66109158-1-41
Service provider’s contact details, regularly used electronic mail address for communication with users: hello@pengemedia.hu
Phone number: +36 20 40 44 280
Data protection registration number: NAIH-
2. DEFINITIONS
2.1. data subject: any natural person identified or identifiable – directly or indirectly – based on personal data;
2.2. personal data: data that can be linked to the data subject – in particular the data subject’s name, identification mark, and one or more characteristics of their physical, physiological, mental, economic, cultural or social identity – and the conclusion that can be drawn from it regarding the data subject;
2.3. consent: the voluntary and explicit expression of the data subject’s wish, based on adequate information, by which they give their unambiguous consent to the processing of their personal data – in full or for specific operations;
2.4. objection: the data subject’s statement by which they object to the processing of their personal data and request the termination of data processing or the deletion of the processed data;
2.5. data controller: the natural or legal person, or organization without legal personality, who or which, alone or jointly with others, determines the purpose of data processing, makes and executes decisions regarding data processing (including the tools used), or has them executed by a data processor commissioned by them;
2.6. data processing: any operation or set of operations performed on data, regardless of the procedure used, including in particular collection, recording, systematization, storage, alteration, use, retrieval, transmission, disclosure, alignment or combination, blocking, erasure and destruction, as well as preventing their further use, taking photographs, sound or video recordings, and recording physical characteristics suitable for identifying a person (e.g., fingerprint or palm print, DNA sample, iris image);
2.7. data transfer: making data accessible to a specific third party; 2.8. disclosure: making data accessible to anyone;
2.9. data erasure: making data unrecognisable in such a way that their restoration is no longer possible;
2.10. data marking: marking data with an identifier for the purpose of distinguishing them;
2.11. data blocking: marking data with an identifier for the purpose of permanently or temporarily restricting their further processing;
2.12. data destruction: the complete physical destruction of the data carrier containing the data;
2.13. data processing: performing technical tasks related to data processing operations, regardless of the method and tools used to perform the operations, and the location of the application, provided that the technical task is performed on the data;
2.14. data processor: the natural or legal person, or organization without legal personality, who or which, based on a contract concluded with the data controller – including contracts based on legal provisions – performs data processing;
2.15. third party: a natural or legal person, or organization without legal personality, who or which is not identical with the data subject, the data controller or the data processor;
2.16. third country: any state that is not an EEA state.
3. SCOPE OF PERSONAL DATA, PURPOSE AND LEGAL BASIS OF DATA PROCESSING
The data processing activities of the website operator are based on voluntary consent. In certain cases, however, the processing, storage, and transfer of a certain scope of data provided are made mandatory by law. The Service Provider draws the attention of data providers that if they do not provide their own personal data, it is the data provider’s duty to obtain the consent of the data subject.
4. NEWSLETTER
The purpose of data processing: sending email newsletters containing commercial advertisements to interested parties, providing information about current information, promotions, fulfilling orders, providing discounts, fulfilling price quote requests, documenting purchases and payments, fulfilling accounting obligations, customer contact, analyzing customer habits, providing more targeted service, direct marketing inquiries, providing information about current information and offers. The legal basis for data processing: the data subject’s voluntary consent and Section 6 (5) of the Grt. Scope of processed data: identification number, name, email address, IP address of the user’s computer, and consent to direct marketing inquiries. Duration of data processing: until the user withdraws their consent.
The purpose of data processing: fulfilling orders, providing discounts, fulfilling price quote requests, documenting purchases and payments, fulfilling accounting obligations, customer contact, analyzing customer habits, providing more targeted service, direct marketing inquiries, providing information about current information and offers.
5. DATA CONTROLLER’S CUSTOMER CORRESPONDENCE
If you have any questions or problems during the use of our services, you can contact the data controller using the contact details provided in this notice or on the website. The Data Controller treats incoming emails and messages sent via the forms on the websites confidentially, along with the sender’s name, email address, IP address of their computer, and other voluntarily provided personal data, and stores them for as long as it deems necessary for the retrievability of cases.
6. OTHER DATA PROCESSING
We will provide information about data processing not listed in this notice at the time of data collection. The data subject may request information about the processing of their personal data, and may request the rectification, or – with the exception of mandatory data processing – the erasure or blocking of their personal data in the manner indicated at the time of data collection, or using the contact details of the data controller. We inform our customers that the court, the prosecutor, the investigating authority, the misdemeanor authority, the administrative authority, the National Authority for Data Protection and Freedom of Information, or other bodies authorized by law may contact the data controller for the purpose of providing information, disclosing or transferring data, or making documents available. The Service Provider will only disclose personal data to the authorities – if the authority has specified the exact purpose and scope of the data – to the extent and in the amount strictly necessary to achieve the purpose of the request.
7. DATA OF DATA PROCESSORS, CONTACT DETAILS
Name: X-Page Kft. (www.xpage.hu) – Hosting provider
Registered office: 1139 Budapest, Országbíró utca 42.
Email address: info@xpage.hu
Name: Octonull Kft ., (www.billingo.hu) – Invoicing system
Registered office: 1085 Budapest, József körút 74. I. em. 6.
Email address: info@billingo.hu
By post: 8230 Balatonfüred, Jókai Mór utca 5.
The operator reserves the right to use additional data processors, about whom it will provide individual information at the latest at the start of data processing.
8. REMEDIES
Remedies and complaints can be made to the National Authority for Data Protection and Freedom of Information:
Name: National Authority for Data Protection and Freedom of Information
Registered office: 1125 Budapest, Szilágyi Erzsébet fasor 22/C.
Phone: 06 1 391 1400 Fax: 06 1 391 1410
Email: ugyfelszolgalat@naih.hu,
Website: http://www.naih.hu