Terms of purchase

General terms and conditions

Terms and Conditions

GENERAL TERMS AND CONDITIONS
(GTC)

Details of the website operator (hereinafter Seller):

Company name:                                             Naspolyafa Kft.
Headquarters:                                                2116 Zsámbok, Szent László utca 56.
Company registration number:                     13-09-153914
Register keeping body:                                  Commercial Court of the Budapest District
Tax number:                                                   23810350-2-13
Representative:                                              Managing Director Matthew Hayes
Phone number:                                              0670/614 0772
E-mail address:                                                          info@zsambokibiokert.hu

Details of the hosting provider:                    Name:                         Tárhelypark Kft. …………..
Place of business:       1132 Budapest, Victor Hugo utca 18.-22.
E-mail address:           info@tarhelypark.hu.
Phone number:           +3617004140 ………....

With respect to Seller, the Code of Conduct under the Act on the Prohibition of Unfair Commercial Practices against Consumers is not applicable. The data controller is a member of the Pest County and Érd County Municipal Chamber of Commerce and Industry.

Seller's website address:

www.zsambokibiokert.unas.hu

Availability of the General Terms and Conditions:

The Seller publishes the currently applicable General Terms and Conditions on its website and makes them available to its customers by e-mail.

Content of the General Terms and Conditions:

These General Terms and Conditions contain the rights and obligations of the Buyer using the commercial services provided by the Seller, and the terms and conditions of the agreement between the contracting parties. These terms and conditions constitute general terms and conditions pursuant to Section 5. §. (1) of Act CVIII of 2001 regarding certain issues of electronic commerce services and information society services. The relevant information and regulations with the provisions of Government Decree 45/2014. (II. 26.) on detailed rules for contracts between a consumer and a business are also applicable.

These General Terms and Conditions cover all sales and the use of services initiated by the Buyer when ordering from the Seller. During the purchase, the Buyer, if they wish to use the services of the Seller, are obliged to accept the provisions of these General Terms and Conditions, which can be done by confirming with the Seller. Upon acceptance of the provisions of the General Terms and Conditions, a contract in accordance with these General Terms and Conditions shall be concluded between the Seller and the Buyer. Certain provisions of these General Terms and Conditions apply only to Customers acting as Consumers.

Scope of the General Terms and Conditions:

These Terms and Conditions will enter into force on December 14, 2020, which coincident with the date of publication of the Terms and Conditions on the website. The provisions of the General Terms and Conditions shall apply to all Buyers and purchases from the date on which the General Terms and Conditions enter force.

Before placing the order, the Buyer declares that he/she is aware of the provisions of the up-to-date General Terms and Conditions, has read and understood the provisions thereof, acknowledges and expressly accepts them. By sending the order, the Buyer acknowledges that the applicable General Terms and Conditions are integral to the contract between the parties.

The Seller reserves the right to amend the provisions of these General Terms and Conditions. In case of modification, the General Terms and Conditions which are valid and in force at the time the order is sent will apply.

Purchase procedure, conclusion of contract:

The contract enters force when the Buyer orders the product, sending an order to the Seller (the Seller expressly accepts the Buyer's offer) and confirms it by sending an e-mail to the e-mail address provided by the Buyer, in compliance with data protection provisions. The Seller has the right to withdraw from the contract even after the confirmation e-mail has been received, if it is for reasons which could not have been foreseen (eg: the product is no longer distributed, significant shortage of goods, force majeure, illness, etc.). In case of withdrawal, the Seller is obliged to settle with the Buyer if money or goods have been transferred.

The products sold by the Seller are presented on the website www.zsambokibiokert.unas.hu. The Seller does not accept responsibility for any potential typing errors or incorrect data.

Categories are selected by clicking "Products" on the website. The Buyer selects the product category and product. The Buyer puts the product to be purchased in the "Cart", while indicating the quantity.

By clicking the "Cart" icon in the upper right corner of the website, it is possible to open the cart and view its contents, which include both the product number and quantity of the items selected. By leaving the shopping cart or clicking on the "Back" button, it is possible for the Customer to continue reviewing and selecting products for purchase from the website.

During the purchasing process, it is possible to view or modify the contents of the cart. If the basket does not contain the desired quantity, the Buyer can enter the number of the quantity to be ordered in the data entry field in the "Quantity" column and then press the "Change" button.

Once all the desired products have been added to the cart, the Buyer can initiate the ordering process by pressing the "Order" button.

The Buyer can choose to buy in the web store either after registration or without registering. After logging in (by entering an e-mail address and password), registered customers can view their previous orders, and the current status and condition of ongoing orders, and it will be easier for them to place another order, as they do not have to re-enter their details.

Buyers who have already registered can proceed by entering the required data (username, password).

If the Buyer wishes to register on the website, he/she selects the “Registration” option and fills out the registration page. If the Buyer does not wish to register, he/she selects the “purchase without registration” option and provides the necessary personal details to complete the order.

In the next window, the Buyer’s personal data (email address, telephone number, billing data) are entered.

If the billing and shipping details are different, then the "Shipping details are the same as billing information" box should be unchecked, and the shipping details must be provided.
The Buyer may then proceed by pressing the "Next" button.

The delivery and payment method will then be selected, after which the Buyer can proceed by again pressing the "Next" button.

The Buyer has the opportunity to write a comment next to the order, this can be entered in the box provided.

After reviewing the summary – providing that the Buyer finds everything satisfactory – the order can be sent by pressing the "Order" button. If the Buyer detects an error, pressing the back arrow will return the website the previous page, making it possible to implement the necessary changes.

The information provided on the website does not constitute an offer for the conclusion of a contract by the Seller. In the case of orders covered by these General Terms and Conditions, the Buyer qualifies as a bidder and the contract is concluded by the acceptance of the offer made by the Buyer through the website in accordance with the provisions of these General Terms and Conditions.

By pressing the "Order" button, the Buyer expressly acknowledges that the offer is considered to have been made, and this statement – in case of confirmation by the Seller in accordance with these General Terms and Conditions – entails an obligation to pay.

The receipt of the order by the Seller will be confirmed in the form of an automatic reply message. If necessary, the Seller's representative will contact the Buyer by phone, or in the form of an e-mail. The placing an electronic order on the website and the sending of an automatic confirmation, does not mean that the contract between the Buyer and the Seller has been concluded. The confirmation sent by e-mail only confirms the receipt of the order by the Seller.

The contract between the parties is concluded when the Seller declares that the Buyer's order is accepted. Contact by telephone or e-mail does not entail any additional costs for the Buyer: the cost is borne entirely by the Seller.

If the Buyer sends an order on the website of the web store and the Seller confirms the order by e-mail (explicitly accepting the Buyer's offer) a sales contract is concluded between the Buyer and the Seller. (If the e-mail confirming the receipt of the order is not received by the Customer within 48 hours, the Customer is released from the obligation to make an offer and is not obliged to purchase the ordered product.)

The Buyer accepts that a contract concluded in this way is not considered to be concluded in writing and is governed by the law of Hungary. The provisions of these General Terms and Conditions shall apply to the contract.

The contract is created in Hungarian, the webshop and the Seller store the order in electronic form. The contract is not registered in any other way, and so cannot be retrieved later.

It is also possible to place an order by e-mail with the Seller or through the ordering process on the public website. Details related to the products and the order will be agreed by e-mail, the price of the products and the deadline for fulfillment will also be communicated by the Seller to the Buyer by e-mail. If the Buyer accepts the Seller's offer, a contractual relationship will be established between the parties. Otherwise, the provisions of these General Terms and Conditions also apply to such orders.

Customer service:

The Seller will answer the Buyer's questions related to the order as specified in these General Terms and Conditions: between 8am and 5pm on working days.

Sales price:

The prices indicated in the online store and in the Seller's price list or in a separate offer are valid consumer prices, the currency of which is the Hungarian Forint, and include General Sales Tax. The delivery fee is not included in the price of the product. The delivery cost is always borne by the Buyer, unless the Seller provides other information.

The Seller reserves the right to change the price.
After the confirmation sent by the Seller, the final amount to be paid for the order does not change. However, if due to some technical error or spelling, an incorrect price differing significantly from the market price appears in the offer / price list / website, the Seller will contact the Buyer by phone (or e-mail) for consultation before the delivery of the ordered product. Such orders are not considered valid by the Seller, and the Seller shall not be liable for any resulting damages. The Seller will make every effort to accurately display product prices. If, despite all care, an incorrect price is indicated, the Seller shall not be obliged to sell the product at the incorrect price.

Opportunity to correcting data entry errors:

During the purchasing process, the Buyer has the opportunity to correct or delete data which has been entered. If the Buyer has already proceeded past the page on which the erroneous data was entered, but has not yet finalized the order, then it is advisable to click the back button on the browser until the desired page is displayed, where it is possible to make the change.

If the Buyer wishes to change the provided data after sending the order, the Seller may indicate this to the Seller using the contact details provided in these General Terms and Conditions.

By finalizing the order, the Buyer acknowledges that the Seller cannot be held liable for damages resulting from the Buyer's incorrect data entry or inaccurate data.

An inaccurate e-mail address provided during the order, or a lack of space caused by a full e-mail inbox, may impede confirmation, preventing the conclusion of the contract. In such cases, the Seller will try to contact the Buyer by other methods.

Terms of payment:

The Seller can be paid in advance by bank transfer or credit card, or by cash on delivery.

Advance payment: in this case, the Buyer transfers the value of the product to be purchased to the Seller's bank account. Upon receipt of the amount to the Seller's bank account, the Seller will arrange for the delivery / handover of the product.

Credit card payment (Borgun): During the purchase process on the website, the Buyer will be redirected to the secure page of Borgun, which can be used in Hungarian. The amount to be paid is transferred over from the web store, which can also be checked by the Buyer. The name on the card must be provided, as well as the card number and validity period, as well as the authentication CVV / CVC code. After entering this data and clicking on the validation button, the transaction will take place within a few seconds, the success of which will also be notified to the Customer. Credit cards suitable for payment in the Borgun system are Visa, Visa Electron, MasterCard and MasterCard Maestro.

The Seller declares that in the case of payment by credit card, it neither manages, collects or stores any card data required for the payment transaction, and does not have access to this data in any way. Otherwise, the handling of personal data is governed by the provisions of the Data Management Information.

The Seller shall not be liable for any errors that may occur during payment by credit card. When making a payment, the Buyer is responsible for ensuring that he/she is authorized to use the payment method and instrument provided, and that the payment information provided is true and accurate.

Payment by credit card (Paylike): During the purchase process on the website, the Buyer will be redirected to the secure page of Paylike, which can be used in Hungarian. The amount to be paid is transferred over from the web store, which can also be checked by the Buyer. The name on the card must be provided, as well as the card number and validity period, as well as the authentication CVV / CVC code. After entering this data and clicking on the validation button, the transaction will take place within a few seconds, the success of which will also be notified to the Customer. Credit cards suitable for payment in the Paylike system are Visa, Visa Electron, MasterCard and MasterCard Maestro.

Payment by cash on delivery: Payment for the product can be made by cash on delivery, in which case the Buyer is obliged to pay the courier the final amount for the order in cash.

The Seller, in compliance with its legal obligation, draws the Buyer's attention to the fact that making a contractual statement (ordering a product) entails a payment obligation to be fulfilled in favor of the Seller.

The Buyer agrees to receive the invoice issued for the value of the ordered product in an exclusively electronic form, to the e-mail address provided by him/her. The Buyer must ensure that the invoice can be delivered electronically and that technical settings (e.g. firewalls) do not prevent this. In case of a change of electronic mail address, the Buyer is obliged to notify the Seller by e-mail.

Terms of delivery:

The products ordered from the webshop operated by the Seller are delivered to the Buyer by Aranykerék Futárszolgáló Kft.

In case of home delivery, the courier will deliver the package to the address provided by the Buyer. After the courier hands over the product to the Buyer, the Buyer is obliged to make sure that the product is intact. If the product arrives damaged, it should be recorded in the courier service employee’s notebook. The Seller will only accept complaints of this sort in this form.

The delivery cost is always borne by the Buyer, who is obliged to pay the delivery fee.

In addition, it is possible to pick up the products in person at a pre-arranged time and at designated locations. In the case of personal collection, the product will only be handed over to the Buyer if it has been paid for.

Fulfilment Time

The date of fulfilment is the date of delivery of the ordered product to the Buyer. The ordered products will be delivered by the Seller within 8 days at the latest.
In case of high demand, the delivery of the ordered product may take longer.

Additional information and liability related to the products sold by the Seller:

The Seller shall not be liable for any diseases, health problems or damages resulting from improper use of the products it sells, or for use beyond the warranty period.

The Seller does not enter into contracts with minors. By accepting these General Terms and Conditions, the Buyer declares that he/she is 18 years of age at the time of concluding the contract.

The Buyer acknowledges that it is not possible to refund the purchase price of the ordered product – in the case of a perishable or short-lived product – within 48 hours prior to the date of fulfilment. Withdrawal from the order can only be exercised beforehand.

If the Seller is unable to fulfill the order for any reason (e.g. force majeure, lack of goods, illness, etc.):

the order is replaced with a similar product (for the same or greater value) instead of the product ordered, or
credits the Buyer the price of the product, which amount can be used in a later purchase

Data protection:

The Seller handles personal data only in accordance with the provisions of the applicable legislation, in strict compliance with the provisions of data management and data protection provisions, taking into account the principles of legality, fair procedure and transparency, purposefulness, data saving, accuracy and limited storage.

The Seller shall take all technical and organizational measures to ensure that the personal data of the Buyer is secure in accordance with the European Parliament and Council (EU) 2016/679. as required by this Regulation.

The Data Management Information on the handling of personal data is also available on the Seller's website and at its registered office.

Right of withdrawal:

In the case of off-premises and third-party contracts, the Buyer (Consumer) has the right to withdraw without justification within 14 calendar days from the date of receipt of the product. The Buyer may also exercise the right of withdrawal in the period between the date of concluding the contract and the receipt of the product. In the case of a written withdrawal, it is sufficient to send the statement of withdrawal within 14 calendar days. The Buyer may exercise this right by making a clear statement to this effect or by means of the model statement of withdrawal / termination contained in Annex 2 to Government Decree 45/2014. (II. 26.).

Sample statement for withdrawal

Addressee: Naspolyafa Kft.

Address: 2116 Zsámbok, Szent László utca 56.

I, the undersigned ………………. declare that I exercise / exercise my right of withdrawal / termination in respect of a contract for the sale of the following product (s) or the provision of the following service:

Date of conclusion of contract / date of receipt:

Name of consumer (s):

Address of consumer (s):

Please return the purchase price to the following bank account number (fill in if the purchase price is to be repaid by bank transfer):

Signature of consumer (s): (paper request only)

Dated:

The Buyer may send the statement to the Seller by e-mail (info@zsambokibiokert.hu) or in the form of a postal letter addressed to its registered office (Naspolyafa Kft. 2116 Zsámbok, Szent László utca 56.). The deadline described above shall be deemed fulfilled if the Buyer notifies his intention to withdraw no later than the 14th day from the receipt of the product. The burden of proof in this regard shall be on the Buyer. If the Buyer withdraws from the contract in this way, the Seller shall reimburse the full amount paid by the Buyer as consideration, including the costs incurred in connection with the performance, immediately, but no later than within 14 calendar days of becoming aware of the withdrawal. The Seller shall refund the amount returned to the Buyer in the same way as the payment method used by the Buyer. With the express consent of the Buyer, the Seller may use another method of payment for the refund, but the Buyer shall not be charged any additional fees as a result.

If the Buyer has explicitly requested another method of delivery, rather than the least expensive method of delivery, the Seller shall not be obliged to reimburse the resulting additional cost.

The Seller is entitled to withhold the consideration for the product and the costs incurred during the purchase until the Buyer has returned the product or has not supplied credit to support that it has been returned, the earlier of the two dates being taken into account. The Buyer must return the purchased product to the Seller in an undamaged and complete condition without undue delay, but no later than within 14 calendar days from the notification of the intention to withdraw. The deadline is considered to have been met if the product is sent before the 14-day deadline. The direct cost of returning the product is borne by the Buyer. The Seller is not obliged to accept the product returned by cash on delivery or by post, as the shipping costs related to the return are borne by the Buyer.

The Buyer shall only be liable for the depreciation of the product if it has occurred due to use in excess of that necessary to determine the nature, properties and operation of the product.

The above right of withdrawal does not apply to the Buyer:

in the case of a perishable or short-lived product,
or in the case of a sealed product which, for reasons of health or hygiene, cannot be returned after opening on delivery,
in respect of a product which, by its nature, is inseparably mixed with other products after delivery.

Warranty:

The Seller accepts warranty obligations for products sold by it in the event of a defect in the product.

A product is defective if it does not meet the quality requirements set out in the contract or in law at the time of fulfilment. The Seller shall not be deemed to be in the wrong if the Buyer was aware of the defect at the time of concluding the contract or should have known the defect at the time of concluding the contract.

In the event of a defect in the purchased product, the Buyer may assert a warranty claim for supplies or products, or in certain cases a warranty claim. The procedure is governed by the provisions of Decree 19/2014. (IV. 29.) NGM.

Supplies warranty:

In which case can the Buyer exercise warranty right on purchases?

In the event of incomplete fulfilment by the Seller, the Buyer may assert a warranty claim against the Seller in accordance with the rules of the Civil Code.

What rights does the Buyer have based on the supply warranty?

The Buyer may choose to make the following warranty claims: he/she may request repair or replacement, unless it is impossible to fulfill the option chosen by the Buyer, or would result in a disproportionate additional cost to the Seller compared to the fulfillment of an alternative demand. If the Buyer has not requested or could not request repair or replacement, he/she may request a proportionate delivery of the consideration, or the Buyer may correct the defect at the Seller's expense or have it repaired or, as a measure of last resort, withdraw from the contract. The Buyer may transfer his/her chosen right of warranty to another, but the cost of the transfer shall be borne by the Buyer, unless it was justified or given by the Seller.

What is the deadline for the Buyer's warranty claim?
The Buyer is obliged to report any defect immediately upon discovery, but within no later than two months of the discovery of the defect. However, after the expiration of the two-year statutory limit from the performance of the contract, the Buyer may no longer exercise his/her warranty rights. In the case of a used item, this period is 1 year.

Against whom can the Buyer's warranty claim be asserted?

The Buyer may assert his/her warranty claim against the Seller.

What are the additional conditions for enforcing the Buyer's warranty rights?

Within 6 months of fulfilment of the contract, there are no other conditions for the validation of the Buyer’s warranty claim in addition to the notification of the error, if the Buyer can prove that the product or service was provided by the Seller. However, after the expiration of six months from fulfilment, the Buyer is obliged to prove that the defect recognized by the Buyer already existed at the time of fulfilment.

Product Warranty

In which instances can the Buyer exercise product warranty rights?

In the event of a defect in a movable thing (product), the Buyer may, at his/her choice, assert the right of warranty or make a claim for product warranty.

What rights does the Buyer have based on his/her product warranty claim?

As a product warranty claim, the Buyer may only request the repair or replacement of the defective product.

In which circumstances is the product considered defective?

A product is defective if it does not meet the quality requirements in force at the time of placing on the market or if it does not have the characteristics specified by the manufacturer.

What is the deadline for the Buyer to enforce the product warranty claim?

The Buyer may assert the product warranty claim within two years from the time when the product was placed on the market by the manufacturer. Upon expiry of this period, this right shall be lost.

Against whom and under what additional circumstances may the Buyer assert a product warranty claim?

The Buyer may only exercise a product warranty claim against the manufacturer or distributor of a movable item. The defect of the product must be proven by the Buyer in the event of a product warranty claim.

In which circumstances is the manufacturer (distributor) released from the product warranty obligation?

The manufacturer (distributor) is only released from the product warranty obligation if it can be proven that:

the product was not manufactured or marketed within its regular business activities, or
the defect could not have been recognized through scientific and technical knowledge available at the time the product was placed on the market, or
the defect of the product resulted from the application of legislation or a mandatory official regulation.

It is sufficient for the manufacturer (distributor) to prove one reason for the exemption. The Buyer cannot enforce a warranty claim and a product warranty claim at the same time, in parallel with each other, based on the same defect. However, in the event that a product warranty claim is successfully concluded, the Buyer may enforce his/her warranty claim against the manufacturer for the replaced product or repaired part.

Procedure for making a warranty claim:

If the Buyer wishes to enforce the warranty right in relation to the product sold by the Seller, he/she can do so by presenting a document (invoice) (or a copy thereof) certifying the fact of concluding the contract. Claims can be made in person or in writing (by post or e-mail).

Claims made in person:

The Buyer may personally make his/her warranty claim at the Seller's registered address (Naspolyafa Kft. 2116 Zsámbok, Szent László utca 56.).

The Seller shall keep a record of the claim, listing:

the name and address of the Buyer,
the name of the product, the purchase price,
the date of purchase,
the date on which the defect was reported,
a description of the defect,
the claim asserted by the Buyer,
the method for resolving the complaint.

If the method for resolving the complaint differs from that requested by the Buyer, the Seller shall record the reasons therefore in a written note. A copy of the note shall be provided by the Seller to the Buyer.

Claims made in writing:

The Buyer may claim his/her warranty or guarantee rights by sending a letter to the Seller by post (Naspolyafa Kft. 2116 Zsámbok, Szent László utca 56.) or by e-mail

(info@zsambokibiokert.hu).

The letter must include:

the name and address of the Buyer,
the name of the product, the purchase price,
the date of purchase,
the date on which the defect was reported,
a description of the defect,
the claim asserted by the Buyer.

If the Seller is unable to declare the feasibility of the Buyer's request at the time of its notification, it is obliged to notify the Buyer of its position within 3 working days at the latest. The Seller will endeavor to make any repairs or supply replacements within a maximum of 15 days.

The product will be accepted for repair by the Seller against a receipt. The receipt shall indicate the name and address of the Buyer, the data necessary for the identification of the product, the time of receipt of the product and the date of receipt of the repaired product.

Complaint handling related to the activities of the Seller:

If the Buyer is not satisfied with the product sold by the Seller, or with the Seller's service and would like to file a complaint with the Seller, orally or in writing, this can be done by post (Naspolyafa Kft. 2116 Zsámbok, Szent László utca 56.) or in the form of an e-mail (info@zsambokibiokert.hu).

The Seller shall investigate all complaints. The Seller shall immediately investigate the oral complaint and remedy it if necessary. If the Buyer does not agree with the handling of the complaint, or it is not possible to investigate the complaint immediately, the Seller shall immediately take note of the complaint and its position and, in the case of an oral complaint, provide a copy to the Buyer on the spot.

In the case of an oral complaint communicated by telephone or other electronic communication service, written acknowledgement must be sent to the Buyer at the latest within 30 days – in accordance with the regulations for the response to the written complaint – at the same time as the substantive response.

The Seller shall respond to the written complaint in writing, judging its merits and taking action to communicate it, within thirty days of its receipt, unless otherwise provided by a directly applicable legal act of the European Union. A shorter or a longer deadline may be legally decreed. The Seller is obliged to justify its position rejecting the complaint. An oral complaint communicated by telephone or electronic communication service must be provided with a unique identification number by the Seller.

The record of the complaint must include the following:

the name and address of the Buyer,
the place, time and manner in which the complaint was lodged,
a detailed description of the Customer's complaint, a list of written statements, documents and other evidence presented by the Customer,
a statement by the Seller of its position on the Buyer's complaint, if an immediate investigation of the complaint is possible.
the signature of the person who recorded this information and, with the exception of an oral complaint communicated by telephone or by electronic means, by the Buyer,
the place and time where the information was recorded,
in the case of an oral complaint communicated by telephone or other electronic communications service, the unique identification number of the complaint.

The Seller is obliged to keep a record of the complaint and a copy of the response for 5 years, and to present it to the inspection authorities upon request.

If the complaint is rejected, the Seller is obliged to inform the Buyer in writing which Authority or Conciliation Board he/she may initiate further procedures with his/her complaint. The information shall also include the registered office, telephone and Internet contact details and mailing address of the competent Authority or Conciliation Body of the Buyer’ registered place of residence or domicile. The information shall also make clear that the Seller may use the Conciliation Board procedure to settle the consumer dispute.

Conciliation Board, Consumer Protection:

The Seller hereby informs Buyers that if the Buyer does not agree with the Seller's response to his/her complaint, he/she may contact the following authorities:

To initiate Conciliation Board proceedings, the Buyer may apply to the Conciliation Board of the Buyer's registered domicile or to the Conciliation Board of the Seller's registered place of business.

Conciliation Board of the Seller's registered place of business:

Pest County Conciliation Board
Address: 1119 Budapest, Etele út 59-61. II. floor 240.
Mailing address: 1364 Budapest, Pf .: 81
Phone number: 06-1-269-0703
Fax: 06-1-474-7921
E-mail: pmbekelteto@pmkik.hu

Contact details of each regionally competent Conciliation Body:

Baranya County Conciliation Board

Address: 7625 Pécs, Majorossy I. u. 36.

Telephone Number: 06-72-507-154

Fax: 06-72-507-152

E-mail: abeck@pbkik.hu; mbonyar@pbkik.hu

Bács-Kiskun County Conciliation Board

Address: 6000 Kecskemét, Árpád krt. 4.

Telephone Number: 06-76-501-500; 06-76-501-525, 06-76-501-523

Fax: 06-76-501-538

E-mail: bekeltetes@bacsbekeltetes.hu; mariann.matyus@bkmkik.hu

Website: www.bacsbekeltetes.hu

Békés County Conciliation Board

Address: 5600 Békéscsaba, Penza ltp. 5.

Telephone Number: 06-66-324-976

Fax: 06-66-324-976

E-mail: eva.toth@bmkik.hu

Borsod-Abaúj-Zemplén County Conciliation Board

Address: 3525 Miskolc, Szentpáli u. 1.

Telephone Number:06-46-501-091;06-46-501-870

Fax: 06-46-501-099

E-mail: bekeltetes@bokik.hu

Budapest Conciliation Board

Address: 1016 Budapest, Krisztina krt. 99. III. em. 310.

Telephone Number: 06-1-488-2131

Fax: 06-1-488-2186

E-mail: bekelteto.testulet@bkik.hu

Csongrád County Conciliation Board

Address: 6721 Szeged, Párizsi krt. 8-12.

Telephone Number: 06-62-554-250/118

Fax: 06-62-426-149

E-mail: bekelteto.testulet@csmkik.hu

Fejér County Conciliation Board

Address: 8000 Székesfehérvár, Hosszúsétatér 4-6.

Telephone Number:06-22-510-310

Fax: 06-22-510-312

E-mail: fmkik@fmkik.hu

Győr-Moson-Sopron County Conciliation Board

Address: 9021 Győr, Szent István út 10/a.

Telephone Number: 06-96-520-217

Fax: 06-96-520-218

E-mail: bekeltetotestulet@gymskik.hu

Hajdú-Bihar County Conciliation Board

Address: 4025 Debrecen, Vörösmarty u. 13-15.

Telephone Number: 06-52-500-710

Fax: 06-52-500-720

E-mail: korosi.vanda@hbkik.hu

Heves County Conciliation Board

Address: 3300 Eger, Faiskola út 15.

Telephone Number: 06-36-429-612

Fax: 06-36-323-615

E-mail: hkik@hkik.hu

Jász-Nagykun-Szolnok County Conciliation Board

Address: 5000 Szolnok, Verseghy park 8. III. emelet 305-306.

Telephone Number: 06-56-510-621, 06-20-373-2570

Fax: 06-56-510-628

E-mail: bekeltetotestulet@jnszmkik.hu

Komárom-Esztergom County Conciliation Board

Address: 2800 Tatabánya, Fő tér 36.

Telephone Number: 06-34-513-027

Fax: 06-34-316-259

E-mail: szilvi@kemkik.hu

Nógrád County Conciliation Board

Address: 3100 Salgótarján, Alkotmány út 9/A.

Telephone Number: 06-32-520-860

Fax: 06-32-520-862

E-mail: nkik@nkik.hu

Pest County Conciliation Board

Address: 1119 Budapest, Etele út 59-61. II. emelet 240.

Levelezési Address: 1364 Budapest, Pf.: 81

Telephone Number: 06-1-269-0703

Fax: 06-1-474-7921

E-mail: pmbekelteto@pmkik.hu

Somogy County Conciliation Board

Address: 7400 Kaposvár, Anna u.6.

Telephone Number: 06-82-501-026

Fax: 06-82-501-046

E-mail: skik@skik.hu

Szabolcs-Szatmár-Bereg County Conciliation Board

Address: 4400 Nyíregyháza, Széchenyi u. 2.

Telephone Number: 06-42-311-544

Fax: 06-42-311-750

E-mail: bekelteto@szabkam.hu

Tolna County Conciliation Board

Address: 7100 Szekszárd, Arany J. u. 23-25. III. emelet

Telephone Number: 06-74-411-661

Fax: 06-74-411-456

E-mail: kamara@tmkik.hu

Vas County Conciliation Board

Address: 9700 Szombathely, Honvéd tér 2.

Telephone Number: 06-94-312-356

Fax: 06-94-316-936

E-mail: vmkik@vmkik.hu

Veszprém County Conciliation Board

Address: 8200 Veszprém, Radnóti tér 1. földszint 116.

Telephone Number: 06-88-429-008

Fax: 06-88-412-150

E-mail: bekelteto@veszpremikamara.hu

Zala County Conciliation Board

Address: 8900 Zalaegerszeg, Petőfi u. 24.

Telephone Number: 06-92-550-513

Fax: 06-92-550-525

E-mail: zmbekelteto@zmkik.hu

The Conciliation Board is an independent body operating alongside the county chambers of commerce and industry and the Budapest Chamber of Commerce and Industry. The purpose of their establishment was to attempt to resolve disputes between the Buyer and the Seller out of court, primarily to establish an agreement between the two parties and thus to facilitate the enforcement of consumer rights quickly, easily and efficiently.

The condition for contacting the Conciliation Board is that the Buyer attempts to settle the dispute directly with the Seller. The procedure of the Conciliation Board is free of charge, the Buyer can only incur a payment obligation if the Board decides to the detriment of the Buyer.

The proceedings of the Conciliation Board shall be initiated at the request of the Buyer. The request shall be made in writing to the Chair of the Conciliation Body: the written requirement may be made by letter, telegram, telegraph or fax, as well as by any other means which allows the recipient to store the data addressed to him permanently for a period appropriate to the purpose of the data, and to display the stored data in an unchanged form and content.

The application must include:

the name and registered place of residence or domicile of the Buyer,
the name and registered place of business of the Seller,
the designation of the Authority requested in place of the competent Conciliation Body,
a brief outline of the Buyer's position, the supporting facts and their evidence,
a statement by the Buyer that the Buyer has made a direct attempt to settle the dispute with the Seller,
a statement by the Buyer that no proceedings have been initiated by another Conciliation Body in the matter, no mediation proceedings have been initiated, no claim has been filed or no application has been made for the issuance of a payment order,
a motion for a decision by the Authority,
the signature of the Buyer.

The application must be accompanied by the document or a copy thereof (extract) to which the Buyer refers as evidence, in particular the Seller's written statement rejecting the complaint, failing which other written evidence available to the Buyer showing the attempt at resolution.

If the Buyer acts through a proxy, the proxy must be attached to the application.

If the Buyer perceives a violation of consumer rights, he/she is entitled to file a complaint with the competent Consumer Protection Authority, depending upon his/her place of residence. Following the assessment of the complaint, the Authority shall decide on the conduct of the consumer protection proceedings. Within consumer protection, first-level official tasks are performed by the competent district offices, according to the consumer's place of residence. The list of these offices can be found here: http://jarasinfo.gov.hu/

The Buyer is entitled to enforce a claim arising from a consumer dispute in a court of law, within the framework of civil proceedings pursuant to Act V of 2013 on the Civil Code and Act CXXX of 2016 within the Code of Civil Procedure, in accordance with the provisions of this Act.

Miscellaneous and final provisions:

Should a binding legal provision or court decision restrict or invalidate any provision of these General Terms and Conditions, it shall not affect the validity of the other provisions of the General Terms and Conditions.

With regard to issues not regulated in these General Terms and Conditions, the Hungarian Civil Code (Act V. of 2013) and other relevant legal provisions shall apply.

Primary relevant legislation:

The contract concluded between the parties is governed, in particular, by the following legislation:

1997 CLV. Consumer Protection Act;
Act CVIII. of 2001, governing certain aspects of electronic commerce and information society services;
Act V. of 2013 on the Civil Code;
Government Decree 45/2014 (II.26) on the detailed rules of contract between a consumer and a business;
- NGM Decree 19/2014 (IV. 29.) on the procedural rules for handling warranty and guarantee claims for items sold under contract between a consumer and a business.

These General Terms and Conditions shall enter into force on December 14, 2020 and shall apply to orders and contracts entered into thereafter.

Data Management

DATA MANAGEMENT INFORMATION

NASPOLYAFA KFT.

VALID

FROM 14 DECEMBER 2020

Data controller's data:

Company name: Naspolyafa Kft.

Seat: 2116 Zsámbok, Szent László utca 56.

Company registration number: 13-09-153914

Tax number: 23810350-2-13

Representative: Matthew Hayes Managing Director

Phone number: 0630/0723303

E-mail address: info@zsambokibiokert.hu

The purpose of this Privacy Notice is to:

The controller acknowledges that it is bound by the contents of this legal notice. This Privacy Notice is intended to inform your customers, partners and clients about the processing of their personal data.

The data controller shall process personal data only in accordance with the provisions of applicable law and in strict compliance with the provisions on data management and data protection, taking into account the principles of lawfulness, fairness and transparency, purpose limitation, data minimisation, accuracy and limited storage.

The data controller shall take all technical and organisational measures to ensure that the personal data of its partners are processed in a secure manner as required by Regulation (EU) 2016/679 of the European Parliament and of the Council.

The data controller has adapted its day-to-day activities, developed its rules, records and standard documents in line with the above.

The privacy policy relating to the data processing of the controller is permanently available at the controller's headquarters and on its website. The controller reserves the right to change this policy at any time. It will of course inform its audience of any changes in due time.

The data controller is committed to protecting the personal data of its customers and partners, and attaches great importance to respecting the right of customers to information self-determination. The data controller treats personal data confidentially and takes all security, technical and organisational measures to guarantee the security of the data. The Data Controller describes its data management practices below.

The personal, material and temporal scope of the Privacy Notice:

The personal scope of this Privacy Notice extends to the controller and to the natural persons whose data are included in the processing covered by this Notice, as well as to persons whose rights or legitimate interests are affected by the processing.

The scope of this Notice covers all processing in the course of the controller's activities, except for so-called internal processing (e.g. in relation to employees), which is regulated in the controller's Privacy Policy.

This Policy shall enter into force on the date of approval and shall remain in force indefinitely until further notice.

Important definitions:

Personal data: any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Special categories of personal data: any data that fall within special categories of personal data, namely personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, genetic data, biometric data revealing the identity of natural persons, health data and personal data concerning the sex life or sexual orientation of natural persons.

Data processing: any operation or set of operations which is performed upon personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure, transmission, dissemination or otherwise making available, alignment or combination, restriction or destruction.

Controller: a natural or legal person, public authority, agency or any other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.

Processor: a natural or legal person, public authority, agency or any other body which processes personal data on behalf of the controller.

Joint controllers: where the purposes and means of processing are jointly determined by two or more controllers, they are considered to be joint controllers.

Third party: a natural or legal person, public authority, agency or any other body other than the data subject, the controller, the processor or the persons who, under the direct authority of the controller or processor, are authorised to process personal data.

Consent of the data subject: a voluntary, specific, informed and unambiguous indication of the data subject's wishes by which he or she signifies his or her agreement to the processing of personal data concerning him or her by means of a statement or an unambiguous act of affirmation.

Data breach: a breach of security that results in the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.

Lawful processing by the controller:

Personal data are processed by the controller only in the following cases:

where the data subject has given his or her consent to the processing of his or her personal data for one or more specific purposes,
processing is necessary for the performance of a contract to which the data subject is a party,
processing is necessary for compliance with a legal obligation to which the controller is subject,
processing is necessary for the protection of the vital interests of the data subject or of another natural person,
processing is necessary for the purposes of the legitimate interests pursued by the controller or a third party.

The controller examines the lawfulness of data processing at all stages of its activities, and only processes data for which it can justify the purpose and legal basis. In the event that the conditions of a legal basis cease to apply, the processing may only be resumed if the controller can demonstrate an adequate alternative legal basis.

As a general rule, the way of proving the legal basis is in writing, but even in the case of a legal basis created by implied conduct, it must be examined whether it can be clearly proved ex post. In case of doubt, for reasons of reasonableness and economy, written confirmation of the imputability should be sought.

In the case of consent-based processing, the data subject gives his or her written consent to the processing of his or her personal data. Consent is not formally required, but subsequent evidence requires written consent on paper or in electronic form.

Processing based on a legal basis to fulfil a legal obligation is independent of the data subject's consent, as the processing is defined by law.

Irrespective of the mandatory nature of the processing, the private individual concerned must be informed before the processing starts that the processing is mandatory and cannot be avoided, and must be provided with clear and detailed information on all relevant facts concerning the processing of his or her data before the processing starts.

According to the GDPR (General Data Protection Regulation), personal data may also be processed if the processing is necessary for the performance of a contract to which the individual concerned is a party or if the processing is necessary for the purposes of taking steps at the request of the data subject prior to entering into a contract. The controller may process personal data for the purposes of the conclusion, performance or termination of the contract on the basis of the legal basis for performance of the contract.

Processing of personal data by the controller:

The data controller is engaged in the retail sale of fruit and vegetables. It sells its products through its webshop, fairs, markets and shopping communities, and also delivers them to and from its premises. In the course of these activities, personal data of natural persons are processed. It carries out the following data processing activities:

The data controller receives orders for the sale of the products it markets primarily through its website (zsambokibiokert.unas.hu). Customers may be both individuals and legal entities. The customer may choose to purchase from the online store after registration or without registration. Once registered, customers can view their previous orders (by entering their e-mail address and password), the status of their current orders, their current orders and it is easier for them to place a new order without having to re-enter their details. Both during registration and in the case of orders without registration, the name of the customer (including the name of the contact person in the case of legal entities), address, e-mail address, telephone number, tax number are requested by the data controller. The legal basis for the processing of personal data is the performance of contractual obligations (Article 6(1)(b) of the General Data Protection Regulation). In the case of a legal person, the personal data of the contact person are processed on the basis of the consent of the data subject (Article 6(1)(a) of the General Data Protection Regulation). The controller issues a receipt or invoice for the value of the products it has distributed. The receipt does not contain personal data. The invoice will contain the name, address and possibly the tax number of the data subject. The issuing of the invoice is a statutory obligation of the controller. The legal basis for the processing of personal data on the invoice is therefore the fulfilment of a legal obligation (Article 6(1)(c) of the General Data Protection Regulation). The personal data on the invoice are stored by the controller for 8 years in compliance with the retention obligation laid down in Article 169 of the Accounting Act.

The data controller also sells its products at fairs and markets. In such cases, the customer indicates his/her intention to purchase and selects the product he/she wishes to buy. The data controller issues a receipt or invoice for the value of the product. The receipt does not contain any personal data. The invoice contains the name, address and possibly the tax number of the buyer. The issuing of the invoice is a legal obligation of the controller. The legal basis for the processing of personal data is the fulfilment of a legal obligation (Article 6(1)(c) of the General Data Protection Regulation). The personal data on the invoice are stored by the controller for 8 years in compliance with the retention obligation laid down in Article 169 of the Accounting Act.

In the performance of its tasks, the data controller may process the e-mail addresses and telephone numbers of its partners and customers, in order to fulfil its contractual obligations (Article 6(1)(b) of the General Data Protection Regulation) or on the basis of their individual consent (Article 6(1)(a) of the General Data Protection Regulation).

The controller may also have contractual relationships with subcontractors, suppliers and service providers in the course of its work, which also provide a basis for the processing of personal data. In this case, the legal basis for the processing of personal data is (in the case of an individual or sole trader) the performance of a contractual obligation (Article 6(1)(b) GDPR), and in the case of personal data of a contact of a legal person, the explicit, prior informed consent of the data subject (Article 6(1)(a) GDPR).

The data controller operates the websites zsambokibiokert.hu, www.zsambokibiokert.unas.hu. The legal basis for the processing is the consent of the data subject (Article 6(1)(a) of the General Data Protection Regulation).

On the website zsambokibiokert.unas.hu, the visitor of the site has the possibility to contact the data controller by means of a contact form. In the form, the name, e-mail address and telephone number of the interested party must be provided. The purpose of the processing of personal data is to contact the visitor of the site and the person interested in the products of the controller. If no order is placed after contacting the data controller, the personal data of the interested party will be deleted immediately, but within 3 working days at the latest. The controller processes the personal data for the purpose of concluding a contract on this legal basis (Article 6(1)(b) of the General Data Protection Regulation). By filling in the form, the data subject declares that he or she has read the controller's Privacy Policy and acknowledges the contents thereof.

The data controller publishes its blog posts on the website zsambokibiokert.hu. After logging in, you can add comments to the entries by entering your name and e-mail address. By posting a comment and entering personal data, the data subject gives his/her consent to the processing of his/her personal data and to its publication on the website by ticking the box provided. The legal basis for the processing of personal data is the data subject's informed consent (Article 6(1)(a) of the General Data Protection Regulation). The data subject declares that he or she has read and understood the Controller's Privacy Notice and has taken note of the information contained therein. The controller shall not use the personal data for any other purpose and shall not make them available to third parties. The controller shall process the personal data thus recorded until the data subject's consent is withdrawn. If the data subject withdraws his or her consent, the controller shall delete the recorded personal data from its system without undue delay and at the latest within 3 working days.

The data controller also offers the possibility to subscribe to a newsletter by providing your name and e-mail address. By subscribing to the newsletter, the data subject declares that he/she has read the Data Controller's Privacy Policy and gives his/her consent to the processing of his/her personal data for marketing purposes. The data subject shall have the rights set out in the Data Protection Notice and shall be able to exercise those rights in the manner and at the places indicated therein. Accordingly, the legal basis for the processing of personal data in the course of sending the newsletter is the explicit and written informed consent of the subscriber (Article 6(1)(a) of the General Data Protection Regulation).

The data controller also operates social networking sites, where personal data is also processed. The controller also promotes its activities and the products it sells on social networking sites. The legal basis for the processing is the data subject's consent (Article 6(1)(a) of the General Data Protection Regulation).

The data controller occasionally takes photographs or videos of its customers, partners and clients. If the recording shows a recognizable individual, the recording is made and used - in connection with the controller's websites, social networking sites or other appearances - only with the prior, informed, written and voluntary consent of the data subject (or, in the case of a person under 18 years of age, the legal representative). The legal basis for processing is the consent of the data subject (Article 6(1)(a) of the General Data Protection Regulation).

The purpose of data processing in the course of complaint handling in relation to the activities of the data controller is to enable the communication of the complaint, to identify the data subject and his/her complaint, to record the data required by law to be recorded, to investigate the complaint and to maintain contact in connection with its resolution.

In case of a complaint, the processing of the complaint and thus of personal data is mandatory under Act CLV of 1997 on Consumer Protection. The legal basis for the processing of personal data is therefore the fulfilment of a legal obligation (Article 6(1)(c) of the General Data Protection Regulation).

The data controller shall keep records of the processing described above. The register shall also include the time limits for the erasure of personal data. The register is annexed to this Privacy Notice.

Processors connected to the controller:

Where the processing is carried out on behalf of the controller, the controller may only use processors that offer adequate guarantees of compliance with the requirements of the General Data Protection Regulation or implement appropriate technical and organisational measures to ensure the protection of the rights of data subjects.

The Data Controller hereby declares that in the course of its work, it will only deal with data processors that have adequate guarantees of compliance with the GDPR Regulation and that they implement appropriate technical and organisational measures to ensure the protection of the rights of data subjects. The relevant declarations of the data processors are available to you.

By reading and acknowledging this Privacy Notice, data subjects accept that the controller transfers their personal data to the processors and joint controllers listed below.

The data processor is the accounting firm employed by the data controller:
Kontratax Ltd.
2116 Zsámbok, Szent Imre utca 4.
iroda@kontratax.hu; konyveles@kontratax.hu

The data controller's partner for issuing invoices:
hu Ltd.
1031 Budapest, Záhony u. 7.
info@szamlazz.hu

For payment by credit card, the data controller is the data processor, who is also the independent data controller:
B-Payment Zrt.
1132 Budapest, Váci út 4.
Telephone: 061/79 36 776
info@b-payment.hu

The legal basis for the processing of personal data is the performance of the contract and, thereafter, the legal obligation to retain the data.

For payment by credit card, the data controller is the data processor, who is also the independent data controller:
Paylike .
O. Pedersensvej 14. Aarhus, Denmark
Phone: 061/5009480
hello@paylike.hu

The legal basis for the processing of personal data is the performance of the contract and, thereafter, the legal obligation to retain the data.

The courier company employed by the controller is the data processor (and also the independent data controller in the performance of its tasks):
Aranykerék Courier Service Ltd.
1071 Budapest Dembinszky utca 32.
iroda@aranykerek.hu

The courier company employed by the controller is the data processor (and also the independent data controller in the performance of its tasks):
Gólya Courier Service Ltd.
1089 Budapest Orczy út 46.-48.
golyafutarbp@gmail.com

The company that hosts the websites of the data controller is also a data processor:
Tárhelypark Kft.
1126 Budapest, Tartsay Vilmos utca 14.
info@tarhelypark.hu
+3617004140

The server of the controller's mail system is also a data processor:
cPanel L.L.C.
2550 North Loop W. Suite 4006 Houston TX 77092 USA
+1 713 529 0800

Additional data processor in connection with the sending of the newsletter:
The Rocket Science Group, LLC
675 Ponce de Leon Ave NE
Suite 5000
Atlanta, GA 30308 USA

The operator of the website szatyorbolt.hu is considered a joint controller:
Szatyorbolt Zrt.
1085 Budapest, Gyulai Pál utca 12.
zoldszatyor@gmail.com

Contractors operating collection points for the collection of products ordered from the controller are also considered as data processors:
Ligeti Shop Ltd.
2081 Piliscsaba József Liget u. 36.
bolt@csomagolasmentes.hu.

Ernita Ltd.
1182 Budapest Üllői út 743.
Okokamra18@gmail.com.

Well House Manufac tour
2100 Gödöllő Premontrei utca 20.
06308133571

Cyclonomia Social Cooperative
1071 Dembinszky u. 32.
info@cargonomia.hu

Common Place
1192 Budapest Nádasdy u. 1.
awkszovetkezet@atalakulo.hu
Espresso Embassy
1051 Budapest, Arany János utca 15.
info@espressoembassy.hu

KASKA Packaging-free Shop
2051 Biatorbágy , Szabadság utca 12 .
info@espressoembassy.hu

Little Nice Shop
2100 Gödöllő , Szabadság út 5..
godolloiszatyor@gmail.com

Rákoscsaba Shopping Cooperative
1171 Budapest , Nagyszénás utca 46 .
szoni@gmail.com

When storing data in an online cloud database, the service provider is considered a data processor:

Dropbox
privacy@dropbox.com
5 Hatch Street Upper, Saint Peter's, Dublin, Ireland

The use of social networking sites makes us a data processing and joint data controller partner:
Facebook Ireland Ltd.
4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland

Owner of the social video sharing site YouTube:

Google Ireland Limited
Gordon House, Barrow Street, Dublin 4, Ireland

The controller also transfers personal data of its customers to the National Tax and Customs Administration.

The contracted data processing and data management partners will process the personal data of partners only on the basis of instructions given by the data controller (except where required by law) and under an obligation of confidentiality.

Processing of data relating to contracts concluded by the controller:

Customer contracts:

The data controller receives orders for the sale of the products it markets primarily through its website (www.zsambokibiokert.unas.hu). Customers may be both individuals and legal entities. The customer may choose to purchase from the online store after registration or without registration. Once registered, customers can view their previous orders (by entering their e-mail address and password), the status of their current orders, their current orders and it is easier for them to place a new order without having to re-enter their details. Both during registration and in the case of orders without registration, the name of the customer (including the name of the contact person in the case of a legal person), address, e-mail address, telephone number, tax number are requested by the data controller. The legal basis for the processing of personal data is the performance of contractual obligations (Article 6(1)(b) of the General Data Protection Regulation). In the case of a legal person, the personal data of the contact person are processed on the basis of the consent of the data subject (Article 6(1)(a) of the General Data Protection Regulation). The controller issues a receipt or invoice for the value of the products it has distributed. The receipt does not contain personal data. The invoice will contain the name, address and possibly the tax number of the data subject. The issuing of the invoice is a statutory obligation of the controller. The legal basis for the processing of personal data on the invoice is therefore the fulfilment of a legal obligation (Article 6(1)(c) of the General Data Protection Regulation). The personal data on the invoice are stored by the controller for 8 years in compliance with the retention obligation laid down in Article 169 of the Accounting Act.

The data controller also sells its products at fairs and markets. In such cases, the customer indicates his/her intention to purchase and selects the product he/she wishes to buy. The data controller issues a receipt or invoice for the value of the product. The receipt does not contain any personal data. The invoice contains the name, address and possibly the tax number of the buyer. The issuing of the invoice is a legal obligation of the controller. The legal basis for the processing of personal data is the fulfilment of a legal obligation (Article 6(1)(c) of the General Data Protection Regulation). The personal data on the invoice are stored by the controller for 8 years in compliance with the retention obligation laid down in Article 169 of the Accounting Act.

The data controller is a member of the Satchel Shopping Community. The producers offer their products through the website www.szatyorbolt.hu and the customers buy them. The data controller receives orders for the sale of its products on the website. Customers can be both individuals and legal entities. Once registered, customers can view their previous orders, the status of their current orders, their current orders and it is easier for them to place a new order without having to re-enter their data. During the purchase process, the name (including the name of the contact person in case of a legal entity), address, e-mail address and telephone number of the customer will be requested by the data controller. The legal basis for the processing of personal data is the performance of contractual obligations (Article 6(1)(b) of the General Data Protection Regulation). In the case of a legal person, the personal data of the contact person are processed on the basis of the data subject's consent (Article 6(1)(a) of the General Data Protection Regulation). The controller issues a receipt or invoice for the purchase price of the products. The receipt will not contain personal data. The invoice will contain the name, address and possibly the tax number of the data subject. The issuing of the invoice is a statutory obligation of the controller. The legal basis for the processing of personal data on the invoice is therefore the fulfilment of a legal obligation (Article 6(1)(c) of the General Data Protection Regulation). The controller shall act in accordance with the provisions of the law with regard to the storage of personal data on the invoice and shall keep them for 8 years.

Supplier contracts:

The data controller may also process the contact details of suppliers (name, e-mail address, telephone number) and may also contact service providers and subcontractors. In these cases, personal data (personal data of the contact person or of the individual or sole trader) may also be processed in order to contact partners. The legal basis for the processing of personal data is the performance of a contractual obligation (Article 6(1)(b) GDPR) or the consent of the contact person (Article 6(1)(a) GDPR).

The data controller will fill in a consent form with the contact persons of the companies, informing them of their rights in relation to personal data and asking for their consent to process their data. In such cases, the legal basis for the processing of personal data is the explicit, written and duly informed consent of the data subject (Article 6(1)(a) of the General Data Protection Regulation). If the contract with the partner has been terminated and there is no legal obligation to keep the data and documents, the telephone numbers and e-mail addresses will be deleted. The personal data contained in the contract and the invoice will be kept by the controller for 8 years in compliance with the retention obligation laid down in Article 169 of the Accounting Act.

Processing invoices issued to customers and the personal data contained therein:

The data controller issues a receipt or invoice to the customer for the value of the products it has sold. The receipt does not contain personal data. The invoice will contain the name, address and possibly the tax number of the customer. The invoice is issued by the controller to fulfil a legal obligation. The legal basis for the processing of personal data on the invoice is the fulfilment of a legal obligation (Article 6(1)(c) of the General Data Protection Regulation). The personal data on the invoice are stored by the controller for 8 years in compliance with the retention obligation laid down in Article 169 of the Accounting Act.

Children's data, processing of special categories of personal data:

The data subject declares that he or she is at least 16 years of age in relation to the commenting of blog posts on the websites of the controller, the subscription to the newsletter and the consent to the functioning of cookies used by the websites. A person under the age of 16 may not comment on blog posts, subscribe to newsletters or consent to the collection of data by the cookies used by the websites, given that, pursuant to Article 8(1) of the General Data Protection Regulation (GDPR), the validity of his/her consent to the processing of personal data requires the consent of his/her legal representative. The controller is not in a position to verify the age and entitlement of the person giving consent, so the data subject warrants that the data he or she has provided is accurate.

Special data brought to the attention of the controller or which have come to the attention of the controller shall not be recorded by the controller. If such data have been entered into any system without the controller's knowledge, the controller shall delete them from the system immediately after their detection.

Retention of e-mail addresses and telephone numbers by the data controller:

In the course of its activities, the data controller may also obtain the e-mail addresses and telephone numbers of its partners, customers and clients. The personal data thus entered into its system is processed primarily for the purpose of fulfilling its contractual obligations (Article 6(1)(b) of the General Data Protection Regulation). If the contract with the partner has been terminated and the legal obligation to keep the data and documents no longer applies, the telephone numbers and e-mail addresses will be deleted. In some cases, the data controller will still have a legitimate interest in retaining the data and will request the explicit and written consent of the data subject to the retention of his or her personal data (Article 6(1)(a) of the General Data Protection Regulation).

Taking photos, video recordings at the data controller:

The data controller occasionally takes photographs or videos of its customers, partners and clients. If the recording shows a recognizable individual, the recording is made and used - in connection with the controller's websites, social networking sites or other appearances - only with the prior, informed, written and voluntary consent of the data subject (or, in the case of a person under 18 years of age, the legal representative). The legal basis for processing is the data subject's consent (Article 6(1)(a) of the General Data Protection Regulation).

If the data subject withdraws consent and requests the cessation of the use of the recording, or the deletion of the recording, the controller shall comply with that request without delay.

The websites of the controller:

The data controller presents its activities and the products it sells to interested parties on its websites. The websites provide visitors with information about the services of the controller and the possibility to order products.

The websites of the controller:

www.zsambokibiokert.hu

www.zsambokibiokert.unas.hu

The websites of the data controller use cookies in their operation. The legal basis for the processing of personal data obtained from them is the consent of the visitor (Article 6(1)(a) of the General Data Protection Regulation).

The www.zsambokibiokert.hu website uses the following cookies:

TS018652bb
duration: until the end of the browsing session
type: other
TS01e85bed
duration: until the end of the browsing session
type: other
XSRF-TOKEN
duration: until the end of the browsing session
type: other
bSession
Duration: 30 minutes
type: absolutely necessary
hs
duration: until the end of the browsing session
type: other
svSession
duration: 2 years
type: absolutely necessary

The www.zsambokibiokert.unas.hu website uses the following cookies:

UN_last_prod
duration: 2 months
type: other
UnasID
duration: until the end of the browsing session
type: other
UnasServiceProxyID
duration: until the end of the browsing session
type: other

Cookies (Cookies):

What cookies do:

collect information about visitors and their devices;
remember visitors' individual preferences, which are (are) used;
make it easier to use websites;
provide a quality user experience.

In order to provide a personalised service, a small piece of data called a cookie is placed on the user's computer and read back during a subsequent visit. When the browser returns a previously saved cookie, the cookie provider has the possibility to link the user's current visit to previous visits, but only in relation to its own content.

Session cookies are strictly necessary:

The purpose of these cookies is to allow visitors to browse the websites, use their features and services fully and smoothly. This type of cookie is valid until the end of the session (browsing) and is automatically deleted from the computer or other browsing device when the browser is closed.

The data subject's choice in relation to the Cookie:

Web Browser Cookies:

In the browser settings, the data subject can accept or reject new cookies and delete existing cookies. You can also set your browser to notify you each time a new cookie is placed on your computer or other device. You can find more information about how to manage cookies in the "help" function of your browser.

If the visitor chooses to disable some or all of the cookies, he or she will not be able to use all the features of the websites.

The data subject declares on the websites of the data controller that he or she has reached the age of 16 years in relation to the acceptance of the use of cookies. A person under the age of 16 may not make a declaration of acceptance or refusal of cookies used by the websites, given that, pursuant to Article 8(1) of the General Data Protection Regulation (GDPR), the validity of his/her declaration of consent to processing requires the consent of his/her legal representative. The controller is not in a position to verify the age and entitlement of the person giving consent, so the data subject warrants that the data he or she has provided are accurate.

Personal data processing related to purchases and registration:

The data controller receives orders for the sale of the products it markets primarily through its website (www.zsambokibiokert.unas.hu). Customers may be both individuals and legal entities. The customer may choose to purchase from the online store after registration or without registration. Once registered, customers can view their previous orders (by entering their e-mail address and password), the status of their current orders, their current orders and it is easier for them to place a new order without having to re-enter their details. Both during registration and in the case of orders without registration, the name of the customer (including the name of the contact person in the case of a legal entity), address, e-mail address, telephone number, tax number are requested by the data controller. The legal basis for the processing of personal data is the performance of contractual obligations (Article 6(1)(b) of the General Data Protection Regulation). In the case of a legal person, the personal data of the contact person are processed on the basis of the consent of the data subject (Article 6(1)(a) of the General Data Protection Regulation). The controller issues a receipt or invoice for the value of the products it has distributed. The receipt does not contain personal data. The invoice will contain the name, address and possibly the tax number of the data subject. The issuing of the invoice is a statutory obligation of the controller. The legal basis for the processing of personal data on the invoice is therefore the fulfilment of a legal obligation (Article 6(1)(c) of the General Data Protection Regulation). The personal data on the invoice are stored by the controller for 8 years in compliance with the retention obligation laid down in Article 169 of the Accounting Act.

The contact form used on the www.zsambokibiokert.unas.hu website:

On the website, the visitor of the site has the possibility to contact the data controller by means of a contact form. In the form, the name, e-mail address and telephone number of the interested party must be provided. The purpose of processing personal data is to contact the site visitor and the person interested in the controller's products. If no order is placed after contacting the data controller, the personal data of the interested party will be deleted immediately, but within 3 working days at the latest. The controller processes the personal data for the purpose of concluding the contract on this legal basis (Article 6(1)(b) of the General Data Protection Regulation). By filling in the form, the data subject declares that he or she has read the controller's Privacy Policy and acknowledges the contents thereof.

Personal data processing when you comment on blog posts:

The data controller publishes its blog posts on the website www.zsambokibiokert.hu. After logging in, you can add comments to the entries by entering your name and e-mail address. By posting a comment and entering personal data, the data subject gives his/her consent to the processing of his/her personal data and to its publication on the website by ticking the box provided. The legal basis for the processing of personal data is the data subject's informed consent (Article 6(1)(a) of the General Data Protection Regulation). The data subject declares that he or she has read and understood the Controller's Privacy Notice and has taken note of the information contained therein. The controller shall not use the personal data for any other purpose and shall not make them available to third parties. The controller shall process the personal data thus recorded until the data subject's consent is withdrawn. If the data subject withdraws his or her consent, the controller shall delete the recorded personal data from its system without undue delay and at the latest within 3 working days.

The data subject declares on the website of the controller that he or she is 16 years of age or older when commenting on blog posts. A person under the age of 16 is not allowed to comment on the posts, given that, pursuant to Article 8(1) of the General Data Protection Regulation (GDPR), the validity of his/her consent to the processing of personal data requires the consent of his/her legal representative. The controller is not in a position to verify the age and entitlement of the person giving consent, so the data subject warrants that the data he or she has provided is accurate.

Subscribe to the newsletter:

The data controller also offers the possibility to subscribe to a newsletter. By subscribing to the newsletter, the data subject declares that he or she has read the Data Controller's Privacy Policy and that he or she gives his or her consent to the processing of his or her personal data for marketing purposes (sending the newsletter). The data subject shall have the rights set out in the Data Protection Notice and shall be able to exercise those rights in the manner and at the places indicated therein. Accordingly, the legal basis for the processing of personal data in the context of sending the newsletter is the explicit and written consent of the subscriber (Article 6(1)(a) of the General Data Protection Regulation).

The purpose of data processing in connection with the sending of newsletters is to provide the recipient with complete general or personalised information about the latest news and news items published by the controller, in accordance with the applicable and valid legislation. Subscription to the newsletter and/or DM mailing is based on voluntary consent, the controller will of course give the data subject the opportunity to withdraw his or her consent and unsubscribe from the newsletter at any time.

The data subject declares on the controller's websites that he or she is at least 16 years of age when subscribing to the newsletter. A person under the age of 16 may not subscribe to the newsletter, given that, pursuant to Article 8(1) of the General Data Protection Regulation (GDPR), the validity of his/her declaration of consent to the processing of personal data requires the consent of his/her legal representative. The controller is not in a position to verify the age and entitlement of the person giving consent, so the data subject warrants that the data he or she has provided is accurate.

The social networking sites of the controller:

The data controller also operates a Facebook page, where personal data are also processed. The data controller also promotes its activities and services on the Facebook page. This page is used by the controller for marketing purposes.

https://www.facebook.com/zsamboki.biokert

The controller also provides comprehensive personal support through Facebook. If you ask a question via Facebook, we will try to answer it as soon as possible. You will use the data you receive on Facebook only to answer your question and not for any other promotional purposes.

The purpose of using the Facebook page is to advertise and provide information on social media. Facebook may also use the data for its own purposes, including profiling and targeting the data subject with advertising.

In order to contact the controller via Facebook, you must be logged in. To do this, Facebook may also request, store and process personal data. The controller has no control over the type, scope and processing of this data and does not receive personal data from the Facebook operator. For more information on this, please visit the Facebook page.

The personal data of Facebook page followers are processed by the data controller on the basis of their consent (Article 6 (1) (a) of the General Data Protection Regulation), which is deemed to be given by the fact that the person concerned likes, follows or comments on the page and its posts.

Other community pages of the controller where the legal basis for processing is also the data subject's consent (Article 6(1)(a) of the General Data Protection Regulation):

https://www.youtube.com/channel/UCQjOFgz_KLbv4Bi2iatrv1w

Personal data processing in the use of cloud-based applications:

The data controller mainly uses cloud-based services for storing, sharing and backing up documents. A common feature of such services is that they are not provided by the user's computer, but by a remote server, a server centre located anywhere in the world. Such services are also provided by online hosting. A major advantage of cloud applications is that they provide a highly secure, flexible and scalable IT storage and processing capacity, essentially independent of geographical location.

In these cases, the cloud service provider can be considered as a data processor, processing the personal data on behalf of the data controller. Cloud service providers are obliged to keep personal data confidential and may only process personal data on the instructions of the controller.

The data controller shall take the utmost care in the selection of its cloud service partners, shall take all measures reasonably necessary to ensure that they are contracted in a manner that is compatible with the data security interests of its customers, that their data management principles are transparent to them and that data security is regularly monitored.

Cloud storage is password protected and only the data controller has access to the data stored there.

The data controller's partners expressly consent to the transfer of data necessary for the use of cloud-based applications by accepting this Privacy Notice.

Handling of complaints about the controller's activities:

The purpose of data processing in the course of complaint handling in relation to the activities of the data controller is to enable the communication of the complaint, to identify the data subject and his/her complaint, to record the data required by law to be recorded, to investigate the complaint and to maintain contact in connection with its resolution.

The data controller will keep the record of the complaint and a copy of the response for 5 years, and will also process the personal data on that basis for that period.

Security of data processing:

The data controller undertakes to ensure the security of the data, to take technical and organisational measures and to maintain procedural rules to ensure that the data recorded, stored or processed are protected and to prevent their destruction, unauthorised use or unauthorised alteration. It also undertakes to require any third party to whom it transfers or discloses the data to comply with the requirements of data security.

The controller shall ensure that the data processed cannot be accessed, disclosed, transmitted, modified or deleted by unauthorised persons. The data processed may only be accessed by the data controller and its data processor(s) and shall not be disclosed to third parties not entitled to access the data.

The data controller takes great care to ensure the security of the personal data of its partners and customers. It acts in full compliance with the legal provisions and requires all its partners to do the same. The protection of personal data includes physical protection (storage of documents in a lockable room, lockable cupboard) and IT protection (use of password protection).

The controller shall store the personal data provided by the data subject primarily on the servers of the data processor(s) specified in this Privacy Notice, equipped with the usual protection systems, and partly on its own IT equipment, or, in the case of paper media, at its headquarters, in an appropriately locked manner.

The data subjects acknowledge and accept that, if they provide their personal data, the data protection cannot be fully guaranteed on the Internet and in the computer system. In the event of unauthorised access or disclosure, despite the efforts of the controller, it is necessary to proceed as described in this notice.

Rights of data subjects:

Transparent information:

The purpose of this Privacy Notice is also to provide clear, concise, transparent and understandable information about the processing activities of the controller.

Right of access:

The data subject shall have the right to obtain from the controller feedback as to whether or not his or her personal data are being processed and, if such processing is taking place, the right to access the personal data and the following information:

the purpose of the processing,
the categories of personal data concerned,
the recipients to whom the personal data have been disclosed,
the intended duration of the storage of the personal data.

You can request information about the above data from the data controller at the following address, e-mail address:

Naspolyafa Ltd. 2116 Zsámbok, Szent László utca 56.

E-mail: info@zsambokibiokert.hu

The controller hereby informs you that it will respond to your request within 30 days. Information requests sent by post will be answered by post, requests sent by e-mail will be answered by e-mail.

Right to rectification:

The data subject shall have the right to obtain from the controller, at his or her request, the rectification of inaccurate personal data relating to him or her.

You can request information about the above data from the data controller at the following address, e-mail address:

Naspolyafa Ltd. 2116 Zsámbok, Szent László utca 56.

E-mail: info@zsambokibiokert.hu

The controller hereby informs you that it will respond to your request within 30 days. Information requests sent by post will be answered by post, requests sent by e-mail will be answered by e-mail.

Right to erasure:

The data subject shall have the right to obtain, at his or her request, the erasure of personal data relating to him or her. The controller shall, on the basis of such a request, erase the personal data if one of the following grounds applies:

the personal data are no longer necessary for the purposes for which they were collected,
the data subject withdraws his or her prior consent and there is no other legal basis for the processing,
the data subject objects to the processing and there are no overriding legitimate grounds for the processing,
the personal data have been unlawfully processed,
necessary to comply with a legal obligation under EU or national law.

You can request information about the above data from the data controller at the following address, e-mail address:

Naspolyafa Ltd. 2116 Zsámbok, Szent László utca 56.

E-mail: info@zsambokibiokert.hu

The controller hereby informs you that it will respond to your request within 30 days. Information requests sent by post will be answered by post, requests sent by e-mail will be answered by e-mail.

Right to restriction of processing:

The data subject has the right to request the controller to restrict processing, in particular if:

disputes the accuracy of the data,
considers the processing to be unlawful, but for some reason does not request the deletion of the data.

You can request information about the above data from the data controller at the following address, e-mail address:

Naspolyafa Ltd. 2116 Zsámbok, Szent László utca 56.

E-mail: info@zsambokibiokert.hu

The controller hereby informs you that it will respond to your request within 30 days. Information requests sent by post will be answered by post, requests sent by e-mail will be answered by e-mail.

Right to data portability:

The data subject has the right to receive personal data concerning him or her in a structured, commonly used, machine-readable format and the right to transmit such data to another controller.

You can request information about the above data from the data controller at the following address, e-mail address:

Naspolyafa Ltd. 2116 Zsámbok, Szent László utca 56.

E-mail: info@zsambokibiokert.hu

The controller hereby informs you that it will respond to your request within 30 days. Information requests sent by post will be answered by post, requests sent by e-mail will be answered by e-mail.

Right to object:

The data subject shall have the right to object, on grounds relating to his or her particular situation, at any time to the processing of his or her personal data, as provided for in Article 21 of Regulation (EU) 2016/679 of the European Parliament and of the Council.

You can request information about the above data from the data controller at the following address, e-mail address:

Naspolyafa Ltd. 2116 Zsámbok, Szent László utca 56.

E-mail: info@zsambokibiokert.hu

The controller hereby informs you that it will respond to your request within 30 days. Information requests sent by post will be answered by post, requests sent by e-mail will be answered by e-mail.

The right of the data subject in case of automated decision-making:

The data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or significantly affects him or her. Automated decision-making is any process or methodology whereby a technical automatism evaluates personal aspects relating to the data subject and which produces legal effects concerning him or her or significantly affects him or her. The controller shall not use IT automated mechanisms, including profiling, which have a significant impact on the rights of the data subject.

You can request information about the above data from the data controller at the following address, e-mail address:

Naspolyafa Ltd. 2116 Zsámbok, Szent László utca 56.

E-mail: info@zsambokibiokert.hu

The controller hereby informs you that it will respond to your request within 30 days. Information requests sent by post will be answered by post, requests sent by e-mail will be answered by e-mail.

The controller undertakes to inform any recipient of requests sent to it in connection with the above rights to whom it has disclosed the personal data, unless this proves impossible. It also undertakes to notify the data subject (applicant) of the decision on the processing of the above requests within 30 days at the latest.

Data protection incident:

A personal data breach is a breach of security that results in the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.

In the event of a data breach, the level of data breach must be at a serious risk level, i.e. the breach must be of a degree that personal data:

destruction,
with the loss of,
by changing,
unauthorised disclosure or
involves unauthorised access to.

An incident is considered to occur if any one of the above occurs, but this does not exclude that more than one of the above may occur at the same time. This includes not only intentional malicious conduct but also negligent injuries. An incident therefore occurs when it is caused by an accidental or unlawful act.

Examples of data breaches include:

the unlawful transmission of personal data on a document, portable device, storage medium or computer system (e.g. by mail),
unauthorised access to a computer system or application that processes personal data,
damage to or loss of part or all of a database containing personal data,
part or all of an IT system rendered unusable by a virus or other malicious software, etc.

A data breach may cause physical, pecuniary or non-pecuniary damage to natural persons, including loss of control over their personal data or restriction of their rights, discrimination, identity theft, if not addressed in an appropriate and timely manner, or misuse of identity, financial loss, unauthorised impersonation, damage to reputation, damage to the confidentiality of personal data protected by professional secrecy, or other significant economic or social disadvantages suffered by the natural persons concerned.

In the event of a potential data breach (unless the data breach is unlikely to pose a risk to the rights and freedoms of natural persons), the controller shall immediately notify the National Authority for Data Protection and Freedom of Information. As soon as the controller becomes aware of the incident, it shall notify it without undue delay and, if possible, no later than 72 hours after becoming aware of the personal data breach. If the notification cannot be made within 72 hours, the notification shall state the reason for the delay and provide the required information in detail without further undue delay.

The National Authority for Data Protection and Freedom of Information operates a dedicated system on its website for the notification of data breaches, through which notifications can be made electronically.

The data controller shall keep a record of the data breaches, indicating the facts relating to the data breach, its effects and the measures taken to remedy it. The controller shall keep records of the data relating to the incidents, including the causes, the events and the personal data involved. In addition, the record should also include the effects and consequences of the incidents and the measures taken to remedy them, and the conclusions of the controller (for example, why it thinks the incident is not reportable, or if the notification is delayed, the reason for the delay).

An incident that is unlikely to pose a risk to the rights and freedoms of natural persons does not need to be notified to the supervisory authority.

If the data breach is likely to result in a high risk to the rights and freedoms of the data controller's partners, customers, clients, we will inform the affected partner without delay. The information provided to the data subject shall clearly and plainly describe the nature of the personal data breach and shall include the most relevant information and measures.

The data subject need not be informed as described above if any of the following conditions are met:

the controller has implemented appropriate technical and organisational protection measures and those measures have been applied in relation to the data affected by the personal data breach, in particular measures to render the data unintelligible to persons who are not authorised to access the personal data;

the controller has taken additional measures following the personal data breach to ensure that the high risk to the rights and freedoms of the data subject is no longer likely to materialise;

information would require a disproportionate effort. In such cases, the data subjects should be informed by means of publicly disclosed information or a similar measure should be taken to ensure that the data subjects are informed in an equally effective manner.

Information on the relevant legislation:

Act CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information (Info. tv.);
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Regulation (EC) No 95/46/EC (General Data Protection Regulation, GDPR);
Act V of 2013 - on the Civil Code (Civil Code);
Act C of 2000 on Accounting (Accounting Act).

Right to apply to the courts:

The data subject may take the controller to court if his or her rights are infringed. The court shall rule on the case out of turn.

Data protection authority procedure:

You can lodge a complaint with the National Authority for Data Protection and Freedom of Information:

Name: National Authority for Data Protection and Freedom of Information

Seat: 1055 Budapest, Falk Miksa u. 9-11.

Address for correspondence: 1363 Budapest, Pf. 9.

Telephone: 0613911400

Fax: 0613911410

E-mail: ugyfelszolgalat@naih.hu

Website: http://www.naih.hu

Other provisions:

The data controller shall provide information on data processing not listed in this notice at the time of recording the data. In such cases, the provisions of the applicable legislation shall prevail.

The data controller hereby informs its customers that the court, the prosecutor, the investigating authority, the administrative authority, the National Authority for Data Protection and Freedom of Information, the National Bank of Hungary, or other bodies authorized by law may contact the data controller to provide information, to disclose or transfer data, or to provide documents. The controller shall disclose to the authorities - if the authority has indicated the precise purpose and scope of the data - personal data only to the extent and to the extent strictly necessary for the purpose of the request.

The website of the Data Protection Authority contains further information on the data protection rights referred to in this Privacy Notice.

Zsámbok, 2020. ......................................

Hayes Matthew

Managing Director

ANNEX NO.

Ssz.	Name of the processing of personal data	Purpose of data processing	Legal basis for processing	Time limit for deletion of personal data
1.	Personal data provided during purchase and registration in the online shop.	For the purposes of the performance of the contract, for the purpose of contacting.	Performance of the contract (Article 6(1)(b) of the General Data Protection Regulation).	Within 30 days of the legal obligation to keep the data (8 years).
2.	Personal data of the contact person of the legal person when shopping and registering in the online shop.	To fulfil a contractual obligation.	Based on the data subject's consent (Article 6(1)(a) of the General Data Protection Regulation).	In case of withdrawal of consent, without delay. Within 10 working days after the termination of the contract, unless the law provides for an obligation to keep the contract (within 30 days after the expiry of the obligation).
3.	Personal data provided when placing an order on the www.szatyorbolt.hu website.	For the purposes of the performance of the contract, for the purpose of contacting.	Performance of the contract (Article 6(1)(b) of the General Data Protection Regulation).	Within 30 days of the legal obligation to keep the data (5 years).
4.	Personal data of the contact person of the legal person when placing an order on the website www.szatyorbolt.hu.	To fulfil a contractual obligation.	Based on the data subject's consent (Article 6(1)(a) of the General Data Protection Regulation).	In case of withdrawal of consent, without delay. Within 10 working days after the termination of the contract, unless the law provides for an obligation to keep the contract (within 30 days after the expiry of the obligation).
5.	Personal data on the invoice issued to the purchaser (in the case of a natural person or sole trader).	Fulfilling a legal obligation, issuing an invoice.	Fulfilling a legal obligation (Article 6(1)(c) of the General Data Protection Regulation).	Within 30 days of the legal obligation to keep the data (8 years).
6.	Processing of incoming emails (sender's email address), telephone numbers.	To fulfil a contractual obligation (the order) or on the basis of consent.	Performance of a contractual obligation (Article 6(1)(b) of the General Data Protection Regulation) or the data subject's consent (Article 6(1)(a) of the General Data Protection Regulation).	Within 10 working days of the completion of the task, or immediately after withdrawal of consent, up to a maximum of 3 working days.
7.	Personal data of suppliers, service providers, subcontractors (in the case of an individual or sole trader).	To fulfil a contractual obligation.	Fulfilling a contractual obligation (Article 6(1)(b) of the General Data Protection Regulation).	Within 30 days of the legal obligation to keep the data (8 years).
8.	Personal data of contact persons of suppliers, service providers, subcontractors.	To fulfil a contractual obligation.	Based on the data subject's consent (Article 6(1)(a) of the General Data Protection Regulation).	In case of withdrawal of consent, without delay. Within 10 working days after the termination of the contract, unless the law provides for an obligation to keep the contract (within 30 days after the expiry of the obligation).
9.	Personal data recorded during the collection of data by the cookies processed by the websites.	Improving the user experience, improving websites.	Based on the data subject's consent (Article 6(1)(a) of the General Data Protection Regulation).	Without undue delay after the withdrawal of consent, but within 3 working days at the latest.
10.	Personal data (name, e-mail address, telephone number) provided when using the contact form on the www.zsambokibiokert.unas.hu website.	To contact.	Creation of the contract (Article 6(1)(b) of the General Data Protection Regulation).	Immediately after contact, but within 3 working days at the latest.
11.	Personal data (name, e-mail address) provided when you comment on blog posts on the www.zsambokibiokert.hu website.	To indicate the comment.	Consent of the data subject (Article 6(1)(a) of the General Data Protection Regulation).	Without undue delay after the withdrawal of consent, but within 3 working days at the latest.
12.	Personal data (name, e-mail address) provided when subscribing to the newsletter.	To send a newsletter.	Based on the data subject's consent (Article 6(1)(a) of the General Data Protection Regulation).	Immediately after the withdrawal of consent.
13.	Personal data that have come to the knowledge of the data controller through the use of social networking sites.	To promote products and activities.	Based on the data subject's consent (Article 6(1)(a) of the General Data Protection Regulation).	Immediately after the withdrawal of consent.
14.	The images included in photographs and video recordings of customers.	Promotion of products and activities, use of the footage on websites, social media and other media.	Consent of the data subject (Article 6(1)(a) of the General Data Protection Regulation).	Without undue delay after the withdrawal of consent, but within 3 working days at the latest.
15.	Personal data collected in the course of complaint handling.	To identify and address the complaint.	Compliance with the legal obligation (Article 6(1)(c) of the General Data Protection Regulation).	Within 30 days of the legal obligation to keep the data (5 years).