1. INTRODUCTION
It is very important to us that we comply with the data protection regulations and laws currently in force; we therefore set out in detail below the alomterasz.hu page and Álomterasz Ltd. its data protection measures and its data collection processes.
Contact details:
Full legal name: Álomterasz Kft.
Tax number: 32081387-2-11
Company registration number: 1109029887
Email address: marketing@alomterasz.hu
Postal address: 2921 Komárom, Halastó utca 4.
2. WHAT PERSONAL DATA DO WE PROCESS, AND FOR WHAT PURPOSES?
Personal data is information that unambiguously enables the precise identification of an individual.
On the Alomterasz website, we process the following personal data, specifying the legal basis for each case:
CONTACT DETAILS
This includes any message you send to us via the website, by email, via social media, or through any other form of communication.
We process and retain this data so that we can fulfil orders and to provide a basis for decision-making in the event of any legal claims.
The legal basis for this processing is the user’s demonstrable interest in our activities, as evidenced by the messages sent to us.
CUSTOMER DETAILS
This includes all data relating to the purchase of products and services, such as the customer’s name, delivery and billing addresses, email address, telephone number and details of the product purchased.
We process this data to ensure that orders are fulfilled successfully and to maintain legally compliant records of purchases.
The legal basis for storing the data is the performance of the contract formed by the order between the customer and the alomterasz.hu website.
USER DATA
This includes data generated whilst using the website, which enables the site to function technically, allows us to maintain the site’s security, enables us to store records of users’ activity, and ensures that you always have access to the most relevant content possible.
The legal basis for processing the data is the user’s clear interest in our activities; the storage of this data is necessary to ensure this interest is met and to enable the technical operation of the website.
TECHNICAL SPECIFICATIONS
This includes data generated whilst using the site, such as IP addresses, login details, browser data, the time spent on individual pages, page views and navigation paths, the number and time of page visits, time zones, and details of the device you use to view the site.
The data comes from our analytics software.
We process this data in order to analyse users’ behaviour on the site, ensure the site continues to operate securely, and assess the effectiveness of our marketing decisions.
The legal basis for processing the data is the user’s clear interest in our activities, which enables us to process this data in accordance with security requirements and to use it to grow our business and operate more effectively.
MARKETING DATA
This includes visitors’ preferences regarding the type of marketing content they are happy to receive from us. We process this data to enable participation in prize draws and to send advertising relating to those of our products and services in which the user has expressed an interest.
The legal basis for processing the data is the user’s clear interest in our activities, which enables us to process this data in accordance with security requirements and to use it to grow our business and operate more effectively.
We may occasionally use the data we collect for purposes such as delivering targeted, relevant adverts on the Facebook™ platform and on various dynamic advertising platforms, and to measure the effectiveness of these adverts.
The legal basis for processing the data is the user’s clear interest in our activities, which enables us to process this data in accordance with security requirements and to use it to grow our business and operate more effectively.
In the course of our activities, we do not collect sensitive data such as ethnicity, religious beliefs, sexual life and orientation, political opinions and trade union membership, or medical history, nor do we collect genetic or biometric information.
3. HOW DO WE COLLECT DATA?
We may collect personal data in such a way that the user provides it to us directly (for example, by placing an order or sending a message).
Furthermore, certain data is collected automatically whilst using the website, for example through so-called “cookies” and similar technologies. These only become active once the user has given their consent.
For further information, please see our Cookie Policy.
We receive certain data from external partners, such as analytics providers like Google (a partner based outside the EU), advertising networks such as Facebook™ (a non-EU partner), and payment service providers such as PayPal (a non-EU partner) and Barion.
4. OUR PRACTICAL MEASURES REGARDING DATA PROTECTION
At alomterasz.hu, we attach great importance to protecting our users’ data and complying with current regulations. We have therefore carried out a data protection impact assessment on the website and drawn up a list detailing the data collected, its necessity, the legal basis for its collection, and its compliance with the law.
To protect the data entered on the forms and generated on the site, we use SSL encryption across the entire website (Let’s Encrypt Authority X3 certificate).
To protect the site against attacks, we use premium security software (iThemes Security Pro) to safeguard the stored data against so-called “brute force” and virus attacks.
Purchase and user data are stored in the website’s databases in an encrypted form (pseudonymised), meaning they cannot be read by third parties.
In this privacy policy, we provide users with the opportunity, via online forms, to request information about the processing of their personal data, and to amend or delete their personal data.
From time to time, we need to provide data to our service partners in order to carry out our business activities (for example, web hosting providers, courier companies and newsletter software providers).
In such cases, we always ensure that our choices comply with the requirements of the GDPR; where our partners are based in the US, we ensure they participate in the EU-US Privacy Shield data protection initiative and that we enter into a data processing agreement with them, thereby ensuring that data is processed responsibly.
5. MARKETING COMMUNICATION
Marketing communications are of vital importance to the company’s operations. The legal basis for the related data processing is the expression of interest in our services or the users’ explicit consent.
In accordance with the European Union’s Privacy and Electronic Communications Regulations (PECR), we send marketing messages to our users if they have made a purchase from us or have expressly consented to receiving marketing messages.
We always provide a clearly visible option to suspend your consent and unsubscribe from our messages. A link to unsubscribe can be found at the bottom of every email, or you may request to be removed from our database by emailing marketing@alomterasz.hu.
Even if you unsubscribe from marketing communications, we may still send you messages, but only in relation to the fulfilment of your orders.
6. NOTE REGARDING PERSONAL DATA
From time to time, it is necessary to share certain personal data with some of our partners in order to maintain normal business operations:
-IT service providers and service providers carrying out troubleshooting and maintenance on IT systems
-Expert partners, such as solicitors, accountants, bankers and insurers
-Government bodies that request reports on our activities
-Payment service providers who handle bank card details securely
-Courier services that fulfil incoming orders to the specified delivery address
International data transfers
From time to time, we need to share users’ data with service partners outside the European Economic Area (EEA) in order to maintain our business operations.
In many cases, countries outside the EEA do not provide the same level of data protection; therefore, European legislation prohibits the transfer of data unless the relevant conditions are met.
Whenever personal data is transferred outside the EEA, in addition to the measures set out in point 4, we take the following steps to ensure the secure processing of the data:
-We only transfer data to countries that the European Commission considers to be adequate in terms of data protection.
-We only use US-based services that are part of the EU-US Privacy Shield data protection initiative.
If the above conditions are not met, we will ask users for their explicit consent to the data transfer. Consent may be withdrawn at any time.
Links to external websites
This page occasionally contains links to external websites, or code snippets embedded within the page that enable external services to function.
Clicking on these links or using the embedded features may allow external partners to collect data about users.
Although we do everything we can to ensure that our partners are properly vetted, we have no control over their data protection policies and are not responsible for their data processing practices.
7. DURATION OF DATA PROCESSING
We only ever store users’ data for as long as required by our legal, accounting or data reporting obligations, or for as long as is necessary to operate the service.
When deciding on the duration of storage, we take into account the volume, nature and sensitivity of the data, as well as the potential impact of a data breach.
For tax purposes, we are required to retain our customers’ billing and purchase details for at least 8 years in order to comply with our legal obligations.
Under certain circumstances, we may use the data in anonymised form for statistical purposes, in which case we will store the data for an indefinite period without notifying you.
8. VISITORS’ RIGHTS
As a citizen of the European Union, the General Data Protection Regulation (GDPR) grants the following rights to users of this website:
a. Access to personal data
Users of this website have the right to request a copy of the personal data held by Alomterasz. Such requests are generally processed free of charge within 14 days of receipt.
In the event of repeated, abusive or unjustified requests for data, Alomterasz may charge a reasonable fee for providing the data, and additional time may be required to provide it.
Furthermore, Alomterasz requires proof of identity before disclosing any data, in order to prevent misuse. To request your personal data, please use the contact form below:
Data access / Data erasure / Data restriction
INSERTING A CONTACT FORM
b, Updating personal data
If your personal data has changed or has been provided incorrectly, you have the right to request that it be amended. To amend your personal data, please contact us at marketing@alomterasz.hu.
c, Request to have personal data erased
Users have the right to request the erasure of all their personal data. We will comply with the request free of charge within 14 days of receiving it. Once your personal data has been deleted, your user account will no longer be accessible, meaning that any materials you may have purchased will also become inaccessible, as the personal data associated with your user account is essential for accessing the service.
Alomterasz requires proof of identity before deleting personal data, in order to prevent misuse. To have your personal data deleted, please use the contact form above.
d, Requesting a restriction on the processing of personal data
Users have the right to request that the disclosure of their data to third parties (service partners) be restricted. When submitting such a request, they may also specify the service partners for whom they wish to impose such restrictions.
It is important to note that cooperation with certain service providers is essential for the website to function (e.g. Barion, as a payment service provider); therefore, should they impose any restrictions, the website’s services will become unavailable to the user.
Alomterasz requires proof of identity before restricting the disclosure of personal data, in order to prevent misuse. To restrict the disclosure of personal data, please use the contact form above:
In Hungary, the official body responsible for data protection is the National Authority for Data Protection and Freedom of Information (NAIH). Users can find out more about their data protection rights on the NAIH website.
National Authority for Data Protection and Freedom of Information,
22/C Szilágyi Erzsébet fasor, Budapest 1125; Postal address: P.O. Box 5, Budapest 1530,
Telephone: 06 1 391 1400,
Fax: 06 1 391 1410,
Email: ugyfelszolgalat@naih.hu
Website: https://www.naih.hu
9. ANONYMIZED DATA AND “COOKIES”
The Alomterasz website uses so-called “cookies” and similar technologies, such as tracking codes, remarketing tags and pixels, in its emails and advertisements; these are activated once the user has given their consent.
These technologies help us to better understand users’ behaviour and interests, thereby enabling us to operate to a higher standard and more efficiently.
Our aim is to make the website as user-friendly and personalised as possible. If a user wishes to prevent these technologies from collecting non-personal data, they can do so in the following ways:
- You can disable these cookies using the cookie notices displayed on the website
- by disabling “cookies” in your browser
For further information about other cookies and tracking codes used on alomterasz.hu, please see the Cookie Policyin our country.
