Data protection and data control policy of Saulé Blanc
Purpose of the Policy
The purpose of this Policy is to set out the data protection and data control applied by Saulé Blanc (registered office: Sopron, Határdomb 2.) and the data protection and control policy of Saulé Blanc, which it recognizes as binding.
In developing these rules, Saulé Blanc paid special attention to the provisions of Act No. CXII of 2011 on informational self-determination and the freedom of information (“Info Act”).
Data protection registration number of Saulé Blanc.: NAIH-77149/2014.
The users of the saulablanc.com website accept the provisions of this document as binding by displaying or using the website in any manner.
Name and details of the data controller:
Personal data: means data relating to the given natural person (hereinafter referred to as “data subject”), including, in particular, the name and identification number of the data subject, or one or more factors specific to his physical, physiological, mental, economic, cultural or social identity, as well as conclusions drawn from the data in regard to the data subject. The personal data must be classified as such throughout the data control process until its connection with the data subject can be restored.
Data set: means all data controlled in a filing system;
Data control: means any operation or set of operations performed on data, regardless of the procedure applied; in particular, the collection, recording, registration, organisation, storage, modification, use, retrieval, transmission, public disclosure, alignment or combination, blocking, deletion or destruction of Personal data, as well as blocking them from further use ;
Data processing: means the performance technical operations in connection with data control, regardless of the method and instruments used for executing the operations or the place of use, provided that the technical operation is carried out on the data;
Destruction of data: means the complete physical destruction of the medium containing the data;
Data transmission: means making the Personal data available to specific third parties;
Public disclosure: means making the Personal data available to the general public;
Data processor: means any natural or legal person or organization without legal personality who/which processes Personal data under an agreement with the data controller;
Deletion of data: means the destruction of data sufficient to make them irretrievable;
Automated data set: means a set of data for automated processing;
Automated processing: includes the following operations if they are carried out fully or partially by automated devices: storage of data, logical or arithmetic operations carried out on the data, modification, erasure, retrieval and dissemination the data;
User: means any natural person who uses the sauléblanc.com website.
Scope of controlled Personal data
Data supplied based on the User’s decision: e-mail address, telephone number, fax, name, company name, delivery/invoicing addresses, method of payment used by the User, amounts of the items purchased by the User.
Data technically recorded in the course of the operation of the system: those data of the log-in computer of the User which are generated while using the service and are recorded in the system of the Data Controller as the automatic outcome of the technical processes. The data recorded automatically are automatically logged by the system upon log-in and log-out without any specific statement or act by the User. These data must not be linked to other Personal data of the user, except in mandatory cases required by the law. Only the Data Controller has access to these data.
The attention of those supplying data to Saulé Blanc is called to the if data other than their own personal data are provided, they are responsible for obtaining the consent of the data subject.
We also call the attention of the users to the that failure to supply certain data may result in them not being able to use the services of the website.
Legal basis, purpose and method of Data Control
Data Control is carried out on the basis of the voluntary informed statements of the Users of the Internet contents on the sauleblanc.com website, where such statements include the express consent of the Users to use their Personal data supplied in the course of using the site. The legal basis of Data Control is the voluntary consent of the data subjects pursuant to point a) of Paragraph (1) of Section 5 of Act No. CXII of 2011 on informational self-determination and the freedom of information.
The purpose of Data Control is to ensure the provision of the services available on the sauleblanc.com URL. The scope of the Personal data required for using these services can be found in the description of the relevant services.
The purpose of the data recorded automatically is to ensure the provision of the services available on the www.sauleblanc.com website, to prepare statistics and to protect the rights of the users.
The Data Controller may not use the Personal data supplied for any other purpose than those set forth above. Unless otherwise provided by the law, Personal data may be disclosed to any third party or authority only with the prior express consent of the User.
The Data Controller does not verify the Personal data supplied to it. The responsibility for the correctness of the supplied data is borne solely by the person supplying them. By supplying an e-mail address, Users assume the responsibility for that only they use the services from the e-mail address provided. In view of this, all responsibility related to log-ins using the e-mail address provided is borne by the user who registered that e-mail address.
Principles of Data Control
Personal data must be obtained and processed in a fair and lawful manner.
Personal data may only be stored for a specific and lawful purpose, and must not be used in any other way.
Personal data must be proportionate to and comply with the purpose of storage, and must not exceed such purpose.
The method of storage of Personal data must be such as to ensure that they allow the identification of the given user only the time required for the purpose of the storage.
Appropriate security measures must be taken for the protection of Personal data stored in automated data sets in order to prevent accidental or unauthorized destruction, or accidental loss, as well as unauthorized access, modification or dissemination.
Data protection principles applied by Saulé Blanc
The Personal data absolutely necessary for using the services provided by Saulé Blanc are used by Saulé Blanc based on the consent of the data subjects and only for the designated purpose.
Saulé Blanc, as Data Controller, undertakes to control the Personal data obtained by it in accordance with the provisions of the Info Act and the principles of data protection set forth in this Policy, and not to disclose them to any third party.
In certain cases, e.g. official judicial or police inquiries, legal proceedings for copyright, property or other infringements or the reasonable suspicion thereof, which harm the interests of the Company or jeopardize the provision of services, etc., Saulé Blanc makes the available data of the data subject User accessible to third parties.
The system of Saulé Blanc may collect data about the activity of the Users, which must not be linked to the Personal data supplied by the Users upon registration or any data generated through the use of other websites or services.
Saulé Blanc undertakes to give a clear, explicit and unambiguous notice before recording, registering or controlling any Personal data of the Users, informing them of the method, purpose and principles of the data control. In addition, in all cases when the recording, control or registration of the data is not required by the law, Saulé Blanc calls the attention of the users to the voluntary nature of the data supply. In the case of mandatory data supply, the legislation ordering data control must also be stated. Data subjects must be informed about the purpose of the Data Control and the persons will control or process the Personal data. Information about the Data Control is considered to have been given also when legislation provides for the recording of data through transmission from or linking to an already existing Data Control.
In all cases where Saulé Blanc intends to use the supplied Personal data for a purpose different from that of the original data control, the User must be informed about this in order to obtain his prior express consent, and he must be given the opportunity to prohibit such use.
Saulé Blanc, acting as the Data Controller, complies in all cases with the restrictions set forth by legislation for the recording, registration and control of data, and informs the data subjects about its activity by electronic mail upon request. Saulé Blanc undertakes not to apply any sanctions against Users who refuse to supply non-mandatory data.
Certain functions, services may not be available if data supply is refused.
Saulé Blanc undertakes to ensure the security of Personal data and take all technical and organizational measures and develop rules of procedure to ensure the protection of the recorded, stored and controlled Personal data and prevent their destruction, unauthorized use or unauthorized modification. It also commits to call any third party to whom the Personal data may be transmitted or forwarded to comply with these obligations.
The data controller corrects the Personal data if the Personal data is incorrect and the Data Controller has access to the correct personal data.
Instead of deletion, the Data Controller blocks the Personal data if so requested by the data subject or if, on the basis of the information available to it, the deletion would probably violate the rightful interests of the data subject. Personal data blocked in this manner may only be controlled until the purpose of data control, which prevented the deletion of the Personal data, prevails.
The User involved, as well as all those to whom the data have been transmitted for the purpose of Data Control, must be notified of any correction, blocking or deletion of the controlled Personal data. The notification may be omitted if this does not violate the rightful interests of the data subject in view of the purpose of the Data Control.
Duration of data control
The Personal data supplied by the Users are controlled until the User requests the deletion of his Personal data and registration. The date of deletion is 5 working days from the receipt of the unsubscription (request for deletion) of the User. If illegal or deceptive Personal data are used or the User commits any crime or attack against the system, the Data Controller is entitled to delete the data of such User without delay and terminate his registration simultaneously, however, in the case of a suspected crime or civil liability, it is entitled to keep the Personal data for the duration of the proceedings to be conducted.
The Personal data supplied by the User may be controlled by Saulé Blanc, as the Data Controller, until the User explicitly requests stopping the control thereof in writing, even if the User does not unsubscribe from the service. The request of the User for stopping the Data Control without unsubscribing from the service does not affect his right to use the service, however, he may be unable to use certain services in the absence of Personal data. Personal data are deleted within 5 working days from the receipt of the request to that effect.
Data automatically recorded by technical means in the course of the operation of the system are stored in the system from their generation for a duration reasonably necessary for the operation of the system. Saulé Blanc ensures that these automatically recorded data cannot be linked to other Personal data of the Users, except for the mandatory cases required by the law. If the User terminates his consent to the control of his Personal data or unsubscribes from the service, his person will not be identifiable from the technical data any longer.
Disposal with personal data
Any notice of changes in the Personal data and requests for the deletion of Personal data shall can be given by means of an express written statement sent to the firstname.lastname@example.org e-mail address. The newsletter can be unsubscribed by changing the settings in the user interface (My Saulé Blanc menu item).
In addition, certain Personal data may also be modified under the My Saulé Blanc menu item.
Once the request for the deletion or modification of Personal data is fulfilled, the previous (deleted) data can no longer be retrieved.
Saulé Blanc does not use an external data processor. It will process the Personal data controlled by it.
Possibility for data transmission
Saulé Blanc, acting as the Data Controller, is entitled and obliged to transmit all Personal data available to it and stored lawfully to the competent authorities where such Data transmission is required by the law or a final official obligation. The data controller may not be held responsible for such data transmission or the consequences thereof.
If the User wants to use the PayU online payment system to pay for his shopping in the sauléblanc.com webshop, the following Personal data will be transferred to PayU Hungary Ltd. (1074 Budapest, Rákóczi út 70-72) based on the express individual consent of the User: username, family name, given name, country, phone number, e-mail address. By giving his consent, the User accepts the General Terms of Contract and the data control policy of PayU Hungary Ltd. PayU Hungary Ltd. will control the transmitted Personal data on the basis of its own data protection regulations.
The Company keeps a record of data transmissions in order to verify the lawfulness of Data transmission and inform the data subjects, which contains the time of transmission of the Personal data controlled by it, the legal basis for and the recipient of the Data transmission, the scope of the transmitted Personal data, as well as any other data specified by the law requiring Data Control.
Amendment of the data control policy
Saulé Blanc reserves the right to amend these Data Control Policy by unilateral decision at any time. Following the amendment of the Data Control Policy, all Users must be informed appropriately (by a pop-up window upon log-in or displaying a notice on the website). By continuing the use of the service, the Users accept the amended data control regulations; no further consent is necessary.
Rights of users with respect to their personal data controlled by the data controller
Users may request information about the control of their Personal data from Saulé Blanc, as the Data Controller, at any time in writing, by sending a registered letter or a registered letter with return receipt to the address of the Data Controller, or an e-mail to the email@example.com address. A request for information sent by e-mail is considered authentic by the Data Controller only if sent from the registered e-mail address of the User. The request for information may cover the data of the user controlled by the data controller, their sources, the purpose and duration of and the legal basis for the Data Control, the name and address of any possible data processors, the activities undertaken in connection with the Data Control and, in the event that the Personal data are transmitted, the recipients of the data of the User and the purpose for which they have received or will receive the data.
The Data Controller is required to provide written information on the Data Control in response to a request as soon as possible, and within 30 days from the receipt thereof at latest. In the case of e-mails, the date of receipt is considered to be the first working day following the day on which the e-mail is sent.
Available legal remedy
Users may enforce their rights before the court according to the Info Act and Act No IV of 1959 (Civil Code). They can seek assistance in any matters related to personal data from the Hungarian National Authority for Data Protection and Freedom of Information (1125 Budapest, Szilágyi Erzsébet fasor 22/C.; postal address: 1530 Budapest, Pf. 5.). In addition, the staff of the Data Controller may also be contacted with any questions and comments related to Data Control at the firstname.lastname@example.org e-mail address.
You can refuse the use of Google Analytics by clicking on the following link. An opt-out cookie will be set on the computer, which prevents the future collection of your data when visiting this website: Disable Google Analytics
The provider uses the remarketing or “similar target groups” function of Google Inc. (“Google”) on the website.
Note that, in general, the boilerplate privacy policies are only recommendations and in no way incur liability on our part. In these matters, we recommend that you seek the advice of an attorney for your own protection.
Sopron, 26. September 2014