General information
Sillmaster Ltd. (Registered office: 6000 Kecskemét, land parcel number: 01537/196.), as the Data Controller, acknowledges the mandatory content of this Data Protection and Data Handling Policy (hereinafter referred to as the “Policy”). The Data Controller undertakes to ensure that data processing related to the services it provides complies with the legal requirements and provisions outlined in this Policy.
The Data Controller reserves the right to change this Policy. The Data Controller will notify users of changes to the Policy in advance on its website.
The Data Controller shall treat the personal data provided by users as confidential and shall take all security, technical and organizational measures to ensure the security of the data.
Sillmaster Ltd., Registered office and mailing address: 6000 Kecskemét, land parcel number: 01537/196
E-mail address: info@sillmaster.hu
The principles of data processing and the protection of personal data apply exclusively to natural persons, as personal data can only be interpreted in relation to natural persons.
Personal data may only be processed if
Personal data may only be processed for specific purposes, exercising rights, and fulfilling obligations. At every stage of data processing, it must correspond to the purpose of data processing, and the collection and processing of data must be fair and lawful.
Only personal data that is essential and suitable for achieving the purpose of data processing may be processed. Personal data may only be processed to the extent and duration necessary for the purpose.
Personal data must retain its quality throughout the data processing if the connection with the data subject can be restored. The connection can be restored if the data controller has the technical conditions necessary for restoration.
Data accuracy, completeness, and, if necessary for the purpose of data processing, timeliness must be ensured during data processing. The data subject can only be identified for the time necessary for data processing.
The processing of personal data shall be considered fair and lawful if, in order to ensure the freedom of expression of the data subject, the person who wishes to know the opinion of the data subject visits the data subject at his or her place of residence or stay, provided that the personal data of the data subject are processed in accordance with the provisions of this Act and the personal inquiry is not for commercial purposes. The personal inquiry may not take place on a public holiday within the meaning of the Labour Code.
The data controller undertakes to ensure the security of data and takes technical measures to ensure that the data collected, stored, and processed are protected, and does everything to prevent their destruction, unauthorized use, and unauthorized alteration. The data controller also undertakes to notify any third parties to whom the data may be transferred or disclosed of its obligations in this regard.
The legal basis for data processing is the voluntary, informed consent of the users of the Website, which includes the users’ explicit consent for the use of their personal data provided during the use of the site.
The legal basis for data processing is the voluntary consent of the data subject in accordance with Section 5 (1) a) of Act CXII of 2011 on informational self-determination and freedom of information (so called “Infotv.”). The data subject grants consent for each data processing by using the Website, registering, or voluntarily providing the relevant data.
The purpose of data processing is to ensure the quality of the services provided by the Data Controller through the Website. The Data Controller stores the data provided by the user for specific purposes, exclusively for the fulfillment of orders, the subsequent proof of the conditions of any contracts that may arise, and for the proper handling of any notifications or complaints that may arise.
The Data Controller may only use the personal data provided by the user for the purpose specified in this Policy. In the absence of any contrary legal provisions, the disclosure of personal data provided by the user to third parties or authorities is only possible with the prior, explicit consent of the user.
The Data Controller does not verify the accuracy of the data provided by the user, and the person providing the data is responsible for the accuracy of the data. By providing their email address, the user also assumes responsibility for ensuring that only they use the Website’s services from that email address. Consequently, all responsibility for access from a given email address lies with the user who provided that email address.
The use of the Website does not require registration. Products are manufactured based on the data provided by the customer after placing an order. When placing an order, the user is required to provide the following personal data:
The operation of the information technology system underlying the Website may automatically record the following data: data generated during the use of the service on the user’s login computer, which is recorded by the Data Controller’s system as a result of technical processes. The data recorded automatically is logged by the system upon entry and exit without the user’s separate declaration or action. Except in cases required by law, these automatically recorded data cannot be linked to other personal user data.
In order to provide personalized service, the Data Controller may place a small data package, known as a “cookie,” on the user’s computer. The Data Controller, as a technical intermediary, may ensure that during visits to the Website, third parties cooperating with the Data Controller, especially Google Inc., store information through cookies if the user has previously visited the Data Controller’s website, and based on this, they may display advertisements to the user. Users can delete cookies from their computers or configure their browsers to disable the use of cookies. Furthermore, Google provides a page for disabling Google-placed cookies (http://www.google.hu/privacy_ads.html).
The personal data provided during registration will be processed by the Data Controller from the moment of registration until its deletion. The deletion of registration can be initiated by the user at any time in a manner where the user contacts the Data Controller in writing (via email or postal mail) using one of the contact details provided by the Data Controller in point 2 of the Policy.
The Data Controller pays special attention to the lawful use of the email addresses it manages. Therefore, the email addresses provided by users will only be used for sending emails as defined below.
The management of email addresses primarily serves the identification of users, the fulfillment of orders, and communication during the use of the Website’s services.
The Data Controller may regularly notify users via newsletters, who have requested to receive them. The content of the newsletters sent may vary based on the data provided by the users. Users have the right to unsubscribe from the newsletter at any time using the link provided at the bottom of the email.
The data provided by the user may primarily be accessed by the internal employees of the Data Controller.
The Data Controller is authorized to engage data processors (e.g., accountants, courier services) for the operation of the information system, fulfilling user orders, and for settlement purposes.
Furthermore, the transmission of personal data provided by the user can only occur with the user’s consent or in cases of mandatory data transmission as prescribed by law.
The user has the right to request information about their personal data managed by the Data Controller at any time. The user is entitled to request the correction of incorrectly recorded data or the deletion of such data. Upon receipt of the request, the Data Controller will delete the data within 3 working days, and in such cases, the data cannot be restored. Deletion does not apply to data processing required by law; in which case the Data Controller will retain the data for the necessary duration.
Upon the user’s request, the Data Controller provides information about the data concerning the user, the purpose and legal basis of data processing, its duration, and who has received or will receive the data, along with the purpose. The Data Controller will provide this information in writing within 30 days of receiving the request.
The user can exercise their rights related to legal remedies through the contact details provided in section 2 of this Regulation.
Pursuant to Act CXII of 2011 on the Right of Informational Self-Determination and on Freedom of Information and Act V of 2013 on the Civil Code, the user can enforce their rights in court and, in the case of complaints regarding the data processing practices of the Data Controller, can turn to the National Authority for Data Protection and Freedom of Information (NAIH) (1125 Budapest, Szilágyi Erzsébet fasor 22/C).
Kecskemét, 2018.05.01
Ne maradj le a legfrissebb híreinkről, tartalmainkról! Iratkozz fel a hírlevelünkre, és rendszeres időközönként elküldjük neked a Sillmaster legfontosabb híreit. Ígérjük, hogy nem fogunk levelekkel elárasztani!
