Privacy Policy

Data protection and data management policy of Labsystem Kft.

The purpose of the policy

The purpose of these policies is to record the data protection and data management principles applied by Labsystem Kft. ("Company") and the Company's data protection and data management policy, which the Company recognizes as binding on itself.

When developing these rules, the Company took into account the CXII of 2011. Act on the right to self-determination of information and freedom of information ("Infotv."), CXIX of 1995. Act on the handling of name and address data for the purpose of research and direct business acquisition, Act VI of 1998. Act on the Protection of Individuals during Machine Processing of Personal Data, on the Promulgation of the Convention dated January 28, 1981 in Strasbourg, and Act XLVIII of 2008. Act on the basic conditions and certain limitations of economic advertising, as well as the recommendations of the "ONLINE PRIVACY ALLIANCE".

The purpose of these policies is to ensure that in all areas of the services provided by the Company, for all individuals, regardless of their nationality or place of residence, their rights and fundamental freedoms, especially their right to privacy, are respected during the machine processing of their personal data (data protection).

Data protection registration ID of Labsystem Kft.: NAIH-102750/2016.

Concept definitions

Personal data: data that can be associated with a specified natural person (hereinafter: the data subject), in particular the data subject's name and identification mark, as well as knowledge characteristic of one or more physical, physiological, mental, economic, cultural or social identities that can be deduced from the data, relating to the data subject conclusion. During data processing, personal data will retain its quality as long as the relationship with the data subject can be restored;

Data file: the totality of the data managed in a register;

Data management: regardless of the procedure used, any operation performed on the data or the set of operations, including in particular the collection, recording, organization, storage, change, use, query, transmission, disclosure, coordination or connection, blocking, deletion and destruction and prevention of further use of the data;

Data controller: Labsystem Kft. (head office: 2095 Pilisszántó, 22 Vörösmarty u.)

Data processing: performing technical tasks related to data management operations, regardless of the method and tool used to perform the operations, as well as the place of application, provided that the technical task is performed on the data;

Data destruction: complete physical destruction of the data carrier containing the data;

Data transmission: making Personal Data available to a specified third party;

Disclosure: making Personal Data available to anyone;

Data processor: the natural or legal person or organization without legal personality who processes personal data on behalf of the data controller;

Data deletion: making data unrecognizable in such a way that their recovery is not possible;

Automated data file: series of data to be processed automatically;

Machine processing: includes the following operations if they are performed partially or fully by automated means: storage of data, logical or arithmetic operations performed on data, alteration, deletion, retrieval and distribution of data;

User: the natural person who registers on the Company's website (www.laboreszkozkatalogus.hu).

The managed Personal Data

3. 1. Data that can be entered based on the User's decision: e-mail address, telephone number, name, place of residence/residence, place and time of birth, the product category purchased by the User when ordering, the payment method used by the User, the the item amount of the User's purchases, the User's frequent customer ID created in the framework of the frequent customer program.
   2. Technically recorded data during the operation of the system: the data of the User's logged-in computer, which are generated during the use of the service, and which are recorded by the Data Controller's system as an automatic result of the technical processes. The automatically recorded data is automatically logged by the system upon entry and exit without any special declaration or action by the User. Other users of this data cannot be linked to their Personal Data - except in cases made mandatory by law. Only the Data Controller has access to the data.
   3. In order to provide customized service, the Company places a small data package (so-called "cookie") on the User's computer. The purpose of the cookie is to ensure the highest possible level of operation of the given page in order to increase the user experience. The User can delete the cookie from his computer or set his browser to prohibit the use of cookies. By prohibiting the use of cookies, the User acknowledges that the operation of the given page is incomplete without cookies.

Legal basis, purpose and method of Data Management

4. 1. Data management is carried out on the basis of a voluntary, properly informed declaration by the Users of the Internet content on the eletoltes.hu website, which declaration contains the express consent of the Users to the use of their Personal Data provided during the use of the website. The legal basis for Data Management is CXII of 2011 on the right to self-determination of information and freedom of information. § 5 (1) of the Act according to point a), the voluntary consent of the person concerned.

4. 1. The purpose of Data Management is to ensure the provision of services available under the URL www.laboreszkozkatolos.hu. The range of Personal Data required to use these services can be found in the description of the relevant services.

4. 2. The purpose of automatically recorded data (see point 3.2) is to ensure the provision of services available through the Company's websites, to display personalized content and advertisements, to create statistics, to improve the technical development of the IT system, and to protect the rights of users. The Data Controller may use the data made available by the Users during the use of the service to form user groups and to display targeted content and/or advertising for the user groups on the Company's websites.

4. 3. The Data Controller may not use the provided Personal Data for purposes other than those described in these points. The release of personal data to third parties or authorities - unless the law has otherwise binding force - is only possible with the prior express consent of the User.

4. 4. The data manager does not check the Personal data provided to him. The person providing the data is solely responsible for the adequacy of the data provided. When any User provides his/her e-mail address, he/she assumes responsibility for the fact that only he/she uses the service from the given e-mail address. In view of this disclaimer, all liability related to logins to a specified e-mail address rests solely with the user who registered the e-mail address.

Principles of data management

5. 1. Personal data may only be obtained and processed fairly and lawfully.

5. 1. Personal data may only be stored for specific and lawful purposes and may not be used in any other way.

5. 2. Personal data must be proportionate to the purpose of their storage and must comply with this purpose, they cannot expand beyond it.

5. 3. The storage method of Personal Data must be such that the identification of the concerned User is possible only for the time necessary for the purpose of storage.

5. 4. Adequate security measures must be taken to protect Personal Data stored in automated data files against accidental or unlawful destruction or accidental loss, as well as unlawful access, alteration or distribution.

Data protection directives applied by the Company

6. 1. The Company uses Personal data that is absolutely necessary for the use of the services of Labsystem Kft. based on the consent of the persons concerned and only for specific purposes.

6. 1. The Company, as a Data Controller, undertakes that the Personal data obtained by "Infotv." is managed in accordance with its provisions and the data protection principles set out in these Regulations.

6. 2. The Company, in certain cases - official court or police inquiries, legal proceedings, infringement of copyright, property or other rights, or due to reasonable suspicion of such, harming the interests of the Company, jeopardizing the provision of its services, etc. - makes the available data of the concerned User accessible to third parties.

6. 3. Labsystem Kft.'s system may collect data on the Users' activity, which cannot be linked to the Personal Data provided by the Users upon registration, nor to data generated when using other websites or services.

6. 4. The Company undertakes to publish a clear, attention-grabbing and unequivocal notice informing them of the method, purpose and principles of data collection before recording, recording and processing any of its Users' Personal Data. In addition to all of this, in all cases where data collection, handling, and recording are not required by law, the Company draws the user's attention to the voluntary nature of data provision. In the case of mandatory data provision, the legislation ordering Data Management must also be indicated. The data subject must be informed about the purpose of Data Management and who will handle and process the Personal Data. Information about Data Management is provided even if the legislation provides for the transfer or connection of data from the already existing Data Management.

6. 5. In any case, if the Company intends to use the provided Personal Data for a purpose other than the purpose of the original data collection, it shall inform the User of this and obtain his/her express prior consent, or provide him/her with the opportunity to prohibit the use.

6. 6. Labsystem Kft., as a Data Controller, always complies with the restrictions laid down by law during the recording, recording and processing of data, and informs the data subject of its activities by e-mail as required. The Company undertakes not to enforce any sanctions against a User who refuses to provide non-mandatory data.

6. 7. Labsystem Kft. undertakes to take care of the security of Personal data, to take the technical and organizational measures and to establish the procedural rules that ensure that the collected, stored and managed Personal data are protected, and to prevent their destruction, unauthorized use and unauthorized modification. You also undertake to call on all third parties to whom you may forward or transfer the Personal Data to fulfill their obligations in this regard.

6. 8. If the Personal Data does not correspond to the reality, and the Personal Data corresponding to the reality is available to the Data Controller, the Personal Data will be corrected by the Data Controller.

6. 9. Instead of deletion, the Data Controller locks the Personal Data if the data subject requests this, or if, based on the available information, it can be assumed that the deletion would harm the legitimate interests of the data subject. Personal data locked in this way can only be processed as long as the data management purpose that precluded the deletion of the Personal data exists.

6. 10. About the correction, blocking or the affected User and all those to whom the data was previously transmitted for the purpose of Data Management must be notified of the deletion. The notification may be omitted if this does not violate the legitimate interests of the data subject in view of the purpose of Data Management.

Duration of data management

7. 1. The management of Personal Data provided by the User will continue until the User unsubscribes from the service - with the given username. The date of deletion is 10 working days from the date of receipt of the User's unsubscribe (deletion request). In the event of illegal or misleading use of Personal Data or in the event of a crime committed by the User or an attack against the system, the Data Controller is entitled to delete the User's data immediately upon termination of the User's registration. .

7. 1. The Personal Data provided by the User - even if the User does not unsubscribe from the service - can be processed by the Company as Data Controller until the User specifically requests in writing to terminate their processing. The User's request to terminate Data Management, without opting out of the service, does not affect his right to request the service, however, it may be that he will not be able to use certain services (e.g. auctions, leaderboards) in the absence of Personal Data. Personal data will be deleted within 10 working days from the receipt of the request.

7. 2. Data that are automatically and technically recorded during the operation of the system are stored in the system for a period justified from the point of view of ensuring the operation of the system, starting from their generation. The Company ensures that this automatically recorded data cannot be combined with other users' Personal Data, except in cases where it is required by law. If the User has canceled his consent to the processing of his Personal Data or has unsubscribed from the service, his identity will no longer be identifiable from the technical data.

Provisions of personal data

8. 1. A change in personal data or a request for the deletion of personal data can be communicated by means of a written statement sent via the internal mail system of the service. The sending of newsletters can be canceled by changing the settings of the user interface on the site.

8. 1. Some Personal Data can also be changed by making changes on the page containing the personal profile.

8. 2. Once a request to delete or modify personal data has been fulfilled, the previous (deleted) data can no longer be restored.

Data processing

9. 1. Labsystem Kft. does not use a separate external data processor. It processes the Personal data it manages.

Modification of the data management policy

10. 1. Labsystem Kft. reserves the right to unilaterally modify these Data Management Regulations at any time. After the amendment of the Data Management Policy, all Users must be informed in an appropriate way (in a newsletter, in a pop-up window when logging in). By continuing to use the service, Users acknowledge the changed data management rules, there is no need to ask for their consent beyond this.

The rights of users in relation to their personal data managed by the data controller

11. 1. Users can request information about the management of their personal data from the Company, as the Data Controller, at any time in writing, by registered or registered mail sent to the Data Controller's address, or by e-mail sent to info@labsystem.hu. The Data Controller considers a request for information sent by e-mail as authentic only if it is sent from the User's registered e-mail address. The request for information may cover the user's data managed by the data controller, their source, the purpose, legal basis and duration of the Data Management, the name and address of any data processors, the activities related to the Data Management, and, in the case of transmission of Personal Data, who received it and for what purpose and User data.

11. 1. The Data Controller is obliged to provide written information on questions related to Data Management as soon as possible, but no later than 30 days after receipt. In the case of e-mail, the date of receipt shall be considered the first working day after sending.

Legal enforcement options

12. 1. The User asserts his rights under "Infotv." and the 1959 IV. TV. (Ptk.) you can exercise it before a court, and you can also ask for the help of the National Data Protection and Freedom of Information Authority (1125 Budapest Szilágyi Erzsébet fasor 22/C; postal address: 1530 Budapest, Pf. 5.) in any question related to personal data. In addition, the staff of the Data Controller can be contacted with any questions or comments related to Data Management at the e-mail address info@labsystem.hu.

2015.12.18.

Data protection registration ID : NAIH-102750/2016