Name: Madarász Lajos E.V.

Registered office: 8200 Veszprém, Cserhát housing estate 2/D II/10.

Mailing address, complaint handling: 1115 Budapest, Tétényi út 22. II/8

Email: info@evosim.hu

Website: www.evosim.hu

Name: Rackhost Zrt.

Mailing address: 1132 Budapest, Victor Hugo Street 18-22.

Email address: info@rackhost.hu

Phone number: +36 1 445 1200

This document contains all relevant data processing information regarding the operation of the webshop in accordance with Regulation (EU) 2016/679 of the European Union (hereinafter referred to as the Regulation, GDPR) and Act CXII of 2011 (hereinafter referred to as the Infotv.).

What is a cookie?
During the visit to the website, the Data Controller uses so-called cookies. A cookie is a packet of information consisting of letters and numbers that our website sends to your browser for the purpose of saving certain settings, facilitating the use of our website, and contributing to the collection of some relevant, statistical information about our visitors.

Some of the cookies do not contain personal information and are not suitable for identifying the individual user; however, some of them contain a unique identifier—a secret, randomly generated sequence of numbers—stored by your device, thereby also ensuring your identifiability. The operating duration of each cookie is specified in the description relevant to that cookie.

Legal background and legal basis for cookies:
Basically, we distinguish three types of cookies: strictly necessary cookies, which serve the proper functioning of the Website, statistical cookies, and marketing cookies.

Based on Article 6(1)(a) of the Regulation, the legal basis for data processing is your consent in the case of statistical and marketing cookies, and pursuant to Article 6(1)(f) of the Regulation, the legitimate interest necessary for ensuring the operation of the Website in the case of cookies necessary for operation.

Cookies, GDPR policy in the XStore WordPress theme
The General Data Protection Regulation (GDPR) is a legal framework that sets guidelines for the collection and processing of individuals' personal data. It provides a legal framework for keeping everyone's personal data secure by requiring companies to have robust processes in place for handling and storing personal data.

Some XStore Theme Options add custom cookies that must be mentioned in the website's privacy policy (GDPR).

Note: If the option is always turned off and you never turn it on, no cookie is created.

A cookie is a piece of information that a website places on the user's computer. Cookies store limited information about a browsing session on a given website, which can be retrieved in the future. They are sometimes also referred to as browser cookies, web cookies, or internet cookies.

List of terms:

Name - the name of the cookie
goal - description of the cake
expiration - the duration of long-term cookie storage on the client side

Note: „by default” means the default value provided by the theme. This can be changed via Theme Options or custom filters / or other types of customization.

Note: The cookie is not deleted immediately after disabling the option. It is deleted after its expiration time runs out.

List of cookies:

name: age verify popup shows
goal: Retaining the success value of the pop-up validation.
expiration: 1 day
name: et_promo_text_show
goal: Keeping the value of the promo text element in the header permanently locked.
expiration: 1 day
name: newsletter shows
goal: Preserving the permanently closed state of the newsletter popup in the header.
expiration: 1 day
name: et_search_history
goal: Storage of user search queries
expiration: name: xstore_wishlist_ids_0
goal: Storing information for built-in wishlist products.
expiration: 7 days
name: xstore_compare_ids_0
goal: Storage of built-in product comparison information.
expiration: 7 days
name: etheme_cookies
goal: Storage of integrated product comparison information
expiration: 3 days

For the purpose of concluding and performing the contract, several data processing activities may take place. Please be informed that data processing related to complaint management and warranty administration will only take place if you exercise any of the aforementioned rights.

If you do not make a purchase through the webshop and are merely a visitor to the webshop, the provisions regarding data processing for marketing purposes may apply to you, provided that you give us your consent for marketing purposes.

The data processing activities carried out for the conclusion and performance of the contract are detailed below.

For example, if you contact us with a question about a product via email, contact form, or phone. Prior contact is not mandatory; you can order from the webshop at any time without it. 

Managed data
The data used by you for contact. 

Duration of data processing
We process the data only until the contact is closed. 

The legal basis for data processing
Your voluntary consent, which you provide to the Data Controller by contacting them. [Data processing pursuant to Article 6(1)(a) of the GDPR]

By storing the data provided during registration, the Data Controller can provide a more convenient service (e.g., the data subject's details do not need to be re-entered for a subsequent purchase). Registration is not a condition for concluding the contract.

Managed data
During data processing, the Data Controller handles your name, address, phone number, e-mail address, the characteristics of the purchased Product, and the time of purchase.

Duration of data processing
Until the withdrawal of your consent.

The legal basis for data processing
Your voluntary consent, which you provide to the Data Controller upon registration. [Data processing pursuant to Article 6(1)(a) of the Regulation]

Data processing activities are necessary for the performance of the contract during the processing of orders.

Managed data
During data processing, the Data Controller handles your name, address, phone number, email address, the characteristics of the purchased Goods, the order number, and the time of purchase.

If you have placed an order in the webshop, data processing and the provision of data are essential for the fulfillment of the contract.

Duration of data processing
The data will be processed for 5 years in accordance with the civil law limitation period.

The legal basis for data processing
Performance of the contract. (Data processing pursuant to Article 6(1)(b) of the Regulation)

The data processing takes place in order to issue an invoice in compliance with the legal regulations and to fulfill the obligation to retain accounting documents. Pursuant to Section 169 (1)-(2) of the Accounting Act, business entities must retain accounting documents that directly and indirectly support accounting records.

Managed data
Name, address, e-mail address, phone number.

Duration of data processing
Based on Section 169 (2) of the Accounting Act, issued invoices must be retained for 8 years from the date of issuance.

The legal basis for data processing
Pursuant to Section 159 (1) of Act CXXVII of 2007 on Value Added Tax, the issuance of an invoice is mandatory, and it must be retained for 8 years pursuant to Section 169 (2) of Act C of 2000 on Accounting (data processing pursuant to Article 6 (1) (c) of the Regulation).

The data processing takes place in order to deliver the ordered product.

Managed data
Name, address, e-mail address, phone number.

Duration of data processing
The Data Controller manages the data until the delivery of the ordered goods.

The legal basis for data processing
Performance of a contract [Data processing pursuant to Article 6(1)(b) of the GDPR].

Recipients and data processors of data processing related to goods delivery

FOXPOST Zrt.

FoxPost Private Limited Company
Company Registration Number: 10–10-020309 – Court of Registration of the Eger Tribunal
Tax number: 25034644-2-10
Headquarters: Hungary, 3300 Eger, Maklári út 119.
Site: 1097 Budapest, Könyves Kálmán körút 12-14.
Place of business activity: Hungary
Phone: +36 1 999 0369
E-mail: info@foxpost.hu

Hungarian Post Office Private Company Limited by Shares.

Hungarian Post Private Limited Company
Company registration number: Cg. 01-10-042463
Tax number: 10901232-4-44
Registered office: 1138 Budapest, Dunavirág utca 2-6.
Bank account number: 18203332-06000412-40010015
Statistical code: 10901232-5310-114-01
Group Identification Number: 17784083-5-44
Social security number: 4035-8
Economic chamber registration number: 125408
Name of the account-holding financial institution: MBH Bank Nyrt.

Based on the contract concluded with the Data Controller, the courier service contributes to the delivery of the ordered goods. The courier service handles the received personal data in accordance with the provisions set out in the privacy policy available on its website.

Warranty and guarantee claims must be processed in accordance with the rules of the NGM Decree No. 19/2014 (IV. 29.), which also defines how your claim must be handled.

Managed data
When handling warranty and guarantee claims, we must proceed in accordance with the rules of NGM Decree No. 19/2014 (IV. 29.).

Based on the decree, we are required to draw up a report on the warranty or guarantee claim reported to us, in which we record:

1. your name, address, and your declaration consenting to the processing of your data recorded in the minutes as specified in the regulation,
2. the description and purchase price of the movable property sold under the contract concluded between you and us,
3. the date of performance of the contract,
4. the time of reporting the error,
5. the error description,
6. furthermore, the right you wish to assert based on your warranty or guarantee claim, and
7. the method of settling the warranty or guarantee claim, or the reason for rejecting the claim or the right intended to be asserted based on it.

If we take delivery of the Goods purchased from you, we must issue a receipt of delivery, which must indicate

1. your name and address,
2. the data necessary to identify the item,
3. the date of receipt of the item, furthermore
4. the time when you can pick up the repaired item.

Duration of data processing
The business is obliged to retain the report recorded on the consumer's warranty or guarantee claim for three years from the date of its recording and to present it upon the request of the inspecting authority.

The legal basis for data processing
The legal basis for data processing is compliance with legal obligations pursuant to Section 4 (1) and Section 6 (1) of NGM Decree No. 19/2014 (IV. 29.) [data processing under Article 6 (1) (c) of the Regulation].

The data processing is carried out in order to handle consumer protection complaints. If you have contacted us with a complaint, the data processing and the provision of data are essential.

Managed data
Customer name, phone number, email address, content of the complaint.

Duration of data processing
Consumer protection complaints are retained for 3 years pursuant to the Consumer Protection Act.

The legal basis for data processing
Whether you turn to us with a complaint is your voluntary decision; however, if you do turn to us, pursuant to Section 17/A, Paragraph (7) of Act CLV of 1997 on Consumer Protection, we are obligated to retain the complaint for 3 years (data processing pursuant to Article 6, Paragraph (1), Point c) of the Regulation).

During registration, ordering, and newsletter subscription, the IT system stores the consent-related IT data for subsequent verifiability.

Managed data
The date and time of the consent and the IP address of the data subject.

Duration of data processing
Due to legal regulations, the consent must be verifiable at a later date, therefore the data is stored for the period of limitation following the termination of data processing.

The legal basis for data processing
Article 7(1) of the Regulation establishes this obligation. [Data processing pursuant to Article 6(1)(c) of the Regulation]

The data processing activity is carried out for the purpose of sending out newsletters.

Managed data
Name, address, email address.

Duration of data processing
Until the data subject withdraws their consent.

The legal basis for data processing
Your voluntary consent, which you provide to the Data Controller by subscribing to the newsletter. [Data processing pursuant to Article 6(1)(a) of the Regulation]

If the Data Controller intends to perform further data processing, it shall provide prior information on the essential circumstances of the data processing (legal background and legal basis of the data processing, purpose of the data processing, scope of the processed data, duration of the data processing).

Name: Rackhost Zrt.

Mailing address: 1132 Budapest, Victor Hugo Street 18-22.

Email address: info@rackhost.hu

Phone number: +36 1 445 1200

The Data Processor stores personal data based on the agreement concluded with the Data Controller. It is not authorized to access personal data.

Name of the data processor: Számlázz.hu
Data processor's registered office: 1031 Budapest, Záhony utca 7.
Data processor's email address: info@szamlazz.hu
Data processor's website: https://www.szamlazz.hu/

Based on the contract concluded with the Controller, the Processor contributes to the recording of accounting documents. In the course of this, the Processor shall process the data subject's name and address to the extent necessary for accounting records, for the duration corresponding to Section 169 (2) of the Accounting Act (Sztv.), and shall delete them thereafter.

Name of the data controller: Stripe, Inc.
Data controller's registered office: 185 Berry Street, Suite 550, San Francisco, CA 94107,USA
The data controller's email address: info@stripe.com
Website: www.stripe.com
Privacy Policy: Privacy Policy - Hungary | Stripe | Hungary

Within the duration of data processing, you are entitled to the following rights under the provisions of the Regulation:

• right to withdraw consent
• access to personal data and information related to data processing
• right to rectification
• restriction of data processing
• right to erasure
• right to protest
• right to portability

If you wish to exercise your rights, this involves your identification, and the Data Controller must necessarily communicate with you. Therefore, personal data will be required for identification purposes (though identification can only be based on data that the Data Controller already processes about you), and your complaints regarding data processing will be accessible in the Data Controller's email inbox within the period specified in this information notice regarding complaints. If you were a customer and wish to identify yourself for the purpose of complaint handling or warranty administration, please also provide your order ID for identification. By using this, we can also identify you as a customer.

The Data Controller shall respond to complaints related to data management within 30 days at the latest.

The right to withdraw consent
You have the right to withdraw your consent to data processing at any time, in which case the provided data will be deleted from our systems. However, please note that in the case of a yet unfulfilled order, the withdrawal may result in our inability to deliver the shipment to you. Furthermore, if the purchase has already been completed, based on accounting regulations, we cannot delete the billing-related data from our systems, and if you have an outstanding debt to us, we may continue to process your data even after the withdrawal of consent based on our legitimate interest in debt collection.

Access to personal data
You have the right to receive feedback from the Data Controller as to whether or not the processing of your personal data is underway, and if such processing is underway, you have the right to:

• receive access to the processed personal data and
• the Data Controller shall inform about the following information:
  • purposes of data processing;
  • categories of personal data processed concerning you;
  • information on the recipients or categories of recipients, if any, to whom the personal data have been or will be disclosed;
  • the planned duration of the storage of personal data, or if this is not possible, the criteria for determining this duration;
  • your right to request from the Data Controller the rectification, erasure, or restriction of processing of personal data concerning you, and, in the case of data processing based on legitimate interest, to object to the processing of such personal data;
  • the right to lodge a complaint with a supervisory authority;
  • any available information regarding their source, if the data were not collected from you;
  • about the fact of automated decision-making, including profiling, and at least in these cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you.

The purpose of exercising the right may be aimed at establishing and verifying the lawfulness of data processing; therefore, in the event of repeated requests for information, the Data Controller may charge a reasonable fee in exchange for fulfilling the request for information.

The Data Controller ensures access to personal data by sending the processed personal data and information to you via email following your identification. If you have a registration, we ensure access by allowing you to view and check the personal data processed about you by logging into your user account.

Please indicate in your request whether you are requesting access to personal data or information regarding data processing.

Right to rectification
You have the right to obtain from the Data Controller, without undue delay, the rectification of inaccurate personal data concerning you.

Right to restriction of processing
You have the right to request that the Data Controller restrict the processing of your data if any of the following apply:

• You contest the accuracy of the personal data, in which case the restriction applies for a period enabling the Data Controller to verify the accuracy of the personal data; if the accurate data can be established immediately, no restriction shall take place;
• the data processing is unlawful, but you oppose the erasure of the data for any reason (for example, because the data is important to you for the establishment, exercise, or defense of legal claims), and therefore you do not request the erasure of the data, but instead request the restriction of its use;
• the Controller no longer needs the personal data for the purposes of the processing, but you require them for the establishment, exercise or defence of legal claims; or
• You have objected to the data processing, but the legitimate interest of the Data Controller may also justify the data processing; in this case, until it is determined whether the legitimate grounds of the Data Controller override your legitimate grounds, the data processing must be restricted.

Where processing has been restricted, such personal data shall, with the exception of storage, only be processed with the consent of the data subject or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

The Data Controller shall inform you in advance (at least 3 business days prior to the lifting of the restriction) about the lifting of the restriction of data processing.

Right to erasure - right to be forgotten
You have the right to obtain from the Controller the erasure of personal data concerning you without undue delay where one of the following grounds applies:

• the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed by the Controller;
• You withdraw your consent and there is no other legal basis for the data processing;
• You object to data processing based on a legitimate interest, and there is no overriding legitimate ground (i.e., legitimate interest) for the processing,
• the personal data was unlawfully processed by the Data Controller, and this was established on the basis of the complaint,
• personal data must be erased for compliance with a legal obligation under Union or Member State law to which the controller is subject.

If the Data Controller has made the personal data concerning you public for any lawful reason and is obliged to erase it for any of the reasons set forth above, taking into account available technology and the cost of implementation, it shall take reasonable steps, including technical measures, to inform other data controllers processing the data that you have requested the erasure of links to, or copies or replications of, the personal data in question.

Erasure shall not apply to the extent that processing is necessary:

• for the purpose of exercising the right to freedom of expression and the right to information;
• fulfillment of an obligation under Union or Member State law applicable to the controller which requires the processing of personal data (such an instance is data processing in the context of invoicing, since the retention of the invoice is prescribed by law), or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
• for the submission, enforcement, or defense of legal claims (e.g., if the Data Controller has a claim against you that you have not yet fulfilled, or if a consumer or data management complaint is being processed).

Right to protest
You have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data which is based on legitimate interests. In this case, the Controller shall no longer process the personal data unless the Controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.

If the processing of personal data is carried out for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such purposes, including profiling, to the extent that it is related to such direct marketing. If you object to the processing of personal data for direct marketing purposes, the personal data shall no longer be processed for such purposes.

Right to data portability
If the data processing is carried out by automated means, or if the data processing is based on your voluntary consent, you have the right to request from the Data Controller to receive the data you have provided to the Data Controller, which the Data Controller will make available to you in XML, JSON, or CSV format, and if technically feasible, you may request that the Data Controller transmit the data in this format to another data controller.

Automated decision-making
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. In such cases, the Data Controller is obliged to implement suitable measures to safeguard the data subject's rights, freedoms, and legitimate interests, including at least the right to obtain human intervention on the part of the controller, to express his or her point of view, and to contest the decision.

The above does not apply in the case that the decision is:

• necessary for the conclusion or performance of a contract between you and the Data Controller;
• its adoption is authorized by Union or Member State law to which the Controller is subject, which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or
• is based on your explicit consent.

Pursuant to the provisions of the Info Act, the Data Controller was required to register certain data processing activities in the data protection register. This registration obligation was abolished on May 25, 2018.

The Data Controller declares that it has implemented appropriate security measures to protect personal data against unauthorized access, alteration, transmission, disclosure, deletion, or destruction, as well as accidental destruction and damage, and against becoming inaccessible due to changes in the applied technology.

The Data Controller does everything within its organizational and technical capabilities to ensure that its Data Processors also take appropriate data security measures when working with your personal data.

If you consider that the Data Controller has infringed any legal provision relating to data processing or has failed to fulfill any of your requests, you may initiate an investigation procedure by the National Authority for Data Protection and Freedom of Information in order to terminate the alleged unlawful data processing (mailing address: 1363 Budapest, Pf. 9., e-mail: ugyfelszolgalat@naih.hu, phone numbers: +36 (30) 683-5969 +36 (30) 549-6838; +36 (1) 391 1400).

We also inform you that in the event of a violation of the legal provisions regarding data processing, or if the Data Controller has not fulfilled any of your requests, you may initiate a civil lawsuit against the Data Controller before a court.

The Data Controller reserves the right to amend this Privacy Policy in a manner that does not affect the purpose and legal basis of the data processing. By using the website following the entry into force of the amendments, you accept the modified Privacy Policy.

If the Data Controller intends to perform further processing of the collected data for a purpose other than the purpose for which they were collected, it shall provide you, prior to that further processing, with information on that purpose and any relevant further information:

• about the period for which the personal data will be stored, or, if that is not possible, the criteria used to determine that period;
• about your right to request from the Data Controller access to, correction, deletion, or restriction of the processing of personal data concerning you, and, in the case of data processing based on legitimate interest, to object to the processing of personal data, as well as, in the case of data processing based on consent or a contractual relationship, to request the exercise of the right to data portability;
• in the case of data processing based on consent, that you may withdraw your consent at any time,
• about the right to lodge a complaint with a supervisory authority;
• whether the provision of personal data is based on a statutory or contractual obligation or is a prerequisite for entering into a contract, whether you are obliged to provide the personal data, and what the possible consequences of failing to provide such data may be;
• about the fact of automated decision-making, including profiling, and at least in these cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you.

Data processing may only begin thereafter; if the legal basis for data processing is consent, in addition to being informed, you must also consent to the data processing.