Privacy notice

Legal basis for data processing:

• your prior informed and voluntary consent
• in some cases, data management is necessary to fulfill a legal obligation concerning us
• in certain cases, we as a Data Controller have a legitimate interest in processing your personal data or a third party has a legitimate interest, for example, the operation, development and security of our website
• in other cases, the data processing is necessary for the performance of a contract to which you are a party, or it is necessary for steps initiated by you prior to the conclusion of the contract

The temporal validity of this data management policy lasts from April 1, 2021 until it is revoked. The Data Controller reserves the right to change this information at any time, which will be published in advance. An earlier version of the information is also available on the website.

More details about our data management:

Data processing carried out on our website and with data collected there:

personal data: delivery address (zip code, town, name and nature of public area, house number, floor, door), collection point data, data on returned products.

The purpose of registration for the purpose of purchase is to provide the data necessary for the order, its fulfillment and its documentation. During registration, you enter your name, e-mail address, and password. delivery address, company name.

It is in our legitimate interest to assist you with your service, purchase and order-related decisions with a wish list and shopping cart, in which case the products added to the wish list or cart will be managed in this function until the order is placed or until you leave the webshop.

For purposes related to the performance of contracts, we retain the data until the date of performance, including the deadline for returning the product based on the contract.

It is our legal obligation to keep the data of issued invoices and orders that must be kept due to accounting or tax legal regulations for 8 years. (invoicing name in the case of a natural person, full name, tax number or tax identification number, billing address)

DATA MANAGEMENT FOR THE PURPOSE OF MANAGING GUARANTEE, WARRANTY AND COMPENSATION CLAIMS

Our legal obligation is to handle claims related to the validation of warranty and guarantee claims (based on the Civil Code and consumer protection regulations) and at the same time to fulfill the warranty and guarantee provisions of the contract concluded with you regarding the product or service. Data processing for this purpose will be terminated after the warranty period expires.

It is our legitimate interest to defend against possible objections, compensation or other claims. We keep the data as long as it is necessary to manage legal claims related to performance

Scope of processed data: product or service, name, address, e-mail address, date of purchase and performance, data provided on performance and damage, other personal messages sent in connection with handling the claim.

FOR PURPOSES RELATED TO WEBSITE OPERATION AND SECURITY

In order to ensure the smooth operation of the website, to check, supervise and improve the operation of the services, website security, and to prevent attacks and abuses, we process the data provided by visitors and registered users of the website, as well as the IP address of the visitors and users.

Our legitimate interest is the safe operation, control and improvement of the website. If our legitimate interest ceases, we will no longer process the data on this legal basis.

WHAT IS A COOKIE?

Cookies are small data files placed by the browser on the user's computer or device. They collect information, remember the individual settings of the visitor and facilitate the use of the website for users. The address of the visited pages and the time of the visit may be suitable for drawing conclusions about the user if the data is used or connected with other information.

Basic types of cookies

• Session cookie: these cookies are temporarily activated while browsing is in progress. That is, from the moment the user opens the browser window until the moment he closes it. As soon as the browser is closed, all session cookies are deleted.
• Persistent cookie: these cookies remain on the user's device for the time specified for each cookie. They are activated when you visit the website.
• Primary cookies are created by the websites you visit. The website is displayed in the address bar.
• Third-party cookies are created by other websites. These websites own some of the content (such as advertisements or images) displayed on the website you visit.

We use session, permanent and personal cookies. On the basis of the relevant electronic commerce legal provision, for the purpose of providing the service, we can process the personal data that is technically absolutely necessary for the provision of the service. If you do not agree to the use of session cookies, it is possible that one of the functions of our website will not work properly, in the case of other cookies, we will not receive the information that improves the usability of your website and provides information for the development of our products and services.

You can enable or change cookies using your browser. You can view the data processing terms of Google as a data processor at the following link: https://cloud.google.com/ terms/data-processing-terms/ partner/ . Regarding Google's privacy settings here https://policies.google. com/privacy/update?hl=en you will find information to customize your privacy settings to suit your needs.

You can access the cookie settings of major browsers here: You can access the cookie settings of major browsers here:

- Firefox
– Microsoft Internet Explorer
– Microsoft Edge
– Chrome

ACCURACY AND UPDATE OF DATA

Please ensure that your information is truthful, correct and accurate. Incorrect, inaccurate or incomplete data can be an obstacle to the use of our services. We can update the data you provide if you inform us of the changed data. Please notify us of the change as soon as possible to the following e-mail address: info@dutchhome.hu

CONTRIBUTION AND OTHER DATA PROCESSING LEGAL BASIS

In the case of data management based on your consent, you give your consent separately for each data management purpose and you can withdraw them separately at any time and free of charge.

In all cases, the cancellation of the registration is considered a withdrawal of consent with regard to the related data management

Your consent can be revoked:

• by canceling the registration,
• in an electronic or paper-based letter written about the withdrawal of consent to data management, sent to the address provided by the data controller above

We would like to draw your attention to the fact that in order to fulfill our legal obligations and to assert our own or third party's legitimate interests, we may process certain data even after the withdrawal of consent (Article 6 of the Data Protection Ordinance, Section 13/A of the Eker Act, § 169 of the Accounting Act, Fogyv Act § 17/A, VAT Act § 169)

In the event of the use of misleading personal data, or if one of our visitors commits a crime or attacks our system, we can simultaneously terminate the registration of the visitor and block his data for the duration of the criminal proceedings.

MANDATORY DATA

name, email, password, phone number, address

If you do not provide the required data during registration, we will not be able to complete the order, send you a newsletter, or send an SMS, and we will not be able to fulfill our obligations as required by law (e.g. issuing an invoice), in which case we will not be able to accept your order.

TRANSFER OF PERSONAL DATA TO A THIRD COUNTRY

When using Google services, Google may transfer data to a third country outside the EEA according to an alternative procedure that guarantees adequate security permitted under the EU Standard Contractual Terms or other EU Data Protection Regulations.

DATA SECURITY MEASURES

The Data Controller's computer systems and other data storage locations are its headquarters and the location and data center of the data processors.

The data controller pseudonymizes or encrypts personal data, with the exception of the mail system. It ensures the continuous confidentiality, integrity, availability and resilience of the systems and services used to manage personal data. In the event of a physical or technical incident, it creates the ability to restore access to personal data and the availability of data in a timely manner. We develop and apply a procedure for regularly testing, assessing and evaluating the effectiveness of the technical and organizational measures taken to guarantee the security of data management. When determining the appropriate level of security, it takes into account the risks arising from data management, which in particular arise from the accidental or unlawful destruction, loss, alteration, unauthorized disclosure or unauthorized access to personal data transmitted, stored or otherwise managed. It takes measures to ensure that natural persons acting under the control of the data controller or data processor and having access to personal data can only handle said data in accordance with the instructions of the data controller, unless they are required to deviate from this by EU or member state law.

You can request information about the management of your personal data, as well as request the correction of your personal data, deletion, withdrawal, exercise your rights related to data portability, and your right to protest in the manner indicated when the data was collected, or at the above contact details of the Data Controller.

RIGHT TO INFORMATION

The right to information about information published on our website can be exercised in writing at the addresses indicated at the beginning of this information. At your request - after verifying your identity - we can also provide information verbally.

YOUR RIGHT OF ACCESS TO YOUR DATA

You have the right to access your personal data and the following information:

the purposes of data management; categories of personal data concerned; recipients or categories of recipients to whom or to whom the personal data has been or will be communicated, including in particular third-country recipients, the planned period of storage of personal data; the right to rectification, deletion or limitation of data processing and the right to protest; the right to submit a complaint to a supervisory authority; information about data sources; the fact of automated decision-making, including profiling, as well as the logic used and understandable information about it, and the significance of such data management for you and the expected consequences for you. If personal data is transferred to a third country or to an international organization, you are entitled to receive information about the appropriate guarantees for the transfer.

RIGHT OF CORRECTION

You can request the correction of your personal data that we manage and the completion of incomplete data.

RIGHT TO CANCELLATION

If one of the following reasons exists, you are entitled to, at your request. we will delete your personal data without undue delay if

• personal data is no longer needed for the purpose for which it was collected or otherwise processed;
• revokes the consent that forms the basis of the data management, and there is no other legal basis for the data management
• you object to data processing and there is no overriding legitimate reason for data processing
• personal data were handled illegally
• the personal data must be deleted in order to fulfill a legal obligation prescribed by EU or Member State law applicable to the data controller;

Data deletion cannot be initiated, for example, if data management is necessary: ​​for the purpose of exercising the right to freedom of expression and information; to fulfill the obligation according to the EU or member state law applicable to the Data Controller requiring the processing of personal data, to present, enforce and protect legal claims.

RIGHT TO LIMIT DATA PROCESSING

At your request, we limit data processing if one of the following conditions is met:

• disputes the accuracy of the personal data, in this case the limitation applies to the period that allows the verification of the accuracy of the personal data
• the data processing is illegal and opposes the deletion of the data and instead requests the restriction of its use
• The Data Controller no longer needs the personal data for the purpose of data management, but the data subject requires them to present, enforce or defend legal claims or
• objected to data processing; in this case, the restriction applies to the period until it is determined whether the Data Controller's legitimate reasons take precedence over your rights and freedoms

If data management is subject to restrictions, personal data may only be processed with your consent, with the exception of storage, or to submit, enforce or defend legal claims, or to protect the rights of another natural or legal person, or in the important public interest of the Union or a member state.

The Data Controller will inform you in advance of the lifting of restrictions on data management.

RIGHT TO DATA PORTABILITY

You are entitled to receive the personal data concerning you that you have provided to the Data Controller in a segmented, widely used, machine-readable format, and to transfer these data to another data controller, if the data processing is based on consent or a contract and the data processing is carried out in an automated manner . The data manager can transfer the data in Excel format.

RIGHT TO OBJECT

You have the right to object at any time to the processing of your personal data necessary to assert the legitimate interests of the Data Controller or a third party, including data processing based on automatic decisions and profiling.

In case of objection, we can no longer process the personal data, unless it is justified by compelling legitimate reasons that take precedence over your interests, rights and freedoms, or that are related to the presentation, enforcement or defense of legal claims.

If personal data is processed for direct business acquisition, you have the right to object at any time to the processing of your personal data for this purpose, including profiling, if it is related to direct business acquisition.

In case of objection to the processing of personal data for the purpose of direct business acquisition, the data cannot be processed for this purpose.

AUTOMATED DECISION-MAKING IN INDIVIDUAL CASES, INCLUDING PROFILING:

You are entitled not to be covered by the scope of a decision based solely on automated data management, including profiling, which would have legal effects on you or would similarly significantly affect you.

The above authorization cannot be applied if the data management

• necessary to conclude or fulfill the contract between you and the Data Controller;
• is made possible by EU or member state law applicable to the Data Controller, which also establishes appropriate measures for the protection of your rights and freedoms, as well as your legitimate interests; obsession
• based on your express consent

RIGHT OF WITHDRAWAL

You have the right to withdraw your consent to data management at any time. Withdrawal of consent does not affect the legality of data processing based on consent prior to withdrawal. In case of withdrawal, if the data cannot be processed on another legal basis, the data will be deleted.

The request for consent to the sending of a request for direct business or marketing purposes containing economic advertising can be withdrawn at any time without limitation or justification, free of charge, at the bottom of the letters, in the same way as signing up. However, data management cannot be terminated as long as the data management obligation is prescribed by law

PROCEEDINGS

Without undue delay, but in any case within one month from the receipt of the request, we will inform you of our position and measures regarding your above rights. Considering the complexity of the application and the number of applications, this deadline can be extended by another two months.

We will inform you about the extension of the deadline, indicating the reasons for the delay, within one month of receiving the request. If you submitted the application electronically, we will provide the information electronically, unless you request otherwise.

If the Data Controller does not take measures following the data subject's request, we will inform you without delay, but at the latest within one month of the receipt of the request, of the reasons for the failure to take action, as well as of the fact that you can file a complaint with a supervisory authority and exercise your right to judicial redress.

The Data Controller provides the requested information and information free of charge. If the data subject's request is clearly unfounded or - especially due to its repetitive nature - excessive, the Data Controller may charge a reasonable fee, taking into account the administrative costs associated with providing the requested information or information or taking the requested action, or may refuse to take action based on the request.

RIGHT TO BE FORGOTTEN

The Data Controller informs all recipients of all corrections, deletions or data management restrictions carried out by it, to whom or to whom the personal data was communicated, unless this proves to be impossible or requires a disproportionately large effort. Upon request, the Data Controller will inform you about these recipients.