1. Purpose of the Privacy Notice

The privacy policy relating to the data processing of the Data Controller is permanently available at webfolio.hu/administration-maintenance-maintenance and at fotofolio.hu/administration-maintenance and tanfolyam.fotofolio.hu/administration-maintenance.
The Data Controller reserves the right to modify this information at any time. Changes will be communicated to the data subjects in due time.
If you have any questions regarding this notice, please write to us and we will answer them.
The Data Controller is committed to protecting the personal data of its customers and partners, and attaches the utmost importance to respecting the right to information self-determination of its customers. The Data Controller treats personal data confidentially and takes all security, technical and organisational measures to ensure the security of the data.
The Data Controller describes its data management practices below.

2. Data controller's details

If you would like to contact the company, you can do so by sending an e-mail to vintages.shop@yahoo.com or by calling +36/30-8676337
Name: Zoltán Pércsi EV
Address. Hungary, 1171. Budapest., Óvónő utca 27/b
Tax number:
Registration number:
Mobile: +36/30-8676337
E-mail: vintages.shop@yahoo.com

2.1 Data Protection Officer

The Data Controller does not perform any activities that would justify the appointment of a Data Protection Officer.

3. Technical data

The Data Controller shall select and operate the IT tools used to process personal data in the course of providing the service in such a way that the processed data: is accessible to those authorised to access it (availability); authenticity and authentication are ensured (authenticity of data processing); integrity can be verified (data integrity); is protected against unauthorised access (data confidentiality). The controller shall take appropriate measures to protect the data against unauthorised access, alteration, disclosure, disclosure, erasure or destruction and against accidental destruction.
The controller shall ensure the security of data processing by technical, organisational and organisational measures that provide a level of protection appropriate to the risks associated with the processing.
The controller shall, in the course of the processing, preserve confidentiality: protect the information so that it is accessible only to those who are authorised to have access to it; integrity: protect the accuracy and completeness of the information and the method of processing; availability: ensure that the information is accessible and available when the authorised user needs it.

3.2 Cookies

3.2.1 What cookies do

Cookies collect information about visitors and their devices; remember visitors' individual preferences, which are used, for example, when requesting online transactions, so that they do not have to be re-entered; facilitate the use of the website; provide a quality user experience and are involved in the collection of some statistical information about visitors.
In order to provide a personalised service, a small piece of data, called a cookie, is placed on the user's computer and read back during a subsequent visit. When the browser returns a previously saved cookie, the cookie provider has the possibility to link the user's current visit to previous visits, but only in relation to its own content.
Some of the cookies do not contain any personally identifiable information about the individual user, while others contain a secret, randomly generated sequence of numbers that are stored on the user's device and ensure the user's identity.

3.2.2 Strictly necessary session cookies

The purpose of these cookies is to enable visitors to browse the webfolio.hu and fotofolio.hu websites, use their functions and services without any problems. The validity period of this type of cookie lasts until the end of the session (browsing), and when the browser is closed, this type of cookie is automatically deleted from the computer or other device used for browsing.

3.2.3 Third-party cookies (analytics)

vintages.shop use Google Analytics as a third-party cookie on their websites. By using Google Analytics for statistical purposes, webfolio.hu and fotofolio.hu and their subdomains' websites collect information about how visitors use their websites. The data is used to improve the website and the user experience. These cookies will also remain on the visitor's computer or other browsing device, their browser, until they expire or are deleted by the visitor.

3.2.4 Legal basis for cookie management

The legal basis for cookie management is the consent of the website visitor, pursuant to Article 6(1)(a) of the relevant Regulation.
If you do not consent to the use of cookies, certain functions of the websites listed in section 3.2.3 will not be available when using the websites, or certain functions may not function properly.
For more information on how to clear cookies for the most common browsers, please see the following links:
Firefox: Clear cookies from your computer
Chrome: Clear cache & cookies
Safari: Manage cookies and website data in Safari on Mac


NAME: Cookies necessary for the functioning of the websites
SERVICE: -
PROVIDER DETAILED DESCRIPTION: Cookies are essential for the use of the website and allow you to use the basic functions of the website. Without them, many of the site's features many of the site's features Will not be available.
LIMITATION PERIOD: End of session
TYPE: Does not collect personal information.


NAME: Cookies that improve collect personal the user experience information.
SERVICE:
PROVIDER DETAILED DESCRIPTION: Cookies collect information about the use of the website and are used to improve the user experience.
LIMITATION PERIOD: End of session:
TYPE: Does not collect personal information


NAME: Session cookies
SERVICE:
PROVIDER DETAILED DESCRIPTION:Cookies store the visitor's location, browser language and payment currency.
LIMITATION PERIOD: Maximun 2 hours or or close the browser
TYPE: Does not collect personal information


NAME: Last viewed product cookies
SERVICE:
PROVIDER DETAILED DESCRIPTION: It records the last viewed temples
LIMITATION PERIOD: 60 days
TYPE: Does not collect personal information


NAME: Last viewed product category cookies
SERVICE:
PROVIDER DETAILED DESCRIPTION: It records the last viewed temples
LIMITATION PERIOD: 60 days
TYPE: Does not collect personal information


NAME: Basket of cookies
SERVICE:
PROVIDER DETAILED DESCRIPTION: Stores the data of the product placed in the basket.
LIMITATION PERIOD: 360 days
TYPE: Does not collect personal information


NAME: 1P_JAR
SERVICE: google.com / gstatic.com
PROVIDER DETAILED DESCRIPTION: The cookie is used to collect site statistics and track conversion rates.
LIMITATION PERIOD: 2 years
TYPE: Does not collect personal information


NAME: CONSENT
SERVICE: vintages.shop
PROVIDER DETAILED DESCRIPTION: The cookie is used to store settings related to the acceptance of cookies.
LIMITATION PERIOD: 1 years
TYPE: Does not collect personal information


NAME: viewedExitPopupWP
SERVICE: vintages.shop
PROVIDER DETAILED DESCRIPTION: The cookie is used to store your preferences when you leave the website.
LIMITATION PERIOD: 30 days
TYPE: Does not collect personal information


NAME: NID
SERVICE: google.com
PROVIDER DETAILED DESCRIPTION: These cookies allow our websites to remember the way the website works or looks, for example, information that changes the language you set or the region you are in.
LIMITATION PERIOD: 10 years
TYPE: Does not collect personal information


NAME: _ga
SERVICE: google.com
PROVIDER DETAILED DESCRIPTION: These cookies allow our websites to remember the way the website works or looks, for example, information that changes the language you set or the region you are in.
LIMITATION PERIOD: 2 years
TYPE: Does not collect personal information


NAME: _gat
SERVICE: google.com
PROVIDER DETAILED DESCRIPTION: These cookies allow our websites to remember the way the website works or looks, for example, information that changes the language you set or the region you are in.
LIMITATION PERIOD: 2 years
TYPE: Does not collect personal information


NAME: _gid
SERVICE: google.com
PROVIDER DETAILED DESCRIPTION: These cookies allow our websites to remember the way the website works or looks, for example, information that changes the language you set or the region you are in.
LIMITATION PERIOD: 2 years
TYPE: Does not collect personal information

4. General data processing policy, name of data processing, use, legal basis and retention period

The data processing of the activities of the Data Controller is based on voluntary consent or on a legal authorisation. In the case of processing based on voluntary consent, data subjects may withdraw their consent at any stage of the processing.
In certain cases, the processing, storage and transmission of some of the data provided is required by law and we will inform our customers separately. We draw the attention of data controllers to the fact that, where data controllers do not provide their own personal data, it is the data controllers' duty to obtain the consent of the data subject. The principles of data management are in accordance with the applicable legislation on data protection, in particular Act CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information (Infotv.); Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Regulation (EC) No 95/46/EC (General Data Protection Regulation, GDPR); Regulation (EU) No. Act V of 2017 - on the Civil Code (Civil Code); Act C of 2000 - on Accounting (Accounting Act); Act LIII of 2017 - on the prevention and combating of money laundering and terrorist financing (Money Laundering Act); Act CCXXXVII of 2013 - on credit institutions and financial undertakings (Act on Credit Institutions and Financial Undertakings). The data controller has prepared data mapping, which has been used to determine the scope of the data processed, their use, legal basis and retention period.

4.1 Data related to online ordering

It is possible to order services through the website, the personal data requested during the ordering process are:


Name (required field)
Email address (required field)
Phone number (optional field, optionally fillable, to initiate a callback)

For certain services, such as website maintenance, additional personal data may be provided.
Purpose of processing, intended use of the data processed.
The legal basis for the processing is a contractual order.
Retention period: duration of the business relationship or request for cancellation.

4.2 Data related to online administration

Personal data requested during contact:


Name (required field)
Email address (required field)
Phone number (optional field, optionally fillable, to initiate a callback)

Purpose of processing, intended use of the data processed.
The legal basis for processing is voluntary consent.
Retention period: duration of the business relationship or request for cancellation.

4.3 Data related to telephone contact

Personal data requested during contact:


Name (required field)
Phone number (optional field, optionally fillable, to initiate a callback)

Intended use of the data processed.
Purpose of the processing, intended use of the data processed.
The legal basis for processing is voluntary consent.
Retention period: duration of the business relationship or request for cancellation.

4.4 Newsletter / eDM related data

Personal data requested when subscribing to the newsletter:


Name (required field)
Email address (required field)

The newsletter is available after reading and accepting the Privacy Policy. Acceptance of the Privacy Policy is done by accepting the mandatory checkbox that is not filled in beforehand. After subscribing, the subscriber will receive an email message informing him/her of the subscription, which he/she will have to confirm, after which the subscription will take effect. In all related processes, the customer still has the possibility to unsubscribe, the possibility to unsubscribe is included in each mail in the form of a link, easily accessible with one click. As the newsletter contains the name of the company and the contact details of its website, it is considered as an advertisement, eDM. Purpose of the processing, intended use of the data processed. The newsletter will contain the website address and will therefore be considered as advertising. The legal basis for the processing is voluntary consent. Retention period: until unsubscription.

4.5 Customer contact details

I store the following personal data and contact details of the company managers and contact persons of customers:


Name
Email address
Phone number

Purpose of processing, intended use of the data processed. The legal basis for processing is legitimate interest. Retention period: duration of the business relationship or request for deletion.

4.6 Personal data to be provided during registration

Registration is possible in the webshop module of the website, which facilitates the use of additional services by not requiring the repeated provision of data. Personal data processed during registration:


Name
Email address
Address
Phone number
Purchase information (product, date, etc.)

Purpose of processing, intended use of the data processed: invoicing. Legal basis for processing is voluntary consent. Retention period: until revoked.

4.7 Personal data to be provided during purchase

If you wish to place an order in the webshop module, the processing and provision of data during the purchase is essential for the performance of the contract.


Name
Email address
Address
Phone number
Purchase information (product, date, etc.)

Purpose of the processing, intended use of the processed data: fulfilment of the contractual order. Legal basis for processing: contractual order. Retention period: statutory retention period: current year + 5 years

4.8 Billing data

The Data Controller enters into a contract with its customers for the services ordered, whereby the following data are stored:


Name
Email address
Address

Purpose of the processing, intended use of the processed data: invoicing. Legal basis for processing: legal requirement. Retention period: legal basis: current year + 5 years

4.9 Warranty management

Name
Email address
Phone number

Complaint Purpose of the processing, intended use of the data processed: warranty management. Legal basis for processing is voluntary consent. Retention period: on the basis of the Consumer Protection Act, current year + 5 years

4.10 Processing of consumer complaints

If you lodge a consumer complaint, the processing of the data and the provision of the data are essential for the administration of the case.


Name
Email address
Telephone number

Complaint Purpose of processing, intended use of the data processed: handling of consumer protection complaints. Legal basis for processing is voluntary consent. Retention period: on the basis of the Consumer Protection Act, current year + 5 years

5. Physical locations of data

Your personal data (i.e. data that can be associated with you personally) may be processed by us in the following ways: on the one hand, technical data relating to the computer, browser program, Internet address and pages visited are automatically generated in our computer system in connection with the Internet connection, on the other hand, you may also provide your name, contact details or other data if you wish to contact us personally when using the website. Data technically collected during the operation of the system: the data of the computer of the logged-in person concerned, which are recorded by the systems of the webfolio.hu and fotofolio.hu domains and their sub-domains as an automatic result of technical processes. The automatically recorded data is automatically logged by the system on log-in or log-out without any special declaration or action by the data subject. This data cannot be linked to other personal user data, except in cases required by law. Only the webfolio.hu and fotofolio.hu domains and their subdomains have access to the data.

6. Data transfer, data processing, who has access to the data

The Data Controller uses the following data processors in the framework of its business activities

Data storage service:
Dotroll KFT.,
Address: 1148. Budapest, Fogarasi út 3-5.
Customer service (working days 09:00-17):00: +36-1-432-3232
E-mail: support@dotroll.com
Scope of data collected: the content of the website at vintages.shop, e-mails sent to the e-mail address based on this domain.

Billing:
billingo.hu - Billingo Technologies Zrt.
Address: 1133 Budapest, Árbóc utca 6. I. emelet
Customer service (working days 10:00-15:00): +36-1-500-9491
Email: hello@billingo.hu
Scope of data collected: invoices issued

Newsletter:
The Rocket Science Group, LLC (Mailchimp), 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA.
Data collected: subscriber name and email address.

Google Analytics:
Google Inc., Mountain View, California, USA
Scope of data collected: anonymised, non-personally identifiable IP addresses of visitors to the vintages.shop website.

Facebook page:
Facebook Inc.
Menlo Park, California, USA
Privacy Policy: https://
Data collected: username, comments.

6.1 Data transfers to third countries

Data transfers to the United States of America, for which a compliance decision was issued on 12 July 2016 (https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/eu-us-privacy-shield_en).

The compliance decision applies to Mailchimp https://mailchimp.com/legal/privacy/, Google (https://policies.google.com/privacy/frameworks) and Facebook (https://www.facebook. com/about/privacyshield).

7. Data subject's rights and means of redress

The data subject may request information about the processing of his or her personal data, request the rectification, erasure or blocking of his or her personal data, except for mandatory processing, and exercise his or her rights of retention and objection by the means indicated at the time of collection or by contacting the controller as indicated above.

7.1 Right to information

The controller shall take appropriate measures to provide data subjects with all the information referred to in Articles 13 and 14 of the GDPR and each of the information referred to in Articles 15 to 22 and 34 of the GDPR concerning the processing of personal data in a concise, transparent, intelligible and easily accessible form, in clear and plain language.

7.2 Data subject's right of access

The data subject has the right to obtain from the controller feedback as to whether or not his or her personal data are being processed and, if such processing is taking place, the right to access the personal data and the following information:


the purposes of the processing;
the categories of personal data concerned;
the recipients or categories of recipients to whom or with which the personal data have been or will be disclosed, including in particular recipients in third countries or international organisations;
the envisaged period of storage of the personal data;
the right to rectification, erasure or restriction of processing and the right to object;
the right to lodge a complaint with a supervisory authority;
information on the data sources;
the fact of automated decision-making, including profiling, and clear information on the logic used and the significance of such processing and the likely consequences for the data subject.
The controller shall provide the information within a maximum of one month from the date of the request.

7.3 Right of rectification

The data subject may request the correction of inaccurate personal data concerning him or her processed by the controller and the completion of incomplete data.

7.4 Right to erasure

The data subject shall have the right, upon request, to obtain from the Data Controller the erasure of personal data concerning him or her without undue delay where one of the following grounds applies: the personal data are no longer necessary for the purposes for which they were collected or otherwise processed; the data subject withdraws the consent on the basis of which the processing was carried out and there is no other legal basis for the processing; the data subject objects to the processing and there is no overriding legitimate ground for the processing; the personal data have been processed unlawfully; the personal data must be erased in order to comply with a legal obligation under Union or Member State law to which the controller is subject; the personal data were collected in connection with the provision of information society services.

The erasure of the data may not be initiated if the processing is necessary: for the exercise of the right to freedom of expression and information; for compliance with an obligation under Union or Member State law to process personal data or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller; for public health purposes or for archiving, scientific or historical research purposes or statistical purposes in the public interest; or for the establishment, exercise or defence of legal claims.

7.5 Right to restriction of processing

At the request of the data subject, the Controller shall restrict processing if one of the following conditions is met: the data subject contests the accuracy of the personal data, in which case the restriction shall be for a period which allows the accuracy of the personal data to be verified; the processing is unlawful and the data subject opposes the erasure of the data and requests instead that its use be restricted; the controller no longer needs the personal data for the purposes of the processing, but the data subject requires them for the establishment, exercise or defence of legal claims; or the data subject has objected to the processing; in which case the restriction shall apply for a period of time until it is established whether the legitimate grounds of the controller override the legitimate grounds of the data subject.

Where processing is subject to restriction, personal data, other than storage, may be processed only with the consent of the data subject or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for important public interests of the Union or of a Member State.

7.6 Right to data portability

The data subject shall have the right to obtain the personal data concerning him or her which he or she has provided to the controller in a structured, commonly used, machine-readable format and to transmit such data to another controller.

7.7 Right to object

The data subject shall have the right to object at any time, on grounds relating to his or her particular situation, to processing of his or her personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller, or necessary for the purposes of the legitimate interests pursued by the controller or by a third party, including profiling based on those provisions. In the event of an objection, the controller may no longer process the personal data, unless there are compelling legitimate grounds for doing so which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.

7.8 Automated decision making in individual cases, including profiling

The data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her.

7.9 Right of withdrawal

The data subject has the right to withdraw his or her consent at any time.

7.10 Right to judicial remedy

The data subject may bring an action against the controller in the event of a breach of his or her rights. 8.11 Data Protection Authority Procedure Complaints may be lodged with the National Authority for Data Protection and Freedom of Information:
National Authority for Data Protection and Freedom of Information Headquarters:
1125 Budapest, Szilágyi Erzsébet fasor 22/C.
Postal address: 1530 Budapest, Pf.5.
Tel: +36-1-13911400 Fax: +36-1-13911410
E-mail: ugyfelszolgalat@naih.hu website: http://www.naih.hu

8. Other provisions

Information on data processing not listed in this notice will be provided at the time of collection. We inform our customers that the court, the prosecutor, the investigating authority, the law enforcement authority, the administrative authority, the National Authority for Data Protection and Freedom of Information, the Hungarian National Bank, or other bodies authorised by law may contact the data controller to provide information, to disclose or transfer data, or to provide documents. The Data Controller shall disclose to the authorities - if the authorities have indicated the exact purpose and scope of the data - personal data only to the extent and to the extent that is indispensable for the purpose of the request.

(This Privacy Policy is based on the recommendation of the Budapest Chamber of Commerce and Industry.)