Dear Customer,
When filling in the order form on www.go-metall.hu , you provide personal data.
The legal basis for data processing is:
Act CXII of 2011 on the right to informational self-determination and freedom of information (hereinafter: “Infotv.”)
General Data Protection Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: “GDPR”),
Act CVIII of 2001 on electronic commerce and on information society services (hereinafter: “Eker. tv.”),
and Act XLVIII of 2008 on the basic requirements and certain restrictions of commercial advertising activities (hereinafter: “Grt.”).
Act C of 2000 on Accounting – hereinafter Szvt.
Act CL of 2017 on the rules of taxation – hereinafter Art.
We hereby inform you of the details of the processing of your personal data and of your rights in accordance with the provisions of the aforementioned legislation.
1. THE IDENTITY OF THE CONTROLLER:
GO-METALL Kft.(hereinafter: Data Controller)
location: 1211 Budapest, Acélcső utca 15-17.
company registration number: 01-09-067602
phone: +36 1 277-8302
e-mail: go-metall@go-metall.hu
website: www.go-metall.hu
The Data Controller determines the scope, purpose and duration of the data requested during the newsletter subscription and other essential conditions of the data processing for the purposes set out in point 4.
3. THE PROVISION OF YOUR DATA IS VOLUNTARY.
You are not obliged to provide your personal data, but without them, we cannot provide our services or fulfil your order.
4. SCOPE OF THE DATA PROCESSED, PURPOSE AND DURATION OF THE PROCESSING:
THE DATA PROCESSED
Billing address(es):
name, surname, first name, telephone number, address: postcode, town, street, house number
optional: tax number
Delivery address(es):
mandatory: name, address (country, postcode, town, street, house number)
optional: e-mail address
PURPOSE OF PROCESSING
The data is collected and stored for order fulfilment, tax and financial accounting purposes.
DURATION OF PROCESSING
The telephone number and e-mail address are deleted after the order is fulfilled.
Data related to invoicing is stored in accordance with the provisions of the Szvt. and Art. for eight and six years, respectively.
5. THE PERSONS WITH ACCESS TO THE PERSONAL DATA:
The stored data are processed by employees carrying out administrative activities in order to perform their tasks.
6. DATA SECURITY MEASURES:
The personal data provided is stored by the Data Controller on its server located at 1211 Budapest, Acélcső utca 15-17.
The Data Controller keeps a log of access to personal data stored on the server, so it is always possible to check who accessed which personal data when. Access to the server and computers is password-protected.
7. YOUR RIGHTS RELATED TO DATA PROCESSING:
7.1. Right of access:
Upon the receipt of your request, we inform you as soon as possible, but no later than twenty-five (25) days, that your personal data is being processed. If such processing is ongoing, you have the right to access your personal data and the following information:
a) the purposes of the processing,
b) the categories of personal data,
b) the recipients or categories of recipients to whom or which the personal data have been or will be disclosed,
c) the intended duration of the storage of the personal data,
d) the right to request the rectification, erasure or restriction of the processing of personal data concerning you,
f) the right to file a complaint with a supervisory authority
g) in case the data was not collected from the data subject, any available information concerning their source.
7.2. Right to request rectification:
If any of your personal data that we process is inaccurate, we will correct the personal data at your request. In view of the purpose of the processing, you have the right to request that the incomplete personal data be completed, including by means of a supplementary declaration. Once the request for rectification of personal data has been fulfilled, the previous (deleted) data can no longer be restored.
7.3. Right to erasure (the “right to be forgotten”):
You have the right to withdraw your consent to processing at any time without giving any reason.
If you withdraw your consent, your data will be deleted from our records without any undue delay, and our processing will be terminated.
7.4. Right to data portability.
At your request, we provide you with your personal data in a structured, commonly used, machine-readable format, or you may transfer it to another data controller.
7.5. Right to object:
You have the right to object to the processing of your personal data at any time if
a) the processing of personal data is necessary for the fulfilment of a legal obligation to which the Data Controller is a subject or for the purposes of the legitimate interests pursued by the Data Controller or by a third party, including profiling for such purposes,
b) the purpose of the processing is direct marketing, including related profiling,
c) the purpose of the processing is scientific or statistical, excluding processing necessary for the performance of a task carried out for reasons of public interest.
The Data Controller will examine the legitimacy of the data subject's objection, and, if the objection is justified, cease the processing and delete the personal data processed without any undue delay.
9. JUDICIAL REDRESS:
a) You may contact our Company’s Data Controller regarding the processing of your data. The mailing address is: 1211 Budapest, Acélcső utca 15-17. phone: +36 1 277-8302 e-mail: go-metall@go-metall.hu
b) You may file a complaint with the National Authority for Data Protection and Freedom of Information (mailing address: 1530 Budapest, Pf.: 5., phone: +36 (1) 391-1400, e-mail: ugyfelszolgalat@naih.hu, website: www.naih.hu) and initiate an inquiry, claiming that you have suffered or are at imminent risk of suffering legal impairment in connection with the processing of your personal data; or
b) The data subject may take legal action against the Data Controller as data controller in case of a breach of his or her rights. The court rules on the matter as a priority. The Data Controller has the burden of proving that the data processing is lawful. The court has jurisdiction to rule on the lawsuit. The lawsuit may also be brought, at the choice of the data subject, before the courts for the place where the data subject resides or is domiciled.
