Privacy Policy
Date of receipt: 2024-04-19
Data Manager
Name : Pit Box Kft .
Registered office: 2600 Vác, Rózsa utca 3/A 1em. 2 ajt.
Postal address, complaint handling: 2600 Vác, Rózsa utca 3/A 1em. 2ajt.
Email: sales@fansbrands.com
Phone number : +421 ( 48 ) 222 24 78
Website : https : //fansbrands.sk/
Hosting service provider
Name : UNAS Online Kft.
Postal address: Address: 9400 Sopron, Kőszegi út 14.
Email: unas@unas.hu
Phone number:
Name : Shopify Commerce Singapore Pte. Ltd.
Postal address : Robinson Road 77, # 13-00 Robinson 77, Singapore 068896
Email:
Telephone number :
Description of data processing activities carried out within the framework of the operation of the online store
This document contains all relevant information on data processing related to the operation of the online store in accordance with the European Union General Data Protection Regulation (2016/679) (hereinafter referred to as the "Regulation" or "GDPR") and Act CXII of 2011 (hereinafter referred to as the "Act on the Protection of Personal Data").
Information about the use of cookies
What is a cookie?
When you visit the website, the data controller uses cookies. A cookie is an information package consisting of letters and numbers that our website sends to your browser in order to save certain settings, make our website easier to use and help us collect relevant statistical information about our visitors.
Some cookies do not contain personal data and are not suitable for identifying individual users, but some cookies contain a unique identifier, i.e. a randomly generated secret sequence of numbers, which is stored on your device and therefore ensures your identification. The operating time of each cookie is indicated in the relevant description.
Legal background and legal reasons for cookies:
The legal basis for the processing is your consent pursuant to Article 6(1)(a) of the Regulation.
Main characteristics of the cookies used on the website: Cookies that are strictly necessary:
If you do not agree to the use of cookies, some features will not be available to you.
Strictly Necessary Cookies : These cookies are essential for the use of the website and enable the use of basic website functions. In the absence of these cookies, some website functions will not be available to you. The lifespan of these cookies is limited solely to the duration of the session.
Session cookies : These cookies store the user's location, browser language and payment currency. They last until the browser is closed or for a maximum of 2 hours.
Age - restricted cookies : These cookies record the fact that consent to age-restricted content has been granted and that the person concerned is over 18 years old, and their lifespan lasts until the browser is closed.
Product recommendation cookies: Records a list of products to recommend in the "Tell a Friend" feature. Their lifespan is 60 days.
Mobile version, design cookies : On a mobile device , they recognize the device the visitor is using and switch to full view. Their lifespan is 365 days.
Cookies to accept : Upon arrival at the site, you accept the cookie statement in the appropriate window. Their lifespan is 365 days.
Exit #2 cookies: Logs out the visitor after 90 days according to option #2. Their lifespan is 90 days.
Backend ID cookies : The identifier of the backend server that serves the page. They last until the browser is closed.
Statistical cookies:
Google Analytics Cookies: Google Analytics is an analytics tool from Google that allows website and app owners to get a more accurate picture of their visitors' activities. The service may use cookies to collect information and create reports with statistical data about the use of the website without individually identifying visitors to Google. Google Analytics primarily uses " ga" cookies. In addition to reporting statistical data about the use of the website, Google Analytics, together with the advertising cookies described above, may also be used to display more relevant ads in Google products (e.g. Google search) and across the web.
Cookies to improve user experience : These cookies collect information about how the user uses the website, for example , which pages they visit most often or what error messages they receive from the website. These cookies do not collect information that identifies the visitor , that is, they work with completely general, anonymous information. They use the data obtained from such information to improve the performance of the website. The lifespan of these cookies is limited solely to the duration of the session.
Referral cookies : Record the external website from which the visitor came to the site. Their lifespan lasts until the browser is closed.
Last viewed product cookies: Records the product that the visitor last viewed. Their lifespan is 60 days.
Last viewed category cookies: Records the last viewed category . Their lifespan is 60 days.
Cart cookies : Records of products added to the cart. Their lifespan is 365 days.
Smart offer cookies: Smart offer cookies : record the conditions for displaying smart offers (e.g. whether the visitor has already been to the site, whether they have an order). Their lifespan is 30 days.
Marketing cookies:
Google Adwords Cookies When someone visits our website, the visitor's cookie identifier is added to a remarketing list. Google uses cookies - e.g. NID and SID cookies - across Google products, for example to personalize the ads you see on Google Search. Google uses these cookies, for example, to remember your previous searches, interactions with certain advertisers' ads or search results, or visits to advertisers' websites. AdWords conversion tracking uses cookies. To track sales and other conversions resulting from advertising, cookies are stored on a user's computer when a user clicks on an ad. Some common uses of cookies are: to select ads based on what is relevant to the user, to improve campaign performance reporting, and to prevent the user from seeing ads that they have already seen.
Remarketing cookies : These cookies may be displayed to previous visitors or users when they browse other websites on the
Google Display Network or search for terms related to its products or services.
Facebook pixel (Facebook cookies) Facebook pixel is a code that allows a website to prepare a conversion report, create target groups and provide the website owner with detailed analysis of the use of the website by visitors. Facebook pixel allows the display of personalized advertisements to website visitors on the Facebook platform. You can read Facebook's privacy policy here: https://www.facebook.com/privacy/explanation.
For more information about deleting cookies, please visit the following links:
Internet Explorer: http://windows.microsoft.com/en-us/internet-explorer/delete-manage-cookies#ie=ie-11 Firefox: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer
Mozilla: https://support.mozilla.org/hu/kb/weboldalak-altal-elelezyzett-sutik-torlese-szamito
Safari: https://support.apple.com/guide/safari/manage-cookies-and-website-data-sfri11471/mac Chrome: https://support.google.com/chrome/answer/95647
Edge: https://support.microsoft.com/hu-hu/help/4027947/microsoft-edge-delete-cookies
Data processed for the purpose of concluding and performing a contract
Several cases of data processing may occur during the conclusion and performance of the contract. We hereby inform you that data processing related to complaint management and administration related to warranty rights will only take place if you exercise one of the rights listed.
If you do not make a purchase through the online store, but only come as a visitor, you may be subject to the provisions on data processing for marketing purposes if you give us consent for marketing purposes.
The data processing activities for the purposes of concluding and performing a contract are:
Contact
For example, if you contact us via email, contact form or telephone to obtain information about a product. Prior contact is not necessary, in case of lack of it, you can always order from the online store.
Processed data
The data you provided us when contacting us.
Data processing period
We process the data only until the contact is terminated.
Legal basis for data processing
Your voluntary consent given to the data controller by contacting us. [Data processing pursuant to Article 6(1)(a) of the Regulation]
Website registration
By storing the data provided during registration, the data controller can provide more convenient services (e.g. the data subject will not have to provide their data every time they make a purchase on the site). Registration is not a condition for concluding a contract
Processed data
FansBRANDS® - Official Motorsport Fan Store
During data processing, the data controller processes your name, address, telephone number, email address, characteristics of the purchased products and date of purchase.
Data processing period
FansBRANDS® - Official Motorsport Fan Store
Until you withdraw your consent.
Legal basis for data processing
Your voluntary consent given to the data controller upon registration. [Data processing pursuant to Article 6(1)(a) of the Regulation]
Order processing
Data processing activities within the framework of order management that are necessary for the purpose of fulfilling the contract.
Processed data
FansBRANDS® - Official Motorsport Fan Store
During data processing, the data controller processes your name, address, email address, characteristics of the purchased products, order number and date of purchase.
If you place an order in the online store, the processing and provision of data is necessary for the performance of the contract.
Data processing period
FansBRANDS® - Official Motorsport Fan Store
We process data for 5 years in accordance with the statute of limitations under civil law.
Legal basis for data processing
Performance of the contract. [Data processing pursuant to Article 6(1)(b) of the Regulation]
Issuing an invoice
The data processing is carried out for the purpose of issuing an invoice in accordance with the law and fulfilling the obligation to keep accounting documents. According to Section 169, Paragraphs 1 to 2 of the Accounting Act, economic organizations must keep accounting documents that directly and indirectly confirm accounting records.
Processed data
FansBRANDS® - Official Motorsport Fan Store
Name, address, email address, phone number.
Data processing period
According to paragraph 2 of Section 169 of the Accounting Act, issued invoices must be kept for 8 years from their issuance.
Legal basis for data processing
According to paragraph 1 of Article 159 of Law CXXVII of 2007 on Value Added Tax, the issuance of an invoice is mandatory
and according to Section 169(2) of the Accounting Act, issued invoices must be kept for 8 years. [Data processing pursuant to Article 6(1)(c) of the Regulation].
Processing of data related to the delivery of products
Data processing is carried out for the purpose of delivering the ordered product.
Processed data
FansBRANDS® - Official Motorsport Fan Store Name, address, email address, telephone number. Data processing period
FansBRANDS® - Official Motorsport Fan Store
Data processing is carried out for the purpose of delivering the ordered product.
Legal basis for data processing
Performance of the contract. [Data processing pursuant to Article 6(1)(b) of the Regulation]
Recipients and processors of data for the delivery of goods
Beneficiary name : GLS General Logistics Systems Hungary Csomag-Logisztikai Kft.
Address of the recipient: 2351 Alsonémedi, GLS Europe u. 2.
Telephone number of the recipient : 06-29-88-67-00
Recipient 's e-mail address : info@gls-hungary.com
Recipient 's website : https://gls-group.eu/HU/hu/home
The courier service participates in the delivery of the ordered product on the basis of a contract concluded with the data controller. The courier service processes the data provided to it in accordance with the privacy policy available on its website.
Recipient Name: UPS
Address of recipient: Atlanta, United States
Telephone number of the recipient : +36 1 877 0000
Recipient 's email address : https://www.ups.com/upsemail/input?loc=hu_HU
Recipient 's website : https : //www.ups.com/
The courier service participates in the delivery of the ordered product on the basis of a contract concluded with the data controller. The courier service processes the data provided to it in accordance with the privacy policy available on its website.
Warranty and guarantee claims management
Regarding warranty and guarantee rights, we must proceed according to Decree 19/2014. (IV. 29.) of the Minister of National Economy, which determines the method of administering such claims.
Processed data
FansBRANDS® - Official Motorsport Fan Store
Regarding warranty and guarantee rights, we must proceed according to Decree 19/2014. (IV. 29.) of the Minister of National Economy.
In accordance with the regulation, we must make a record of a warranty or guarantee claim that we have been informed of, in which we will make a record:
- your name, address and a statement that you agree to the processing of your data listed in the record in accordance with the regulation,
- the name and purchase price of the tangible object sold under the contract concluded between us,
- date of contract performance,
- date of reporting the defect,
- description of the error,
- the right you wish to exercise under the guarantee or warranty right, and
- the method of handling a warranty complaint or warranty claim or the justification for the denial of the right to be exercised based on the complaint.
If we receive the Product purchased from you, we must issue you with a receipt, which must contain the following information:
- your name and address,
- data necessary to identify the object,
- the date the item was received and
- the date when you can accept the repaired object.
Data processing period
FansBRANDS® - Official Motorsport Fan Store
The entrepreneur is obliged to keep a record of a consumer's warranty or post-warranty claim for three years from the date of the record and to submit it to the supervisory authority upon request.
Legal basis for data processing
The legal basis for data processing is compliance with the legal obligations set out in Decree 19/2014 (IV. 29.) of the Minister of National Economy [paragraph (1) of Article 4 and paragraph (1) of Article 6] [data processing pursuant to Article 6(1)(c) of the Regulation].
Management of other consumer protection complaints
The data processing is carried out for the purpose of handling complaints regarding consumer protection. If you contact us with a complaint, the processing of data and its provision will be necessary.
Processed data
FansBRANDS® - Official Motorsport Fan Store
Buyer's name, phone number, email address, content of the complaint.
Data processing period
FansBRANDS® - Official Motorsport Fan Store
Consumer complaints are kept for 3 years under the Consumer Protection Act.
Legal basis for data processing
You may voluntarily decide whether to make a complaint to us, but if you do so, we are required to retain your complaint for a period of 3 years in accordance with paragraph (7) of Section 17/A of the Consumer Protection Act CLV of 1997 [Processing of data pursuant to Article 6(1)(c) of the Regulation].
Data processed in connection with the verifiability of consent
When registering, placing an order or subscribing to newsletters, the IT system stores IT data related to consent for record-keeping purposes.
Processed data
FansBRANDS® - Official Motorsport Fan Store
Date of consent and IP address of the data subject.
Data processing period
FansBRANDS® - Official Motorsport Fan Store
Due to compliance with legal regulations, consent must be verifiable at a later date, therefore the data is stored for a limitation period after the end of data processing.
Legal basis for data processing
This obligation is set out in Article 7(1) of the Regulation [Processing of data pursuant to Article 6(1)(c) of the Regulation].
Data processing for marketing purposes
Processing of data related to sending newsletters
Data processing is carried out for the purpose of sending newsletters.
Processed data
FansBRANDS® - The official shop for motorsport fans Name, address, email address, telephone number. Data processing period
FansBRANDS® - Official Motorsport Fan Shop Until the data subject withdraws their consent. Legal basis for data processing
Your voluntary consent given to the data controller by subscribing to the newsletter. [Data processing pursuant to Article 6(1)(a) of the Regulation]
Processing of data related to sending and displaying personalized advertisements
Data processing is carried out for the purpose of sending advertising content in accordance with the scope of interest of the data subject.
Processed data
FansBRANDS® - Official Motorsport Fan Store Name, address, email address, telephone number. Data processing period
FansBRANDS® - Official Motorsport Fan Store
Until you withdraw your consent.
Legal basis for data processing
Your voluntary, independent consent given to the data controller when collecting data. [Data processing pursuant to Article 6(1)(a) of the Regulation]
Remarketing
Data processing is carried out within the framework of remarketing, which is enabled by cookies.
Processed data
FansBRANDS® - Official Motorsport Fan Store
Data processed by cookies as defined in the cookie notice.
Data processing period
The duration of data retention by a given cookie. More information is available here:
General information about Google cookies: https://www.google.com/policies/technologies/types/
Google Analytics information: https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage?hl=hu
Facebook information: https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen
Legal basis for data processing
Your voluntary consent given to the data controller by using the website. [Data processing pursuant to Article 6(1)(a) of the Regulation]
Lotteries
The data processing is carried out for the purpose of conducting the lottery.
Processed data
FansBRANDS® - Official Motorsport Fan Store
Name, email address, phone number.
Data processing period
FansBRANDS® - Official Motorsport Fan Store
The data will be deleted after the lottery ends, with the exception of the winners' data, which the data controller is obliged to retain for 8 years according to the Accounting Act.
Legal basis for data processing
Your voluntary consent given to the data controller by using the website. [Data processing pursuant to Article 6(1)(a) of the Regulation]
Other data processing activities
If the data controller intends to carry out further data processing activities, it shall provide information in advance about the actual circumstances of the data processing (legal basis and legal basis for data processing, scope of data processed, period of data processing).
Recipients of personal data
Data processor activities when storing personal data
Name of the data processor : UNAS Online Kft .
Contact details of the data processor:
Telephone number of the data processor :
Data processor email : unas@unas.hu
Registered office of the data processor: 9400 Sopron, Kőszegi út 14.
Website of the data processor: unas.hu
The data processor performs the storage of personal data on the basis of a contract concluded with the data controller. The data processor does not have the right to access personal data.
Name of data processor : Shopify Commerce Singapore Pte. Ltd.
Contact details of the data processor :
Telephone number of the data processor :
Data processor email :
Address of the data processor : 77 Robinson Road, #13-00 Robinson 77, Singapore 068896
Website of the data processor : https://www.shopify.com/
The data processor performs the storage of personal data on the basis of a contract concluded with the data controller. The data processor does not have the right to access personal data.
Data processors' activities related to sending newsletters
Name of the company operating the newsletter sending system : UNAS Online Kft .
Registered office of the company operating the newsletter system: 9400 Sopron, Kőszegi út 14.
Telephone number of the company that operates the newsletter system :
E- mail address of the company operating the newsletter system : unas@unas.hu
Website of the company operating the newsletter system : unas.hu
The data processor participates in sending newsletters on the basis of a contract concluded with the data controller. As part of this participation, the data processor processes the name and address of the data subject to the extent necessary for sending the newsletters.
Data processors' activities related to sending newsletters
Name of the company operating the newsletter sending system : ActiveCampaign
Headquarters of the company operating the newsletter system : 150 North Michigan Avenue Suite 1230 Chicago, IL 60601 United States
Telephone number of the company that operates the newsletter system : +1 ( 773 ) 904-0945
Email address of the company operating the newsletter sending system : privacy@activecampaign.com
Website of the company operating the newsletter system : https : //www.activecampaign.com
The data processor participates in sending newsletters on the basis of a contract concluded with the data controller. As part of this participation, the data processor processes the name and address of the data subject to the extent necessary for sending the newsletters.
Data processors' activities related to sending newsletters
Name of the company operating the newsletter sending system: The Marketer
Registered office of the company operating the newsletter sending system : Badea Cartan 66, District 2, Bucharest , Office 3 , Zone II , Room 2, Bl. 40, Sc.A, Et.5, Ap.26 ,
Telephone number of the company that operates the newsletter system: +40724470432
Email address of the company operating the newsletter system : iam@themarketer.com
Website of the company operating the newsletter system : https://themarketer.com/
The data processor participates in the sending of newsletters on the basis of a contract concluded with the data controller. As part of this participation, the data processor processes the name and address of the data subject to the extent necessary for sending the newsletters.
Data processors' activities related to sending newsletters
Name of the company operating the newsletter sending system: Klavyio
Registered office of the company operating the newsletter sending system : 49 Southwark Bridge Rd London SE1 9HH , United Kingdom
Telephone number of the company that operates the newsletter system:
Email address of the company operating the newsletter system : sales@klaviyo.com
Website of the company operating the newsletter system : https : //www.klaviyo.com/
The data processor participates in the sending of newsletters on the basis of a contract concluded with the data controller. As part of this participation, the data processor processes the name and address of the data subject to the extent necessary for sending the newsletters.
Processing of accounting-related data
Name of the data processor : P - Kontroll Bt.
Registered office of the data processor: 2600 Vác, Pap Béla u. 10.
Telephone number of the data processor : + 36-27 / 316-210
Data processor email : konyveles@pkontroll.hu
Website of the data processor : www.pkontroll.hu
The data processor participates in accounting on the basis of a contract concluded in writing with the data controller. As part of this participation, the data processor processes the name and address of the data subject to the extent necessary for accounting records for a period in accordance with paragraph 2 of Section 169 of the Accounting Act and deletes them without delay after this period has expired.
Data processors' activities related to billing
Name of the data processor : Innovip.hu Kft .
Registered office of the data processor: 6723 Szeged, Gát utca 7/B.
Telephone number of the data processor : +36 20 367 6755
Data processor email : iroda@innovip.hu
Website of the data processor : https://www.innovip.hu/
The data processor participates in the recording of accounting documents on the basis of a contract concluded in writing with the data controller. As part of this participation, the data processor processes the name, surname and address of the data subject to the extent necessary for accounting records for the period pursuant to Section 169(2) of the Accounting Act and deletes them without delay after the expiry of this period.
Data processors' activities related to billing
Name of data processor : Microsoft Dynamics 365 Business Central
Data Processor's Headquarters : Building 92, NE 36th St, Redmond, WA 98052, United States
Data Processor Telephone Number : +1 425-882-8080
Data processor email:
Data processor website : https://www.microsoft.com
The data processor participates in the recording of accounting documents on the basis of a contract concluded in writing with the data controller. As part of this participation, the data processor processes the name, surname and address of the data subject to the extent necessary for accounting records for the period pursuant to Section 169(2) of the Accounting Act and deletes them without delay after the expiry of this period.
Data processors' activities related to billing
Name of data processor : Odoo SA
Registered office of the data processor: Chaussée de Namur, 40 1367 Grand Rosière Belgium
Telephone number of the data processor : +32 2 616 8002
Data processor email : privacy@odoo.com
Website of the data processor : https://www.odoo.com/
The data processor participates in the recording of accounting documents on the basis of a contract concluded in writing with the data controller. As part of this participation, the processor processes the name and address of the data subject to the extent necessary for accounting records for the period pursuant to Section 169(2) of the Accounting Act and deletes them without delay after the expiry of this period.
Data processors' activities related to billing
Name of data processor : Billingo Technologies Zrt .
Registered office of the data processor: 1133 Budapest, Árbóc utca 6.
Telephone number of the data processor : + 36-1 / 500-9491
Data processor email : hello@billingo.hu
Website of the data processor : https : //www.billingo.hu/
The data processor participates in the recording of accounting documents on the basis of a contract concluded in writing with the data controller. As part of this participation, the processor processes the name and address of the data subject to the extent necessary for accounting records for the period pursuant to Section 169(2) of the Accounting Act and deletes them without delay after the expiry of this period.
Data processors' activities related to the operation of the CRM system
Name of the data processor : UNAS Online Kft .
Registered office of the data processor: 9400 Sopron, Kőszegi út 14.
Data processor telephone number:
Data processor email : unas@unas.hu
Website of the data processor: unas.hu
The data processor participates in the registration of orders based on a contract concluded with the data controller. As part of this participation, the data processor processes the name, address, telephone number, order numbers and dates of the data subject within the civil statute of limitations.
Data processors' activities related to the operation of the CRM system
Name of the data processor : Innovip.hu Kft .
Registered office of the data processor: 6723 Szeged, Gát utca 7/B.
Telephone number of the data processor : +36 20 367 6755
Data processor email : iroda@innovip.hu
Website of the data processor : https : //www.innovip.hu/
The data processor participates in the registration of orders based on a contract concluded with the data controller. As part of this participation, the data processor processes the name, address, telephone number, order numbers and dates of the data subject within the civil statute of limitations.
Data processors' activities related to the operation of the CRM system
Name of data processor : easySales
Registered office of the data processor: Marinescu 9, emelet 6, Bucharest - Romania
Data processor phone number : + Data processor email : contact@easy-sales.com Data processor website : https://easy-sales.com/hu
The data processor participates in the registration of orders based on a contract concluded with the data controller. As part of this participation, the data processor processes the name, address, telephone number, order numbers and dates of the data subject within the civil statute of limitations.
Data processors' activities related to the operation of the CRM system
Name of the data processor : KOMPaaS.tech Kft
Headquarters of the data processor: 1114 Budapest, Kemenes utca 8. félemelet 3. - Magyarország
Data processor phone number : + Data processor email : support@mcntele.com Data processor website : https://kompaas.hu/
The data processor participates in the registration of orders based on a contract concluded with the data controller. As part of this participation, the data processor processes the name, address, telephone number, order numbers and dates of the data subject within the civil statute of limitations.
Data processors' activities related to the operation of the CRM system
Name of data processor : VIVnetworks.com sro
Registered office of the data processor: Jungmann Square 18, 110 00 Prague 1
Telephone number of the data processor : +420 734 447 050
Data processor email : support@vivnetworks.com
Website of the data processor : https://www.vivnetworks.com/hu/
The data processor participates in the registration of orders based on a contract concluded with the data controller. As part of this participation, the data processor processes the name, address, telephone number, order numbers and dates of the data subject within the civil statute of limitations.
Data processors' activities related to the operation of the CRM system
Name of the data processor : SC DECATHLON SRL
Registered office of the data processor: Militari Shopping, Bulevardul Iuliu Maniu 546-560, Bucharest 060032 - Romania
Data processor telephone number : +40 21 408 5000 Data processor e - mail : contact@decathlon.ro Data processor website : https://www.decathlon.ro/
The data processor participates in the registration of orders based on a contract concluded with the data controller. In
within the framework of this participation, the data processor processes the name, address, telephone number, order numbers and dates of the data subject within the limitation period under civil law.
Data processors' activities related to the operation of the CRM system
Name of data processor : Amazon.com
Data Processor 's Address : 410 Terry Ave N, Seattle 98109, WA
Data Processor Phone Number : + ( 206 ) 266-4064 Data Processor Email : copyright@amazon.com Data Processor Website : https://www.amazon.com/
The data processor participates in the registration of orders based on a contract concluded with the data controller. As part of this participation, the data processor processes the name, address, telephone number, order numbers and dates of the data subject within the civil statute of limitations.
Data processors' activities related to the operation of the CRM system
Name of the data processor : Pepita Group Zrt.
Registered office of the data processor: 5520 Szeghalom, belterület hrsz 2619/58
Data processor telephone number : +36 1 510 07 60 Data processor e - mail : segitunk@pepita.hu Data processor website : https://pepita.hu/
The data processor participates in the registration of orders based on a contract concluded with the data controller. As part of this participation, the data processor processes the name, address, telephone number, order numbers and dates of the data subject within the civil statute of limitations.
Processing of data related to online payments
Name of the data controller : Worldline SA
Registered office of the data controller: Tour Voltaire, 1 Place des Degrés, CS 81162, 92059 Paris la Défense Cedex
Data controller telephone number:
Data controller email :
Operator 's website : https : //www.six-payment-services.com/
The online payment service provider participates in the processing of online payments on the basis of a written contract with the data controller, for which purpose data is transferred to the online payment service provider during the purchase process. As part of this participation, the online payment service provider processes the name and address of the data subject on the invoice, as well as the order number and date, in accordance with its own data protection principles.
Purpose of data transfer: to provide the online payment service provider with the transaction data necessary for a payment operation initiated with the online payment service provider and related to a purchase.
Legal basis: performance of a contract concluded between you and the data controller pursuant to Article 6(1)(b) of the Regulation, which involves payment by the buyer and for which, in the case of online payment, the transfer of data pursuant to this section is required.
Name of data controller: Stripe
Operator's address : 354 Oyster Point Boulevard . South San Francisco , CA 94080
Operator phone number : 888-926-2289
Data controller email:
Operator 's website : https://stripe.com/
The online payment service provider participates in the processing of online payments on the basis of a written contract with the data controller, for which purpose data is transferred to the online payment service provider during the purchase process. As part of this participation, the online payment service provider processes the name and address of the data subject on the invoice, as well as the order number and date, in accordance with its own data protection principles.
Purpose of data transfer: to provide the online payment service provider with the transaction data necessary for a payment operation initiated with the online payment service provider and related to a purchase.
Legal basis: performance of a contract concluded between you and the operator pursuant to Article 6(1)(b) of the Regulation, which involves payment by the buyer and for which, in the case of online payment, the transfer of data pursuant to this section is required.
Trusted Store Program (Megbízható bolt)
For the purpose of operating the Megbízható Bolt program of www.arukereso.hu (Online Comparison Shopping Kft. 1074 Budapest, Rákóczi út 70-72., tax number: 24868291-2-42, company registration number: 01-09-186759), the buyer's email address and the name of the purchased product will be sent to arukereso.hu . Purpose of data transfer: requesting and displaying customer feedback. Online Comparison Shopping Kft. processes the personal data thus transferred in accordance with the data processing and privacy policy of www.arukereso.hu. With regard to the data transferred in this scope, Online Comparison Shopping Kft. qualifies as a data controller.
Data transfer to third countries
FansBRANDS® - The Official Motorsport Store
The following processor is located outside the European Union and processes data outside the European Union. The data processor is a member of the Privacy Shield list, which means that it ensures that data is processed with the safeguards provided in the European Union. More information is available here: www.privacyshild.gov.
The Rocket Science Group LLC (MailChimp)
Address: 1 North Dearborn Street, 5th floor Chicago, IL 60602 https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active
Your rights during data processing
During the data processing period, you are entitled to the following rights under the provisions of the regulation:
right to withdraw consent
access to personal data and information related to data processing; right to rectification;
restriction of data processing, right to erasure
right to object
the right to data portability.
If you wish to exercise your rights, this will require your identification and the Data Controller must necessarily communicate with you. Therefore, for the purposes of identification, it will be necessary to provide personal data (however, only your data already processed by the Controller can serve as the basis for identification) and your complaints regarding data processing will be available in your email account within the period specified in this Privacy Notice regarding complaints. If you have been our customer and want to identify yourself for the purposes of
When handling complaints or in the warranty management process, please also include your order ID for identification. This way we can identify you as our customer.
The data controller will respond to complaints regarding data processing within 30 days at the latest.
Right to withdraw consent
You have the right to withdraw your consent to the processing of your data at any time, in which case the data provided will be deleted from our system. However, please note that in the case of an order that has not yet been processed, the withdrawal of consent may result in us not being able to complete the delivery of your order. Furthermore, if the purchase has already been completed, we cannot delete the date related to the invoicing from our systems due to accounting regulations, and if we have any outstanding amounts, we may process your data even if you withdraw your consent based on a legitimate interest in debt collection.
Access to personal data
You have the right to obtain from the data controller confirmation as to whether or not your personal data is being processed, and in such a case, you have the right to:
and obtain access to the personal data being processed, and
and receive information from the controller about: the purposes of data processing;
categories of personal data processed;
information about the recipients or categories of recipients to whom the personal data have been or will be disclosed;
the envisaged period for which the personal data will be processed or, if this is not possible, the criteria used to determine this period;
the existence of your right to request from the data controller the correction or erasure of personal data or the restriction of the processing of personal data concerning you, or to object to such processing;
the right to lodge a complaint with a supervisory authority;
if the personal data were not obtained from the data subject, all available information about their source;
the existence of automated decision-making, including profiling, and at least in these cases, meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for you.
The purpose of exercising these rights may be to establish and verify the lawfulness of data processing, therefore, in the event of multiple requests for information, the data controller may charge a reasonable fee for providing the information.
Access to personal data is provided by the Operator by sending you the processed personal data and information by e-mail after your identification. If you have registered, we provide you with access so that you can view and control your personal data by logging into your user account.
In your request, please indicate that you are requesting access to personal data or information about data processing.
Right to correction
You have the right to request from the data controller the immediate correction of inaccurate personal data concerning you.
Right to restriction of data processing
You have the right to request from the controller restriction of processing if one of the following conditions applies:
you contest the accuracy of the personal data, for a period that allows the controller to verify the accuracy of the personal data, and if the accuracy of the data can be ascertained immediately, then no restriction shall apply
will take place;
the data processing is unlawful and you do not agree to the erasure of the personal data for any reason (for example, because the data is necessary for the exercise of a potential claim) and instead request the restriction of its use;
the controller no longer needs the personal data for the purposes of the processing, but the data subject requires them for the establishment, exercise or defence of legal claims, or
If you have objected to the processing of your data, but the legitimate interest of the data controller can also serve as a reason, the processing of your data must be restricted until it is determined whether the legitimate reasons of the data controller outweigh the legitimate reasons you have stated.
If processing has been restricted, such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
The controller will inform you before lifting the restriction on processing (at least 3 working days before lifting the restriction).
Right to erasure - right to be forgotten
You have the right to request from the data controller the erasure of personal data concerning you without undue delay if one of the following reasons applies:
the personal data are no longer necessary for the purposes for which they were collected or otherwise processed by the data controller;
you withdraw your consent on which the processing is based and there is no other legal ground for the processing;
you object to the processing based on legitimate interest and there are no overriding legitimate reasons (i.e. legitimate interest) for the processing,
personal data have been processed unlawfully by the data controller, if this has been established based on a complaint,
the personal data must be erased for compliance with a legal obligation laid down in Union or Member State law to which the data controller is subject.
Where the controller has made personal data public on any lawful basis and is obliged to erase the personal data for one of the above reasons, the controller, taking into account available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform other controllers processing the personal data that you have requested the erasure by such controllers of any links to, copies or replications of, those personal data.
Erasure does not apply to the extent that processing is necessary:
for exercising the right to freedom of expression and information;
or compliance with a legal obligation which requires processing under Union or Member State law to which the Data Controller is subject (processing of data in the context of invoicing is one of these cases, as the retention of the invoice is required by law), or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller;
to establish, exercise or defend legal claims (e.g. if the data controller has any claims against you that have not yet been satisfied or if a complaint handling process is ongoing).
Right to object
For reasons relating to your particular situation, you have the right to object at any time to the processing of personal data concerning you which is based on legitimate interests. In such a case, the data controller will no longer process the personal data.
personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defence of legal claims.
If personal data are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing purposes, including profiling to the extent that it is related to such direct marketing. If you object to processing for direct marketing purposes, the personal data will no longer be processed for such purposes.
Right to data portability
If the data processing is carried out by automated means or if the data management is based on your voluntary consent, you have the right to request from the data controller the data you have provided to him and which the data controller will send to you in an xml, JSON or csv format available to you and, if technically feasible, you may request the data controller to forward the data in this form to another data controller.
Automated decision-making
You have the right not to be subject to a decision based solely on automated processing (including profiling) which produces legal effects concerning you or similarly significantly affects you. In such cases, the controller shall implement suitable measures to safeguard the rights and freedoms and legitimate interests of the data subject, at least the right to obtain human intervention on the part of the controller, the right to express his or her point of view and the right to contest the decision.
The above does not apply if the decision:
it is necessary for the conclusion and performance of a contract between you and the data controller;
is permitted by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or
is based on your explicit consent.
Reporting to the data protection registration system
According to the Personal Data Protection Act, the controller must report certain data processing activities to the data protection registration system. This notification obligation ended on 25 May 2018.
Registration number in the NAIH (Hungarian National Office for Data Protection and Freedom of Information) until May 25, 2018:
Data protection registration number : NAIH - 103878 / 2016
Data security measures
The operator declares that it has taken appropriate security measures to protect personal data against unauthorized access, alteration, transfer, disclosure, deletion or destruction, as well as against accidental destruction and damage, and also against loss of access due to changes in the technologies used.
The data controller will do everything within its organizational and technical capabilities to ensure that its data processors also take appropriate data security measures when working with your personal data.
Remedies
If, in your opinion, the data controller has violated a legal provision regarding data processing or has failed to comply with one of your requests, you may initiate an investigation procedure with the Hungarian National Office for Data Protection and Freedom of Information (mailing address:
H-1363 Budapest, Pf. 9., e-mail: ugyfelszolgalat@naih.hu, telephone numbers: +36 (30) 683-5969 +36 (30) 549-6838;
+36 (1) 391 1400).
We would also like to inform you that in the event of a violation of the legal provisions on data processing or if the data controller has failed to comply with any of your requests, you may file a civil lawsuit against the data controller in court.
Change in privacy policy
The Data Controller reserves the right to amend this data management information in a manner that does not affect the purpose and legal basis of the data processing. By using the website after the change comes into effect, you agree to the amended privacy information.
If the data controller wants to carry out further data processing in relation to the collected data for a purpose other than the purpose for which it was collected, it will inform you of the purpose of the data processing and the following information before commencing further data processing:
the envisaged period for which the personal data will be processed or, if this is not possible, the criteria used to determine this period;
the existence of your right to request from the Operator access to personal data, their correction or deletion or restriction of processing of personal data concerning you, or to object to such processing in the case of data processing based on legitimate interest, or to request data portability in the case of data processing based on consent or a contractual relationship;
in the case of data processing based on consent, that you can withdraw your consent at any time, the right to lodge a complaint with a supervisory authority;
whether the provision of personal data is based on legal regulations or a contractual obligation or is a prerequisite for concluding a contract, as well as whether you are obliged to provide personal data and what possible consequences may arise from failure to provide data;
the existence of automated decision-making, including profiling, and at least in these cases, meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for you.
Data processing can only begin then, and in the case of data processing based on consent, your consent to data processing is required in addition to providing the above information.