Privacy Policy

This document contains the information of HBMP Limited Liability Company, as the operator of the handballshop.hu website (hereinafter collectively: Data Controller) in connection with the processing of the personal data provided by the users of the handballshop.hu website.

Contacts:

Name:                                     HBMP Limited Liability Company

Seat:                                       H-1087 Budapest, Könyves Kálmán körút 76.

E-mail address:                        kezishop@hbmp.hu

Telephone number:                 +36/1-435-4260

The privacy policy has been prepared in accordance with the rules of General Data Protection Regulation 2016/679 (hereinafter: ‘Regulation’).

1.     The scope of the processed data, the legal basis and purpose of the data processing and the duration of the data processing

1.1.   Registration information

Description of data processing cases, the purpose of the data processing and the scope of the processed data

If you register on the website, you have to provide the following information:

• e-mail address,

Legal basis for data processing

In the case of registration, the legal basis for data processing under Article 6 (1) (a) of the Regulation is your consent.

Duration of data processing

Your data is processed until the registration is cancelled.

1.2.   Account information

Description of data processing cases, the purpose of the data processing and the scope of the processed data

In the website you have the opportunity to enter additional data within the account created during registration, which is as follows:

• first name,
• surname,
• display name,
• new e-mail address,
• billing address,
• delivery address.

Legal basis for data processing

In the case of registration, the legal basis for data processing under Article 6 (1) (a) of the Regulation is your consent.

Duration of data processing

Your data is processed until the registration is cancelled.

1.3.   Data processed to fulfil an order

Description of data processing cases, the purpose of the data processing and the scope of the processed data

If you place an order on the Website, we need to process your name, billing address, delivery address, telephone number and e-mail address in order to fulfil the resulting contract.

During the order, we send the order information to your e-mail address, contact you by phone if this is necessary in connection with the order, and issue the invoice to you based on the provided information.

Legal basis for data processing

The legal basis for data processing is the performance of the contract concluded with you as a customer pursuant to Article 6 (1) (b) of the Regulation.

In the case of the invoice, the issuance of the invoice is a legal obligation under the VAT Act and its retention is a legal obligation under the Accounting Act, so the legal basis for data processing in the case of the invoice is Article 6 (1) (c) of the Regulation.

Providing data is a condition of concluding the contract, it is essential to fulfil the purchase.

Duration of data processing

After performing the contract, your data will be processed until the end of the civil law limitation period (which is 5 years), however, the data on the invoice shall be kept for 8 years in accordance with the provisions of the Accounting Act.

1.4.   Contact menu

Description of data processing cases, the purpose of the data processing and the scope of the processed data

On the Website, we provide you with the opportunity to contact us directly by filling out and submitting the contact form. You have to enter your name, e-mail address, telephone number and message on the form.

Legal basis for data processing

The legal basis for data processing under Article 6 (1) (a) of the Regulation is your consent.

Duration of data processing

The data is processed until your contact request is handled.

1.5.   Processed data in the framework of complaint handling, withdrawal and warranty claim handling

Description of data processing cases, the purpose of the data processing and the scope of the processed data

If we perform any administration related to the purchased product, or handle your complaint, we also realize the processing of personal data during the administration. In connection with the complaint handling, we process your name, contact details (e-mail address, telephone number, postal address) and your complaint.

The purpose of data processing is to implement warranty administration and complaint handling in accordance with legal regulations.

Legal basis for data processing

The legal basis for data processing is the fulfillment of the obligations prescribed in the Consumer Protection Act and the Civil Code pursuant to Article 6 (1) (c) of the Regulation.

Duration of data processing

Under the Consumer Protection Act, we shall keep the data for 5 years after the complaint is handled.

2.     Data Processors

During the data processing, we use as a data processor the:

• ProperIT Consulting Limited Liability Company (H-1238 Budapest, Csibuk utca 71.), who provides hosting services.
• GLS General Logistics Systems Hungary Csomag-Logisztikai Limited Liability Company (H-351 Alsónémedi GLS Európa u. 2.), who delivers the product.

3.     Cookie data processing

Parts of the website use small data files (hereinafter: ‘cookies’) to identify you. By visiting the website and using some of its functions, the Data Subject give his/her consent to the mentioned cookies being stored on the Data Subject’s computer and accessed by the Data Controller.

You can use a browser program to set and block cookie related activity. However, please note that in the latter case, without the use of cookies, you may not be able to use all the services of the website.

The service provider, as a technical contributor, may ensure that third parties cooperating with the service provider, in particular Google Inc., store cookies when visiting the websites, if the Data Subject has previously visited the service provider’s website and based on this they can display an advertisement to the Data Subject.

You can also delete the cookie from your own computer or set your browser to disable the use of cookies. Beyond that, Google ensures that a user can disable cookies placed by Google on the Google-disabled ad serving page (http://www.google.hu/policies/technologies/ads/). By disabling or deleting the use of cookies, the use of websites may become more inconvenient for the Data Subject.

What are cookies and how do we process them?

Cookies are small data files (hereinafter: ‘cookies’) that are transferred to your computer via the website by using the website, so that they are saved and stored by your Internet browser.

General tasks of cookies:

• collect information about visitors and their assets;
• memorize the individual settings of the visitors, which can be used e.g. when using online transactions, so you don’t have to retype them;
• facilitate the use of the website;
• provide a quality user experience.

For customized service, places a small packet of data on the user’s computer, called a cookie, and reads it back on a later visit. If the browser returns a previously saved cookie, the cookie provider has the option to link the user’s current visit to the previous ones, but only for their own content.

Most commonly used Internet browsers (Chrome, Firefox, Edge, Explorer, Opera, Safari, etc.) accept and allow the download and use of cookies by default, however, it is up to you to refuse or disable them by changing your browser settings, or to delete cookies that are already stored on your computer.

For more information on the use of cookies, see the ‘help’ menu in each browser.

The Website uses Facebook pixel (Facebook cookie). The Facebook pixel is a code with the help of which a report is being prepared about the conversions on the website, target audiences can be compiled, and give the website owner receives detailed analytics data about visitors’ use of the website. With the help of the Facebook pixel, you can display personalized offers and advertisements to the visitors of the website on the Facebook interface. You can read Facebook’s privacy policy here: https://www.facebook.com/privacy/explanation

The website uses the following cookies

To disable cookies for each browser:

• Chrome: https://support.google.com/accounts/answer/61416?hl=hu
• Firefox: https://support.mozilla.org/hu/kb/sutik-informacio-amelyet-weboldalak-tarolnak-szami?redirectlocale=hu&redirectslug=Cookies+processing
• Internet Explorer: https://support.microsoft.com/hu-hu/help/17442/windows-internet-explorer-delete-manage-cookies#ie=ie-11
• Safari: https://support.apple.com/hu-hu/guide/safari/sfri11471/mac
• Edge: https://support.microsoft.com/hu-hu/help/10607/microsoft-edge-view-delete- browser-history
• Opera: http://help.opera.com/Windows/10.20/hu/cookies.html

4.     Your rights regarding data processing

Within the period of data processing you have the following rights under the provisions of the Regulation:

• access to personal data and information related to data processing,
• right to rectification,
• right to restriction of processing,
• right to erasure (’right to be forgotten’),
• right to data portability,
• right to object,
• right to withdraw consent.

If you intend to exercise your rights, it involves your identification and we will need to communicate with you. Therefore, for the identification, personal data will be required (but the identification may only be based on data that we may otherwise treat you). Your complaints regarding the data processing will be able to access in our e-mail account within this privacy policy’s timeframe.

You have the right to contact any data controller, if the request has not been received by the responsible data controller, it will forward it to the responsible data controller without delay.

Complaints about data processing will be answered within 30 days at the latest.

4.1.   Right to withdraw consent

You have the right to withdraw your consent to data processing at any time, in which case the provided data will be deleted from our systems.

4.2.   Access to personal data and information

You are entitled to receive feedback on whether your personal data is being processed and, if data processing is in progress you are entitled to:

• receive an access to the processed personal data and
• be informed about the following information:
  • the purposes of the data processing;
  • the categories of personal data processed about you;
  • information about the recipients or categories of recipients to whom your personal data have been or will be disclosed by us;
  • the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
  • your right to request the rectification, erasure or restriction of the processing of personal data concerning you and to object to the processing of such personal data in the event of a data processing based on a legitimate interest;
  • the right to file a complaint to the supervisory authority;
  • if the data was not collected from you, any available information about your personal data source;
  • the fact of automated decision-making (if such a procedure is used), including profiling, and at least in those cases, understandable information about the logic used and the significance of such data processing and the expected consequences for you.

The purpose of exercise the right is to establish and control the lawfulness of data processing and therefore, upon requesting multiple information, we may charge a reasonable cost reimbursement in return for the fulfilment of information.

We provide access to personal data by sending the processed personal data and information to the you by e-mail after you have been identified.

Please indicate in your claim whether you are requesting access to personal data or requesting data processing information.

4.3.   Right to rectification

You are entitled to request the rectification of your inaccurate personal data without delay.

4.4.   Right to restriction of processing

You are entitled to request the restriction of data processing if one of the following is met:

• you dispute the accuracy of your personal data, for a period enabling us to verify the accuracy of the personal data, if no verification is required, no restrictions will be applied;
• the processing is unlawful, and you oppose the erasure of personal data and requests the restriction of their use instead;
• we do not need the personal data for the purpose of the processing, but they are required by you for the establishment, exercise or defence of legal claims; or
• you have objected to the processing, but because our legitimate interest can be a legal ground to our processing, in this case the restriction is pending until the end of the verification whether our legitimate grounds override those of yours.

If the data processing is restricted, such personal data shall be processed, with the exception of storage, only with the consent data subject, or for filing, enforcing or protecting a legal claims, or for to protect the rights of another natural or legal person, or in the important public interest of the Union or a Member State.

We will inform you about the lifting of the data processing restriction in advance (at least 3 working days before the lifting of the restriction).

4.5.   Right to erasure – right to be forgotten

You are entitled to request to delete of your personal data without undue delay if one of the following reasons exists:

• personal data are no longer necessary in relation to the purpose for which they were collected or processed,
• you withdraw your consent and there is no other legal basis for data processing,
• you are object against the legitimate interest-based data processing and there are no overriding legitimate grounds (as legitimate interest) for the data processing,
• we have processed the personal data unlawfully and this was established based on the complaint,
• personal data shall be deleted in order to comply with a legal obligation under Union or member’s state law applicable to us.

If, for any lawful reason, we have disclosed personal information about You, and for any of the reasons set out above, we are required to delete, taking account of available technology and the cost of implementation, we shall take reasonable steps, including technical measures, to inform other personal data processing data controllers that you have requested the erasure of links to such personal data, or a copy or replication of this personal data. As the main rule, your personal data will not be disclosed.

Erasure shall not apply if data processing is required:

• to exercise the right of freedom of expression and information;
• to compliance with a legal obligation (such as billing processing, since the retention of the bill is required by law) which requires processing by Union or Member State law to which we are subject or in order to the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
• to establish, exercise or defence of legal claims (e.g. if we have a claim against you and you have not yet completed that, or a consumer, or a data processing complaint handling is in progress).

4.6.   Right to object

You are entitled to object at any time for reasons related to your situation against the processing of your personal data based on a legitimate interest. In this case, we may not further process your personal data unless we can prove that the processing is justified by overriding legitimate reasons which take precedence over your interests, rights and freedoms or which relate to the submission, enforcement or protection of legal claims.

4.7.   Right to data portability

If your data processing is necessary for the performance of the contract or data processing is based on your voluntary consent, you have the right to request that the information you have provided to us be provided to you in a machine-readable format, in XML, JSON, or CSV. If this is technically feasible, you can request that the data be forwarded to another data controller in this format.

4.8.   Legal remedies

If you think that we have violated any statutory provision on data processing or have not completed your request, you have the right to initiate a procedure in order to eliminate a putative unlawful data processing before the National Data Protection and Information Authority (mail address: 1363 Budapest, Pf.: 9, e-mail: ugyfelszolgalat@naih.hu).

In addition, we also inform you that you can file a civil lawsuit in court.

5.     Data Security

During the operation of the IT systems, we ensure the necessary authorization management, internal organization and technical solutions to ensure that your data cannot become the property of unauthorized persons, and the data cannot be deleted or saved from the system or modified by unauthorized persons. We also enforce data protection and data security requirements against our data processors.

We keep a record of any possible privacy incidents and, if necessary, keep you informed of any incidents that occur.

6.     Other provisions

We reserve the right to amend this privacy policy in a way that does not affect the purpose and legal basis of the data processing.

However, if we wish to carry out further data processing in connection with the collected data for a purpose other than the purpose of their collection, we inform you about the purpose of the data processing and the following information prior to the further data processing:

• the duration of the storage of personal data or, if it is not possible, the criteria for determining the duration,
• the right to request access to, rectification, erasure or restriction of the processing of personal data concerning you and to object to the processing of personal data in the case of processing based on a legitimate interest and to request the right to data portability in the case of consent or contractual processing,
• in the case of data processing based on consent, that you can withdraw your consent at any time,
• the right to file a complaint to the supervisory authority;
• whether the provision of personal data is based on a law or a contractual obligation or a precondition for concluding a contract, and whether you are obliged to provide personal data and the possible consequences of failure to provide the data,
• the fact of automated decision-making (if such a procedure is used), including profiling, and at least in those cases, understandable information about the logic used and the significance of such data processing and the expected consequences for you.

The data processing can only be started after that, if the legal basis of the data processing is consent, in addition to the information, you shall also contribute to the data processing.

This Privacy Policy is valid from 31. March 2021.

A downloadable version of this document is available by clicking on the following link:

Privacy Policy