Privacy Notice
PURPOSE OF THE DATA MANAGEMENT NOTICE
Turborail Kft. (1203 Budapest, Török Flóris u. 19. fsz / 2., hereinafter, service provider, data controller) as a data controller, recognizes the content of this legal notice as binding on itself. It undertakes to ensure that all data management related to its activities meets the requirements set out in these regulations and in the applicable national legislation, as well as in the legal acts of the European Union.
The data protection guidelines arising in relation to the data management of Turborail Kft. are continuously available at www.turborail.hu/adatvedelem .
Turborail Kft. reserves the right to change this information at any time . Of course, you will notify your audience of any changes in good time. If you have any questions related to this announcement, please write to us and our colleague will answer your question. Turborail Kft. is committed to protecting the personal data of its customers and partners, and considers it of utmost importance to respect its customers' right to self-determination of information. Turborail Kft. treats personal data confidentially and takes all security, technical and organizational measures that guarantee data security.
Turborail Kft. describes its data management practices below.
DATA OF THE DATA CONTROLLER
If you would like to contact our Company, you can contact the data controller by email or telephone. Turborail Kft. deletes all e-mails received by it, together with personal data, no later than one year from the date of data communication .
Name: Turborail Kft.
Headquarters: Budapest, Török Flóris utca 19. fsz /2.
Company registration number: 01-09-178980
Tax number: 24723121243
Telephone number: +36 70 4297879 / +36 70 8846633
Email: info@turborail.com
SCOPE OF PROCESSED PERSONAL DATA
3.1 PERSONAL DATA TO BE PROVIDED DURING REGISTRATION
- Buyer's name
- Billing data (Company name, address, tax number)
- Phone number
- Email address
- Shipping address
3.2 TECHNICAL DATA
Turborail Kft. selects and operates the IT tools used to manage personal data in the course of providing the service in such a way that the managed data is: accessible to those authorized to do so (availability); its authenticity and authentication are ensured (authenticity of data management); its immutability can be verified (data integrity); be protected against unauthorized access (data confidentiality).
Turborail Kft. protects the data with appropriate measures against unauthorized access, alteration, transmission, disclosure, deletion or destruction, as well as against accidental destruction.
Turborail Kft. ensures the protection of the security of data management with technical, organizational and organizational measures that provide a level of protection corresponding to the risks associated with data management .
Turborail Kft. preserves confidentiality during data management: it protects the information so that only those who have the right to access it can access it ; integrity: protects the accuracy and completeness of the information and the method of processing; availability: it ensures that when the authorized user needs it, he can really access the desired information and that the related tools are available.
3.3 COOKIES
FUNCTION OF COOKIES
Cookies collect information about visitors and their devices; they note the individual settings of the visitors , which are used for e.g. when using online transactions, so you don't have to type them in again; facilitate the use of the website; they provide a quality user experience. In order to provide customized service, a small data package, so-called it places a cookie and reads it back during the subsequent visit . If the browser returns a previously saved cookie , the cookie management service provider has the opportunity to connect the user's current visit with previous ones, but only with regard to its own content.
ABSOLUTELY NECESSARY SESSION COOKIES
these cookies is to enable visitors to fully and smoothly browse the www.turborail.hu website, use its functions and the services available there. The validity period of this type of cookie lasts until the end of the session (browsing), when the browser is closed, this type of cookie is automatically deleted from the computer or other device used for browsing.
COOKIES PLACED BY THIRD PARTIES (ANALYTICS)
cookies from Google Analytics as a third party . By using the statistical service Google Analytics , www.turborail.hu collects information about how visitors use the website. The data is used for the purpose of developing the website and improving the user experience. These cookies also remain on the visitor's computer or other device used for browsing, in their browser, until they expire, or until the visitor deletes them.
3.4 DATA RELATED TO ONLINE ORDERS
- Buyer's name
- Billing data (Company name, address, tax number)
- Phone number
- Email address
- Delivery address of the ordered product
3.5 DATA RELATED TO ONLINE ADMINISTRATION
- Buyer's name
- The date of the order
3.6 DATA RELATED TO NEWSLETTER
You can subscribe or unsubscribe to our newsletter at any time. To unsubscribe, click on the unsubscribe button in the email sent.
PLANNED USE AND STORAGE PERIOD OF PROCESSED DATA
|
Data management name |
Usage |
Legal basis |
Retention time |
|
Registration on the website
Basic data: mandatory: e-mail address, telephone number, default language of correspondence
Billing address( es ): mandatory: last name, first name, phone number, address, country, postal code, town, street, house number optional: tax number
Shipping address( es ): mandatory: (last name, first name, phone number, address (country, postal code, town, street, house number) optional: email address
User-specified password (stored encrypted) |
online product sales,
documenting the purchase and payment,
fulfillment of the accounting obligation,
identification of the user as a customer and contact with him,
fulfillment of the ordered product (or service), invoicing,
the possibility of processing the payment, screening out transactions suspected of abuse during online payment . |
In the case of online product sales, the data subject's consent is Info . TV. Pursuant to § 5 (1) point a) and Article 6 (1) point a) of the GDPR, as well as performance of a contract pursuant to Article 6 (1) point b) of the GDPR documentation of purchase and payment, fulfillment of accounting obligations, and fulfillment of legal obligations during the issuance of invoices and processing of payment are GDPR Article 6 (1) point c) and Accounting . TV. Paragraph (2) of § 169 and the VAT Act. Based on § 169 during in case of filtering out transactions suspected of abuse during online payment, legitimate interest based on GDPR Article 6 (1) point (f) |
Until the contract is fulfilled, until the consent of the person concerned is revoked, failing which the Data Controller will process the data after the date of purchase, Civil Code. 6:22 a.m. will be deleted after 5 years pursuant to § If the data is transferred by the Data Controller to Account TV. is obliged to keep, then the Data Manager will only delete the data after 8 years after the termination of the user account, regardless of the data subject's consent. The consent can be withdrawn at any time by sending a message to the e-mail address info@turborail.hu . |
|
Personal data provided during the operation of e-mail, fax and telephone customer service
e-mail address, name, residential address (country, city, postal code, street, house number), telephone number and other personal data received by customer service by e-mail concerning the user or other affected person and the circumstances of the case. |
Investigating and accurately documenting the matter that comes to the attention of the contact on the Data Controller's website, or accurately documenting the telephone conversation with the telephone customer service, in order to make available to the Data Controller the requests and comments related to the Data Controller's activities. Communication by email is archived, so that in the event of any subsequent questions or disputes, the information is available in its original form and, if necessary, the Data Controller can contact the user in connection with the matter. |
The legal basis for handling data handled during customer service activities is the consent of the data subject, Info . TV. § 5 (1) point a) GDPR Article 6 (1) point a) and performance of a contract based on GDPR Article 6 (1) point b) fulfillment of a legal obligation GDPR Article 6 (1) ) paragraph c) and Fgy . TV. Based on § 17/A. |
Until the contract is fulfilled, until the consent of the person concerned is revoked, failing which the Data Controller will process the data after the date of purchase, Civil Code. 6:22 a.m. will be deleted after 5 years pursuant to § If the data is transferred by the Data Controller to Account TV. is obliged to keep, then the Data Manager will only delete the data after 8 years after the termination of the user account, regardless of the data subject's consent. The consent can be withdrawn at any time by sending a message to the email address info@turborail.hu . |
|
Personal data provided on the following Facebook page:
Comments and messages on the Turborail Hungary Facebook page. |
Consumers can send comments and messages to the controller via Facebook. The Data Controller or the data processor providing services to the Data Controller can answer questions and comments if necessary. (Facebook is not an official forum for handling consumer complaints.) |
the consent of the data subject is, Info . TV. § 5 (1) point a) on the basis of Article 6 (1) point a) of the GDPR |
Until the consent of the person concerned is revoked, in the absence of this, the Data Manager will process the data after the date of communication, according to the Civil Code. 6:22 a.m. will be deleted after 5 years pursuant to § |
|
Personal data provided during complaint handling:
a) name and address of the consumer,
b) the place, time and method of presenting the complaint,
c) a detailed description of the consumer's complaint, a list of documents, documents and other evidence presented by the consumer,
d) the statement of the Data Controller on his position regarding the consumer's complaint, if the complaint can be investigated immediately,
e) the signature of the person taking the minutes and the consumer ( unless the complaint was submitted by e-mail or telephone),
f) the place and time of taking the minutes,
g) unique identification number of the complaint. |
Investigating and accurately documenting the circumstances of the complaint received by contacting the www.turborail.hu link, or accurately documenting the telephone conversation with the telephone customer service, or documenting the entry in the complaint book in order to make available to the Data Controller the requests and comments that the They are related to the activities of the data controller. The communication is archived, so that in the event of any subsequent question or dispute, the information is available in its original form and, if necessary, the Data Controller can contact the user in connection with the case. |
The legal basis for handling data handled during complaint handling activities is the consent of the data subject, Info . TV. § 5 (1) point a) GDPR Article 6 (1) point a) and performance of a contract based on GDPR Article 6 (1) point b) fulfillment of a legal obligation GDPR Article 6 (1) ) paragraph c) and Fgy . TV. Based on § 17/A. |
The Data Controller is obliged to keep the record of the complaint and a copy of the response for five years and present it to the inspection authorities upon request If the data is transferred by the Data Controller to Account TV. is obliged to keep, then the Data Controller will only delete the data after 8 years from the date of the complaint, regardless of the data subject's consent. |
5 PURPOSE, METHOD AND LEGAL BASIS OF DATA MANAGEMENT
5.1 GENERAL DATA MANAGEMENT GUIDELINES
The data management of Turborail Kft.'s activities is based on voluntary consent and legal authorization . In the case of data management based on voluntary consent, the data subjects may withdraw their consent at any stage of the data management . In some cases, the management, storage, and transmission of a range of the provided data is made mandatory by law, of which we notify our customers separately.
We draw the attention of data informants to Turborail Kft. that if they do not provide their own personal data, the data informant is obliged to obtain the consent of the data subject. Its basic data management principles are in line with the current legislation on data protection, and in particular with the following:
- CXII of 2011. law - on the right to self-determination of information and freedom of information ( Infotv .);
- Regulation (EU) 2016/679 of the European Parliament and of the Council (April 27, 2016) - on the protection of natural persons with regard to the processing of personal data and on the free flow of such data, as well as the repeal of Regulation 95/46/EC about its location (General Data Protection Regulation, GDPR);
- Act V of 2013 - on the Civil Code (Ptk.);
- Act C of 2000 - on accounting (Accounting Act);
- LIII of 2017 Act - on the prevention and prevention of money laundering and terrorist financing ( Pmt .);
- CCXXXVII of 2013 Act - on credit institutions and financial enterprises (Hpt.).
PHYSICAL DATA STORAGE PLACES
Your personal data (that is, the data that can be linked to your person) can be processed by us in the following way: on the one hand, in connection with maintaining the Internet connection, technical data related to the computer, browser program, Internet address, and visited pages are automatically generated in our computer system, on the other hand, you can also provide your name, contact information or other data if you wish to contact us personally when using the website.
Technically recorded data during the operation of the system: the data of the concerned registrant's computer, which are generated during registration and which are recorded by Turborail Kft. 's system as an automatic result of the technical processes. The data that is recorded automatically is automatically logged by the system upon entry and exit without a separate declaration or action by the person concerned. This data cannot be combined with other personal user data, except in cases made mandatory by law. Only Turborail Kft. has access to the data .
The computer systems and other data storage locations of the data controller are located on the servers of Turborail Kft. (1203 Budapest, Török Flóris u. 19. fsz /2) and on the server of the webshop operator, Deninet Kft. (1188 Budapest, Bercsényi u. 79/ b. ).
7 DATA TRANSMISSION, DATA PROCESSING, CIRCLE OF PERSONS KNOWN TO THE DATA
When products are delivered, the recipient's name, address, and the value of the order will be forwarded to the following recipients:
- 1. GLS General Logistics Systems Hungary Csomag-Logisztikai Kft. (2351 Alsónémedi, Európa u. 2. info@gls-hungary.com )
Your data will not be forwarded to third parties beyond the above. Data is forwarded to a third party or recipient if we inform the potential recipient in advance and the buyer gives their prior consent, or otherwise is required by law.
8 YOUR RIGHTS AND REMEDIES
The data subject can request information about the management of his personal data, and can request the correction of his personal data, or - with the exception of mandatory data management - deletion or withdrawal, he can exercise his right to data portability and protest as indicated when the data was collected, or at the above contact details of the data controller.
8.1 RIGHT TO INFORMATION
Turborail Kft. takes appropriate measures in order to provide the data subjects with all the information mentioned in Articles 13 and 14 of the GDPR and Articles 15-22 regarding the handling of personal data . and provide each piece of information according to Article 34 in a concise, transparent, comprehensible and easily accessible form, clearly and comprehensibly worded.
8.2 YOUR RIGHT OF ACCESS
The data subject has the right to receive feedback from the data controller as to whether his personal data is being processed, and if such data processing is in progress, he is entitled to access the personal data and the following information: the purposes of the data processing; categories of personal data concerned; the recipients or categories of recipients to whom or to whom the personal data has been or will be communicated, including in particular recipients in third countries and international organizations; the planned period of storage of personal data; the right to rectification, deletion or limitation of data processing and the right to protest; the right to submit a complaint to the supervisory authority; information about data sources; the fact of automated decision-making, including profiling, as well as comprehensible information about the applied logic and the significance of such data management and the expected consequences for the data subject. The data controller shall provide the information within a maximum of one month from the date of submission of the request.
8.3 RIGHT OF CORRECTION
The data subject may request the correction of inaccurate personal data concerning him/her managed by Turborail Kft. and the addition of incomplete data.
8.4 RIGHT TO CANCELLATION
If one of the following reasons exists, the data subject has the right to request that Turborail Kft. delete the personal data relating to him/her without undue delay:
- personal data are no longer needed for the purpose for which they were collected or otherwise processed;
- the data subject withdraws the consent that forms the basis of the data management, and there is no other legal basis for the data management;
- the data subject objects to data processing and there is no overriding legal reason for data processing;
- personal data has been processed unlawfully; the personal data must be deleted in order to fulfill the legal obligation prescribed by the EU or Member State law applicable to the data controller;
- the collection of personal data took place in connection with the offering of services related to the information society.
Data deletion cannot be initiated if data management is necessary: for the purpose of exercising the right to freedom of expression and information; for the purpose of fulfilling the obligation under the EU or Member State law applicable to the data controller requiring the processing of personal data , or for the execution of a task performed in the public interest or in the context of the exercise of public authority conferred on the data controller; affecting the field of public health, or for archival, scientific and historical research purposes or for statistical purposes, on the basis of public interest; or to submit, assert or defend legal claims.
8.5 THE RIGHT TO LIMIT DATA PROCESSING
At the request of the data subject, Turborail Kft. restricts data processing if one of the following conditions is met:
- the data subject disputes the accuracy of the personal data, in which case the limitation applies to the period that allows the verification of the accuracy of the personal data;
- the data processing is illegal and the data subject opposes the deletion of the data and instead requests the restriction of its use;
- the data controller no longer needs the personal data for the purpose of data management, but the data subject requires them to present, enforce or defend legal claims; or
- the data subject objected to data processing; in this case, the restriction applies to the period until it is established whether the legitimate reasons of the data controller take precedence over the legitimate reasons of the data subject.
If data management is subject to restrictions, personal data may only be processed with the consent of the data subject, with the exception of storage, or to submit, assert or defend legal claims , or to protect the rights of another natural or legal person, or in the important public interest of the Union or a member state .
8.6 RIGHT TO DATA PORT
The data subject has the right to receive the personal data concerning him/her provided to the data controller in a segmented, widely used, machine-readable format, and to transmit this data to another data controller.
8.7 RIGHT TO OBJECT
The data subject has the right to protest at any time for reasons related to his own situation against the processing of his personal data necessary for the execution of a task carried out in the public interest or within the framework of the exercise of public authority conferred on the data controller, or for the enforcement of the legitimate interests of the data controller or a third party, including profiling based on the aforementioned provisions too. In the event of a protest, the data controller may no longer process the personal data, unless it is justified by compelling legitimate reasons that take precedence over the interests, rights and freedoms of the data subject, or that are related to the submission, enforcement or defense of legal claims.
8.8 AUTOMATED DECISION-MAKING IN INDIVIDUAL CASES, INCLUDING PROFILING
The data subject has the right not to be covered by the scope of a decision based solely on automated data management, including profiling, which would have a legal effect on him or affect him to a similar extent.
8.9 RIGHT OF WITHDRAWAL
The data subject has the right to withdraw his consent at any time.
8.10 RIGHT TO COURT
In the event of a violation of their rights, the data subject may appeal to the court against the data controller. The court acts out of sequence in the case.
8.11 DATA PROTECTION AUTHORITY PROCEDURE
You can file a complaint with the National Data Protection and Freedom of Information Authority:
Name: National Data Protection and Freedom of Information Authority
Headquarters: 1125 Budapest, Szilágyi Erzsébet fasor 22/C.
Mailing address: 1530 Budapest, Pf.: 5.
Telephone: 06 1 391 1400
Fax: 06 1 391 1410
Email: ugyfelszolgalat@naih.hu
Website: http ://www.naih.hu
9 OTHER PROVISIONS
We provide information on data management not listed in this information when the data is collected.
We inform our customers that the court, the prosecutor, the investigative authority, the infringement authority, the public administrative authority, the National Data Protection and Freedom of Information Authority, the Hungarian National Bank, or other bodies based on the authorization of the law, provide information, communicate data, transfer documents, or they can contact the data controller to make it available.
Turborail Kft. will release personal data to the authorities only to the extent and to the extent that is absolutely necessary to fulfill the purpose of the request, if the authority has specified the exact purpose and scope of the data .