Privacy Notice

Dear Customer,

Whenever you are visiting our Company’s website or webshop, requesting a quote, placing an order or sending us a message, our Company processes personal data about you. Below you will find the most important information about the processing of your personal data and your rights. Should you have any further questions regarding the processing of your personal data, please do not hesitate to contact us via email at bodane@bio-textima.hu or at the contact details of our Company below.

What counts as personal data?

Personal data is any information that relates to an identified or identifiable natural person (data subject). For example, your name, address, date of birth, the content of message sent to us, or the details of your message are considered personal data.

Data relating to a non-natural person is not considered personal data. Accordingly, data about a company, institution, public office, association (such as the name of a business, its contact details or data of an order placed by a company) are not covered by the concept of personal data. Also excluded is any data where the data subject is not identifiable, i.e. anonymised or statistical data.

Who will process your personal data?

Name of data controller: BIO- TEXTIMA Ipari és Kereskedelmi Korlátolt Felelősségű Társaság

(BIO- TEXTIMA Industrial and Commercial Limited Liability Company)

Registered office: H-9167, Ipar u. 1., Bősárkány, Hungary

Company Reg. No.: 08-09-003818

Represented by Gyula Vörös, Executive director

Telephone: +36 96 271 259

Data protection officer: Mrs. Jánosné Boda

Email: bodane@bio-textima.hu

(hereinafter referred to as “Data Controller” or “Company”)

Which personal data does the Company process, and for what purpose?

To prepare a quotation, the Company will process your name, address and contact details (telephone number and email address), as well as the content of your request for quotation (i.e. the product or service for which you have requested a quote). The purpose of the processing here is to identify the customer and to keep in touch in order to send a quote.

If you order one of our products or services, we will process, in order to fulfil the order, your name, address, contact information, and the name, characteristics/features and content of the ordered product or service, as well as the content of any additional requests you may send to our Company. In this case, the purpose of the processing is to fulfil the order accurately, and in a way best suited to your needs, and to contact you so that we can notify you about any information concerning the ordered product or service and the status of your order.

After completing the order, our Company will issue an invoice for your order in accordance with the applicable legislation.  To issue an invoice, our Company will process your name, address, and the name and price of the product or service you ordered.

If our Company grants a warranty for any product or service ordered, or is obliged to provide such warranty according to law, the Company will process your name, address, order details, warranty card and/or invoice details and the details of your warranty claim, if any, in order to fulfil your claim (to establish the legitimacy thereof and to identify the product or service concerned).

In order to prevent future disputes and to prove facts in the event of a dispute, our Company will retain your non-deleted personal data for a period of five (5) years after the failure, performance or termination of a contract, in accordance with the general limitation rules of Act V of 2013 on the Civil Code. The purpose of processing under this section is to enable the Company to enforce its rights and claims that may arise out of a contract, and to defend itself when such claims and requirements are made against it.

In the case of payment by credit card, our Company will only use the bank card, credit card or bank account data obtained during the payment to the extent and for the time absolutely necessary for the exercise of its rights and fulfilment of its obligations. Your data will be processed by the Company’s contractual banking partners. You can find out more information about data processing on the websites of the relevant bank.

You can send us a message using the contact form available on our Company’s website or in our webshop. Whenever sending us a message, all data (name, address, contact details and content of the message) provided on the form will come into the possession of our Company, and will be processed by our Company in order to reply your message.

In order to further develop its services and provide the best possible user experience, our Company’s website collects data about those who visit the site and, for the purpose of analysis (analytics), places a short code snippet, a so-called ‘cookie’, on each computer that visits the site. We will inform the user of this fact when it first opens the site, and the user may confirm such information, thus giving his/her consent to the processing of such data. The cookies placed by our website are stored on your computer, so you can delete them at any time. The following guides will help you delete cookies: for Mozilla Firefox browser (https://support.mozilla.org/hu/kb/weboldalak-altal-elhelyezett-sutik-torlese-szamito), for Chrome browser (https://support.google.com/chrome/answer/95647?hl=hu&ref_topic=7438325), and for Microsoft Edge browser (https://privacy.microsoft.com/hu-hu/windows-10-microsoft-edge-and-privacy).

What are the legal grounds for processing personal data?

  1. For personal data provided for the issue of a price quotation, preparation of the contract to be concluded with you constitutes legal grounds for processing.
  2. For personal data provided in the course of executing an order, fulfilment of the contract (order) concluded with you constitutes legal grounds for processing.
  3. For personal data provided for the issue of an invoice, compliance with a legal obligation to which the controller is subject constitutes legal grounds for processing.
  4. For personal data provided for the enforcement of a warranty claim, compliance with a legal obligation to which the controller is subject constitutes legal grounds for processing.

In the cases referred to in points a) to d) above, the use of a service or the conclusion of a contract is conditional upon provision of the personal data requested; therefore, you are obliged to provide such information whenever requesting a quote, ordering a product/service, as well as for purchasing, invoicing and enforcing a warranty claim. In case of non-provision of the data, the Company may refuse to enter into a contract or to fulfil any of your claims or other requests.

  • If you fill in a contact form and submit the completed form on the Company’s website, your consent constitutes legal grounds for processing. By submitting a completed contract form, you provide your consent for obtaining and storing the information provided therein, as well as for using it to answer your question or prepare a quotation by the Company.
  • Whenever you visit the Company’s website, the cookies placed on your computer to enhance the user experience or used for analytical purposes are placed, stored and read with your consent.
  • Placing, storing and reading the cookies placed by the Company’s website on your computer to ensure the proper functioning of the site is a precondition of for the operation thereof. In this case, preparation or performance of a contract to be concluded with the customer constitutes legal grounds for processing. As the failure of processing would impede the proper functioning of the website, the Customer visiting it may not prohibit the processing of data for such purposes.

Does the Company transfer your personal data?

Our Company will transfer, for accounting purposes, your personal information stated on the invoice to the accounting firm, Celerius Maximus Kft., H-9022, Rákóczi u. 44., Győr, Hungary, hired by the Company.

In order to fulfil certain orders, the Company may subcontract certain sub-tasks (such as, in particular, carpentry and upholstery jobs). In this case, the subcontractor working on a specific individual order will process the customer’s name and contact details in order to identify any ordered item and to carry out, as may become necessary, any consultation.

Our Company has previously verified that the recipient of the data transfer or the organization entitled to have access to the personal data (data processor) is resident in the European Union, and provides sufficient guarantees to the effect that its data processing activities are in strict compliance with the data protection legislation of both Hungary and the European Union.

In addition to the cases mentioned in the foregoing, the Company may only transfer your personal data to a court or other authority in the cases and in the manner specified by law, upon request or by legal injunction.

Use of a data processor

The Company’s website is operated Attila Pintér, a sole proprietor (H-3557 Kinizsi utca 10., Bükkszentkereszt, Hungary), who qualifies as a data processor under the data protection legislation in effect.

The data processor acts under the exclusive instructions of the Company, and may not take any autonomous decision regarding the processing of your personal data. Our Company has previously verified that the data processor is resident in the European Union, and provides sufficient guarantees to the effect that its data processing activities are in strict compliance with the data protection legislation of both Hungary and the European Union. The data processor has given the Company sufficient guarantees that he applies and maintains proper data security measures that ensure the confidentiality, integrity and availability of the personal data he processes.

How long does the Company store your personal data?

The Company is required to retain and store your personal data recorded for invoicing or ordering purposes for a period of time as set out in the applicable accounting and tax legislation.

Our Company will retain and store your personal data used for contacting, ordering, contracting and invoicing as well as your personal data not deleted after the failure to conclude a contract, the performance of a contract or the termination of a contract for a period of five (5) years after the failure, performance or termination of the contract, in accordance with the general limitation rules of Act V of 2013 on the Civil Code. The purpose of processing under this section is to enable the Company to enforce its rights and claims that may arise out of a contract, and to defend itself when such claims and requirements are made against it.

Our Company will retain and store the personal data processed with your consent for as long as it is necessary to fulfil the purpose of data processing, or until such time as you may explicitly request the deletion of your personal data.

What are your rights in relation to the processing of your personal data?

Information and access to personal data

You do have the right of access to your personal data at the time of processing. Consequently, you may request information from the Company as to whether your personal data are being processed and, if data processing is in progress, you have the right to ask the Company about your data managed by it or processed by the data processor as may be entrusted by the Company, as well as about the source of such data, the purpose of processing, the legal grounds therefor, the duration thereof, the name, address and data processing activities of the processor, the circumstances and effects of a personal data breach, the measures taken to remedy it and, in the case of transferring your personal data, the legal grounds for and the recipient of the data transfer. At your request, our Company will make a copy of the data it manages available to the data subject.

Rectification

During processing, you may at any time request the Company to correct or supplement your personal data. If a personal data is incorrect and the correct personal data is available to the Company, it is required to rectify such data. The Company is obliged to send a notification of the fact of rectification to you and all those to whom they have previously transmitted the data at issue for the purposes of processing.

Erasure

You have the right at any time during data processing to request that the Company deletes any of your personal data without undue delay if one of the following grounds applies:

  1. the personal data designated by you is no longer necessary in relation to the purposes for which it was originally collected or otherwise processed by the Company;
  2. the Company has processed your personal data with your consent, and you, as the data subject, withdraw consent on which the processing is based and there is no other legal ground for the processing;
  3. you, as the data subject, have objected to data processing based on the legitimate interests of the Company, and there are no compelling legitimate grounds for the processing by the Company which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims;
  4. the Company has unlawfully processed your personal data;
  5. the personal data processed by the Company has to be erased for compliance with a legal obligation set out in EU or the national law to which the Company is subject; and
  6. you should, nevertheless, be entitled to object to the processing of any personal data and there are no overriding legitimate grounds for the processing.

Please note that you must submit your request for erasure in writing (by post or email) and indicate which personal data you wish to have erased for what reason.

If the Company approves your request for erasure, it will delete the processed personal data from all its records and inform you accordingly.

Where the Company is obliged to erase your personal data, it should take every reasonable step, including the application of technical measures, as may be necessary to provide information about the mandatory erasure of personal data also with the data controllers that have become aware of your personal data as a result of their disclosure. The Company is obliged to inform all other controllers also processing your personal data that you, as the data subject, have requested the erasure by such controllers of any links to, or copy or replication of, those personal data. Upon fulfilment of your request to exercise your right of erasure, the Company will promptly inform all the persons to whom they have disclosed your personal data, provided that it does not prove to be impossible or would involve a disproportionate effort by the Company.

The Company is not obliged to erase personal data to the extent that processing is necessary:

  1. for exercising the right of freedom of expression and information;
  2. for the fulfilment of any obligation to process personal data imposed on the Company by Hungarian or EU legislation;
  3. for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Company;
  4. for reasons of public interest in the area of public health;
  5. for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in so far as the exercise of the right to be forgotten is likely to render impossible or seriously impair the achievement of the objectives of the processing; or
  6. for the establishment, exercise or defence of legal claims.

Restriction

You have the right at any time during data processing to request that the Company restricts the processing and use of any of your personal data where one of the following applies:

  1. you contest the accuracy of your personal data (in this case the restriction lasts as long as the Company verifies the accuracy of the data at issue);
  2. the personal data have been unlawfully processed by the Company but instead of erasure, you are asking for a restriction;
  3. the purpose of data processing for the Company has ceased to exist but you request it for the establishment, exercise or defence of legal claims; or
  4. you, as the data subject, have objected to data processing based on the legitimate interests of the Company, and there are no compelling legitimate grounds for the processing by the Company which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims, pending the verification whether the legitimate grounds of the Company override those of you, as the data subject.

Where processing has been restricted, such personal data may, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of an EU Member State.

Upon fulfilment of your request to exercise your right of restriction, the Company will promptly inform all the persons to whom they have disclosed your personal data, provided that it does not prove to be impossible or would involve a disproportionate effort by the Company.

Right to object

You have the right to object to processing of personal data concerning you, and the Company has no right to process your personal data any longer unless it demonstrates

  1. compelling legitimate grounds for the processing which override your personal interests, rights and freedoms; or
  2. for the establishment, exercise or defence of the Company’s legal claims.

The withdrawal of consent

If the data processing has taken place with your consent, you have the right to withdraw such consent at any time. The withdrawal does not, however, affect the lawfulness of processing based on consent before its withdrawal.   

Right to data portability

You, as the data subject, have the right to receive personal data concerning you, which you have provided to the Company, in a structured, commonly used and machine-readable format, and have the right to transmit those data to another controller without hindrance from the Company.

Enforcing claims

If your personal rights are violated, you are entitled to bring an action against the Company.

With data protection issues, you can ask for the help of Hungarian National Authority for Data Protection and Freedom of Information at any time:

President: dr. Attila Péterfalvi

Postal address: H-1534 Budapest, PO Box: 834

Address: H-1125 Szilágyi Erzsébet fasor 22/c., Budapest, Hungary

Telephone: +36 (1) 391-1400

Fax: +36 (1) 391-1410

Website: http://www.naih.hu

e-mail: ugyfelszolgalat@naih.hu

In relation to the exercise of your rights in matters not covered by this policy, the relevant provisions of Act CXII of 2011 on Informational Self-Determination and Freedom of Information (“Privacy Act”) and Regulation (EU) of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, GDPR) shall prevail.

Our detailed Data Processing Policy concerning the processing of personal data and the operation of the video surveillance system is available at the registered office and on the official website of the Company.

If you have any questions regarding the processing of your personal data, of if you want to exercise our rights as the data subject, please contact the Company’s designated data protection officer, Mrs. Jánosné Boda at bodane@bio-textima.hu.