Ágnes Dorottya Nagy SP (hereinafter: Service Provider) respects the personal data of its customers.
The Service Provider is obliged to comply with the following legislation and recommendations related to data management:
Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free flow of such data and the repeal of Directive 95/46/EC (GDPR)
- The Fundamental Law of Hungary, Article VI
- Act IV of 1959 on the Civil Code § 83
- Act CXII of 2011 on the right to informational self-determination and on the freedom of information
- Act CVIII of 2001 (On certain issues of services related to the information society),
- Act VI of 1998 (On the Protection of Individuals during the Machine Processing of Personal Data, Strasbourg January 28, 1981),
- the recommendations of the “Online Privacy Alliance”.
The Service Provider collects data in order to ensure, maintain, and protect its existing services, as well as to develop its new services, and for the purpose of specific goals resulting from the services, it is managed for the shortest possible time, taking into account the principles of data saving and data avoidance.
The Internet pages of the Service Provider can be visited without entering any data. However, there are services of a nature that necessarily include data provision. An example is online shopping.
In these cases, the most necessary data for the purchase will be recorded only for the purpose of conducting the online transaction, invoicing, and delivering the product to the home until the time it is absolutely necessary; including in this period the cases of complaints and guarantees, i.e. the case of storage in order to later prove the terms of the contract. After that, the entered data will be deleted.
The Service Provider is not entitled to release the customer’s data to a third party, except in the case that the customer has expressly consented to this, or if the third party is a related company of the Service Provider. The related companies are subject to a data protection obligation with the same content as this declaration.
In relation to the storage facilities operated, the Service Provider and its related companies, as intermediary service providers, are not responsible for compliance with data protection obligations undertaken by others.
