Dear Customers! Our webshop is closed 22-23 October. In this period the processing of the orders and the customer service is suspended. Thank you for your understanding!

K9-Sport Kft., as the operator of the webshop available at https://shop.julius-k9.com/en/, intends to provide information to the visitors of the website or people getting in touch with the customer services by phone (hereinafter as data subjects or visitors for this Information on Data Processing) about its practice of data processing, technical and organisational measures in connection with personal data and the remedies available for visitors in the following.

Contents:

  1. 1.    The Data Controller 
  2. 2.    The principles of data processing
  3. 3.    Data processing

3.1.   The use of cookies

3.2.   Data processing in connection with newsletters

3.3.   Registration and placing orders

3.4.   Complaint management

3.5.   The Facebook page of A JULIUS-K9®

3.6.   Using YouTube, Instagram and Facebook links

3.7.   Other data processing

  1. 4.    Data protection
  2. 5.    Data Processors 
  3. 6.    The data subjects’ rights and the enforcement of such rights 

6.1.   Measures taken by the Data Controller when the data subjects’ rights are exercised

6.2.   The data subject’s right to access

6.3.   The right to correct

6.4.   The right to delete (“the right to be forgotten”)

6.5.   The right to restrict data processing

6.6.   The right to data portability

6.7.   The right to object

6.8.   Legal remedies

  1. 1.    The Controller

K9-Sport Kft. is the Controller of personal data.

Its registered and postal address: 2310 Szigetszentmiklós, Ipar u. 10-12.

Company registration number: 13-09-128686

Tax number: 14762345-2-13

E-mail address: shop@julius-k9.com

Phone number: +36 24 515 560

Represented by: Anikó Bakos / Gyula Sebő, managing director, independently

Data protection officer: none

K9-Sport Kft. does not employ a data protection officer because K9-Sport Kft.:

-     is not a public entity,

-     does not carry out large-scale or regular surveillance activities,

-     does not process special data in a large amount during its main activity.

2. The principles of data processing

Personal data are managed, processed and used during the activities carried out on the website https://shop.julius-k9.com/en/, including the visit of, registration on and ordering products through the website as well as signing for our newsletter.

Under Regulation (EU) 2016/679 of the European Parliament and of the Council (hereinafter as: GDPR), personal data include “any information on identified or identifiable natural persons (“data subjects”); identifiable natural persons are persons who can be identified directly or indirectly, especially on the basis of any identification data, including name, number, data identifying location, online ID or one or more aspects relating to the bodily, physiological, genetic, mental, economic, cultural or social identification of the natural person.”

We process personal data in a legal and fair manner, in a way that is transparent to the data subject, only for specific purposes and in line with the principle of data minimisation. We only process personal data which are necessary for the achievement of the purposes of data processing and suitable for achieving such purposes. We process personal data only to the extent and for a duration necessary for the achievement of the purposes.

In the course of our data processing activities, we observe the following laws and regulations:

  • REGULATION (EU) (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL (27th April 2016) on the Protection of Natural Persons with Regard to the Processing of Personal Data and on the Free Movement of Such Data, and Repealing Directive 95/46/EC (General Data Protection Regulation) – (GDPR),
  • Act C of 2000 on Accounting (Acc Act),
  • Act CVIII of 2001 on Certain Issues of Electronic Commerce Services and Information Society Services (E-comm Act),
  • Act C of 2003 on Electronic Communications (ElComm Act),
  • Act XLVIII of 2008 on the Basic Requirements and Certain Restrictions of Commercial Advertising Activities (CommAdv Act),
  • Act CXII of 2011 on Informational Self-determination and Freedom of Information (Info Act),
  • Act V of 2013 on the Civil Code (Civil Code Act),
  • REGULATION (EU) (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL (27th April 2016) on the Protection of Natural Persons with Regard to the Processing of Personal Data and on the Free Movement of Such Data, and Repealing Directive 95/46/EC (General Data Protection Regulation) – (GDPR),
  • Act CLV of 1997 on Consumer Protection (ConProt Act).

3. Data Processing

3.1. The use of cookies

When the data subject visits the website https://shop.julius-k9.com/en/, our website places cookies, i.e. short data files, on the visitor’s computer. They enable our website to identify the device the data subject is using when a connection is created between the data subject’s device and our website.

Temporary cookies are placed on the visitor’s device by our website only in the course of a specific workflow and are deleted when the workflow ends.

We also use permanent cookies on our website. They will stay in the visitor’s computer until they are deleted by the visitor.

Our website uses cookies which collect data on the data subject’s internet usage habits. This is done so that the data subject can receive custom-tailored advertisements on his or her computer.

The following cookies are used on our website:

Necessary cookies help make a website usable by enabling basic functions like page navigation and access to secure areas of the website. The website cannot function properly without these cookies.

Necessary (4)

Necessary cookies help make a website usable by enabling basic functions like page navigation and access to secure areas of the website. The website cannot function properly without these cookies.

Name: AWSELB

Provider: writer.smartlook.com

Purpose: Used to distribute traffic to the website on several servers in order to optimise response times.

Expiry: Session

Type: HTTP Cookie

Name: CookieConsent

Provider: shop.julius-k9.com

Purpose: Stores the user's cookie consent state for the current domain

Expiry: 1 year

Type: HTTP Cookie

Name: frontend

Provider: shop.julius-k9.com

Purpose: Stores a random ID which ensures that a user can be uniquely identified as a guest or logged-in user. Functions such as "Items last viewed" or retention of the logged-in state are connected with this cookie.

Expiry: Session

Type: HTTP Cookie

Name: frontend_cid

Provider: shop.julius-k9.com

Purpose: Stores a random ID which ensures that a user can be uniquely identified as a guest or logged-in user on encrypted pages. Functions such as "Items last viewed" or retention of the logged-in state are connected with this cookie.

Expiry: Session

Type: HTTP Cookie

Statistics (5)

Statistic cookies help website owners to understand how visitors interact with websites by collecting and reporting information anonymously.

Name: _ga

Provider: julius-k9.com

Purpose: Registers a unique ID that is used to generate statistical data on how the visitor uses the website.

Expiry: 2 years

Type: HTTP Cookie

Name: _gat

Provider: julius-k9.com

Purpose: Used by Google Analytics to throttle request rate.

Expiry: Session

Type: HTTP Cookie

Name: _gid

Provider: julius-k9.com

Purpose: Registers a unique ID that is used to generate statistical data on how the visitor uses the website.

Expiry: Session

Type: HTTP Cookie

Name: collect

Provider: google-analytics.com

Purpose: Used to send data to Google Analytics about the visitor's device and behaviour. Tracks the visitor across devices and marketing channels.

Expiry: Session

Type: Pixel Tracker

Name: external_no_cache

Provider: shop.julius-k9.com

Purpose: This cookie is set to determine if the cache is enabled or disabled - a cache is used by the website to optimize the response time between the visitor and the website. The cache is usually stored on the visitor’s browser.

Expiry: Session

Type: HTTP Cookie

Marketing (20)

Marketing cookies are used to track visitors across websites. The intention is to display ads that are relevant and engaging for the individual user and thereby more valuable for publishers and third party advertisers.

Name: ads/ga-audiences

Provider: google.com

Purpose: Used by Google AdWords to re-engage visitors that are likely to convert to customers based on the visitor's online behaviour across websites.

Expiry: Session

Type: Pixel Tracker

Name: ads/user-lists/#

Provider: google.com

Purpose: Pending.

Expiry: Session

Type: Pixel Tracker

Name: FPC_PRODUCT_VIEWED

Provider: shop.julius-k9.com

Purpose: This cookie used to determine which products the visitor has viewed. This allows the website to promote related products, optimizing the website experience.

Expiry: Session

Type: HTTP Cookie

Name: fr

Provider: facebook.com

Purpose: Used by Facebook to deliver a series of advertisement products such as real time bidding from third party advertisers.

Expiry: 3 months

Type: HTTP Cookie

Name: GPS

Provider: youtube.com

Purpose: Registers a unique ID on mobile devices to enable tracking based on geographical GPS location.

Expiry: Session

Type: HTTP Cookie

Name: IDE

Provider: doubleclick.net

Purpose: Used by Google DoubleClick to register and report the website user's actions after viewing or clicking one of the advertiser's ads with the purpose of measuring the efficacy of an ad and to present targeted ads to the user.

Expiry: 1 year

Type: HTTP Cookie

Name: NID

Provider: google.com

Purpose: Registers a unique ID that identifies a returning user's device. The ID is used for targeted ads.

Expiry: 6 months

Type: HTTP Cookie

Name: PREF

Provider: youtube.com

Purpose: Registers a unique ID that is used by Google to keep statistics of how the visitor uses YouTube videos across different websites.

Expiry: 8 months

Type: HTTP Cookie

Name: test_cookie

Provider: doubleclick.net

Purpose: Used to check if the user's browser supports cookies.

Expiry: Session

Type: HTTP Cookie

Name: tr

Provider: facebook.com

Purpose: Pending

Expiry: Session

Type: Pixel Tracker

Name: VISITOR_INFO1_LIVE

Provider: youtube.com

Purpose: Tries to estimate the users' bandwidth on pages with integrated YouTube videos.

Expiry: 179 days

Type: HTTP Cookie

Name: YSC

Provider: youtube.com

Purpose: Registers a unique ID to keep statistics of what videos from YouTube the user has seen.

Expiry: Session

Type: HTTP Cookie

Name: yt.innertube::nextId

Provider: youtube.com

Purpose: Pending.

Expiry: Persistent

Type: HTML Local Storage

Name: yt.innertube::requests

Provider: youtube.com

Purpose: Pending.

Expiry: Persistent

Type: HTML Local Storage

Name: yt-remote-cast-installed

Provider: youtube.com

Purpose: Stores the user's video player preferences using embedded YouTube video.

Expiry: Session

Type: HTML Local Storage

Name: yt-remote-connected-devices

Provider: youtube.com

Purpose: Stores the user's video player preferences using embedded YouTube video.

Expiry: Persistent

Type: HTML Local Storage

Name: yt-remote-device-id

Provider: youtube.com

Purpose: Stores the user's video player preferences using embedded YouTube video.

Expiry: Persistent

Type: HTML Local Storage

Name: yt-remote-fast-check-period

Provider: youtube.com

Purpose: Stores the user's video player preferences using embedded YouTube video.

Expiry: Session

Type: HTML Local Storage

Name: yt-remote-session-app

Provider: youtube.com

Purpose: Stores the user's video player preferences using embedded YouTube video.

Expiry: Session

Type: HTML Local Storage

Name: yt-remote-session-name

Provider: youtube.com

Purpose: Stores the user's video player preferences using embedded YouTube video.

Expiry: Session

Type: HTML Local Storage

Unclassified (10)

Unclassified cookies are cookies that we are in the process of classifying, together with the providers of individual cookies.

Name: mailchimp_landing_page

Provider: shop.julius-k9.com

Purpose: Pending.

Expiry: Session

Type:     HTTP Cookie

Name: S

Provider: docs.google.com

Purpose: Pending.

Expiry: Session

Type:     HTTP Cookie

Name: SL_C_23361dd035530_KEY

Provider: julius-k9.com

Purpose: Pending.

Expiry: 13 months

Type: HTTP Cookie

Name: SL_C_23361dd035530_SID

Provider: julius-k9.com

Purpose: Pending.

Expiry: 13 months

Type: HTTP Cookie

Name: SL_C_23361dd035530_VID

Provider: julius-k9.com

Purpose: Pending.

Expiry: 13 months

Type: HTTP Cookie

Name: SL_L_23361dd035530_KEY

Provider: shop.julius-k9.com

Purpose: Pending.

Expiry: Persistent

Type: HTML Local Storage

Name: SL_L_23361dd035530_SID

Provider: shop.julius-k9.com

Purpose: Pending.

Expiry: Persistent

Type: HTML Local Storage

Name: SL_L_23361dd035530_VID

Provider: shop.julius-k9.com

Purpose: Pending.

Expiry: Persistent

Type: HTML Local Storage

Name: smartlookCookie

Provider: manager.smartlook.com

Purpose: Pending.

Expiry: Session

Type HTTP Cookie

Name: UUID#[abcdef0123456789]{53}

Provider: julius-k9.com

Purpose: Pending.

Expiry: Session

Type HTTP Cookie

Automated decision-making and profiling: custom-tailored advertisements are displayed for the visitor on the basis of the internet usage history and the personal data collected by the cookies about internet usage habits.

3.2 Data processing in connection with newsletters:

The data processed: we manage the e-mail address, name and postal code of the person signing up for our newsletters, the date of signing up, the IP address of the device used for signing up, the opening of newsletters and the clicks on the links found in the newsletters.

Purpose of data processing: building direct marketing data base, sending commercial advertisements to those signing up for newsletters, informing data subjects of our new offers, special offers and prize games, sending abandoned cart reminders to customers who have signed up for newsletter about products placed in the cart and left there unordered.

Legal basis for data processing:

  • consent by the data subject, as specified by Section (1) a) of Article 6 of the GDPR, Section (1) a) of Article 5 of the Info Act. The consent can be withdrawn at any time by e-mail sent to the e-mail address mintabolt@julius-k9.hu, by regular mail sent to the postal address K9-Sport Kft. 2310 Szigetszentmiklós, Ipar u. 10-12 or by phone (+36 24 515 560).
  • it is the Data Controller’s legitimate interest based on Section (1) f) of Article 6 of the GDPR. In such a case, the data subject is entitled to object to the processing of his or her data at any time by e-mail sent to the e-mail address mintabolt@julius-k9.hu, by regular mail sent to the postal address of a K9-Sport Kft. or by phone (+36 24 515 560).

Duration of data processing: until deletion requested by the data subject. Each newsletter contains a link for unsubscribing. By clicking on this link, the data subject can unsubscribe immediately. Subscriptions can also be cancelled at the contacts of the Data Controller indicated in Section 1).

Automated decision-making and profiling: the data subjects are categorised into customer groups on the basis of their personal data and newsletters tailored to their profiles are sent to them.

3.3. Registration and placing orders

The data processed:

  • during registration: title, surname, first name, phone number, e-mail address, password,
  • when placing the order: delivery option, method of payment, billing address, delivery address.

Purpose of data processing: creating and performing contracts, invoicing and claim management in connection with contracts, keeping contact with customers.

Legal basis for data processing:

  • performing contracts because data processing is necessary for performing contracts where the data subject acts as one of the parties or data processing in necessary to respond to the data subject’s request before signing the contract; here Section (1) b) of Article 6 of the GDPR applies.
  • if the contract has already been performed, the legal basis for data processing: the legal obligations of the Data Controller; here Section (1) c) of Article 6 of the GDPR applies.

Duration of data processing: until a request is received from the data subject to delete the data, or if a contract has been signed, 8 years in accordance with Article 169 (2) of the Acc Act.

3.4. Complaint management

A/ K9-Sport Kft., in the case of oral complaints under Article 17/A (2) of the ConProt Act, records the data of the consumer making the phone call in a separate document if the consumer does not agree with the way his or her complaint is managed or the complaint cannot be investigated.

The data processed: the consumer’s name, address, e-mail address, phone number; place, date and way of reporting the complaint; a detailed description of the consumer’s complaint, the list of records, documents and other evidence produced by the consumer; the enterprise’s statement on its standpoint on the consumer’s complaint; any other data that is given by the consumer in his or her complaint.

Purpose of data processing: complaint management.

Legal basis for data processing: consent by the data subject, as specified by Section (1) a) of Article 6 of the GDPR and Section (1) a) of Article 5 of the Info Act. The consent can be withdrawn at any time by e-mail sent to the e-mail address mintabolt@julius-k9.hu, by regular mail sent to the postal address K9-Sport Kft. 2310 Szigetszentmiklós, Ipar u. 10-12 or by phone (+36 20 237 4848). Legal basis for data processing: Sections (3) to (7) of Article 17/A of the ConProt Act.

Duration of data processing: 5 years in accordance with Article 17/A (7) of the ConProt Act.

B/ K9-Sport Kft., in the case of written complaints under Article 17/A (6) of the ConProt Act, processes the personal data of consumers sending e-mails or regular mails.

The data processed: any data given on a voluntary basis by the consumer in his or her complaint.

Purpose of data processing: complaint management.

Legal basis for data processing:

  • consent by the data subject, as specified by Section (1) a) of Article 6 of the GDPR, Section (1) a) of Article 5 of the Info Act. The consent can be withdrawn at any time by e-mail sent to the e-mail address mintabolt@julius-k9.hu, by regular mail sent to the postal address K9-Sport Kft. 2310 Szigetszentmiklós, Ipar u. 10-12 or by phone (+36 20 237 4848). Legal basis for data processing: Sections (6) to (7) of Article 17/A of the ConProt Act.
  • the performance of the contract: if data processing is necessary for performing a contract which one of the parties is involved in or the data processing is necessary for responding to the data subject’s request before concluding the contract; here Section (1) b) of Article 6 of the GDPR applies.

Duration of data processing: 5 years in accordance with Article 17/A (7) of the ConProt Act.

3.5. The Facebook page of JULIUS-K9®

Visitors can comment or send messages to our company on the Facebook page of K9-Sport Kft. Facebook (https://www.facebook.com/juliusk9/). In the course of this, they can provide personal data.

The data processed: any data that is provided by the data subject on a voluntary basis through his or her comments or messages.

Purpose of data processing: managing customer responses, answering questions.

Legal basis for data processing: consent by the data subject, as specified by Section (1) a) of Article 6 of the GDPR and Section (1) a) of Article 5 of the Info Act.

Duration of data processing: until cancellation at the request of the data subject, with the condition that personal data are deleted by the Data Controller after 5 years the latest.

3.6. Using YouTube, Instagram and Facebook links

On the website https://shop.julius-k9.com/en/, we have placed links directing visitors to subpages operated by the YouTube, Instagram and Facebook service providers. If the data subject clicks on them, the page of the social media service provider where, following log-in, the subpage of Julius-K9 can be viewed. 

3.8. Other data processing

Regarding data processing not included in this Information on Data Processing, information is provided right before the relevant data are recorded.

4. Data protection

The protection of personal data is ensured by K9-Sport Kft. with the help of the following organisational and technical measures:

  • on the basis of its internal regulations, personal data can be accessed only by employees for whom the processing of personal data is essential for performing their duties,
  • an internal regulation guaranteeing security in connection with the paper-based processing personal data is in place,
  • the security of personal data stored in an electronic way is ensured by permanent protection against viruses, with the help of a firewall and through logging. With the help of these, access to personal data can also be monitored. These solutions ensure the protection of the IT system against computer-based fraud and hacking,
  • personal data are stored in its internal IT system at its registered office, locations and premises,
  • the physical protection of the servers where personal data are stored is ensured by security and organisational measures.

5. Data Processors

The Data Processor is the organisation listed in the following table, performing the processing of the data subject’s personal data on behalf of K9-Sport Kft. Data management here means the performance of technical tasks in connection with the processing of the data subject’s personal data.

 

Company name

Address

Activity

Which data are processed?

DHL Express Magyarország Kft.

1097 Budapest, Fehérakác u. 3.

ugyfelszolgalat.hu@dhl.com

+36 1 245 4545

Privacy Notice:

https://www.dhl.hu/en/legal.html#privacy

courier services

Name, billing address, delivery address

PayPal

registered office: San Jose, California

https://www.paypal.com/hu

Information on Data Processing:

https://www.paypal.com/hu/webapps
/mpp/ua/privacy-full

online payment

Name, card number, products purchased

B-Payment Zrt.

1132 Budapest, Váci út 4.

online payment card management

Name, card number, products purchased

Budapest Bank Zrt.

1138 Budapest, Váci út 193.

info@budapestbank.hu

+36 1 450 6000

https://www.budapestbank.hu/szolgaltatas/lakossag/regisztracio-adatkezeles.php

bank transfer payment

Name, bank account number, amount

 

6. The data subjects’ rights and the enforcement of such rights

6.1. Measures taken by the Data Controller when the data subjects’ rights are exercised

When the data subjects’ rights included in the following sections are exercised, the Data Controller shall, without undue delay, inform the data subject of the measures taken as a result of the request by the data subject no later than within one month of receipt of such request. If necessary, this deadline can be extended by another two months, taking the complexity of the request and the number of requests into consideration. The Data Controller informs the data subject of the extension of the deadline, indicating the reasons for delay, within one month of receipt of the request. If the Data Controller fails to take measures at the data subject’s request, the Data Controller shall inform the data subject without delay but no later than within one month of receipt of the request of the reasons for failing to take the measures and of the fact that the data subject can file a complaint with the supervisory authority and exercise his or her right for legal remedy.

Information is provided and measures are taken by the Data Controller free of charge. If the data subject’s request is clearly ungrounded or – in the case of repetition – exaggerated, the Data Controller, taking into consideration the administrative costs of providing the requested information or taking the requested measure, has the right to charge a reasonable fee or refuse to take measure on the basis of the request. The Data Controller has the burden to prove that the request is clearly ungrounded or exaggerated.

If the Data Controller has justified doubts about the identity of the natural person filing the request, the Data Controller shall have the right to request further information necessary to verify the data subject’s identity.

6.2. The data subject’s right to access

The data subject shall have the right to receive feedback from the Data Controller with respect to the fact that the processing of his or her personal data is in progress or not. If such processing is in progress, the data subject shall have the right to have access to the personal data and the following information:

  • the purposes of data processing;
  • the categories of the personal data concerned;
  • the recipients or various categories of recipients to whom the personal data have been or will be disclosed, including recipients in third countries or international organisations;
  • the duration the personal data are planned to be kept or, if this is not possible, the aspects of determining this period;
  • the data subject’s right to request the Data Controller to correct, delete or restrict the processing of the data and to object to the processing of such personal data;
  • right to file a complaint with any supervisory authority;
  • if the data are not collected from the data subject, any information available in connection with the source of such data;
  • the fact of automated decision-making, including profiling and, at least in such cases, information on the logics used and clearly comprehensible information on the significance of such data processing and the potential consequences for the data subjects.

The Data Controller shall make available all the copies of the personal data being the subject of data processing to the data subject. If the data subject submits his or her request in an electronic way, the information is made available in a widely-used electronic form, unless the data subject requests a different way.

6.3. The right to correct

The data subject shall have the right to request the Data Controller to correct his or her incorrect personal data without due delay. In view of the purpose of data processing, the data subject shall have the right to request his or her incomplete personal data to be supplemented, for example, via an additional statement.

The Data Controller shall communicate the correction to each recipient to whom the personal data have been disclosed, unless this proves to be impossible or involves disproportionate efforts. At the data subject’s request, the Data Controller shall provide information on the recipients.

6.4. The right to delete (“the right to be forgotten”)

The data subject shall have the right to request the Data Controller to delete his or her personal data without due delay if one of the following criteria is met:

  • the personal data are not needed any more for the purpose they were originally collected for or processed;
  • the data subject withdraws his or her consent serving as a basis for data processing and there are no other legal bases for data processing;
  • the data subject objects to data processing and there are no other prioritized legal grounds for data processing or if the data processing directly involved business acquisition;
  • the personal data have been processed illegally;
  • the personal data must be deleted for compliance with legal obligations applicable to the Data Controller in the EU or the member state;
  • the personal data were collected in connection with rendering services relating to information society.

The requirement above cannot be used, among others, if data processing is necessary:

  • for compliance with obligations under EU or member state laws requiring the Data Controller to process personal data or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller;
  • for the establishment, exercise or defence of legal claims.

The Data Controller shall communicate the deletion to each recipient to whom the personal data have been disclosed, unless this proves to be impossible or involves disproportionate efforts. At the data subject’s request, the Data Controller shall provide information on the recipients.

6.5. The right to restrict data processing

The data subject shall have the right to obtain from the Data Controller restriction of processing where one of the following applies:

  • the accuracy of the personal data is contested by the data subject, for a period enabling the Data Controller to verify the accuracy of the personal data;
  • the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
  • the Data Controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims; or
  • the data subject has objected to processing, for a period pending the verification whether the legitimate grounds of the Data Controller override those of the data subject.

Where processing has been restricted, such personal data shall, with the exception of storage, only be processed with the data subject's consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

A data subject who has obtained restriction of processing pursuant to paragraph 1 shall be informed by the Data Controller before the restriction of processing is lifted.

The Data Controller shall communicate any restriction of data processing to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. The Data Controller shall inform the data subject about those recipients if the data subject requests it.

6.6. The right to data portability

The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a Data Controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the Data Controller to which the personal data have been provided, where

  • the processing is based on consent or on a contract; and
  • the processing is carried out by automated means.

In exercising his or her right to data portability pursuant to paragraph 1, the data subject shall have the right to have the personal data transmitted directly from one controller to another, where technically feasible.

6.7. The right to object

The data subject shall have the right to object at any time to the processing of personal data if the Data Controller has legitimate interest in the legal basis for this. The Data Controller shall no longer process the personal data unless the Data Controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.

Where personal data are processed for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her for such marketing, which includes profiling to the extent that it is related to such direct marketing. Where the data subject objects to processing for direct marketing purposes, the personal data shall no longer be processed for such purposes.

6.8. Legal remedies

If your rights in connection with data processing are violated, you can apply to the court. Regional courts shall have jurisdiction over the legal proceedings. The legal proceeding, at the preference of the data subject, can be initiated with the regional court of his or her domicile or habitual residence.

For legal remedies, you can contact the National Authority for Data Protection and Freedom of Information (address: 1125 Budapest Szilágyi Erzsébet fasor 22/c., postal address: 1530 Budapest, Pf.: 5., phone: 0613911400, fax: 0613911410, e-mail: ugyfelszolgalat@naih.hu, web: www.naih.hu)

The Data Controller shall reimburse you for any loss or damage caused by the Data Controller or Data Processor by illegitimate data processing or violating the requirements of data protection. If the Data Controller violates your right of privacy by illegitimate data processing or violating the requirements of data protection, you shall have the right to claim compensation.

Szigetszentmiklós, 25th May 2018