Menu
Login

Country

Cart

Your cart is empty

Sign up for our newsletter

Privacy Policy

Privacy Policy

GENERAL PROVISIONS

The service provider declares that its data management activities - by taking appropriate internal rules, technical and organizational measures - comply in all circumstances with REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter: Regulation) – as well as with the provisions of Act CXII of 2011 on the right to informational self-determination and freedom of information (hereinafter: Infotv.).

PRIVACY STATEMENT

Data controller's details

Name: Földijó-Gasztró Kft
Registered office and mailing address: 1161 Budapest, József utca 92
Phone number: 06 70 415 8357
Email: info@vitezkurtos.hu
Data processing registration number: 2021/1

Hosting provider:

  • Name: Shopify International Limited
  • Registered office: 2nd Floor, 1 Lower Grand Canal Street, Dublin 2, D02 X576, Ireland
  • Website: www.shopify.com

Purpose of data processing

The purpose of data processing is to ensure the provision of services available on the website.

The Service Provider stores and uses the personal data provided by the Customer for the purpose of fulfilling orders, home delivery, enabling invoicing, as well as for customer service and service development.

The Customer acknowledges that the home delivery of ordered products is carried out by a contractual partner, and the Data Controller transfers the data necessary for the performance of this service (name, address) to the partner.

In the case of online credit card payment, the Service Provider does not gain insight into the Customer's card or account data, number, or expiration date in any form.

The Data Controller shall not use or may not use the personal data provided by the Customer for purposes other than those described above.

The Data Controller shall not disclose the personal data provided by the Customer to third parties or authorities – unless otherwise required by law.

Duration of data processing

The processing of personal data provided during purchase (with or without registration) begins with the purchase and continues until the data is deleted by the Customer, but in any case for at least the expiry of the warranty period of the purchased product(s).

The Customer is entitled at any time to request information about the personal data relating to them processed by the Service Provider, and can modify them at any time on the Profile page. The User is also entitled to request the deletion of their data via the contact details provided in this point.

The Service Provider commits to ensuring the security of the data and takes technical measures to ensure that the collected, stored, and managed data are protected, and does everything possible to prevent their destruction, unauthorized use, and unauthorized alteration.

Description of data processing carried out during the operation of the webshop:

This document contains all relevant data processing information regarding the operation of the webshop based on the General Data Protection Regulation (hereinafter: Regulation, GDPR) (EU) 2016/679 of the European Union and Act CXII of 2011 (hereinafter: Infotv.).

Information on the use of cookies

What is a cookie?

During your visit to the website, the Data Controller uses so-called cookies. A cookie is an information package consisting of letters and numbers that our website sends to your browser with the aim of saving certain settings, facilitating the use of our website, and helping us collect some relevant, statistical information about our visitors.

Some cookies do not contain personal information and are not suitable for identifying individual users, but some contain an individual identifier - a secret, randomly generated number sequence - stored by your device, thereby ensuring your identifiability. The operating duration of individual cookies is contained in the relevant description of each cookie.

Legal background and legal basis for cookies:

Basically, we distinguish three types of cookies: essential cookies, which serve the proper functioning of the Website, and statistical and marketing cookies.

The legal basis for data processing is your consent based on Article 6 (1) (a) of the Regulation for statistical and marketing cookies, and a legitimate interest necessary for the operation of the Website according to Article 6 (1) (f) of the Regulation, for essential cookies.

Main characteristics of cookies used by the website:

  • Essential cookies: If you do not accept the use of these cookies, certain functions may not be available to you.
  • Strictly necessary cookies: These cookies are essential for using the website and enable the use of basic functions of the website. Without them, many functions of the site will not be available to you. The lifespan of these types of cookies is limited solely to the duration of the session.
  • Session cookie: These cookies store the visitor's location, browser language, and payment currency; their lifespan is until the browser is closed, or a maximum of 2 hours.
  • Age-restricted content cookie: These cookies record the fact that age-restricted content has been approved and that the person concerned is over 18; their lifespan is until the browser is closed.
  • Recommended products cookie: Records the list of products to be recommended for the "recommend to a friend" function. Its lifespan is 60 days.
  • Mobile version, design cookie: Detects the visitor's device and switches to full view on mobile. Its lifespan is 365 days.
  • Cookie acceptance cookie: When arriving on the page, accepts the statement about storing cookies in the warning window. Its lifespan is 365 days.
  • Logout #2 cookie: According to option #2, the system logs out the visitor after 90 days. Its lifespan is 90 days.
  • Backend identifier cookie: Identifier of the backend server serving the page. Its lifespan is until the browser is closed.
  • Statistical cookies: Cookies to improve user experience: These cookies collect information about user's website usage, such as which pages they visit most often or what error messages they receive from the website. These cookies do not collect information that identifies the visitor, meaning they work with entirely general, anonymous information. The data obtained from them is used to improve website performance. The lifespan of these types of cookies is limited solely to the duration of the session.
  • Referrer cookies: Record from which external page the visitor arrived on the site. Their lifespan is until the browser is closed. Last viewed product cookie: Records the products that the visitor last viewed. Their lifespan is 60 days.
  • Last viewed category cookie: Records the last viewed category. Its lifespan is 60 days.
  • Cart cookie: Records products placed in the cart. Its lifespan is 365 days.
  • Smart offer cookie: Records the conditions for displaying smart offers (e.g., whether the visitor has been to the site before, whether they have an order). Its lifespan is 30 days.
  • Marketing cookies:
    Remarketing cookies: May appear to previous visitors or users when browsing other websites on the Google Display Network, or when searching for terms related to your products or services. Google Analytics cookie: Google Analytics is a Google analytics tool that helps website and
    application owners get a more accurate picture of their visitors' activities. The service may use cookies to collect information and generate reports on website usage statistics
    without individually identifying visitors to Google.
  • The main cookie used by Google Analytics is the "__ga" cookie. In addition to reports on website usage statistics, Google Analytics – along with some of the advertising cookies described above – can also be used to display more relevant
    ads in Google products (such as Google Search) and across the internet. Google Adwords cookie: When someone visits our site, the visitor's cookie ID is added to the
    remarketing list. Google uses cookies – such as NID and SID cookies – in Google products, for example, to customize ads displayed in Google Search. Such cookies are used, for example, to remember your most recent searches, your past interactions with advertisers' ads or search results, and your visits to advertisers' websites. The AdWords conversion tracking feature uses cookies. To track sales and other conversions resulting from an ad, cookies are saved to the user's
    computer when that person clicks on an ad. Some common uses of cookies include: selecting ads based on what is relevant to a user, improving reports on campaign performance, and avoiding displaying ads that a user has already seen.

  • Facebook pixel (Facebook cookie) The Facebook pixel is a piece of code that helps create reports on conversions on the website, compile target audiences, and provides the site owner with detailed analytical data on visitors' website usage. With the help of the Facebook pixel, personalized offers and advertisements can be displayed to website visitors on the Facebook interface. You can read Facebook's data policy here:
    https://www.facebook.com/priva...

Data processed for contract conclusion and fulfillment

Several data processing cases may occur for contract conclusion and fulfillment. We inform you that data processing related to complaint handling and warranty claims will only occur if you exercise one of the aforementioned rights.

If you do not purchase through the webshop, but are only a visitor to the webshop, the provisions described for marketing data processing may apply to you if you provide us with marketing consent.

More details on data processing for contract conclusion and fulfillment:

Contact

For example, if you contact us with a question about a product via email, contact form, or phone. Prior contact is not mandatory; you can order from the webshop at any time without it.

Processed data

The data you provide during contact.

Duration of data processing: We process the data only until the contact is closed.

Legal basis for data processing: Your voluntary consent, which you give to the Data Controller by contacting us. [Data processing according to Article 6 (1) (a) of the Regulation]

Website registration

By storing the data provided during registration, the Data Controller can provide a more convenient service (e.g., the data of the data subject does not have to be re-entered for subsequent purchases). Registration is not a condition for concluding the contract.

Processed data: During data processing, the Data Controller processes your name, address, phone number, email address, the characteristics of the purchased product, and the date of purchase.

Duration of data processing: Until the withdrawal of your consent.

Legal basis for data processing: Your voluntary consent, which you give to the Data Controller by registering [Data processing according to Article 6 (1) (a) of the Regulation]

Order processing

During order processing, data processing activities are necessary for the fulfillment of the contract.

Processed data: During data processing, the Data Controller processes your name, address, phone number, email address, the characteristics of the purchased product, the order number, and the date of purchase. If you have placed an order in the webshop, data processing and the provision of data are essential for the fulfillment of the contract.

Duration of data processing: We process the data for 5 years according to the civil law statute of limitations.

Legal basis for data processing: Fulfillment of the contract. [Data processing according to Article 6 (1) (b) of the Regulation]

Issuing the invoice:

The data processing process takes place in order to issue an invoice in accordance with legal regulations and to fulfill the obligation to retain accounting documents. Pursuant to Section 169 (1)-(2) of the Accounting Act, business associations must retain accounting documents directly and indirectly supporting bookkeeping accounts.

Processed data: Name, address, email address, phone number.

Duration of data processing: Issued invoices must be retained for 8 years from the date of issue, pursuant to Section 169 (2) of the Accounting Act.

Legal basis for data processing: Pursuant to Section 159 (1) of Act CXXVII of 2007 on value added tax, issuing an invoice is mandatory and

must be retained for 8 years pursuant to Section 169 (2) of Act C of 2000 on accounting [data processing pursuant to Article 6 (1) (c) of the Regulation].

Data processing related to goods delivery

The data processing process takes place in order to deliver the ordered product.

Processed data: Name, address, e-mail address, phone number.

Duration of data processing: The Data Controller processes the data until the delivery of the ordered goods.

Legal basis for data processing: Performance of contract [data processing according to Article 6 (1) (b) of the Regulation].

Recipients and data processors of data processing related to goods delivery

Name of Data Controller: DPD Hungary Kft.

Company registration number of Data Controller: Cg.01-09-888141

Tax number of Data Controller: 13034283-2-41

Registered office of Data Controller: 1134 Budapest, Váci út 33. 2nd floor

E-contact of Data Controller: dpd@dpd.hu

Representative of Data Controller: Szabolcs Czifrik (managing director)

Data Protection Officer: Dr. Gergő Soltész

Contact of Data Protection Officer: adatkezeles@dpd.hu

The courier service, based on a contract with the Data Controller, participates in the delivery of the ordered goods. The courier service processes the received personal data according to the privacy policy available on its website.

Data processing for marketing purposes

Data processing related to newsletter sending

The data processing process takes place for the purpose of sending newsletters.

Processed data: Name, address, email address, phone number.

Duration of data processing: Until the data subject withdraws their consent.

Legal basis for data processing: Your voluntary consent, which you provide to the Data Controller by subscribing to the newsletter [data processing according to Article 6 (1) (a) of the Regulation]

Data processing related to sending and displaying personalized advertisements

The data processing process takes place for the purpose of sending advertising content tailored to the data subject's interests.

Processed data: Name, address, email address, phone number.

Duration of data processing: Until the withdrawal of your consent.

Legal basis for data processing: Your voluntary, specific consent, which you provide to the Data Controller during data collection [data processing according to Article 6 (1) (a) of the Regulation]

Remarketing

Data processing as remarketing activity is carried out using cookies.

Processed data: Data processed by cookies as specified in the cookie policy.

Duration of data processing: The data storage period of the specific cookie; more information is available here:

Google general cookie information: https://www.google.com/policie...

Google Analytics information: https://developers.google.com/...

Facebook information: https://www.facebook.com/ads/p...

Legal basis for data processing: Your voluntary consent, which you give to the Data Controller by using the website [data processing according to Article 6 (1) (a) of the Regulation].

Additional data processing

Data processing activities related to newsletter sending

Name of the company operating the newsletter sending system:

Shopify International Limited
2nd Floor, 1 Lower Grand Canal Street, Dublin 2, D02 X576, Ireland
www.shopify.com

The Data Processor (Shopify) participates in sending newsletters through the Shopify Email service based on a contract with the Data Controller. In this process, the Data Processor processes the data subject's name and email address to the extent necessary for sending newsletters.

Data processing related to accounting

Name of the data processor:

Gherman Könyvelőiroda Kft.
1143 Budapest, Stefánia út 17. II. em. 3.

Mónika Gherman
Phone: 0670/427-8596, 0670/426-2526
e-mail: info@ghermankonyveles.hu

Data processor's website: https://ghermankonyveloiroda.hu/

The Data Processor, based on a written agreement with the Data Controller, participates in the accounting of financial documents. In doing so, the Data Processor processes the name and address of the data subject to the extent necessary for accounting records, for the period specified in Section 169 (2) of the Accounting Act, after which it deletes them without delay.

Data processing related to invoicing

Name of data processor: Online invoicing software name: Számlázz.hu
Invoicing contact: https://www.szamlazz.hu/
Name of service provider company: KBOSS.hu Kft.
Tax number of service provider company: 13421739-2-41
Company registration number: 01-09-303201

The Data Processor, based on an agreement with the Data Controller, participates in the record-keeping of accounting documents. In doing so, the Data Processor processes the name and address of the data subject for accounting records.

Data processing related to online payments

Name of data controller: Online bank card payment is provided by Shopify Payments, operated by Shopify Payments (Ireland) Limited, a member of the Shopify Inc. group.

Public data of Shopify Payments (Ireland) Limited:

Registered office: 2nd Floor, 1 Lower Grand Canal Street, Dublin 2, D02 X576, Ireland

Website: www.shopify.com/payments

The payment service provider, based on an agreement with the Data Controller, participates in the execution of online payments, for which purpose data transfer to the online payment service provider occurs during the purchase process. In doing so, the online payment service provider processes the data subject's billing name and address, order number, and date according to its own data processing rules.

Purpose of data transfer: to provide the online payment service provider with the transaction data necessary for the payment operation initiated with them related to the purchase.

Legal basis for data transfer: the performance of the contract concluded between you and the Data Controller, in accordance with Article 6 (1) (b) of the Regulation, which includes payment by the buyer, and in the case of online payment, data transfer as per this point is necessary for the payment.

Your rights regarding data processing:

During the period of data processing, you are entitled to the following rights in accordance with the provisions of the Regulation: the right to withdraw consent, access to personal data and information related to data processing, the right to rectification, restriction of data processing, the right to erasure, the right to object, the right to data portability.

If you wish to exercise your rights, it will involve your identification, and the Data Controller will necessarily need to communicate with you. Therefore, in order to identify you, you will need to provide personal data (but identification can only be based on data that the Data Controller already processes about you), and your complaints related to data processing will be available in the Data Controller's email account within the period specified in this information regarding complaints. If you have been a customer and wish to identify yourself for complaint handling or warranty service, please also provide your order ID for identification. By using this, we can also identify you as a customer. The Data Controller will respond to data processing related complaints within 30 days at the latest.

Right to withdraw consent

You are entitled to withdraw your consent to data processing at any time, in which case the provided data will be deleted from our systems. However, please note that for an unfulfilled order, withdrawal may result in us being unable to deliver to you. Furthermore, if the purchase has already been made, according to accounting regulations, we cannot delete invoicing-related data from our systems, and if you have outstanding debt to us, we may process your data even if you withdraw your consent, based on the legitimate interest related to debt collection.

Modification of the Data Processing Information

The Data Controller reserves the right to modify this data processing information in a way that does not affect the purpose and legal basis of data processing. By using the website after the effective date of the modification, you accept the modified data processing information.

If the Data Controller wishes to carry out further data processing with respect to the collected data for a purpose other than the purpose for which they were collected, prior to such further data processing, it shall inform you about the purpose of the data processing and the following information: the period for which the personal data will be stored, or if that is not possible, the criteria used to determine that period; your right to request from the Data Controller access to and rectification or erasure of personal data or restriction of processing concerning you, and to object to processing of personal data based on legitimate interest, and in cases of processing based on consent or contractual relationship, the right to data portability; in cases of processing based on consent, that you have the right to withdraw consent at any time, the right to lodge a complaint with a supervisory authority; whether the provision of personal data is a statutory or contractual requirement, or a requirement necessary to enter into a contract, as well as whether you are obliged to provide the personal data and of the possible consequences of failure to provide such data; the existence of automated decision-making (if such a procedure is applied), including profiling, and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you.

Data processing can only commence thereafter, provided that if the legal basis for data processing is consent, you must also consent to the data processing in addition to being informed.