For visitors and registered users of the www.robertfloor.hu website
1. Introduction
The service provider/data controller processes the personal data of persons registered on and visiting the website for the purpose of providing them with appropriate services.
The service provider is fully committed to complying with the legal requirements applicable to the processing of personal data, in particular:
- Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).
- Act CXII of 2011 on Informational Self-Determination and Freedom of Information (Infotv.).
2. Details of the Data Controller and Data Processor
Details of the Data Controller
| Item |
Details |
| Company name |
Robert Floor Kft. |
| Registered office |
1154 Budapest, Domaháza utca 27., Hungary
|
| Tax number |
26540403-1-42 |
| E-mail address |
[email protected] |
| Telephone |
+36 (30) 213-0376 |
| Website |
www.robertfloor.hu |
Data Processor (Hosting Provider)
| Item |
Details |
| Company name |
Sub Stúdió Kft. |
| Registered office |
1032 Budapest, Bécsi út 181, Hungary |
| E-mail address |
[email protected] |
| Telephone |
+36 30 331 8353 |
| Activity |
Hosting and server services |
3. Definitions
- GDPR: The General Data Protection Regulation of the European Union (Regulation (EU) 2016/679).
- Personal data: Any information relating to an identified or identifiable natural person (the “data subject”).
- Processing: Any operation or set of operations performed on personal data, such as collection, recording, storage, alteration, retrieval, consultation, deletion, etc.
- Data Controller: The natural or legal person which determines the purposes and means of the processing of personal data.
- Data Processor: The natural or legal person which processes personal data on behalf of the Data Controller.
- Personal data breach: A breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.
4. Principles of Data Processing
The Data Controller declares that personal data shall be processed in accordance with applicable legislation and according to the following principles:
- Lawfulness, fairness and transparency: Personal data shall be processed lawfully, fairly and in a transparent manner in relation to the data subject.
- Purpose limitation: Personal data shall be collected for specified, explicit and legitimate purposes.
- Data minimisation: The personal data processed shall be adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.
- Accuracy: Personal data shall be accurate and, where necessary, kept up to date. Inaccurate personal data shall be erased or rectified without delay.
- Storage limitation: Personal data shall be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed.
- Integrity and confidentiality: Appropriate technical and organisational measures shall be implemented to ensure the security of personal data against unauthorised or unlawful processing, accidental loss, destruction or damage.
5. Details of Data Processing Activities
Message Sending and Request for Quotation
Purpose: Communication, responding to enquiries and providing quotations.
Legal basis: The consent of the data subject, provided by ticking the checkbox available on the relevant form.
| Data Processed |
Purpose of Processing |
| Name / Company name |
Identification, communication and invoicing |
| Address |
Identification, communication and invoicing |
| E-mail address |
Identification and communication |
| Telephone number |
Identification and communication |
| IP address |
Technical information and security purposes |
C. Issuing Invoices
Purpose: Issuing and sending electronic invoices.
Legal basis: Mandatory processing based on legal obligations.
Data subjects: Customers and business partners of the service provider.
Retention period: The retention period prescribed by the applicable tax and accounting legislation.
| Data Processed |
Purpose of Processing |
| Name / Company name |
Identification of the customer and invoicing |
| Address |
Identification of the customer and invoicing |
| Tax number / Tax identification number |
Legal identification of the customer |
| E-mail address / Telephone number |
Sending invoices and communication |
| Invoice details & date |
Identification of the accounting document and compliance with legal requirements |
D. Use of Cookies
Purpose: Improving the browsing experience, remembering preferences and collecting visitor statistics (e.g. Google Analytics).
Data subjects: All visitors to the website.
Data processed: Unique identifier, date and time, and preference settings.
Method of processing: Users may delete or disable cookies at any time through their browser settings.
Disabling Google Analytics: Users may prevent their data from being used for analytics purposes by installing the Google Analytics Opt-out Browser Add-on: Google Analytics Opt-out Browser Add-on.
E. Social Media
The service provider may be present on various social media platforms (e.g. Facebook).
- Data subjects: Users registered on social media platforms who follow or like the service provider’s page.
- Purpose of processing: Promotion of the website and the services provided.
- Legal basis, retention period and rights: The privacy policy of the respective social media platform shall apply.
6. Rights of Data Subjects and Legal Remedies
The data subject may exercise the following rights by contacting the Data Controller using the contact details provided above:
- Right to information and access: The data subject may request information about the personal data processed concerning them, including the source, purpose and retention period of such data. (Response time: no later than 30 days.)
- Right to rectification: The data subject may request the correction or completion of inaccurate or incomplete personal data. (Response time: no later than 30 days.)
- Right to erasure (“right to be forgotten”): The data subject may request the deletion of their personal data where there is no legal obstacle to doing so. (Response time: no later than 30 days.)
- Right to restriction of processing: The data subject may request restriction of the processing of their personal data, for example where the accuracy of the data is disputed or where the restriction is necessary for the establishment, exercise or defence of legal claims.
- Right to object: The data subject may object to the processing of their personal data. (Response time: no later than 15 days.)
Legal Remedies
If the data subject believes that their rights have been violated or that the processing of their personal data does not comply with applicable legislation, they may notify the Data Controller in order to restore lawful processing or may lodge a complaint with the competent supervisory authority:
Hungarian National Authority for Data Protection and Freedom of Information (NAIH)
Postal address: 1530 Budapest, P.O. Box 5, Hungary
Address: 1125 Budapest, Szilágyi Erzsébet fasor 22/c, Hungary
Telephone: +36 (1) 391-1400
E-mail: [email protected]
Website: https://naih.hu
7. Applicable Legislation
- GDPR: Regulation (EU) 2016/679 of the European Parliament and of the Council.
- Infotv.: Act CXII of 2011 on Informational Self-Determination and Freedom of Information.
- Electronic Commerce Act: Act CVIII of 2001 on certain issues relating to electronic commerce services and information society services.
- Electronic Communications Act: Act C of 2003 on Electronic Communications.
- Act LXVI of 1995: Act LXVI of 1995 on Public Records and the Protection of Private Archival Material.
- Government Decree 335/2005 (XII. 29.): Government Decree on the document management of bodies performing public duties.