Privacy Policy
General Terms of Use
-
The Controller of personal data, in compliance with the GDPR (hereinafter referred to as "Regulation"), is […..], with company ID [….], and registered office at […] (hereinafter referred to as "Controller").
-
The Controller's contact details are: e-mail: [……], tel.: [………],
-
Personal data means any information relating to an identified or identifiable natural person.
Origin of Personal Data
-
The Controller processes personal data received with the Customer's consent and collected through the purchase contract and placement of an online order via the online store […].
-
The Controller processes only the data necessary for fulfilling the purchase contract.
-
The Controller processes personal data for the purposes of product delivery, accounting purposes, and necessary communication between the two parties, for the period required by law. Personal data is not published or transferred to other countries.
Purpose of Data Processing
The Controller processes the Customer's personal data for the following purposes:
-
Registration on the website [….] in compliance with Chapter 4, Section 2 of the GDPR.
-
Completion of the online order created by the Customer (name, address, e-mail, phone number).
-
Compliance with laws and regulations arising from the relationship between Customer and Controller.
-
Personal data is necessary for completing the purchase contract. The contract cannot be concluded without personal data.
Duration of Personal Data Storage
-
The Controller stores personal data for the period necessary to exercise the rights and obligations arising from the relationship and contract between Controller and Customer and for 3 years after the completion of the contract.
-
The Controller must delete all personal data after the expiry of the period required for retaining personal data.
Recipients and Processors of Personal Data
Third parties that may process the Customer's personal data are subcontractors of the Controller. The services of these subcontractors are essential for fulfilling the purchase contract and processing the online order between Controller and Customer.
Subcontractors of the Controller include:
-
Webnode AG (e-shop platform)
-
The shipping company
-
Google Analytics (website statistics)
Customer Rights
In compliance with the Regulation, the Customer has the right to:
-
Access personal data,
-
Rectify personal data,
-
Erase personal data,
-
Object to the processing of personal data,
-
Data portability,
-
Withdraw consent for processing via e-mail at [….],
-
File a complaint with the competent authority in case of a Regulation breach.
Personal Data Security
-
The Controller declares that it has taken all technical and organizational measures necessary to safeguard personal data.
-
The Controller has taken technical precautions to secure data, including password-protected computer access, antivirus software, and continuous maintenance.
Final Terms
-
By placing an online order on the website [….], the Customer confirms that they have been informed of the terms of personal data protection and fully accept them.
-
The Customer accepts the terms by checking the corresponding box in the order form.
-
The Controller reserves the right to update these Terms at any time. The updated version of the Terms must be published on this website.
These Terms are effective as of [Date].
Would you like me to make this translation more formal/legal-sounding (as in a finalized Privacy Policy ready for publication), or keep it as a straightforward translation?