Privacy notice
Introduction
AENSys Ltd. (hereinafter referred to as the “Service Provider”, “Controller”) submits to the following information.
The following information is provided pursuant to REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Regulation (EC) No 95/46/EC (General Data Protection Regulation).
This privacy notice governs the processing of the following pages:
Amendments to the Prospectus will enter into force upon publication at the above address.
The controller and contact details:
Name: AENSys Ltd.
Registered office: 6722 Szeged, Kálvária sugárút 24.
E-mail: kapcsolat@aensys.hu
Phone: +36 62 202-443
Definitions of terms
Principles governing the processing of personal data
Personal data:
The controller is responsible for compliance with the above and must be able to demonstrate such compliance (“accountability”).
Data management
Data processing related to the operation of the webshop
Personal data | Purpose of data processing |
User name | Identification, enabling registration. |
Password | It is used for secure access to the user account. |
Surname and first name | It is required for contacting, making a purchase and issuing a correct invoice. |
E-mail address | Staying in touch. |
Phone number | Maintaining contacts, coordinating more efficiently on billing or delivery issues. |
Billing name and address | To issue proper invoices, and to create, define, amend, monitor the performance of, invoice the fees arising from, and enforce the claims related to the contract. |
Delivery name and address | Enabling home delivery. |
Date of purchase/registration | Perform a technical operation. |
IP address at the time of purchase/registration | Perform a technical operation. |
Neither the username nor the e-mail address need to contain personal data.
The accounting documents (including general ledger accounts, analytical or detailed records) directly and indirectly supporting the accounting accounts must be kept for at least 8 years in a legible form, retrievable by reference to the accounting records.
The service provider may process personal data that are technically necessary for the provision of the service. The service provider must, other things being equal, choose and in any case operate the means used in the provision of the information society service in such a way that personal data are processed only to the extent strictly necessary for the provision of the service and for the fulfilment of the other purposes laid down in this Act, but only to the extent and for the duration necessary.
The data processors used
Hosting provider
Data processor name: AENSys Kft.
Registered office: 6722 Szeged, Kálvária sugárút 24.
Tax number: 14077467-2-06
Company registration number: 06 09 011691
E-mail address: kapcsolat@aensys.hu
Phone number: +36 62 202-443
Cookie management (cookies)
Type of cake | Legal basis for data processing | Duration of data processing | Managed data |
Session cookies (session) | The Directive on certain aspects of electronic commerce services and information society services of 2001. CVIII. Act (Elkertv.) 13/A. § (3) | Period until the end of the train transfer session | connect.sid |
Use Google Adwords conversion tracking
Using Google Analytics
Newsletter, DM activity
Personal data | Purpose of data processing |
Name, e-mail address. | Identification, to enable subscription to the newsletter. |
Date of subscription | Perform a technical operation. |
The advertiser, the advertising service provider or the publisher of the advertisement shall keep a record of the personal data of the persons who have given their consent within the scope specified in the consent. The data recorded in this register – relating to the recipient of the advertising – may only be processed in accordance with the consent form, until it is withdrawn, and may only be disclosed to third parties with the prior consent of the person concerned.
Complaints handling
Personal data | Purpose of data processing |
Surname and first name | Identification, contact. |
E-mail address | Staying in touch. |
Phone number | Staying in touch. |
Billing name and address | Identifying, handling quality complaints, questions and problems with the products ordered. |
Community sites
Customer relations and other data management
Rights of data subjects
You have the right to receive feedback from the controller as to whether or not your personal data are being processed and, if such processing is taking place, you have the right to access your personal data and the information listed in the Regulation.
You have the right to have inaccurate personal data relating to you corrected by the controller without undue delay at your request. Taking into account the purposes of the processing, you have the right to request that incomplete personal data be completed, including by means of a supplementary declaration.
You have the right to obtain from the controller the erasure of personal data relating to you without undue delay and the controller is obliged to erase personal data relating to you without undue delay under certain conditions.
If the controller has disclosed the personal data and is required to delete it, it will take reasonable steps, including technical measures, taking into account the available technology and the cost of implementation, to inform the controllers that process the data that you have requested the deletion of the links to or copies of the personal data in question.
You have the right to have the controller restrict processing at your request if one of the following conditions is met:
You have the right to receive the personal data concerning you that you have provided to a controller in a structured, commonly used, machine-readable format, and the right to transmit these data to another controller without hindrance from the controller to whom you have provided the personal data.
You have the right to object at any time to the processing of your personal data, including profiling based on these provisions, on grounds relating to your particular situation.
Where personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such purposes, including profiling, where it is related to direct marketing. If you object to the processing of your personal data for direct marketing purposes, your personal data will no longer be processed for these purposes.
You have the right not to be subject to a decision based solely on automated processing, including profiling, which would have legal effects concerning you or similarly significantly affect you.
The previous paragraph shall not apply in the case of a decision:
Deadline for action
The controller shall inform you of the action taken on such requests without undue delay and in any event within 1 month of receipt of the request.
If necessary, this can be extended by 2 months. The controller will inform you of the extension of the deadline within 1 month of receipt of the request, stating the reasons for the delay.
If the controller fails to act on your request, it will inform you without delay and at the latest within one month of receipt of the request of the reasons for the failure to act, of the possibility to lodge a complaint with a supervisory authority and of your right to judicial remedy.
Security of data processing
The controller and the processor shall implement appropriate technical and organisational measures, taking into account the state of the art and the cost of implementation, the nature, scope, context and purposes of the processing and the varying degrees of probability and severity of the risk to the rights and freedoms of natural persons, in order to ensure a level of data security appropriate to the level of risk, including, where appropriate:
Informing the data subject about the personal data breach
Where the personal data breach is likely to result in a high risk to the rights and freedoms of natural persons, the controller shall inform the data subject of the personal data breach without undue delay.
The information provided to the data subject shall clearly and in an understandable way describe the nature of the personal data breach and provide the name and contact details of the Data Protection Officer or other contact person who can provide further information; describe the likely consequences of the personal data breach; describe the measures taken or envisaged by the controller to remedy the personal data breach, including, where appropriate, measures to mitigate any adverse consequences of the personal data breach.
The data subject need not be informed if any of the following conditions are met:
If the controller has not yet notified the data subject of the personal data breach, the supervisory authority may, after having considered whether the personal data breach is likely to present a high risk, order the data subject to be informed.
Reporting a data protection incident to the authority
The data controller shall notify the data protection incident to the 55th Data Protection Authority without undue delay and, where possible, no later than 72 hours after the data controller becomes aware of the data protection incident. to the supervisory authority competent pursuant to Article 13, unless the personal data breach is unlikely to pose a risk to the rights and freedoms of natural persons. If the notification is not made within 72 hours, it must be accompanied by the reasons justifying the delay.
Complaint possibility
Complaints against possible infringements by the data controller can be lodged with the National Authority for Data Protection and Freedom of Information:
National Authority for Data Protection and Freedom of Information
1125 Budapest, Szilágyi Erzsébet fasor 22/C.
Postal address: 1530 Budapest, P.O. Box 5.
Phone: +36 -1-391-1400
Fax: +36-1-391-1410
E-mail: ugyfelszolgalat@naih.hu
Closing words
The following legislation has been taken into account in the preparation of this information:
AENsys Ltd. 2023 © All rights reserved.