Privacy Policy
Pro-Falat Online Shop Privacy Policy
Data controller
Name: PRO-FEED Feed, Trading and Services Limited Liability Company
Registered office: 1172 Budapest, Laskó Street 5.
Postal address, complaints handling: 2161 Csomád, 42 Kossuth Lajos út.
Email: info@profalat.hu
Telephone number: +36 30 302 0560
Website: www.profalat.hu
Web hosting provider
Name: RackForest Ltd.
Postal address: 1132 Budapest, Victor Hugo Street 11, 5th floor, B05001.
Email address: info@rackforest.hu
Telephone number: +36 1 211 0044
Website: https://rackforest.com/
Description of data processing carried out in the course of operating the online shop
This document contains all relevant information regarding data processing in connection with the operation of the online shop
contains the European Union’s General Data Protection Regulation (Regulation (EU) 2016/679) (hereinafter:
in accordance with the General Data Protection Regulation (GDPR) and Act CXII of 2011 (hereinafter: the Information Act).
Information regarding the use of cookies
What is a cookie?
The Data Controller uses so-called cookies when you visit the website. The word ‘cookie’ is derived from the letters
a set of data that our website sends to your browser for the purpose of
save certain settings, make our website easier to use and help to
to collect some relevant statistical information about our visitors.
Some cookies do not contain personal information and are not suitable for identifying individuals
to identify users; however, some of them contain a unique identifier – a secret, randomly
a generated sequence of numbers – which is stored on your device, thereby ensuring your identity. Each
The duration of each cookie is specified in the relevant description of that cookie.
The legal framework and legal basis for cookies:
We generally distinguish between three types of cookies: essential cookies, which are necessary for the website to function,
We use cookies to ensure the website functions properly, as well as for statistical and marketing purposes.
The legal basis for data processing is your consent, pursuant to Article 6(1)(a) of the Regulation, to the
in the case of cookies used for statistical and marketing purposes, and Article 6(1)(f) of the Regulation
in accordance with the legitimate interest necessary to ensure the functioning of the Website, which is necessary for its operation
in the case of cookies.
Key features of the cookies used by this website:
Cookies that are essential for the website to function:
If you do not accept the use of these cookies, certain features may not
will be available to you.
Cookies that are strictly necessary for the website to function: These cookies are required for you to use the website
are essential and enable the use of the website’s basic functions. Without them, the
many of the site’s features will not be available to you. These types of cookies are only stored for the
is limited to the duration of the session.
Session cookies: These cookies store the visitor’s location, browser language and payment
They store your currency; they remain active until you close your browser, or for a maximum of two hours.
Age-restricted content cookies: These cookies record whether age-restricted content has been approved,
that the data subject is over 18 years of age; these cookies remain active until the browser is closed.
Recommended products cookie: For the „Recommend to a friend” feature, a list of the products you wish to recommend
records it. It has a shelf life of 60 days.
Mobile version, design cookie: Detects the device the visitor is using and switches to full view on mobile devices.
It is valid for 365 days.
Cookie acceptance cookie: You accept cookies in the pop-up window when you visit the site
a declaration regarding its storage. It is valid for 365 days.
#2 logout cookie: With the #2 option, the system logs the visitor out after 90 days. Its lifespan is 90 days.
Backend identification cookie: The identifier of the backend server hosting the site. Its lifespan is the browser
until closing time.
Cookies used for statistical purposes:
Google Analytics cookie: Google Analytics is Google’s analytics tool, which helps
website and app owners to gain a more accurate picture of their visitors
about its activities. The service may use cookies to collect information and generate reports
compile statistical data on the use of the website without identifying individuals
visitors to Google. The main cookie used by Google Analytics is the „ga” cookie. The
In addition to reports generated from website usage statistics, Google Analytics – as mentioned earlier
— along with some of the advertising cookies described above — can also be used to display more relevant adverts
display in Google products (such as Google Search) and across the internet.
Cookies used to improve the user experience: These cookies collect information on
about a user’s website usage, such as which pages they visit most frequently, or what
you will receive an error message from the website. These cookies do not collect any information that identifies the visitor,
in other words, they work with completely general, anonymous information. The data obtained from this is used by the website
We use them to improve the site’s performance. These cookies are only stored for the duration of the session
is limited to a specific period.
Referrer cookies: These record which external site the visitor came from. Their lifespan
until the browser is closed.
Recently viewed products cookie: Records the products that the visitor has most recently viewed.
Their shelf life is 60 days.
Last viewed category cookie: Stores the last category viewed. Expiration time: 60
day.
Shopping basket cookie: This cookie records the items placed in your shopping basket. It is valid for 365 days.
Smart offer cookie: Records the conditions for displaying smart offers (e.g. whether the
(to check whether the visitor has an order). It is valid for 30 days.
Marketing cookies:
Google AdWords cookie: When someone visits our website, the visitor’s cookie ID
is added to a remarketing list. Google uses cookies – such as the NID and SID cookies – to
to personalise the ads you see in Google products, such as Google Search. Such
It uses cookies, for example, to remember your most recent searches and the individual advertisers
your previous interactions with their adverts or search results, as well as on advertisers’ websites
visits. The AdWords conversion tracking feature uses cookies. The ad-generated
saves cookies on the user’s computer to track sales and other conversions when the
a user clicks on an advert. Some common uses of cookies include: adverts
selection based on what is relevant to the individual user, the campaigns
improving performance reports and the ads the user has already viewed
to avoid displaying it.
Remarketing cookies: For previous visitors or users on the Google Display Network
browsing other websites, or information relating to its products or services
may appear when searching for terms
Facebook pixel (Facebook cookie): The Facebook pixel is a piece of code that enables
The website generates reports on conversions, allows target audiences to be defined, and the site owner
receives detailed analytics data on how visitors use the website. Using the Facebook pixel, the
It can display personalised offers and adverts to website visitors on Facebook.
You can read Facebook’s Privacy Policy here:
https://www.facebook.com/privacy/explanation
You can find more information about deleting cookies at the following links:
Internet Explorer: http://windows.microsoft.com/en-us/internet-explorer/delete-managecookies#ie=ie-11
Firefox: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer
Mozilla: https://support.mozilla.org/hu/kb/weboldalak-altal-elhelyezett-sutik-torlese-szamito
Safari: https://support.apple.com/guide/safari/manage-cookies-and-website-data-sfri11471/mac
Chrome: https://support.google.com/chrome/answer/95647
Edge: https://support.microsoft.com/hu-hu/help/4027947/microsoft-edge-delete-cookies
Data processed for the purposes of concluding and fulfilling contracts
Several data processing operations may take place in connection with the conclusion and performance of the contract. Please note that
Data processing in connection with the handling of complaints and warranty claims takes place only in cases where,
if you exercise any of the rights mentioned above.
If you are not making a purchase via the online shop, but are simply visiting it, then the marketing
The information provided regarding data processing for marketing purposes may apply to you if you give us your consent for marketing purposes.
Further details on data processing carried out for the purposes of concluding and fulfilling contracts:
Registration on the website
By storing the data provided during registration, the Data Controller is able to provide a more convenient service
ensure (e.g. the customer does not have to re-enter their details when making a further purchase). Registration is
is not a condition for entering into a contract
Data processed
During the processing of your data, the Data Controller will process your name, address, telephone number, email address, and details of the purchased
manages product details and the date of purchase.
Duration of data processing
Until you withdraw your consent.
The legal basis for data processing
Your voluntary consent, which you provide to the Data Controller upon registration [Article 6 of the Regulation]
paragraph (1)
[data processing referred to in point (a)]
Order processing
When processing orders, data processing is necessary for the performance of the contract
activities.
Data processed
During the processing of your data, the Data Controller will process your name, address, telephone number, email address, and details of the purchased
It manages product details, order numbers and the date of purchase.
If you have placed an order via the online shop, the processing of your data and the provision of your details are
is essential for the performance of the contract.
Duration of data processing
We retain the data for 5 years in accordance with the limitation period under civil law.
The legal basis for data processing
Performance of the contract. [Data processing pursuant to Article 6(1)(b) of the Regulation]
Issuing the invoice
The data processing is carried out for the purpose of issuing invoices in accordance with the law and fulfilling the obligation to retain accounting documents. Pursuant to Sections 169(1) and (2) of the Accounting Act, the
accounting records that directly or indirectly support the accounting entries of business entities
They must keep the receipt.
Data processed
Name, address, email address, telephone number.
Duration of data processing
In accordance with Section 169(2) of the Accounting Act, invoices must be retained for a period of eight years from the date of issue
must be preserved.
The legal basis for data processing
Pursuant to Section 159(1) of Act CXXVII of 2007 on Value Added Tax, the invoice
Its production is mandatory and, pursuant to Section 169(2) of Act C of 2000 on Accounting, it must be retained for 8 years
must be retained [data processing pursuant to Article 6(1)(c) of the Regulation].
Data processing in connection with the carriage of goods
The data processing is carried out for the purpose of delivering the ordered product.
Data processed
Name, address, email address, telephone number.
Duration of data processing
The Data Controller will retain the data until the ordered goods have been delivered.
The legal basis for data processing
Performance of a contract [Data processing pursuant to Article 6(1)(b) of the Regulation].
Recipients and data processors in relation to data processing for the carriage of goods
Name of the addressee: GLS General Logistics Systems Hungary Parcel Logistics Ltd.
The addressee’s registered office: 2351 Alsónémedi, GLS Európa u. 2.
The recipient’s telephone number: 06 29 88 67 00
The recipient's email address is: info@gls-hungary.com
The recipient's website: https://gls-group.eu/HU/hu/home
The courier service assists with the delivery of the ordered goods under a contract with the Data Controller
delivery. The courier service processes the personal data it receives in accordance with the data processing policy available on its website
in accordance with the information set out in the prospectus.
Name of the addressee: Magyar Posta Private Limited Company
The addressee’s registered office: 1138 Budapest, Dunavirág utca 2–6.
The recipient’s telephone number: +36-1/767-8200
The recipient's email address: ugyfelszolgalat@posta.hu
The recipient's website: posta.hu
The courier service assists with the delivery of the ordered goods under a contract with the Data Controller
delivery. The courier service processes the personal data it receives in accordance with the data processing policy available on its website
in accordance with the information set out in the prospectus.
Handling warranty and guarantee claims
Claims under the warranty and guarantee must be handled in accordance with the provisions of Decree No. 19/2014 (29 April) of the Ministry for National Economy
We must follow a procedure that also sets out how we are to handle your claim.
Data processed
When handling warranty and guarantee claims, in accordance with the provisions of Decree No. 19/2014 (29 April) of the Ministry for National Economy
We must proceed in this way.
In accordance with the regulation, we are required to draw up a report on any warranty or guarantee claims submitted to us
are required to draw up, in which we set out:
(a) your name and address, together with a statement confirming that you consent to the recording of the proceedings in the minutes
the processing of your data in accordance with the provisions of the Regulation,
(b) the description and purchase price of the movable property sold under the contract between you and us,
(c) the date of performance of the contract,
(d) the date on which the fault was reported,
(e) a description of the fault,
(f) the right you wish to exercise on the basis of a warranty or guarantee claim, and
(g) the method of settling a warranty or guarantee claim, or the claim itself, or the basis for such a claim
the grounds for rejecting the right in question.
If we collect the product you have purchased from you, we must issue a receipt for it,
on which the following must be stated
(a) your name and address,
(b) the information necessary to identify the item,
(c) the date of taking delivery of the item, and
(d) the date on which you may collect the repaired item.
Duration of data processing
The business shall keep a record of the consumer’s warranty or guarantee claim in accordance with the
must be retained for three years from the date of recording and produced at the request of the supervisory authority.
The legal basis for data processing
in accordance with Decree No. 19/2014 (29 April) of the Ministry for National Economy [Section 4(1) and Section 6(1)]
compliance with legal obligations [data processing pursuant to Article 6(1)(c) of the Regulation].
Handling other consumer complaints
The data processing is carried out for the purpose of handling consumer complaints. If you
If you have lodged a complaint with us, data processing and the provision of data are essential.
Data processed
Customer’s name, telephone number, email address, and details of the complaint.
Duration of data processing
We retain warranty claims for a period of five years in accordance with the Consumer Protection Act.
The legal basis for data processing
Whether or not you choose to make a complaint is entirely up to you; however, if you do decide to contact us, the
Pursuant to Section 17/A(7) of Act CLV of 1997 on consumer protection, we are obliged to do so for a period of three years
to retain the complaint [data processing pursuant to Article 6(1)(c) of the Regulation].
Data processed in connection with the verification of consent
When you register, place an order or subscribe to the newsletter, the IT system stores the
IT data relating to consent, for the purposes of future verification.
Data processed
The date of consent and the IP address concerned.
Duration of data processing
Due to legal requirements, it must be possible to verify consent at a later date; therefore, the duration of data retention
will be stored for the limitation period following the cessation of data processing.
The legal basis for data processing
This obligation is laid down in Article 7(1) of the Regulation. [Article 6(1)(c) of the Regulation]
[data processing in accordance with]
Data processing for marketing purposes
Data processing in connection with the sending of newsletters
The data processing is carried out for the purpose of sending out newsletters.
Data processed
Name, address, email address, telephone number, date of birth, pet.
Duration of data processing
Until the data subject withdraws their consent.
The legal basis for data processing
Your voluntary consent, which you provide to the Data Controller by subscribing to the newsletter
[Data processing pursuant to Article 6(1)(a) of the Regulation]
Regarding the sending and display of personalised advertisements
data processing
The data processing procedure involves advertising content tailored to the data subject’s interests
is done for the purpose of secondment.
Data processed
Name, address, email address, telephone number, date of birth, pet.
Duration of data processing
Until you withdraw your consent.
The legal basis for data processing
Your voluntary, specific consent, which you provide to the Data Controller during the data collection process
[Data processing pursuant to Article 6(1)(a) of the Regulation]
Remarketing
Data processing for remarketing purposes is carried out using cookies.
Data processed
Data processed by the cookies specified in the cookie policy.
Duration of data processing
The retention period for this cookie; further information is available here:
Google’s general cookie policy: https://www.google.com/policies/technologies/types/
Google Analytics guide:
https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage?hl=hu
Facebook information page: https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen
The legal basis for data processing
Your voluntary consent, which you provide to the Data Controller by using the website [Regulation
[Data processing pursuant to Article 6(1)(a)].
Further data processing
If the Data Controller intends to carry out further data processing, it shall provide prior notice to the
the key aspects of data processing (the legal framework and legal basis for data processing, the data processing
(the purpose, the scope of the data processed, and the duration of data processing).
Recipients of personal data
Data processing for the purpose of storing personal data
Name: RackForest Ltd.
Postal address: 1132 Budapest, Victor Hugo Street 11, 5th floor, B05001.
Email address: info@rackforest.hu
Telephone number: +36 1 211 0044
Website: https://rackforest.com/
The Data Processor stores personal data on the basis of a contract concluded with the Data Controller. The
is not entitled to access personal data.
Data processing activities relating to the sending of newsletters
Name of the data processor: DLM Solutions Kft. (Operel system)
The data processor’s registered office: 1033 Budapest, Szőlőkert utca 4/B.
The data processor’s telephone number: +36 1 884 3300
The data processor’s email address: info@operel.hu
The data processor’s website: https://www.operel.hu
The Data Processor assists with the newsletters on the basis of a contract concluded with the Data Controller
in sending it out. In doing so, the Data Processor will use the data subject’s name and email address for the purpose of sending the newsletter
handles it as required.
Data processing in relation to accounting
Name of the data processor: NOVITAX Kft.
The data processor’s registered office: 1105 Budapest, Gitár utca 4.
The data processor’s telephone number: +36 1 263 2363
The data processor’s email address: novitax@novitax.hu
The data processor’s website: https://novitax.hu
Name of the data processor: DLM Solutions Kft. (Operel system)
The data processor’s registered office: 1033 Budapest, Szőlőkert utca 4/B.
The data processor’s telephone number: +36 1 884 3300
The data processor’s email address: info@operel.hu
The data processor’s website: https://www.operel.hu
The Data Processor assists with the accounting on the basis of a written contract concluded with the Data Controller
in the accounting of documents. In doing so, the Data Processor will record the data subject’s name and address in the accounting
processes such data for as long as is necessary for record-keeping purposes, in accordance with the time limit set out in Section 169(2) of the Accounting Act,
and delete it immediately thereafter.
Data processing relating to invoicing
Name of the data processor: DLM Solutions Kft. (Operel system)
The data processor’s registered office: 1033 Budapest, Szőlőkert utca 4/B.
The data processor’s telephone number: +36 1 884 3300
The data processor’s email address: info@operel.hu
The data processor’s website: https://www.operel.hu
The Data Processor assists with accounting documents in accordance with the contract concluded with the Data Controller
in its records. In doing so, the Data Processor shall include the data subject’s name and address in the accounting
processes such data for as long as is necessary for record-keeping purposes, in accordance with the time limit set out in Section 169(2) of the Accounting Act,
it is then deleted.
Data processing in connection with the operation of a CRM system
Name of the data processor: DLM Solutions Kft. (Operel system)
The data processor’s registered office: 1033 Budapest, Szőlőkert utca 4/B.
The data processor’s telephone number: +36 1 884 3300
The data processor’s email address: info@operel.hu
The data processor’s website: https://www.operel.hu
The Data Processor assists with orders in accordance with the contract concluded with the Data Controller
in its records. In doing so, the Data Processor will record the data subject’s name, address, telephone number, and orders
processes the number and date within the civil law limitation period.
Data processing in connection with online payments
Name of the data controller: SimplePay Zrt.
The data controller’s registered office: 1138 Budapest, Váci út 135–139, Building B, 5th floor.
The data controller’s telephone number: +36 1 20 30 70 3 666 611
The data controller’s email address: ugyfelszolgalat@simple.hu
The data controller’s website: https://simplepay.hu/impresszum/
The payment service provider assists with online payments in accordance with the contract concluded with the Data Controller
in the course of which data is transferred during the purchasing process via the online
to the payment service provider. In doing so, the online payment service provider will use the billing name of the person concerned
and processes the customer’s name, address, order number and date in accordance with its own data protection policy.
Purpose of data transfer: to provide the online payment service provider with information relating to the purchase, which is held by it
providing the transaction data required for the payment transaction initiated.
Legal basis for the transfer of data: pursuant to Article 6(1)(b) of the Regulation, between you and the Data Controller
the performance of the contract concluded between the parties, which includes payment by the customer, in the case of online payment
however, the data transfer referred to in this section is necessary for the payment
Using various additional features (e.g. sending newsletters).
1. Activities carried out by the data processor: Various additional functions (e.g. sending newsletters)
use.
2. Name and contact details of the data processor:
(name)
(registered office)
(telephone)
(email)
3. The fact that data is processed and the scope of the data processed: During the use of the service, the data subject
all personal data provided.
4. Data subjects: All data subjects who use the website.
5. Purpose of data processing: To operate the services provided by the data processor in
on the website.
6. Duration of data processing and deadline for erasure of data: The data controller and the data processor
until the termination of the agreement between the parties, or until the data subject submits a request for erasure to the data processor
Data processing will continue until you submit your request.
7. Legal basis for data processing: the User’s consent, Article 6(1)(a) of the GDPR and
point (c), as well as electronic commerce services and the information society
Section 13/A(3) of Act CVIII of 2001 on certain aspects of integrated services.
8. Activities of the data processor: http://www.allatijoaruhaz.hu (name of online shop) provides improved customer
uses the M.I. system to enhance the user experience and provide more effective information (M.I. Solution Kft.,
Hungary, 2030, Érd, 57 Esztergályos Street (www.miclub.hu), which is stored on your computer
uses text files (cookies). These cookies store information about your activity on our online shop’s website
activity (clicks). Using the software and cookies we employ, we are able to estimate,
which of our products or services might interest you, which helps us to
so that we can automatically send you emails containing information that is informative and relevant to your interests.
If you do not wish to receive emails of this kind, or if you do not want your activity
If you wish to unsubscribe, please click on the “Unsubscribe” link in the footer of any email to do so immediately
Both the sending of automated emails and your purchases in our online shop will be suspended
monitoring its activities.
In addition, when you browse our online shop, we only place cookies on your device that,
which helps us to optimise our marketing and under no circumstances can be linked to the data collected in this way
data relating to a specific individual.
Cash on Delivery Checker
For the purposes of this contract, a breach of contract shall be deemed to have occurred if the Customer fails to take delivery of
nor does the Customer notify the Company of the Product they have ordered or of their intention to withdraw.
Following the placement of an order on the Website, a contract is formed between the Company and the Consumer (Customer)
A contract of sale is concluded electronically. Under this contract, the Consumer (Buyer)
is obliged to pay the purchase price and take delivery of the goods, and is obliged to cooperate with the Contractor and
to inform him of any material circumstances relating to the performance of the contract (Civil Code).
Section 6:215 and Section 6:62(1) of the Civil Code.
If the Customer fails to collect the ordered Product, the Company may, at its discretion,
1. terminate the contract with immediate effect, or
2. attempts to deliver the Product a third or even a fourth time, in the event that the
The second delivery attempt was also unsuccessful and/or the Customer failed to cooperate.
The Company reserves the right to charge for the costs of unsuccessful delivery and return described above
enforce as a penalty against the Customer.
If you have previously failed to collect the ordered Product on at least two occasions (the
(except where the right of withdrawal is exercised), or the Product was returned to the Company without a return label,
The Company may make the order conditional upon advance payment of the purchase price and delivery costs
fulfilment. The Contractor is entitled to withhold delivery of the Product(s) until it is satisfied
confirming that you have successfully paid for the Product using the electronic payment method
(including cases where, in the case of a product paid for by bank transfer, the Customer’s Member State is
transfers the purchase price in the relevant currency; however, due to exchange rate fluctuations and bank charges, the Company will not
(the amount calculated on the basis of the purchase price and the delivery charge is received). The Contractor shall
shall request the Customer to make up the shortfall if the price of the Product has not been paid in full.
Your rights in relation to data processing
During the period of data processing, you are entitled to the following rights in accordance with the provisions of the Regulation:
– the right to withdraw consent
– the right of access to personal data and information relating to the processing of such data
– right to rectification
– restriction of data processing,
– the right to erasure
– the right to protest
– the right to portability.
–
If you wish to exercise your rights, this will require you to identify yourself and the Data Controller
We need to communicate with you. Therefore, for identification purposes, personal data
will need to be provided (but identification may only be based on data which the Data Controller would otherwise
(including data processed about you), and will be available in the Data Controller’s email account regarding the processing of your data
complaints relating to this information sheet, within the time limit specified for such complaints.
If you are a former customer and would like to make a complaint or raise a warranty claim,
To identify yourself, please also provide your order reference number. Using this
We can also identify you as a customer.
The Data Controller will respond to complaints regarding data processing within 30 days at the latest.
The right to withdraw consent
You are entitled to withdraw your consent to the processing of your data at any time; in such cases, the
We will delete the data from our systems. Please note, however, that any outstanding
If you place an order, cancelling it may result in us being unable to fulfil your order
delivery. Furthermore, once the purchase has been completed, in accordance with accounting regulations, invoicing
we cannot delete your personal data from our systems, and if you have an outstanding debt with us,
then, on the basis of a legitimate interest relating to the recovery of the debt, your data may be processed even after you have withdrawn your consent
we can also treat it in such cases.
Access to personal data
You have the right to receive confirmation from the Data Controller as to whether personal
whether your data is currently being processed, and if so, you have the right to:
– to be granted access to the personal data being processed and
– the Data Controller shall provide the following information: the purposes of data processing;
a.) the categories of personal data processed about you;
b.) information about the recipients or categories of recipients with whom the
personal data that the Data Controller has disclosed or will disclose;
c.) the envisaged period for which the personal data will be stored, or, if this is not possible,
factors to be taken into account when determining the duration;
d.) your right to request from the Data Controller that your personal
the rectification, erasure or restriction of processing of data, and on the basis of legitimate interests
in the case of data processing, you may object to the processing of such personal data;
e.) the right to lodge a complaint with the supervisory authority;
f.) if the data was not collected from you, any available information regarding its source
information;
(g) the fact that automated decision-making is used (where such a process is used), including
profiling as well, and, at the very least in these cases, the logic applied and
clear information regarding the significance of such data processing, and
What are the likely consequences for you?.
The purpose of exercising this right may be to establish and verify the lawfulness of data processing,
Therefore, in the event of repeated requests for information, the Data Controller may charge a reasonable fee for
in return for providing the information.
The Data Controller ensures access to personal data by verifying your identity
we will then send you the personal data and information we have processed by email. If
If you have registered, we will grant you access by logging into your user account
You have the right to view and check the personal data we hold about you.
Please state in your request whether you are seeking access to your personal data or
is requesting information regarding data processing.
Right of reply
You have the right to request that the Data Controller rectify, without undue delay, any personal data concerning you
inaccurate personal data.
Right to restriction of processing
You have the right to request that the Data Controller restrict the processing of your data if any of the following apply:
is met:
– If you contest the accuracy of your personal data, the restriction will apply for that period
applies, which enables the Data Controller to verify the personal data
accuracy; if the correct data can be determined immediately, no restriction will be applied;
– the processing is unlawful, but you object to the erasure of the data for any reason (for example, because
(the data is important to you for the purposes of enforcing a legal claim), so we will not delete the data
does not call for this, but instead calls for restrictions on their use;
– the Data Controller no longer needs the personal data for the specified purpose of data processing, but
you require them for the purpose of bringing, enforcing or defending legal claims; or
– You have objected to the processing of your data, but the Data Controller’s legitimate interests may also justify the
data processing, in which case until it is established that the Data Controller has legitimate grounds
if they take precedence over your legitimate interests, the processing of data must be restricted.
If the processing of personal data is subject to restriction, such personal data may only be processed, with the exception of storage, by the data subject
with his or her consent, or for the purpose of bringing, enforcing or defending legal claims, or for other
in order to protect the rights of a natural or legal person, or the interests of the Union or of a Member State
may be treated as a matter of significant public interest.
The data controller shall notify the data subject in advance of the lifting of the restriction on data processing (at least prior to the lifting of the restriction
will notify you (three working days in advance).
Right to erasure – right to be forgotten
You have the right to have the Data Controller erase your
personal data, if any of the following grounds apply:
– the personal data are no longer necessary for the purpose for which the Data Controller
collected or otherwise processed;
– You withdraw your consent and there is no other legal basis for the processing of your data;
– You object to the processing of your data on the basis of a legitimate interest, and there is no overriding legitimate
grounds (i.e. legitimate interests) for data processing,
– the Data Controller processed personal data unlawfully and this has been established following the complaint
won,
– personal data in accordance with the legal requirements laid down in EU or Member State law applicable to the Data Controller
must be deleted in order to fulfil the obligation.
If the Data Controller has disclosed the personal data processed about you for any lawful reason
data, and is obliged to delete it for any of the reasons set out above, taking into account the available technology and the practicalities of implementation
taking into account the costs involved, is obliged to take all steps that can reasonably be expected – including
technical measures – in order to inform other data controllers who process the data,
that you have requested links to the personal data in question or that personal data
the deletion of a copy or duplicate.
The right to erasure does not apply where the processing is necessary:
– for the purpose of exercising the freedom of expression and the right to information;
– Union or Member State law governing the processing of personal data and applicable to the data controller
fulfilment of an obligation under (such as data processing carried out in the context of invoicing,
(as the retention of the invoice is required by law), or in the public interest or in relation to the data controller
for the purpose of carrying out a task performed in the exercise of public authority;
– to bring, enforce or defend legal claims (e.g. if the Data Controller
There is an outstanding claim against you which you have not yet settled, or a consumer or data protection complaint
(the matter is currently being dealt with).
The right to protest
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal
against the processing of their data on the grounds of legitimate interests. In this case, the Data Controller shall
may no longer process the data, unless it can demonstrate that the processing is necessary for compelling legitimate
for reasons that take precedence over your interests, rights and freedoms,
or which relate to the bringing, enforcement or defence of legal claims.
If your personal data is processed for the purposes of direct marketing, you have the right to
object at any time to the processing of your personal data for this purpose, including
profiling, provided that it is related to direct marketing. If you object to the
against the processing of personal data for the purposes of direct marketing, then the personal data shall be
may no longer be processed for this purpose.
The right to portability
Where data processing is carried out by automated means, or where data processing is based on your voluntary
is based on your consent, you have the right to ask the Data Controller to
You will receive the data provided to the Data Controller, which the Data Controller will supply in XML, JSON or CSV format
in this format, provided that this is technically feasible, you may request that the
The data controller shall transfer the data in this format to another data controller.
Automated decision-making
You have the right not to be subject to decisions based solely on automated processing
the scope of the decision (including profiling) which would have legal effects on you or
would similarly be significantly affected. In such cases, the Data Controller is obliged to take appropriate
take measures to protect the rights, freedoms and legitimate interests of the data subject,
including, at the very least, the data subject’s right to request human intervention on the part of the data controller,
to express their views and lodge an objection to the decision.
The above does not apply where the decision:
– it is necessary for the conclusion or performance of a contract between you and the Data Controller;
– is permitted under Union or Member State law applicable to the Data Controller,
which serves to protect your rights, freedoms and legitimate interests
also lays down measures; or
– is based on your explicit consent.
Registration with the Data Protection Register
In accordance with the provisions of the Information Act, the Data Controller was required to notify the
in the data protection register. This notification requirement ceased to apply on 25 May 2018.
Data security measures
The Data Controller declares that it has implemented appropriate security measures to ensure that the
protect personal data against unauthorised access, alteration, disclosure or publication,
deletion or destruction, as well as accidental destruction and damage, and the use of
against becoming inaccessible as a result of changes in technology.
The Data Controller shall do everything in its power, within the limits of its organisational and technical capabilities, to ensure that,
that your data processors also implement appropriate data security measures when your
they process your personal data.
Remedies
If you believe that the Data Controller has breached any of the statutory provisions governing data processing
if it has failed to comply with a provision or has not responded to a request, then there is a presumption of unlawful data processing
the investigation conducted by the National Authority for Data Protection and Freedom of Information with a view to putting an end to
may be submitted (postal address: 1363 Budapest, PO Box 9, email: ugyfelszolgalat@naih.hu,
Telephone numbers: +36 (30) 683 5969, +36 (30) 549 6838; +36 (1) 391 1400).
We would also like to inform you that any breach of the legal provisions governing data processing
in such cases, or if the Data Controller has failed to comply with a request, then against the Data Controller
may bring a civil action before a court.
Amendment to the Privacy Policy
The Data Controller reserves the right to amend this privacy notice in line with the purpose of data processing and
amend it in a manner that does not affect its legal basis. By using the website after the amendments come into effect
accepts the amended privacy policy.
If the Data Controller intends to use the collected data for purposes other than those for which they were originally collected,
If it intends to process your data, it will inform you of the purpose of the data processing before proceeding with further processing
and the following information:
– the period for which personal data will be stored, or, if this is not possible, the period
the criteria for determining;
– your right to request from the Data Controller access to your personal data
access to, rectification, erasure or restriction of processing of such data, and on the basis of legitimate interests
in the case of data processing based on this, you may object to the processing of your personal data, as well as
In the case of data processing based on consent or a contractual relationship, you may request that
ensuring the right to data portability;
– in the case of data processing based on consent, that you may withdraw your consent at any time
may withdraw their complaint, and have the right to lodge a complaint with the supervisory authority;
– regarding the provision of personal data pursuant to legislation or a contractual obligation
is it a basis for or a prerequisite for entering into a contract, and whether you are obliged to provide your personal
to provide information, and what the possible consequences of this might be
failure to provide data;
– the fact that automated decision-making is used (where such a process is used), including profiling
as well as, at least in these cases, the logic applied and in relation to that
clear information on the significance of such data processing and what it means for you
has foreseeable consequences
Data processing may only commence after this, provided that the legal basis for the processing is consent,
In addition to being informed, you must also give your consent to the processing of your data.
Hold for collection and post office collection
Please note that Magyar Posta Zrt. sets out its data processing policy in the current privacy notice
identifies the recipient as specified; therefore, you may be required to provide your personal data
You can request this upon delivery or when collecting from a post office or postal collection point.
28 May 2026, Budapest
