Data Protection Declaration

1. Name and address of controller

Within the meaning of the General Data Protection Regulation and other national data protection laws and provisions, the controller is:

Saubermacher-Magyarország Kft. Registered seat: H-1181 Budapest, Zádor u. 5. Office: 2040 Budaörs, Keleti u. 7.

Phone: +36 21 200 3800

Email: saubermacher@saubermacher.hu

Website: saubermacher.hu

2. Data protection officer contact information:

The responsible data protection officer can be contacted using the following channels of communication:

Phone: +36 21 200 3800

Email: datenschutz@saubermacher.at

3. About data processing in general
4. The scope of the processing of personal data

In general, we only collect and use the personal data of our users to the extent required by the operability of the website and making available its content and services. Personal data is collected and used only with the consent the user. Exceptions apply only if it is not possible to obtain prior consent and the processing of the data is permitted by law.

2. The legal background for the processing of personal data

If we obtain consent for processing personal data, Article 6(1)(i) of the EU’s General Data Protection Regulation (GDPR) is the legal basis for the processing of personal data. If the processing of personal data is required for compliance with a legal obligation that the company must meet, the legal basis for processing is Article 6(1)(c) of the GDPR. If the processing of personal data is required for the essential interests of the data subject or any other natural person, the legal basis for such processing is Article 6(1)(d) of the GDPR. If processing is necessary to protect the rightful interests of the company or any other third party and if the interests and fundamental rights and freedoms of the data subject do not supersede the above interests, the legal basis for processing shall be Article 6(1)(f) of the GDPR.

3. Data erasure and the term of retention

The personal data of the data subject are erased or blocked as soon as the purpose of retention no longer applies. Storage may then take place if this is provided for in the European or national legal provisions, laws or regulations to which the responsible person is subject. The blocking and deletion of data will also take place when the retention period provided for by the above standards expires, unless there is a need for the further storage of the data for the conclusion or performance of a contract.

4. Making the website available and the creation of log files
5. Description and scope of data processing

Whenever a user visits the website, the system automatically stores data and information about the visitor’s computer system. The following data are recorded:

(1) Browser type and version used

(2) The user’s operating system (3) The user’s internet service provider (4) Date and time of access

(5) Websites from which the user’s system navigated to our website

(6) Websites opened by the user’s system from our website

These data are also recorded by our system’s log files. This does not involve the user’s IP address or other data that allow the data to be connected to a given user. These data are not recorded together with the user’s other personal data.

2. The legal background for data processing

The legal basis for the temporary retention of data is Article 6(1)(f) of the GDPR

3. The purpose of data processing

The data are used for optimizing our website and ensuring the safety of our IT systems. This constitutes our rightful interest in data processing under Article 6(1)(f) of the GDPR.

4. Term of data retention

The data will be deleted as soon as they are no longer required for achieving the purpose for which they were stored. If the website is accessed, this data recording takes place at the end of the given session.

5. Possibility of objection and termination

The recording of data is necessary for the provision of the website and the recording of data in log files is absolutely necessary for the operation of the website. The user therefor does not have the possibility to object.

 

5. Description and scope of data processing

This website uses cookies. Cookies are text files stored by the browser on the user’s computer system. When a user visits a website, the user’s operating system may store one or more cookies. Cookies store a characteristic string of characters that make it possible to clearly identify the browser if the user returns to the website at a later time. Cookies stored on the computer can be deleted at any time. The method for deleting cookies can be found in the instructions for using your browser (the browser’s “Help” menu). We use cookies to make our website more user friendly. Certain elements of this website require that the browser used for visiting be identifiable after switching pages. Cookies are used to store and forward the following data:

(1) Language preferences

(2) Automatic filling functions for forms

In addition to the above, the website also uses cookies that support the user’s browsing habits. The following data can be forwarded in the manner specified above:

(1) Search terms provided

(2) Frequency of visiting pages

(3) Use of the website’s functions

We use technical measures to anonymize the user’s data recorded in this manner. This means that the data cannot be linked to the user visiting the website. The data are not stored together with the user’s other personal data. When visiting the website, a banner is used to inform users about the use of cookies for analysis purposes, which makes reference to this Data Protection Declaration. In this context, the reference indicates how the storing of cookies can be prevented by using the browser’s settings.

2. The legal background for data processing

The legal basis for the processing of data is Article 6(1)(f) of the GDPR.

3. The purpose of data processing

Technically required cookies are used to make the use of the website easier for users. Certain functions on our website cannot be made available without the use of cookies. This requires that the browser used for visiting be identifiable after navigating to a different page. Cookies are necessary for the following applications:

(1) Transfer of language preferences

(2) Remembering search terms

The user data stored by technically required cookies are not used to create user profiles. Analysis cookies are used to improve the quality of our website and its content. Analysis cookies let us know how users use the website, which allows us to continuously optimize our offer. Analysis cookies are used for the following purposes: (1) Transfer of language preferences (2) (2) Remembering search terms
Our rightful interest in the processing of personal data applies in this case as well, as specified by Article 1(6)(f) of the GDPR.

4. Term of retention, possibility of objection and termination

Cookies are stored and forwarded to our website by the user’s computer. As a user, you therefore have complete control over the use of cookies. By changing the settings of your internet browser, you can deactivate or limit the forwarding of cookies. Cookies saved on a device can be deleted at any time. The process can also be automated. If cookies are deactivated for our website, it is possible that not all of the website’s functions will be fully functional.

6. The use of Google Analytics and Google AdWords
7. Description and scope of data processing

To improve efficiency, our website uses the services of Google Analytics, which is a web analysis service offered by Google Inc. (“Google”). Google Analytics uses cookies (text files) that are stored on your computer and allow the website to analyze your use of the site. The data created by the cookie regarding your use of the website (including your IP address) are sent to a Google server in the USA, where they are stored. To protect your interest in the protection of your personal data, these data are anonymized and your IP address is provided to Google in an unrecognizable format. You can prevent the storage of cookies using your browser settings; however, please note that in this case, there is a possibility you will not be able to make full use of all of the website’s functions. Moreover, you can prevent the recording to or the processing by Google of the data created by the cookies pertaining to your use of the website (including your IP address) by downloading and installing the browser plug-in available at the following link: tools.google.com/dlpage/gaoptout This website also uses cookies to address visitors using online advertisements in remarketing campaigns at a later time, using Google’s advertising network. When using remarketing advertisements, third party service providers like Google use cookies to collect information on visits to our website. You, as a user, have the possibility to deactivate the use of your cookies by Google by visiting the following webpage where you can deactivate Google’s services: www.google.com/ads/preferences. The following data are recorded as part of the registration process:

(1) The user’s IP address in an encoded format

(2) Date and time of access (3) Frequency of visiting the site (4) Use of functions on the website (5) The user’s operating system

(6) The user’s internet service provider

(7) Date and time of access

(8) Websites from which the user’s system navigated to our website

 

(9) Websites opened by the user’s system from our website

 

(10) The operating system used by the terminal device

(11) Age, sex, languages, interests, country of origin

2. The legal background for data processing

The legal background for data processing is our rightful interest in increasing the effectiveness of and financing our website, within the meaning of Article 6(1)(f) of the GDPR.

3. The purpose of data processing

The anonymized IP address is forwarded to Google to improve the effectiveness of the website, to analyze the associated user behavior in an anonymized manner, and to finance our website.

4. Term of data retention

The data will be deleted as soon as they are no longer required for achieving their purpose.

7. Use of the Facebook social media plugin
8. Description and scope of data processing

This website uses the social plugins (“plugins”) of the facebook.com social network, which are operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). Plugins can be recognized by the Facebook logo (a white letter “f” on a blue tile, or the “like” symbol), or they may be labelled “Facebook Social Plugin”. The list and appearance of Facebook Social Plugins is available here: developers.facebook.com/docs/plugins. If you visit a website that forms part of our internet presence and contains this type of plugin, your browser will establish a direct connection with a Facebook server. The contents of the plugin are provided to your browser directly by Facebook, which also links it to the website. This means we have no control over the scope of the data that Facebook records using these plugins. Accordingly, we can only provide the information we are in possession of: By using the plugin, Facebook receives the information that you have opened the given page of our internet presence. If you are logged in to Facebook, Facebook can connect your visit to your Facebook account. If you interact with the plugin (e.g. press the Like button or write a comment), your browser will transfer the appropriate data to Facebook, which will retain this information. If you are not a member of Facebook, there is still a possibility that Facebook will learn and store your IP address. In the interest of protecting your privacy, please read Facebook’s Data Policy, which contains the purpose, scope, further processing, and use of your data by Facebook, your related rights and setting possibilities: www.facebook.com/policy.php. If you are a Facebook member and would not like Facebook to collect data using our internet presence and connect those with the data you have provided Facebook in your account, log out of Facebook before visiting our sites. You can also use your browser’s extensions, such as Facebook Blocker, to block Facebook Social Plugins.

2. The legal background for data processing

The legal basis for processing is the user’s consent under Article 6(1)(a) of the GDPR.

3. The purpose of data processing

The forwarding of these data serve to improve the website’s effectiveness as well as its marketing purposes.

4. Term of data retention

The data will be deleted as soon as they are no longer required for achieving their purpose.

8. Rights of the data subject

If we process personal data that pertain to you, you qualify as a data subject who has the following rights against the controller:

1. Right of information

You can ask the controller for confirmation whether your personal data were processed by us. If such processing has taken place, you can ask the controller for information pertaining to the following: (1) the purposes for which the personal data are processed; (2) the categories of personal data that are processed; (3) the recipients or the categories of recipients to whom personal data concerning you have been or will be disclosed; (4) the planned period of retention of the personal data concerning you or, if it is not possible to provide specific data in this respect, the criteria for determining the retention period; (5) the existence of the right to rectification or erasure of personal data concerning you, the right to restrict processing by the controller or the right to object to such processing; (6) the existence of the right to lodge a complaint with a supervisory authority; (7) the information available on the origin of the data, if the personal data are not held by the data subject; (8) the application of automated decision-making, including profiling, in accordance with Article 22(1) and (4) of the GDPR, and, at least in these cases, factually informative information on the logic involved in such processing in relation to the data subject, as well as on the scope of the processing and the effects targeted. You have the right to request information on whether personal data concerning you are transferred to a third party or international association. In this regard, you can request to receive suitable guarantees and information under Article 46 of the GDPR in connection with the transfer.

1. Right to rectification

You have the right to rectification and/or supplementation against the responsible person if the personal data concerning you being processed are not correct or are incomplete. The controller shall perform the rectification without delay.

2. The right to restrict processing

You can request the restricting of the personal data concerning you, with the following conditions: (1) if you have any doubts regarding the correctness of the personal data concerning you, within a period suitable for the controller to check whether the personal data are correct; (2) the processing is unlawful and you object to the erasure of the personal data, instead requesting the restriction of the use of the personal data; (3) the controller no longer needs the personal data for the purposes of processing, but you need them to pursue, exercise, or defend a legal claim; or (4) you have appealed against the processing pursuant to Article 21(1) of the GDPR and are not yet sure that the controller’s legitimate grounds outweigh your own. If the processing of the personal data concerning you has been restricted, with the exception of their retention these data can be processed only with your permission, or for the enforcement, exercising, or protection of legal claims, or for the protection of another private or legal person, or in the important public interest of the EU or a Member State thereof. If the restricting of processing has taken place according to the above conditions, the controller shall notify you prior to lifting the restriction.

3. Right to erasure
4. a) Obligation of erasure

You can request the controller to promptly erase the personal data concerning you, in which case the controller shall be obligated to promptly erase the data if any of the following conditions are met: (1) The personal data concerning you are no longer required for the purpose for which they were recorded or processed in any other manner. (2) You withdraw your consent for the processing based on Article 6(1)(a) of Article 9(2)(a) of the GDPR, and no other legal basis for processing applies. (3) You submit an objection to processing under Article 21(1) of the GDPR and there are no other rightful interests for processing that supersede your interest, or you submit an objection to processing under Article 21(2) of the GDPR. (4) The personal data concerning you were processed unlawfully. (5) The personal data concerning you have to be deleted due to a legal obligation under Union law or the legislation of a Member State applicable to the controller. (6) The personal data concerning you were recorded pertaining to services offered by information society under Article 8(1) of the GDPR.

1. a) Information to third parties

If the controller disclosed personal data concerning you and is obligated to erase such data under Article 17(1) of the GDPR, it shall take suitable measures taking into account available technologies and the costs of introduction to inform the controllers responsible for data processing of the fact that you, as the data subject, have requested the erasure of the links leading to these personal data and the copies and reproduction of the personal data.

1. b) Exceptions

The right to erasure shall not apply if processing is necessary for the following reasons: (1) to exercise the freedom to express an opinion or the right to information; (2) for compliance with a legal obligation under the law of the Union or of the Member State to which the controller is subject to carry out the processing, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller; (3) for reasons of public interest within the scope of public health, as specified by Article 9(2)(h) and Article 9(3) of the GDPR; (4) for purposes of archiving, scientific or historical research purposes, or statistical purposes subject to public interest, as specified by Article 89(1) of the GDPR, if the right under point a) is expected to make impossible or severely restrict the implementation of the purposes of such processing; or (5) for enforcing, exercising, or protecting legal claims.

4. Right of information

If you have exercised your right to rectification, erasure, or restriction of processing against the controller, the controller is obliged to inform all recipients to whom it has disclosed personal data concerning you of this rectification or erasure of the data or the restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to gain information on these recipients from the controller.

5. Right to data portability

You have the right to receive the data concerning you that you have provided the controller in a structured, customary, machine-readable format, as far as technically feasible. In addition, you also have the right to transfer these data to another controller, without limitation of the controller to whom the personal data have been provided, if (1) the processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) of the GDPR or a contract pursuant to Article 6(1)(b) of the GDPR, and (2) the processing is carried out with the help of automated processes. By exercising this right, you also have the right to the personal data concerning you transferred directly from one controller to another, if technically possible. This may not restrict the rights or freedoms of any other persons. The right to data portability shall not apply to the processing of personal data that are necessary for the performance of a task associated with a public interest or is in exercise of public authority transferred to the controller.

6. Right to object

You have the right to object at any time against the processing of the personal data concerning you for reasons derived from your special situation, if processing is based on Article 6(1)(e) and (f) of the GDPR. In this case, the controller will no longer process personal data concerning you unless it is able to provide proof that processing is necessary which supersede your rights and freedoms, or if processing is aimed at the enforcement, exercising, or protection of a legal claim. If the personal data concerning you are processed in the interest of direct marketing, you have the right to object to processing of personal data concerning you for such advertising purposes, which provision also applies to profiling if and when connected to such direct marketing. If you object to processing for the purposes of direct marketing, the personal data concerning you will no longer be processed for such purpose. You have the possibility, in the context of the use of information society services and without prejudice to Directive 2002/58/EC, to exercise your right to object through an automated process using technical specifications.

7. The right to withdraw your consent to data processing

You have the right to withdraw your consent to the data protection declaration at any time. Withdrawal of consent does not affect the legality of processing performed prior to the withdrawal.

8. The right to submit complaints to a supervisory authority

Without prejudice to other administrative or judicial possibilities for legal remedy, you have the right to submit complaints to a supervisory body, thus especially in the Member State of your place of residence, workplace, or of the alleged violation, if you believe that the processing of your personal data is in violation of the GDPR. The supervisory authority to which the complaint has been submitted shall notify the complainant about the state and result of the complaint, including the possibility of legal remedy under Article 78 of the GDPR.