PRIVACY POLICY

Data Management Information for the “Herzcoffee.com” web interface

  • 1 Purpose of the Privacy Policy
  • 2 Data Controller Data
  • 2.1 Data Protection Officer
  • 3 The range of personal data treated
  • 3.1 Technical Data
  • 3.2 cookies (cookies)
  • 3.2.1 The task of cookies
  • 3.2.2 ASCLUDED, SESSION (SESSION) COOKIES
  • 3.2.3 Cookies (analytics) placed by third party
  • 3.3 Data related to online order
  • 3.4 Data related to newsletter
  • 4 Purpose, method and legal basis for data management
  • 4.1 General Data Management Guidelines
  • 5 Physical storage locations of data
  • 6 Rights of Stakeholder and Enforcement Opportunities
  • 6.1 Right to Information
  • 6.2 Right to Access to Access
  • 6.3 right to correct
  • 6.4 Right to delete
  • 6.5 Right to restrict data processing
  • 6.6 Right to Media
  • 6.7 right to protest
  • 6.8 Automated decision -making in individual matters including profiling
  • 6.9 right to withdraw
  • 6.10 right to go to court
  • 6.11 Data Protection Authority Procedure
  • 7 Other provisions



1 Purpose of the Privacy Policy

Central Market Ltd. (hereinafter, Service Provider, Data Controller, Herz New York Coffee Roasters) as a data controller, recognizes the content of this legal notification to itself. It undertakes that all data processing related to its activities meet the requirements set out in these rules and in force in force and in the European Union's acts. THE Herz New York Coffee RoasterData protection guidelines related to your data management are continuously available at www.pickies.hu/adatkezellesi--tajek. THE Herz New York Coffee Roasters reserves the right to change the right at any time. Of course, he notifies his audience in the right time. If you have a question about this announcement, please write to us and our colleague will answer your question. THE Herz New York Coffee Roasters In order to protect the personal data of their dedicated clients and partners, it is of utmost importance to respect their clients' right to self -determination. THE Herz New York Coffee Roasters He handles personal data confidentially and takes any security, technical and organizational measures that guarantee the security of the data. THEHerz Vanilla Hungary Kft.. You describe your data processing practice below.

2 Data Controller Data

If you find our company, you can contact the Data Controller at sales@herzcoffee.com.
The Herz New York Coffee Roasters All e-mails and personal data received will be held until the person providing the data will be deleted.
Name: Central Market Ltd. (hereinafter Herz New York Coffee Roasters)
Headquarters: 1125 Budapest, Mátyás Király út 24/1
Company registration number:01 09 385977
Tax number:25781748-2-43
Mail: sales@herzcoffe.com

2.1 Data Protection Officer

In view of the relevant provisions of GDPR Herz New York Coffee Roasters not obliged to designate a data protection officer, Herz New York Coffee Roasters It does not qualify as a public authority or a public body, as well as Herz New York Coffee Roasters Its activities do not include an operation that requires a regular and systematic, high -profile observation of the person concerned and Herz New York Coffee Roasters He does not handle special data or personal data on decisions and criminals on the establishment of criminal liability.

3 The range of personal data treated



3.1 Technical Data

THE Herz New York Coffee Roasters For the processing of personal data, the IT tools used in the provision of the service shall be selected and operated by the data processed: - accessible to those authorized to do so; - Authenticity and authentication is provided (credibility of data management); - its unchanged (data integrity); - should be protected against unauthorized access (data confidential). THE Herz New York Coffee Roasters The data is protected by appropriate measures against unauthorized access, alteration, transmission, disclosure, deletion or destruction and accidental destruction. THE Herz New York Coffee Roasters Provides technical, organizational and organizational measures to protect the security of data management that provides a level of protection that corresponds to the risk of data management. THEHerz New York Coffee Roasters preserves - secrecy in data management: protects the information so that only those who are entitled can access it; - the intact: protects the accuracy and completeness of information and processing method; - Availability: Make sure that when an eligible user needs it, he or she can really access the information they want and to be available.

3.2 cookies (cookies)

3.2.1 The task of cookies

Cookies collect information about visitors and their tools; - Note the individual settings of the visitors, which are used for eg. When using online transactions, they do not need to be typed again; - facilitate the use of the website; - They provide a quality user experience. For customized service, a small data pack on the user's computer, Cookie (cookie) places it and reads back in later visit. If the browser returns a previously saved cookie, the cooking service provider has the opportunity to connect the user's current visit to the previous one, but exclusively for its own content.

3.2.2 ASCLUDED, SESSION (SESSION) COOKIES

The purpose of these cookies is to browse the visitors completely and smoothly in the Herz New York Coffee Roasterswebsite, use its features and the services available there. The validity time of this type of cookies lasts until the session (browsing) is completed, and by closing the browser, this type of cookies will automatically be deleted from the computer and from another device used for browsing.

3.2.3 Cookies (analytics) placed by third party

The Herz New York Coffee Roasters Also apply Google Analytics as third party cookies on your website. By using Google Analytics Statistical Services, you collect information about how visitors use websites. Use the data for the development of the website and to improve the user experience. These cookies will also remain on the visitor's computer or other devices used for browsing, or in its browser, or until the visitor delete them.

3.3 Data related to online order

- Last name - must be completed
- First name - must be completed
- Shipping Address Data - Mandatory to fill in
- Email address - must be completed
- phone number - must be completed
- Billing address - must be completed
- Billing Name - Required

3.4 Data related to newsletter
- First name
- E-mail address
- Accept this Privacy Policy
- consent to receiving marketing emails

4 Purpose, method and legal basis for data management

4.1 General Data Management Guidelines

The Herz New York Coffee Roasters The data management of its activities are based on voluntary consent or legal authorization. In the case of voluntary contributions, the data subject may withdraw their contribution at any time of data processing. In some cases, the handling, storage and transmission of a circle of data is made by law, which we will notify our clients separately. We call on Herz New York Coffee Roasters The informants are aware that, if they do not provide their own personal data, the informant's duty is to obtain the consent of the data subject.

The principles of data management are in line with the applicable laws on data protection, especially with the following:

- 2011 CXII. - the right of information self -determination and the Freedom of Information (Infotv.);
- Regulation No 2016/679 of the European Parliament and of the Council (EU) 2016/679 - April 27, 2016) - on the protection of natural persons in respect of personal data and the free flow of such data and the repeal of Regulation EC (General Data Protection Regulation, GDPR);
- Act V of 2013 - on the Civil Code (Civil Code); - Act C of 2000 - Accounting (Tv.);
- 2017 LIII. - prevention and prevention of financing of money laundering and terrorism (PMT.);
- CCXXXVII. -Credit institutions and financial enterprises (Hpt.).

6 Physical storage locations of data
Your personal data (ie data that can be contacted with your person) can be processed as follows: On the one hand, technical data related to your computer, browser program, internet address, and visited pages are automatically formed in our computer system, in connection with the maintenance of the Internet connection On the other hand, you can enter your name, contact information or other details if you want to contact us when using the website. Data to be technically recorded when operating the system: Data for the login computer of the data subject generated during browsing and which are Herz New York Coffee Roasters Its system is automatically recorded as a result of technical processes. The data to be automatically recorded automatically logges the data automatically when entering or exit without a separate statement or act. This data may not be linked to other personal user data, except for statutory cases.

7 Rights of concern and enforcement

The data subject may request information on the processing of his or her personal data and request the rectification of his or her personal data, or, except for mandatory data processing, to delete, withdraw, withdraw, to withdraw, to withdraw data and protest in the manner indicated in the data of the data.

7.1 Right to Information

The Herz New York Coffee Roasters It shall take appropriate measures to provide the data subjects for the processing of personal data, all the information referred to in Articles 13 and 14, and Articles 15-22. and every information under Article 34 in a concise, transparent, understandable and easily accessible form, clearly and clearly.

7.2 The right to access concerned

The data subject is entitled to receive feedback from the Data Controller to see if the processing of his or her personal data is underway and, if such data processing is underway, is entitled to have access to personal data and the following information: Data Management Objectives; categories of personal data concerned; categories of recipients or recipients with whom or with which personal data will be published or published, including, in particular, third -country recipients and international organizations; the planned duration of the storage of personal data; Restriction of rectification, deletion or data management and the right to protest; the right to submit a complaint to the supervisory authority; information on data sources; The fact of automated decision -making, including profiling, and the logic used and understandable on the importance of such data processing and the expected consequences for the data subject. The Data Controller shall provide information within a maximum of one month of submission of the application.

7.3 right to correct

The affected person may request a Herz New York Coffee Roasters rectification of inaccurate personal data managed by hand and completing incomplete data.



7.4 Right to delete

The data subject shall be entitled to a request for any of the following reasons for a request for a Herz New York Coffee Roasters Delete the personal information relating to it without undue delay: - Personal data no longer requires the purpose of which they have been collected or otherwise treated; - the data subject withdraws the consent of the data processing and has no other legal basis for data processing; - the data subject protests against data management and there is no legal reason for data management; - personal data has been unlawfully handled; - Personal data shall be deleted for the fulfillment of the legal obligation required by EU or Member States applicable to the Data Controller; - Personal data was collected on the offer of information society services. The deletion of data cannot be initiated if data processing is required: to exercise the right to freedom of expression and the right to orientation; to fulfill the obligation of personal data under the Data Controller, to fulfill an obligation under the EU or Member State, or to carry out a task in the framework of public interest or under the exercise of a public authority to the controller; for the purpose of public health, or for archiving, scientific and historical research or statistical purposes, in the basis of public interest; or to submit, enforce or protect legal needs.

7.5 Right to restrict data processing

At the request of the data subject, the Herz New York Coffee Roasters restricts data management if any of the following conditions are met: - the data subject disputes the accuracy of personal data, in this case the restriction applies to the duration that allows for the accuracy of personal data; - the data processing is unlawful and the data subject opposes the deletion of the data and instead requests a restriction of their use; - the Data Controller no longer needs personal data for data management, but the data subject requires them to submit, enforce or protect legal needs; or - the data subject protested against data management; In this case, the restriction applies to the duration until it is determined whether the legitimate reasons of the data controller take priority against the legitimate reasons of the data subject. If the data processing is limited, personal data except storage can only be treated with the consent of the data subject, for the submission, enforcement or declaration of legal claims, or to protect the rights of other natural or legal person, or an important public interest of the Union or Member State .

7.6 Right to Media

The data subject shall be entitled to receive the personal data provided by the Data Controller in a widely used machine -readable format and transmit this data to another Data Controller.



7.7 right to protest

The data subject is entitled to protest at any time for the reasons for his or her own situation against the data processing necessary for the implementation of the task of the public interest or under the exercise of a public authority or the processing of the data controller or a third party's legitimate interests, including profile too. In the event of a protest, the Data Controller shall no longer handle personal data unless it is justified by legitimate reasons that take priority to the interests, rights and freedoms of the data subject or which are related to the submission, enforcement or protection of legal claims.

7.8 Automated decision -making in individual matters including profiling

The data subject is entitled not to cover a decision based on automated data processing, including profiling, which would have a legal effect or significantly affect him.

7.9 right to withdraw

The data subject is entitled to withdraw their consent at any time.

7.10 right to go to court

In the event of a violation of his or her rights, the data subject may go to court against the Data Controller. The court acts out of the case.

7.11 Data Protection Authority Procedure

Complaint can be used with the National Data Protection and Freedom of Information Authority:

- Name: National Data Protection and Freedom of Information Authority
- Headquarters: 1125 Budapest, Szilágyi Erzsébet Fasor 22/C.
- Mailing address: 1530 Budapest, Pf.: 5.
- Phone: 0613911400 - Fax: 0613911410
- E-mail: ursfelgalat@naih.hu
- Website: http://www.naih.hu

8 Other provisions

We provide information on data processing not listed in this prospectus when recording the data. We would like to inform our clients that the court, the prosecutor, the investigative authority, the administrative authority, the administrative authority, the national data protection and freedom You can find the data controller to make available. THE Herz New York Coffee Roasters If the authority has indicated the exact purpose and the scope of the data, the authorities only issue personal data to the extent that is essential to achieve the purpose of the request.