PRIVACY POLICY

PRIVACY POLICY for the "herzcoffee.com" website

• The purpose of the data protection information
• 2 Data of the data controller
• 2.1 Data Protection Officer
• The scope of processed personal data
• 3.1 Technical specifications
• Cookies
• 3.2.1 The role of cookies
• 3.2.2 Absolutely necessary, session cookies
• 3.2.3 Third-party cookies placed by third parties (analytics)
• 3.3 Data related to online orders
• 3.4 Data related to newsletters
• The purpose, method, and legal basis of data processing
• 4.1 General data management guidelines
• 5 The physical storage locations of the data
• 6 Rights of the data subjects and ways to enforce them
• 6.1 Right to information
• 6.2 The right to access by the data subject
• 6.3 Right of rectification
• 6.4 Right to deletion
• 6.5 Right to restriction of processing
• 6.6 Right to data portability
• 6.7 Right to protest
• Automated decision-making in individual cases, including profiling
• 6.9 Right of withdrawal
• 6.10 Right to appeal to the court
• Data protection authority procedure
• 7 Other provisions



The purpose of the data protection information


The Herz Vanilla Hungary Kft. (hereinafter, service provider, data controller, Herz New York Coffee Roasters) as the data controller, acknowledges the content of this legal notice as binding. It undertakes to ensure that all data processing related to its activities complies with the provisions of this policy, the applicable national laws, and the expectations set out in the legal acts of the European Union.Herz New York Coffee Roaster.The data protection guidelines related to data management are continuously available at www.pickies.hu/adatkezelesi-tajekoztato.Herz New York Coffee Roasters The right to change this information at any time is reserved. Of course, the audience will be informed in due time about any possible changes. If you have any questions related to this statement, please write to us, and our colleague will answer your question.Herz New York Coffee RoastersCommitted to protecting the personal data of its customers and partners, it considers it a top priority to respect the informational self-determination rights of its customers.Herz New York Coffee RoastersPersonal data is handled confidentially and all necessary security, technical, and organizational measures are taken to ensure the security of the data.Herz Vanilla Hungary Ltd.. it describes its data management practices below.

2 Data of the data controller

If you would like to contact our company, you can reach the data controller at sales@herzcoffee.com email address.
TheHerz New York Coffee RoastersAll emails and personal data received will be kept until the data provider requests deletion.
Name:Herz Vanilla Hungary Ltd(hereinafter Herz New York Coffee Roasters)
Headquarters: 1125 Budapest, Mátyás király út 36/A
Company registration number:01 09 330371
Tax number:26527062-2-43
email: sales@herzcoffe.com

Data Protection Officer


Considering the provisions of the GDPRHerz New York Coffee RoastersThe appointment of a data protection officer is not mandatory.Herz New York Coffee Roasters Moreover, it is not considered a public authority or a body performing a public task.Herz New York Coffee Roasters Activities do not include any operation that requires the regular and systematic, extensive observation of the data subject.Herz New York Coffee Roasters does not handle special data, nor personal data related to decisions on criminal liability and criminal offenses.

The scope of processed personal data



3.1 Technical specifications


AHerz New York Coffee RoastersThe service selects and operates the information technology tools used in the processing of personal data in a way that ensures that the processed data: - is accessible to authorized persons (availability); - its authenticity and authentication are ensured (data authenticity); - its integrity can be verified (data integrity); - is protected against unauthorized access (data confidentiality).Herz New York Coffee RoastersThe data is protected against unauthorized access, alteration, transmission, disclosure, deletion or destruction, as well as accidental destruction.Herz New York Coffee RoastersTechnical, organizational, and organizational measures ensure the security of data processing, providing a level of protection appropriate to the risks associated with data processing.Herz New York Coffee RoastersDuring data processing, it preserves: - confidentiality: protects the information so that only those who are authorized can access it; - integrity: protects the accuracy and completeness of the information and the processing method; - availability: ensures that when the authorized user needs it, they can actually access the desired information, and the tools related to this are available.

Cookies


3.2.1 The role of cookies


Cookies collect information about visitors and their devices; - they remember visitors' individual settings, which can be used, for example, when using online transactions, so they do not have to be retyped; - they facilitate the use of the website; - they provide a quality user experience. For personalized service, a small data package, called a cookie, is placed on the user's computer and read back during later visits. If the browser sends back a previously saved cookie, the cookie handler service provider may link the user's current visit to previous ones, but only in terms of its own content.

3.2.2 Absolutely necessary, session cookies


The purpose of these cookies is to allow visitors to browse the site smoothly and seamlesslyHerz New York Coffee RoastersUsers can use the website's functions and the services available there. The validity period of these types of cookies lasts until the end of the session (browsing), and this type of cookies is automatically deleted from the computer or other device used for browsing when the browser is closed.

3.2.3 Third-party cookies placed by third parties (analytics)


TheHerz New York Coffee RoastersThe website also uses Google Analytics as a third-party cookie. By using the statistical service of Google Analytics, information is collected about how visitors use websites. The data is used for website development and improving user experience. These cookies also remain on the visitor's computer or other device used for browsing until they expire, or until the visitor deletes them.

3.3 Data related to online orders


- Last name - required
- First name - required
- Shipping address details - must be filled out
- Email address - required
- Phone number - must be filled out
- Billing address - required
- Billing name - must be filled out

3.4 Data related to newsletters

First name
- Email address
- Acceptance of this Privacy Policy
Consent to receiving marketing emails

The purpose, method, and legal basis of data processing


4.1 General data management guidelines


TheHerz New York Coffee RoastersData processing activities are based on voluntary consent and legal authorization. In the case of data processing based on voluntary consent, data subjects can withdraw their consent at any stage of data processing. In certain cases, the processing, storage, and transmission of certain data are mandatory by law, of which we inform our customers separately. We draw attentionHerz New York Coffee RoastersAttention data providers, if you do not provide your own personal data, it is the data provider's responsibility to obtain the consent of the person concerned.

The principles of data management are in line with the current data protection laws, especially with the following:

- Act CXII of 2011 - on informational self-determination and freedom of information (Info Act);
- Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, GDPR);
- Act V of 2013 - the Civil Code (Ptk.); - Act C of 2000 - on Accounting (Accounting Act);
- Act LIII of 2017 - on the prevention and combating of money laundering and terrorist financing (Pmt.);
- Act CCXXXVII of 2013 - on credit institutions and financial enterprises (Hpt.).

6 The physical storage locations of the data

Your personal data (meaning the data that can be associated with you) may be processed by us in the following ways: on the one hand, technical data related to the computer, browser, internet address, and visited pages you use in connection with maintaining the internet connection are automatically generated in our computer system. On the other hand, you can also provide your name, contact information, or other data if you wish to establish personal contact with us during the use of the website. The data recorded technically during the operation of the system: the data of the user's logging computer generated during browsing and which areHerz New York Coffee RoastersThe system records technical processes automatically. The data recorded automatically by the system at entry and exit without the separate declaration or action of the person concerned is logged automatically. This data cannot be linked to other personal user data, except in cases required by law.

7 Rights of the Data Subject and Remedies


The data subject may request information about the processing of their personal data, as well as request the correction of their personal data, and - except for mandatory data processing - deletion, withdrawal, exercise data portability and objection rights in the manner indicated at the time of data collection, or through the contact details of the data controller above.

7.1 Right to information


TheHerz New York Coffee RoastersTake appropriate measures to provide data subjects with all the information referred to in Articles 13 and 14 of the GDPR, as well as all information according to Articles 15-22 and 34, in a concise, transparent, understandable, and easily accessible form, clearly and understandably formulated.

7.2 The right to access


The data subject is entitled to receive feedback from the data controller as to whether the processing of their personal data is in progress, and if such data processing is in progress, they are entitled to access the personal data and the following information: the purposes of the data processing; the categories of personal data concerned; the recipients or categories of recipients to whom the personal data have been or will be disclosed, including specifically recipients in third countries or international organizations; the envisaged period for which the personal data will be stored; the right to rectification, erasure, or restriction of processing and the right to object; the right to lodge a complaint with the supervisory authority; information about the data sources; the fact of automated decision-making, including profiling, and meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject. The data controller shall provide the information within one month of the request being made.

7.3 Right of rectification


The person concerned may request theHerz New York Coffee RoastersCorrecting inaccurate personal data managed by us and supplementing incomplete data relating to you.



7.4 Right to deletion


The data subject is entitled to requestHerz New York Coffee RoastersWithout undue delay, delete the personal data concerning: - the personal data are no longer necessary for the purposes for which they were collected or otherwise processed; - the data subject withdraws the consent on which the processing is based, and there is no other legal ground for the processing; - the data subject objects to the processing and there are no overriding legitimate grounds for the processing; - the personal data have been unlawfully processed; - the personal data must be erased to comply with a legal obligation under Union or Member State law to which the controller is subject; - the personal data have been collected in relation to the offer of information society services. Deletion of data is not possible if processing is necessary: for the exercise of the right to freedom of expression and information; for compliance with a legal obligation that requires the processing of personal data applicable to the controller under Union or Member State law, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller; for reasons of public interest in the area of public health, or for archival, scientific, historical research, or statistical purposes, in the public interest; or for the establishment, exercise, or defense of legal claims.

7.5 Right to restriction of processing


At the request of the person concernedHerz New York Coffee RoastersLimit data processing if any of the following conditions are met: - the data subject disputes the accuracy of the personal data, in which case the limitation applies for the period allowing the verification of the accuracy of the personal data; - the data processing is unlawful, and the data subject opposes the deletion of the data, instead requesting the restriction of their use; - the data controller no longer needs the personal data for the purposes of processing, but the data subject requires them for the submission, enforcement, or defense of legal claims; or - the data subject has objected to the data processing; in this case, the limitation applies until it is determined whether the legitimate grounds of the data controller override those of the data subject. If data processing is restricted, personal data may only be processed with the consent of the data subject, or for the submission, enforcement, or defense of legal claims, or to protect the rights of a natural or legal person, or for reasons of important public interest of the Union or a Member State, except for storage.

7.6 Right to data portability


The data subject is entitled to receive the personal data concerning him or her, which he or she has provided to the data controller, in a structured, commonly used, machine-readable format, and have the right to transmit those data to another data controller.



7.7 Right to protest


The data subject is entitled to object at any time to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller, or for the purposes of the legitimate interests pursued by the data controller or a third party, including profiling based on those provisions. In the event of objection, the data controller shall no longer process the personal data unless there are compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the data subject or for the establishment, exercise, or defense of legal claims.

Automated decision-making in individual cases, including profiling


The data subject is entitled not to be subject to a decision based solely on automated processing – including profiling – which would have legal effects on them or similarly significantly affect them.

7.9 Right of withdrawal


The data subject is entitled to withdraw their consent at any time.

7.10 Right to appeal to the court


In case of violation of their rights, the data subject may turn to court against the data controller. The court shall proceed with the case out of turn.

7.11 Data protection authority procedure


Complaints can be filed with the National Authority for Data Protection and Freedom of Information:

- Name: National Authority for Data Protection and Freedom of Information
- Headquarters: 1125 Budapest, Szilágyi Erzsébet fasor 22/C.
- Mailing address: 1530 Budapest, P.O. Box: 5.
- Phone: 0613911400 - Fax: 0613911410
- Email: ugyfelszolgalat@naih.hu
- Website: http://www.naih.hu

8 Other provisions


Information on data processing not listed in this information sheet will be provided at the time of data collection. We inform our customers that the court, the prosecutor's office, the investigative authority, the administrative authority, the National Authority for Data Protection and Freedom of Information, the Hungarian National Bank, and other bodies authorized by law may contact the data controller to provide information, disclose data, transfer data, or make documents available.Herz New York Coffee RoastersAuthorities - if the authority has specified the exact purpose and scope of the data - shall only disclose personal data to the extent necessary to achieve the purpose of the request.