Privacy Policy
Acceptance date: 2024-04-23
Data Controller
Name: Pit Box Kft.
Registered office: 2600 Vác, Rózsa utca 3/A 1em. 2ajt.
Postal address, complaints management: 2600 Vác, Rózsa utca 3/A 1em. 2ajt.
Email : sales@fansbrands.com
Telephone : +1 (213) 454-09-57, +44 20 4525 6774
Website : https://fansbrands.es/
Hosting service provider
Name: UNAS Online Kft.
Postal address: 9400 Sopron, Kőszegi út 14.
Email : unas@unas.hu
Phone number:
Name: Shopify Commerce Singapore Pte. Ltd.
Postal Address : 77 Robinson Road, #13-00 Robinson 77, Singapore 068896
Email :
Telephone number :
Description of the data processing activities carried out during the operation of the virtual store
This document contains all relevant information regarding data processing related to the operation of the webshop in accordance with the General Data Protection Regulation (2016/679) of the European Union (hereinafter: Regulation or GDPR) and Law CXII of 2011 (hereinafter: Privacy Act).
Information on the use of cookies
What is a cookie?
When you visit the website, the Data Controller uses cookies. A cookie is a packet of information consisting of letters and numbers that our website sends to your browser to save certain settings, facilitate your use of our website, and help us collect relevant statistical information about our visitors.
Some cookies do not contain personal information and are not suitable for identifying individual users. However, some cookies contain a unique identifier, i.e., a randomly generated secret numerical sequence, which will be stored on your device and thus ensure your identification. The operating life of each cookie is included in the corresponding description.
Legal background and legal basis for cookies:
The legal basis for the processing is your consent in accordance with Article 6(1)(a) of the Regulation.
Main characteristics of the cookies used by the website: Strictly necessary cookies:
If you do not accept the use of cookies, some functions will not be available to you.
Strictly necessary cookies: These cookies are essential for the use of the website and enable the use of basic website functions. Without these cookies, several website functions will not be available to you. The lifespan of these cookies is limited solely to the duration of the session.
Session cookies : These cookies store the user's location, browser language, and payment currency. They last until the browser is closed, or for a maximum of 2 hours.
Age-restricted content cookies: These cookies record the fact that you have approved age-restricted content and that the user is over 18 years old. Their lifespan lasts until the browser is closed.
Recommended product cookies: These cookies record the list of products intended for recommendation, using the "Recommend to a friend" feature. They have a 60-day shelf life.
Mobile version , design cookies : Detects the device used by the visitor and switches to full mobile view. Their lifetime is 365 days.
Cookie Acceptance: By accessing the site, you accept the cookie storage declaration in the corresponding window. Cookies last 365 days.
Exit Cookie #2: Closes the visitor's session after 90 days according to option #2. Its lifetime is 90 days.
Backend ID cookies: Identifier of the backend server that serves the site. Their lifetime lasts until the browser is closed.
Statistical cookies:
Google Analytics Cookies: Google Analytics is Google's analytics tool that allows website and app owners to gain a more accurate understanding of their visitors' activities. This service may use cookies to collect information and compile statistical reports on website usage without individually identifying visitors to Google. Google Analytics primarily uses " ga" cookies. In addition to reporting statistical data relating to website usage, Google Analytics, together with the advertising cookies described above, can also be used to display more relevant ads on Google products (e.g., Google Search) and across the web.
Cookies to improve user experience: These cookies collect information about how the user uses the website, for example, which pages they visit most frequently or what error messages they receive from the website. These cookies do not collect information that identifies the visitor; in other words, they work with completely general and anonymous information. They use the data extracted from this information to improve the website's performance. The lifespan of these cookies is limited solely to the duration of the session.
Referrer cookies: These record the external websites from which the visitor arrived at the site. Their lifetime lasts until the browser is closed.
Last viewed product cookies : Records the product last viewed by the visitor. Their lifetime is 60 days.
Last viewed category cookies : Records the last viewed category. Their lifetime is 60 days.
Shopping cart cookies: These cookies record the products added to your shopping cart. They have a shelf life of 365 days.
Smart offer cookies: These cookies record the conditions for displaying smart offers (e.g., whether the visitor has previously visited the site or has placed an order). Their lifetime is 30 days.
Marketing cookies:
Google Adwords Cookies When someone visits our website, the visitor's cookie identifier will be added to the remarketing list. Google uses cookies—for example, NID and SID cookies—across Google products, for example, to personalize the ads shown in Google search. Google uses these cookies, for example, to remember your previous searches, interactions with certain advertisers' ads or search results, or visits to advertisers' websites. AdWords conversion tracking uses cookies. To track sales and other conversions resulting from advertising, cookies are stored on a user's computer when they click on the ad. Some common ways cookies are used include selecting ads based on what is relevant to the user in question, improving reporting on campaign performance, and avoiding showing ads the user has already seen.
Remarketing cookies: These cookies may appear to previous visitors or users when they browse other websites in
the Google Display Network or search for terms related to your products or services.
Facebook Pixel (Facebook Cookies) The Facebook pixel is a code that allows website conversion reporting, target audiences, and detailed analytics for website owners. The Facebook pixel allows website visitors to view personalized ads on the Facebook platform. You can view Facebook's privacy policy here: https://www.facebook.com/privacy/explanation
You can find more information about deleting cookies at the following links:
Internet Explorer: http://windows.microsoft.com/en-us/internet-explorer/delete-manage-cookies#ie=ie-11
Firefox: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer
Mozilla: https://support.mozilla.org/hu/kb/weboldalak-altal-elhelyezett-sutik-torlese-szamito
Safari: https://support.apple.com/guide/safari/manage-cookies-and-website-data-sfri11471/mac
Chrome: https://support.google.com/chrome/answer/95647
Edge: https://support.microsoft.com/hu-hu/help/4027947/microsoft-edge-delete-cookies
Data processed for the purposes of the conclusion and execution of the contract
In order to conclude and execute the contract, several data processing situations may occur. We inform you that data processing related to claims management and administration related to warranty rights will only be carried out if you exercise one of these rights.
If you do not purchase through the online store, but instead arrive only as a visitor, the provisions regarding data processing for marketing purposes may apply to you if you give us your consent to do so.
The data processing activities for the purpose of concluding and executing the contract in detail are:
Contact us
If, for example, you contact us by email, contact form, or phone to inquire about a product, prior contact is not required; you can order from the webshop at any time without prior contact.
Data processed
The data you provide when contacting us.
Data processing period
We only process data until the end of the contact.
Legal basis for data processing
Your voluntary consent given to the data controller by contacting us. [Data processing pursuant to Article 6(1)(a) of the Regulation].
Registration on the website
By storing the data provided during registration, the data controller can provide a more convenient service (for example, the data subject will not have to provide their data every time they make a purchase on the site). Registration is not a requirement for contracting.
Data processed
FansBRANDS® - Official store for motorsports enthusiasts
During data processing, the data controller processes your name, address, telephone number, email address, the characteristics of the products purchased, and the date of purchase.
Data processing period
FansBRANDS® - Official store for motorsports enthusiasts
Until you withdraw your consent.
Legal basis for data processing
Your voluntary consent given to the Data Controller by registering. [Data processing pursuant to Article 6(1)(a) of the Regulation].
Order processing
Data processing activities in the course of order processing necessary for the execution of the contract.
Data processed
FansBRANDS® - Official store for motorsports enthusiasts
During data processing, the data controller processes your name, address, email address, the characteristics of the purchased products, the order number, and the date of purchase.
If you place an order in the webshop, the processing and communication of data is unavoidable for the execution of the contract.
Data processing period
FansBRANDS® - Official store for motorsports enthusiasts
We process your data for 5 years in accordance with the statute of limitations under civil law.
Legal basis for data processing
The performance of the contract. [Data processing pursuant to Article 6(1)(b) of the Regulation].
Issuance of the invoice
Data processing is carried out for the purpose of issuing an invoice in accordance with the law and fulfilling the obligation to retain accounting records. Pursuant to Section 169 (1)-(2) of the Accounting Act, economic organizations must retain accounting documents that directly and indirectly support the accounting records.
Data processed
FansBRANDS® - Official store for motorsports enthusiasts
Name, address, email address, and phone number.
Data processing period
Pursuant to section (2) of Article 169 of the Accounting Act, issued invoices must be kept for 8 years from their issuance.
Legal basis for data processing
Pursuant to section (1) of Article 159 of Law CXXVII of 2007 on value added tax, the issuance of an invoice is mandatory.
and, in accordance with section (2) of section 169 of the Accounting Act, issued invoices must be kept for 8 years. [Data processing pursuant to section 6, paragraph 1, letter c) of the Regulation].
Processing of data related to the delivery of products
Data processing is carried out for the purpose of delivering the requested product.
Data processed
FansBRANDS® - Official Motorsport Fan Shop Name, address, email address, phone number.
Data processing period
FansBRANDS® - Official store for motorsports enthusiasts
Data processing is carried out for the purpose of delivering the requested product.
Legal basis for data processing
The performance of the contract. [Data processing pursuant to Article 6(1)(b) of the Regulation].
Recipients and data processors for the delivery of goods
Name of beneficiary: GLS General Logistics Systems Hungary Csomag-Logisztikai Kft.
Registered office of the beneficiary: 2351 Alsónémedi, GLS Európa u. 2.
Beneficiary's telephone number : 06-29-88-67-00
Recipient email address : info@gls-hungary.com
Beneficiary's website : https://gls-group.eu/HU/hu/home
The courier service is involved in the delivery of the ordered product based on its contract with the data controller. The courier service processes the data provided to it in accordance with the privacy policy available on its website.
Recipient Name: UPS
Registered office of the recipient: Atlanta, Egyesült Államok
Recipient's phone number : +36 1 877 0000
Recipient email address : https://www.ups.com/upsemail/input?loc=hu_HU
Beneficiary website : https://www.ups.com/
The courier service is involved in the delivery of the ordered product based on its contract with the data controller. The courier service processes the data provided to it in accordance with the privacy policy available on its website.
Warranty Claims Management
Regarding warranty and guarantee rights, we must proceed in accordance with Decree 19/2014 (IV. 29) of the Minister of National Economy, which determines how such claims are handled.
Data processed
FansBRANDS® - Official store for motorsports enthusiasts
Regarding the rights of guarantee and endorsement, we must proceed in accordance with Decree 19/2014 (IV. 29) of the Minister of National Economy.
In accordance with the Decree, we must record the claim for guarantee or endorsement that has been notified to us, in which we record:
- your name, address and statement that you consent to the processing of your data indicated in the register in accordance with the Decree,
- name and purchase price of the material object sold under the contract between us,
- date of execution of the contract,
- date of notification of the defect,
- description of the defect,
- the right you wish to assert based on your security interest, and
- the manner in which the warranty claim is processed, or the justification for the rejection of the right that is intended to be asserted on the basis of the claim.
If we take charge of the Product purchased by you, we must issue an acknowledgment of receipt, which must include the following:
- your name and address,
- data necessary for the identification of the object,
- date of receipt of the object, and
- the date on which you can accept the repaired item.
Data processing period
FansBRANDS® - Official store for motorsports enthusiasts
The company is required to keep the record of the warranty claim filed by the consumer for three years following its filing, and to submit it upon request to the supervisory authority.
Legal basis for data processing
The legal basis for data processing is compliance with the loyal obligations prescribed by Decree 19/2014 (IV. 29.) of the Minister of National Economy [paragraph (1) section 4. and paragraph (1) section 6] [Data processing in accordance with Article 6, paragraph 1, letter c), of the Regulation].
Management of other consumer protection complaints
Data processing will be carried out for the purpose of handling consumer protection complaints. If you contact us with a complaint, the processing and provision of your data will be unavoidable.
Data processed
FansBRANDS® - Official store for motorsports enthusiasts
Buyer's name, phone number, email address, and content of the complaint.
Data processing period
FansBRANDS® - Official store for motorsports enthusiasts
Consumer complaints are retained for three years, in accordance with the Consumer Protection Act.
Legal basis for data processing
You may voluntarily decide whether you wish to lodge a complaint with us, but if you do so, we are required to retain your complaint for a period of 3 years in accordance with section (7) of Article 17/A of the CLV Act 1997 on consumer protection [Data processing pursuant to Article 6(1)(c) of the Regulation].
Data processed in relation to the verifiability of consent
When you register, place an order, or subscribe to the newsletter, the IT system stores the IT data relating to your consent for proof purposes.
Data processed
FansBRANDS® - Official store for motorsports enthusiasts
The date of consent and the IP address of the data subject.
Data processing period
FansBRANDS® - Official store for motorsports enthusiasts
Due to compliance with legal provisions, consent must be able to be verified subsequently, so the data is stored for the period of limitation following the completion of data processing.
Legal basis for data processing
This obligation is prescribed by Article 7(1) of Regulation (EU) No 1999/2008 [Processing of data pursuant to Article 6(1)(c) of Regulation (EU) No 1999/2008].
Data processing for commercial purposes
Processing of data related to the sending of newsletters
Data processing is carried out for the purpose of sending newsletters.
Processed data
FansBRANDS® - Official Motorsport Fan Shop Name, address, email address, phone number.
Data processing period
FansBRANDS® - Official Motorsport Fan Shop Until the withdrawal of consent by the interested party.
Legal basis for data processing
Your voluntary consent, given to the controller by subscribing to the newsletter. [Data processing pursuant to Article 6(1)(a) of the Regulation].
Processing of data related to the sending and display of personalized ads
Data processing is carried out for the purpose of sending advertising content in accordance with the data subject's area of interest.
Data processed
FansBRANDS® - Official Motorsport Fan Shop Name, address, email address, phone number.
Data processing period
FansBRANDS® - Official store for motorsports enthusiasts
Until you withdraw your consent.
Legal basis for data processing
Your voluntary and separate consent given to the controller at the time of data collection. [Data processing pursuant to Article 6(1)(a) of the Regulation].
Remarketing
Data processing is carried out as a remarketing activity, enabled by cookies.
Data processed
FansBRANDS® - Official store for motorsports enthusiasts
Data processed by the cookies defined in the cookie notice.
Data processing period
The data storage period for a given cookie. You can find more information here:
General information about Google cookies: https://www.google.com/policies/technologies/types/
Google Analytics information: https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage?hl=hu
Information on Facebook: https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen
Legal basis for data processing
Your voluntary consent, given to the data controller by using the website. [Data processing pursuant to Article 6(1)(a) of the Regulation].
Lottery
Data processing is carried out for the purpose of conducting the draw.
Data processed
FansBRANDS® - Official store for motorsports enthusiasts
Name, email address, and phone number.
Data processing period
FansBRANDS® - Official store for motorsports enthusiasts
The data will be deleted after the draw closes, except for the winners' data, which the Data Controller is required to retain for 8 years under the Accounting Act.
Legal basis for data processing
Your voluntary consent, given to the data controller by using the website. [Data processing pursuant to Article 6(1)(a) of the Regulation].
Additional data processing activities
If the data controller intends to carry out further data processing activities, it will provide prior information on the actual circumstances of the data processing (legal background and legal basis for the data processing, scope of the data processed, period of data processing).
Recipients of personal data
Activities of data processors to store personal data
Name of the data controller: UNAS Online Kft.
Contact details of the data controller:
Telephone number of the data controller:
Email of the data controller : unas@unas.hu
Registered office of the data controller: 9400 Sopron, Kőszegi út 14.
Website of the data controller: unas.hu
The data processor stores personal data on the basis of a contract concluded with the data controller. The data processor does not have the right to access the personal data.
Name of the data processor: Shopify Commerce Singapore Pte. Ltd.
Contact details of the data controller:
Telephone number of the data controller:
Email of the data controller:
Registered office of the data controller: 77 Robinson Road, #13-00 Robinson 77, Singapore 068896
Website of the data controller: https://www.shopify.com/
The data processor stores personal data on the basis of a contract concluded with the data controller. The data processor does not have the right to access the personal data.
Activities of data processors related to the sending of newsletters
Name of the company that manages the UNAS Online Kft. newsletter system .
Registered office of the company that manages the newsletter system: 9400 Sopron, Kőszegi út 14.
Telephone number of the company that manages the newsletter system :
Email address of the company that manages the newsletter system: unas@unas.hu
Website of the company that manages the newsletter system: unas.hu
The data processor participates in the sending of newsletters under a contract concluded with the data controller. During this participation, the data controller processes the name and address of the data subject to the extent necessary for the sending of newsletters.
Activities of data processors related to the sending of newsletters
Name of the company that manages the newsletter system: ActiveCampaign
Headquarters of the company that manages the newsletter system: 150 North Michigan Avenue, Suite 1230, Chicago, IL 60601, United States
Telephone number of the company that manages the bulletin system: +1 (773) 904-0945
Email address of the company that manages the newsletter system : privacy@activecampaign.com
Website of the company that manages the newsletter system: https://www.activecampaign.com
The data processor participates in the sending of newsletters under a contract concluded with the data controller. During this participation, the data controller processes the name and address of the data subject to the extent necessary for the sending of newsletters.
Activities of data processors related to the sending of newsletters
Name of the company that manages the newsletter system: The seller
Registered office of the company that manages the newsletter system: Romania - Badea Cartan 66, District 2, Bucharest, Office 3, Zone II, Room 2, Bl. 40, Sc.A, Et.5, Ap.26,
Telephone number of the company that manages the newsletter system: +40724470432
Email address of the company that manages the newsletter system: iam@themarketer.com
Website of the company that manages the newsletter system: https://themarketer.com/
The data processor participates in the sending of newsletters under a contract concluded with the data controller. During this participation, the data controller processes the name and address of the data subject to the extent necessary for the sending of newsletters.
Activities of data processors related to the sending of newsletters
Name of the company that manages the newsletter system: Klavyio
Registered office of the company that manages the newsletter system: 49 Southwark Bridge Rd London SE1 9HH, United Kingdom
Telephone number of the company that manages the newsletter system:
Email address of the company that manages the newsletter system : sales@klaviyo.com
Website of the company that manages the newsletter system: https://www.klaviyo.com/
The data processor participates in the sending of newsletters under a contract concluded with the data controller. During this participation, the data controller processes the name and address of the data subject to the extent necessary for the sending of newsletters.
Processing of data related to accounting
Name of the data controller: P-Kontroll Bt.
Registered office of the data controller: 2600 Vác, Pap Béla u. 10.
Telephone number of the data controller +36-27/316-210
Controller's email : konyveles@pkontroll.hu
Website of the data controller: www.pkontroll.hu
The processor participates in accounting under a written contract with the controller. In the course of such participation, the controller processes the name and address of the data subject, to the extent necessary for accounting records, for the period pursuant to Section 169 (2) of the Accounting Act and deletes them immediately thereafter.
Billing-related activities of data processors
Name of the data controller: Innovip.hu Kft.
Registered office of the controller: 6723 Szeged, Gát utca 7/B.
Telephone number of the data controller +36 20 367 6755
Email of the data controller : iroda@innovip.hu
Website of the data controller : https://www.innovip.hu/
The data processor participates in the recording of accounting documents under a written contract concluded with the controller. In the course of such participation, the data processor processes the name and address of the data subject, to the extent necessary for accounting records, for the period pursuant to Section 169 (2) of the Accounting Act and deletes them immediately thereafter.
Billing-related activities of data processors
Name of the data processor: Microsoft Dynamics 365 Business Central
Registered office of the data controller: Microsoft Building 92, NE 36th St, Redmond, WA 98052, United States
Telephone number of the data controller +1 425-882-8080
Email of the data controller:
Website of the data controller: https://www.microsoft.com
The data processor participates in the recording of accounting documents under a written contract concluded with the controller. In the course of such participation, the data processor processes the name and address of the data subject, to the extent necessary for accounting records, for the period pursuant to Section 169 (2) of the Accounting Act and deletes them immediately thereafter.
Billing-related activities of data processors
Name of the data processor: Odoo SA
Registered office of the data controller: Chaussée de Namur, 40, 1367 Grand Rosière, Belgium
Controller telephone number +32 2 616 8002 Controller email address : privacy@odoo.com Controller website : https://www.odoo.com/
The data processor participates in the recording of accounting documents under a written contract concluded with the controller. In the course of such participation, the data processor processes the name and address of the data subject, to the extent necessary for accounting records, for the period pursuant to Section 169 (2) of the Accounting Act and deletes them immediately thereafter.
Billing-related activities of data processors
Name of the data controller: Billingo Technologies Zrt.
Registered office of the data controller: 1133 Budapest, Árbóc utca 6.
Telephone number of the data controller +36-1/500-9491
Controller's email : hello@billingo.hu
Website of the data controller: https://www.billingo.hu/
The data processor participates in the recording of accounting documents under a written contract concluded with the controller. In the course of such participation, the data processor processes the name and address of the data subject, to the extent necessary for accounting records, for the period pursuant to Section 169 (2) of the Accounting Act and deletes them immediately thereafter.
Activities of data processors related to the operation of the CRM system
Name of the data controller: UNAS Online Kft.
Registered office of the data controller: 9400 Sopron, Kőszegi út 14.
Telephone number of the data controller:
Email of the data controller : unas@unas.hu
Website of the data controller: unas.hu
The data processor participates in order registration under a contract concluded with the data controller. In the course of this participation, the data controller processes the data subject's name, address, telephone number, order numbers, and dates within the civil statute of limitations.
Activities of data processors related to the operation of the CRM system
Name of the data controller: Innovip.hu Kft.
Registered office of the controller: 6723 Szeged, Gát utca 7/B.
Telephone number of the data controller +36 20 367 6755
Email of the data controller : iroda@innovip.hu
Website of the data controller: https://www.innovip.hu/
The data processor participates in order registration under a contract concluded with the data controller. In the course of this participation, the data controller processes the data subject's name, address, telephone number, order numbers, and dates within the civil statute of limitations.
Activities of data processors related to the operation of the CRM system
Name of the data controller: easySales
Registered office of the data controller: Locotenent Stefan Marinescu 9, Emelet 6, Bukarest, Romania
Controller telephone number +36213007056 Controller email address : contact@easy-sales.com Controller website : https://easy-sales.com/hu
The data processor participates in order registration under a contract concluded with the data controller. In the course of this participation, the data controller processes the data subject's name, address, telephone number, order numbers, and dates within the civil statute of limitations.
Activities of data processors related to the operation of the CRM system
Name of the data controller: KOMPaaS.tech Kft
Registered office of the controller: 1114 Budapest, Kemenes utca 8. félemelet 3. - Magyarország
Telephone number of the data controller +36 1 4900999
Data controller email : support@mcntele.com
Website of the data controller: https://kompaas.hu/
The data processor participates in order registration under a contract concluded with the data controller. In the course of this participation, the data controller processes the data subject's name, address, telephone number, order numbers, and dates within the civil statute of limitations.
Activities of data processors related to the operation of the CRM system
Name of the data controller: VIVnetworks.com sro
Registered office of the controller: Jungmannovo náměstí 18, 110 00 Prague 1
Telephone number of the data controller +420 734 447 050
Data controller email : podpora@vivnetworks.com
Website of the data controller: https://www.vivnetworks.com/hu/
The data processor participates in order registration under a contract concluded with the data controller. In the course of this participation, the data controller processes the data subject's name, address, telephone number, order numbers, and dates within the civil statute of limitations.
Activities of data processors related to the operation of the CRM system
Name of the data controller SC DECATHLON SRL
Registered office of the data processor: Militari Shopping, Bulevardul Iuliu Maniu 546-560, București 060032 - Romania.
Telephone number of the data controller +40 21 408 5000
Data controller email : contact@decathlon.ro
Website of the data controller : https://www.decathlon.ro/
The data processor participates in order registration under a contract concluded with the data controller. In the course of this participation, the data controller processes the data subject's name, address, telephone number, order numbers, and dates within the civil statute of limitations.
Activities of data processors related to the operation of the CRM system
Name of the data controller: Amazon.es
Registered office of the data controller 410 Terry Ave N, Seattle 98109, WA
Telephone of the data controller +1 (206) 266-4064
Controller email : copyright@amazon.com
Website of the data controller : https://www.amazon.com/
The data processor participates in order registration under a contract concluded with the data controller. In the course of this participation, the data controller processes the data subject's name, address, telephone number, order numbers, and dates within the civil statute of limitations.
Activities of data processors related to the operation of the CRM system
Name of the data controller: Pepita Group Zrt.
Registered office of the controller: 5520 Szeghalom, belterület hrsz 2619/58
Telephone number of the data controller +36 1 510 07 60
Email of the data controller: segitunk@pepita.hu
Website of the data controller: https://pepita.hu/
The data controller participates in order registration under a contract concluded with the data controller. In the course of this participation, the data controller processes the name, address, telephone number, order
numbers and dates, within the civil limitation period.
Processing of data related to online payment
Name of the data controller: Worldline SA
Registered office of the data controller: Tour Voltaire, 1 Place des Degrés, CS 81162, 92059 Paris la Défense Cedex
Telephone number of the data controller:
Email of the data controller:
Website of the data controller: https://www.six-payment-services.com/
The online payment service provider participates in the processing of online payments under a written contract concluded with the data controller, for the purposes of which a data transfer is made to the online payment service provider during the purchasing process. During this participation, the online payment service provider processes the data subject's name and billing address, as well as the order number and date, in accordance with its own privacy policy.
Purpose of the data transfer: To provide the online payment service provider with the transaction data necessary for the payment transaction initiated with the online payment service provider and related to the purchase.
Legal basis: Performance of the contract concluded between you and the controller pursuant to Article 6(1)(b) of the Regulation, which includes payment by the buyer and for which, in the case of online payment, data transfer is required pursuant to this section.
Name of the data controller: Stripe
Registered office of the data controller: 354 Oyster Point Boulevard, South San Francisco, CA 94080
Telephone number of the data controller: 888-926-2289
Email of the data controller:
Website of the data controller: https://stripe.com/
The online payment service provider participates in the processing of online payments under a written contract concluded with the data controller, for the purposes of which a data transfer is made to the online payment service provider during the purchasing process. During this participation, the online payment service provider processes the data subject's name and billing address, as well as the order number and date, in accordance with its own privacy policy.
Purpose of the data transfer: To provide the online payment service provider with the transaction data necessary for the payment transaction initiated with the online payment service provider and related to the purchase.
Legal basis: Performance of the contract concluded between you and the controller pursuant to Article 6(1)(b) of the Regulation, which includes payment by the buyer and for which, in the case of online payment, data transfer is required pursuant to this section.
Trusted Store Program (Megbízható lock)
For the purpose of operating the Megbízható Bolt program of www.arukereso.hu (Online Comparison Shopping Kft., 1074 Budapest, Rákóczi út 70-72, VAT number: 24868291-2-42, company registration number: 01-09-186759), the buyer's email address and the name of the purchased product will be transmitted to arukereso.hu . The purpose of the data transfer is to solicit and display customer feedback. Online Comparison Shopping Kft. processes the transferred personal data in accordance with the Data Processing and Privacy Policy of www.arukereso.hu. With regard to the data transferred in this context, Online Comparison Shopping Kft. is the controller.
Transfer of data to third countries
FansBRANDS® - Official Motorsport Store
The following processor is located outside the European Union and processes data outside the European Union. The data processor is a member of the Privacy Shield List, which means it guarantees that data is processed with the safeguards provided in the European Union. You can find more information here: www.privacyshild.gov
The Rocket Science Group LLC (MailChimp)
Cím: 1 North Dearborn Street, 5th floor Chicago, IL 60602 https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active
Your rights during data processing
During the period of data processing, you have the following rights in accordance with the provisions of the Regulation:
right to withdraw consent
access to personal data and information related to data processing right to rectification
limitation of data processing, right to deletion
right to object
right to data portability.
If you wish to exercise your rights, this will require your identification, and the Data Controller must contact you. Therefore, for identification purposes, you will need to provide personal data (but only your data, which has already been processed by the Data Controller, may serve as a basis for identification). Your complaints regarding data processing will be available in your email account within the timeframe specified in this Privacy Notice regarding complaints. If you have been our customer and wish to identify yourself for the purposes of processing complaints or the warranty management process, please also enter your order number to identify yourself. This way, we can identify you as our customer.
The data controller will respond to complaints regarding data processing within a maximum period of 30 days.
Right to withdraw consent
You have the right to withdraw your consent to data processing at any time, in which case the data you provided will be deleted from our system. However, please note that in the case of an order that has not yet been placed, withdrawing your consent may result in us being unable to complete the delivery of your order. Furthermore, if the purchase has already been completed, based on accounting regulations, we cannot delete the invoice-related date from our systems. If any amount remains outstanding from you, we may process your data even if you withdraw your consent based on our legitimate interest in debt collection.
Access to personal data
You have the right to obtain confirmation from the controller as to whether your personal data is being processed and, where that is the case, you have the right to:
to obtain access to the personal data processed, and
to receive information from the data controller about the following: the purposes of data processing;
the categories of your personal data processed;
information about the recipients or categories of recipients to whom the personal data have been or will be disclosed;
the planned period for the processing of personal data or, if this is not possible, the criteria used to determine this period;
the existence of your right to request the data controller to rectify or delete personal data
data or the restriction of processing of personal data concerning you, or the right to object to such processing; the right to lodge a complaint with a supervisory authority;
where the personal data are not collected from the data subject, any available information as to their source;
the existence of automated decision-making, including profiling, and, at least in those cases, meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for you.
The exercise of these rights may be intended to establish and verify the legality of data processing. Therefore, in the case of multiple requests for information, the data controller may charge a fair fee in exchange for providing the information.
The data controller guarantees access to your personal data by sending you the processed personal data and information after your identification by email. If you have registered, we provide you with access so you can view and verify your personal data by logging into your user account.
Please indicate in your request that you are requesting access to personal data or information about data processing.
Right of rectification
You have the right to obtain from the data controller without delay the rectification of inaccurate personal data concerning you.
Right to restriction of data processing
You have the right to obtain from the data controller the restriction of processing where one of the following applies:
If you contest the accuracy of the personal data, for a period enabling the controller to verify the accuracy of the personal data, and if the accuracy of the data can be determined immediately, no restriction will apply;
the processing of the data is unlawful and you oppose the erasure of the personal data for any reason (for example, because the data is necessary for the possible filing of a legal claim) and request the restriction of their use instead;
the controller no longer needs the personal data for the purposes of the processing, but the data subject requires them for the establishment, exercise or defence of legal claims in legal proceedings, or
If you have objected to data processing, but the legitimate interests of the controller also serve as a basis for the processing, the processing shall be restricted until it can be determined whether the legitimate grounds of the controller override the legitimate grounds stated by you.
Where processing has been restricted, such personal data, with the exception of storage, will only be processed with your consent or for the establishment, exercise or defence of legal claims in legal proceedings or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or a Member State.
The data controller will inform you before the processing restriction is lifted (at least 3 working days before the restriction is lifted).
Right to be forgotten
You have the right to obtain from the data controller the erasure of personal data concerning you without undue delay where one of the following grounds applies:
the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed by the controller;
you withdraw the consent on which the processing is based and there is no other legal basis for the processing;
you object to processing based on legitimate interest and there are no overriding legitimate grounds (i.e. legitimate interest) for the processing,
the personal data have been unlawfully processed by the data controller when this has been determined on the basis of the complaint,
Personal data must be erased in order to comply with a legal obligation under Union or Member State law to which the controller is subject.
Where the controller, relying on any legal ground, has made personal data public and is obliged to erase the personal data for any of the above reasons, the controller, taking into account available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform other controllers processing the personal data that you have requested erasure by such controllers of any links to, or copy or replication of, those personal data.
Deletion shall not apply to the extent that processing is necessary:
for exercising the right to freedom of expression and information;
or compliance with a legal obligation requiring processing under Union or Member State law to which the controller is subject (data processing in the context of invoicing is one such case, as the retention of the invoice is prescribed by law), or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
for the establishment, exercise or defense of legal claims (for example, if the controller has a legal claim against you that has not yet been settled, or there is a legal process for handling that claim).
Right to object
You have the right to object at any time to the processing of your personal data based on legitimate interests, based on grounds relating to your particular situation. In such a case, the data controller will cease processing the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the data subject, or for the establishment, exercise, or defense of legal claims.
When personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing, including profiling to the extent that it is related to such direct marketing. If you object to processing for direct marketing purposes, the personal data will no longer be processed for such purposes.
Right to data portability
If data processing is carried out automatically or if data management is based on your voluntary consent, you have the right to request from the data controller the data you have provided, which the data controller will send to you in XML, JSON or CSV format and, if technically feasible, you may request that the data controller forward the data in this format to another controller.
Automated decision-making
You have the right not to be subject to a decision based solely on automated processing (including profiling) which produces legal effects concerning you or similarly significantly affects you. In these cases, the data controller shall implement appropriate measures to safeguard the data subject's rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express his or her point of view, and to contest the decision.
The foregoing shall not apply if the decision:
is necessary for the conclusion and performance of the contract between you and the Data Controller;
is authorized by Union or Member State law to which the controller is subject and which also provides
appropriate measures to safeguard your rights and freedoms and legitimate interests; or is based on your explicit consent.
Notification to the Data Protection Registration System
Pursuant to the Privacy Act, the Data Controller must report certain data processing activities to the data protection registration system. This reporting obligation expired on May 25, 2018.
Registration number with NAIH (Hungarian National Authority for Data Protection and Freedom of Information) before May 25, 2018:
Data protection registration number : NAIH - 103878 /2016
Data security measures
The Data Controller declares that it has adopted appropriate security measures to protect personal data against unauthorized access, alteration, transmission, dissemination, deletion, or destruction, as well as against accidental destruction and damage, and against inaccessibility due to changes in the technology used.
The data controller will use its organizational and technical efforts to ensure that its data processors also adopt appropriate security measures when working with your personal data.
Remedies
If, in your opinion, the data controller has violated a legal provision relating to data processing or has failed to comply with any of your requests, in order to put an end to the alleged unlawful data processing, you may initiate the investigation procedure of the Hungarian National Authority for Data Protection and Freedom of Information (postal address: H-1363 Budapest, Pf. 9., email: ugyfelszolgalat@naih.hu, phone numbers: +36 (30) 683-5969 +36 (30) 549-6838;
+36 (1) 391 1400).
We also inform you that, in the event of a violation of the legal provisions regarding data processing, or if the data controller has failed to respond to any of your requests, you may file a civil lawsuit against the data controller before the courts.
Modification of the privacy policy
The data controller reserves the right to modify this data management information in a manner that does not affect the purpose and legal basis of the data processing. By using the website after the modification comes into effect, you accept the modified Privacy Notice.
If the data controller wishes to carry out other data processing in relation to the collected data for a purpose other than that for which it was collected, it will inform you, before starting any other data processing, of the purpose of the data processing and information on the following:
the planned period for the processing of personal data or, if this is not possible, the criteria used to determine this period;
the existence of your right to request from the data controller access to, rectification or erasure of personal data, or restriction of processing of personal data concerning you, or to object to such processing in the case of data processing based on legitimate interest, or to request data portability in the case of data processing based on consent or contractual relationship;
In the case of data processing based on consent, you may withdraw your consent at any time, the right to lodge a complaint with a supervisory authority;
Whether the provision of personal data is based on legislation or a contractual obligation or is a prerequisite for entering into a contract, as well as whether you are obliged to provide personal data, and what possible consequences may result from not providing it;
the existence of automated decision-making, including profiling, and, at least in those cases, meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for you.
Data processing may only begin at that time, and in the case of data processing based on consent, in addition to providing the aforementioned information, your consent for data processing will be required.