Privacy Policy
Data manager name and contact details
- Name of the data controller: Lufi Expressz Kft. (Hereinafter Data Management)
- Headquarters of the data controller: 1119 Budapest, Andor u. 34.
- Data Controller Location: 8093 Lovasberény, Lujza major 3.
- The Data Controller Mailing Address: 8093 Lovasberény, Lujza major 3.
- Data Controller Tax Number: 14795352-2-43
- Telephone number of the controller: +36 20 924 1071
The email address of the controller: info@lufiexpressz.com
The legal background, legal basis, purpose of the data management of the website, the scope of the personal data processed and the duration of the data management
Legal background and legal basis for data processing:
The background of data management is based on the 2011 Act CXII on Information Freedom of Information and Freedom of Information. (Infotv.) and Act C of 2000 on Accounting (Law on Accounting).
The legal basis for data processing is Infotv. In accordance with Section 5 para. (1) (a), your consent and, in the case of withdrawal of your contribution, the Infotv. Section 6 (5) (a) of the Act on the Data Handler fulfills the legal obligation set out in the Accounting Act. As well as Regulation (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL.
The purpose of data management is:
Issue an invoice complying with the law and fulfillment of the obligation to keep accounting records. The Under Article 169 (1) – (2) of the Companies Act, the companies must keep an accounting record directly and indirectly supporting the accounting records.
Scope of managed data:
Given name, surname
Purpose: It is necessary to get in touch, make a purchase and issue a regular invoice.
User name
Purpose: Make secure login to your user account.
Address (country, county, city, postal code)
Purpose: To issue a regular invoice and to specify a shipping address.
e-mail address
Purpose: Keep in touch.
phone number
Purpose: Keep in touch, keep in touch with billing or shipping issues more effectively.
Password
Purpose: Make secure login to your user account.
Duration of data handling:
The invoices issued are set out in the Articles of Association. Pursuant to Article 169 (2), for eight years from the date of issue of the invoice. Please note that, if you withdraw your consent to the issuance of your account, the Data Manager is the Infotv. (6) (5) (a), he / she is entitled to retain his or her personal data during the issuance of the invoice for 8 years.
Data Processors:
Hosting Provider Data:
Name: INNOVA NET-COM KFT.
Headquarters: 8152 Kőszárhegy, Táncsics Mihály utca 8.
Phone: +36 70 941 9619
e-mail address: info@incsystem.hu
Website Operator:
Name: Lufi Expressz Kft.
Head office: 1119 Budapest, Andor u. 34.
Phone number: +36 20 924 1071
e-mail address: info@incsystem.hu
Accounting Data Processor:
Name: Szabolcs és Társa Könyvelő és Adótanácsadó Kft.
Headquarters: 8000 Székesfehérvár, Kelemen Béla u. 28th
Phone number: +36 22 505 655
e-mail address:
The Data Processing Machine participates in the accounting documents of the Accounting Document by means of a written contract with the Data Manager. In doing so, the Data Processor shall use the name and address of the data subject to the extent required for the accounting records, 169 (2), then immediately canceled.
Data processing activity related to freight transport
Name of the data processor: GLS General Logistics Systems Hungary Csomag-Logisztikai Kft.
Head of data processing company: 2351 Alsónémedi, Európa u. Second
Telephone number of the data processor: Phone number: +36 1 802 0265
E-mail of the data processor: info@gls-hungary.com
The Data Processor participates in the delivery of the ordered goods according to a written contract with the Data Manager. In doing so, the Data Processor can handle the buyer’s name, address and telephone number for the duration of delivery of the ordered goods, and then delete it immediately.
Data management related to freight
Legal background and legal basis for data processing:
The background of data management is based on the 2011 Act CXII on Information Freedom of Information and Freedom of Information. (Infotv.) regulations. The legal basis for data processing is Infotv. In accordance with § 5 (1) (a).
The purpose of data management is:
In the case of freight transport, the purpose of the data management is to deliver the goods ordered to you according to your needs, with the help of our contract partner.
Scope of managed data:
Name, address, e-mail address, telephone number
Duration of data handling:
The Data Manager handles the data for the duration of delivery of the ordered goods.
Data management for newsletters
Legal background and legal basis for data processing:
The background of data management is based on the 2011 Act CXII on Information Freedom of Information and Freedom of Information. (Infotv.) and the Act XLVIII of 2008 on the Fundamental Terms and Limitations of Commercial Advertising Activity. (Grt.). The legal basis for data processing is Infotv. Article 5 (1) (a) and Article 3 6 (1) – (2) of your agreement.
The purpose of data management is:
The purpose of data management is to get acquainted with the latest and best deals and deals. We will not transfer or transfer your personal information.
Scope of managed data:
First name, last name, e-mail address
Duration of data handling:
Until the consent of the person concerned is withdrawn.
Data handling associated with registration
Legal background and legal basis for data processing:
The background of data management is based on the 2011 Act CXII on Information Freedom of Information and Freedom of Information. (Infotv.) and Act V of 2013 on the Civil Code (CC). The legal basis for data processing is Infotv. In accordance with § 5 (1) (a) of your agreement.
The purpose of data management is:
By storing the data you have entered during registration, Data Handler can provide a more convenient service (for example, you will not need to re-enter your data for a new purchase)
Scope of managed data:
In the course of data processing, the Data Manager handles your name, address, telephone number, e-mail address, the characteristics of the product purchased and the date of purchase.
Duration of data handling:
Until its consent is withdrawn.
Additional data management
If the Data Controller wishes to perform further data processing, he or she shall provide prior information on the relevant circumstances of the data handling (legal background and legal basis of data management, purpose of data management, scope of data processed, data management duration).
We will inform you that the Data Controller’s statutory written requests for data must be met by the Data Manager. The Data Handler is responsible for transmitting data to Infotv. (2) – (3) of the Companies Act, which registers (which authority, which personal data, on what legal basis, when the data controller has been transmitted), whose contents the Data Controller provides upon request, unless his / her information is excluded by law.
Data security measures
The Data Controller declares that he has taken appropriate security measures to protect personal information against unauthorized access, alteration, transmission, disclosure, deletion or destruction, as well as unintentional access and damage resulting from a change in the technique used.
About Cookies
What is a cookie?
The Data Handler uses cookies (cookies) when visiting the site. The cookie is a font and number information package that our site sends to your browser with the purpose of saving certain settings, facilitating the use of our site and contributing to collecting some relevant, statistical information about our visitors. Cookies do not contain personal information and are not suitable for individual user authentication. Cookies often contain a unique identifier – a secret, randomly generated number line – that your device stores. Some cookies will be discontinued after the site is closed and some will be stored for a longer period of time on your computer.
The legal background and legal basis of cookies:
The background of data management is based on the 2011 Act CXII on Information Freedom of Information and Freedom of Information. (Infotv.) and electronic commerce services and information services related to information society services (CVIII. are provisions of the law. The legal basis for data processing is Infotv. In accordance with § 5 (1) (a).
The main features of cookies used by the website:
Google Analytics cookie: Google Analytics is a Google Analytics tool that helps website and app owners to get a better picture of their visitors‘ activities. The service may use cookies to collect information and report on the statistics about the use of the site without individually identifying visitors to Google. The main cookie used by Google Analytics is the „__ga“ cookie. In addition to reporting from site usage statistics, Google Analytics can also be used to display more relevant ads in Google products (such as Google Search) and across the web, along with some of the advertising cookies described above.
Cookies strictly required to operate: These cookies are essential to use the website and allow you to use the basic features of the web site. In the absence of these, many features of the site will not be available for you. Cookies of this type are limited to the duration of the session.
Cookies to improve user experience: These cookies collect information about the user’s website usage, such as the most frequently visited pages or the error message from the web site. These cookies do not collect information that identifies the visitor, that is, they are working with generic, anonymous information. The data obtained from these are used to improve website performance. Cookies of this type are limited to the duration of the session.
Cookie Accept Cookie: When you arrive at the site, you agree to the cookie storage statement in the warning window. It lasts 365 days.
For more information about deleting cookies, see the links below:
If you are using a mobile phone (phone or tablet), check the following pages:
Rights that You Have in Data Management
Within the duration of the data handling, you are entitled to:
- the right to information,
- the right to correct the data,
- the right to delete data,
- the right to block data,
- the right to protest.
You may request information from the Data Controller regarding the handling of your personal data within the period of data handling. In the shortest possible time, but not later than 25 days after the submission of the application, the Data Controller informs you on the data processed, the purpose, the legal basis and the duration of the data processing, and in the case of data and for what purpose received or received the data.
You may request the Data Manager to correct your personal data within the time of your data processing. Your request will be processed by the Data Controller within 15 days.
You have the opportunity to request the deletion of your personal data, which the Data Manager will complete within 15 days. The right of deletion does not apply if the Data Administrator is obliged by law to store the data further, or if Infotv. In accordance with Section 6 para. (5), the Data Controller is entitled to continue handling personal data (such as billing).
You may request that the Data Controller locks out personal data if a permanent deletion of data would harm the legitimate interests of the data subject. Personal data so locked up can only be handled as long as the purpose of excluding personal data is excluded.
You may object to your personal data being handled:
If the processing or transmission of personal data is only necessary to fulfill the legal obligation of the Data Controller or to enforce the legitimate interest of the Data Controller, Data Receiver or Third Person except in the case of Mandatory Data Processing and Infotv. Article 6 (5);
if the use or transmission of personal data is done for direct business acquisition, polling or scientific research without your consent.
The Data Controller will examine the protest within the shortest time, but within 15 days of the submission of the application, make a decision on its validity and will inform you in writing of its decision. If the data controller fails to complete his or her claim for rectification, blocking or cancellation, he or she communicates, in writing or with the consent of the person concerned, within 25 days of receipt of the request the factual and legal grounds for rejecting the request for rectification, blocking or cancellation.
Remedies
If you believe that the Data Controller has violated any statutory provision on data management or has failed to comply with any of your requests, you may initiate an investigation procedure for the National Data Protection and Information Authority (address 1530 Budapest, Pf .: 5, e- mail: ugyfelszolgalat@naih.hu).
We also inform you that, in the event of a violation of the law on data management or if the Data Handler has failed to comply with any of your requests, you may contact the Data Handler.
Log in to the Data Protection Register
The Infotv. , the Data Controller must register certain data management data in the Data Protection Register.
Modify the Privacy Policy
The Data Controller reserves the right to modify this Privacy Policy. After you apply this website, you agree to the modified Privacy Policy.
Lufi Expressz Ltd. is the personal data provided during the registration and use of the Site in accordance with Act LXIII of 1992 on the Protection of Personal Data and the Publicity of Public Data. according to the provisions of the Act. Using www.lufiplaza.hu, personal data is voluntary. The purpose of data management is to fulfill the services requested on the site. Lufi Expressz Ltd. ensures the security of the data and takes technical and organizational measures against unauthorized access, alteration, transmission, disclosure, deletion or destruction as well as accidental destruction and damage. Data is not disclosed to third parties and ensures that they are not handled. Rights of the data subject and their validation
Right to information
The person concerned may request information on the processing of his or her personal data under the law. (Article 11/1 / a.)
At the request of the data subject concerned, the data controller shall provide information on the data processed by the processor or the processor he entrusts with him, the purpose of the data processing, the legal basis of the data processing, the name of the data processor, its head office and data management related activities, or have received the data. The data controller shall provide the information in writing and in a shorter form within a maximum of 30 days from the submission of the request. Informing the data subject can only be denied if the law allows. The data controller shall inform the data subject of the reasons for refusing the information. /12.-13. § /
Right to data correction and deletion
The spouse may request the rectification of his / her personal data or the deletion of his / her personal data. ( / 14th § (1) /
Personal data must be deleted if its handling is illegal; (b) the person concerned – the television. As required by Article 11 (1) (b); (c) incomplete or incorrect – and this status can not be legally corrected – provided that the termination is not excluded by law; (d) the purpose of data management has ceased or the statutory deadline for data storage has expired; (e) has been ordered by the court or by the Data Protection Commissioner. Correction and deletion shall be notified to the person concerned and all persons who have previously been transferred to data processing. Notification may be omitted if it does not prejudice the legitimate interest of the data concerned for the purpose of data handling. / 14th § § 15, /
Right to protest
The person concerned may object to the handling of his / her personal data if: (a) the processing of personal data is only necessary to enforce the right or legitimate interest of the data controller or the data exporter, unless data management is prescribed by law; (b) the use or transmission of personal data is done for direct business acquisition, polling or scientific research; c) the exercise of the right of protest is otherwise permitted by law.
The Data Controller shall, at the same time suspend the processing of data, be required to examine the protest within the shortest possible time but not later than 15 days after the submission of the application and inform the applicant in writing thereof. If the protest is warranted, the data controller shall also discontinue data processing, including further data collection and transmission, and lock the data, and inform the protest and any action taken against any person who has previously transferred the personal data involved in the protest and who are obliged to take action in order to enforce the right to protest.
If the data subject does not agree with the decision of the data controller, he or she may, within 30 days from the date of communication, apply to the court according to the law.
If you do not receive the data required to enforce the Data Accessor’s legal right because of the protests of the person concerned, you may be directed to the court against the Data Controller within 15 days from the date of notification. The data controller can also call the person concerned.
If the court rejects the request of the data sender, the data controller shall cancel the personal data of the data subject within 3 days of the delivery of the judgment. The data controller shall also be required to delete the data even if the data sender does not appear before the court within the deadline. The data controller can not delete the relevant data if the data processing is ordered by law. However, the data can not be transmitted to the data sender if the data controller agrees with the protest and the court has declared the protest legitimate. / 16 / Section A /
Right to judicial enforcement
The person concerned is violating his rights as well as the TV. 16 / A. (4), the data controller may appeal to the court. The court proceeds out of court. The data controller must demonstrate that data management is in compliance with the law. The lawsuit of the data controller’s domicile (domicile) is the lawsuit. The case may be initiated before the court of residence of the person concerned (according to the choice of the person concerned). A lawyer may also be a party to whom he or she has no legal capacity. If the court upholds the request, the data controller shall be responsible for providing information, correcting the data, canceling the automated individual decision, taking into consideration the right of protest of the person concerned, and TV. 16 / A. (4) of this Act. The court may order the disclosure of its judgment by publishing the identity of the data controller if it is required by the interests of data protection and by a greater number of rights protected by this law. / 17th § (1) /
Right to Compensation
The data controller is obliged to compensate for any damage caused to others by unlawful handling of the data concerned or breach of the technical data protection requirements. The data controller is also responsible for the damage caused by the data processor to the data subject. The data controller is exempt from liability if he or she proves that the damage was caused by an unavoidable cause outside the scope of data management. According to the law, there is no need to reimburse the damage in so far as it is from the intentional or grossly negligent conduct of the injured party. / 18th § (1) /
