Adatvédelmi nyilatkozat

1. INTRODUCTION

The operator of alx-machinery.hu  – hereinafter: Website – is ALX MACNINERY KFT. (hereinafter: Data Controller), as  Data Controller  , by publishing this Data Protection Statement and Data Management Information (hereinafter: Data Protection Statement) explains its data management principles, which the Data Controller itself recognized as binding. The Data Controller takes all reasonable measures to ensure the security of the personal data it manages.

Before using our website, please read this Privacy Statement, which contains in a clear way how we handle your personal data! In the Data Protection Declaration, the Data Controller clearly and in detail informs the data subjects about all important facts related to data management.

During the operation of the website, the Data Controller manages the data of persons registered on the site in order to provide them with appropriate services. The service provider intends to fully comply with the legal requirements for the management of personal data, in particular with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council.

This data management information sheet on the protection of personal data of natural persons and the free flow of data was prepared based on Regulation (EU) 2016/679 of the European Parliament and of the Council, taking into account the CXII of 2011. on the content of the law on the right to self-determination of information and freedom of information.

  Service Provider Details:

  • Company name: ALX MACHINERY Kft.
  • Mailing address: 1071 Budapest Dembinszky utca 10, ground floor 8
  • Phone number: +36 70 612 65 82
  • Email :info@alx-machinery.hu
  • Company registration number: 01 09 406311
  • Tax number: 32094475-2-42
  • Bank account number: K&H Bank HU34 1040 4072 5052 7071 5251 1009

2. TERM DEFINITIONS

  • personal data: any information relating to an identified or identifiable natural person (data subject); a natural person can be identified directly or indirectly, in particular on the basis of an identifier such as name, number, location data, online identifier or one or more factors relating to the physical, physiological, genetic, mental, economic, cultural or social identity of the natural person identifiable;
  • data subject: any natural person identified or – directly or indirectly – identified on the basis of personal data
  • the consent of the data subject: the voluntary, specific and clear declaration of the will of the data subject based on adequate information, with which the data subject indicates by means of a statement or an act clearly expressing the confirmation that he gives his consent to the processing of personal data concerning him;
  • data controller: the natural or legal person, public authority, agency or any other body that determines the purposes and means of processing personal data independently or together with others; if the purposes and means of data management are determined by EU or member state law, the data controller or the special aspects regarding the designation of the data controller may also be determined by EU or member state law.
  • data management: regardless of the procedure used, any operation performed on the data or the set of operations, including in particular collection, recording, recording, organization, storage, change, use, query, transmission, disclosure, coordination or connection, locking, deletion and destruction, and preventing further use of the data, taking photographs, audio or video recordings, and recording physical characteristics suitable for identifying the person (e.g. fingerprint or palm print, DNA sample, iris image)
  • data erasure: rendering the data unrecognizable in such a way that its recovery is no longer possible
  • data processor: the natural or legal person, public authority, agency or any other body that processes personal data on behalf of the data controller;
  • data processing: performing technical tasks related to data management operations, regardless of the method and tool used to perform the operations, as well as the place of application, provided that the technical task is performed on the data
  • data file: the totality of the data managed in one register
  • data protection incident: a breach of security that results in the accidental or unlawful destruction, loss, alteration, unauthorized disclosure or unauthorized access to personal data transmitted, stored or otherwise handled.
  • recipient: the natural or legal person, public authority, agency or any other body to whom the personal data is communicated, regardless of whether it is a third party. Public authorities that have access to personal data in accordance with EU or Member State law in the context of an individual investigation are not considered recipients; the management of said data by these public authorities must comply with the applicable data protection rules in accordance with the purposes of data management;
  • third party: the natural or legal person, public authority, agency or any other body that is not the same as the data subject, the data controller, the data processor or the persons who have been authorized to handle personal data under the direct control of the data controller or data processor.
  • information society-related service: a service provided electronically, for those who are absent, usually for a fee, to which the user of the service has individual access
  • electronic commercial service: a service related to the information society, the purpose of which is a tradable movable thing that can be taken into possession – including money and securities, as well as natural forces that can be utilized in the manner of the thing -, service, real estate, right of property value (hereinafter: goods) business-like sale, purchase, exchange or use in any other way.
  • GDPR (General Data Protection Regulation): the new Data Protection Regulation of the European Union;

3. SCOPE OF USERS

User is both registered on the site and unregistered natural person who uses the services of the Website, places an order, is identified or – directly or indirectly – identifiable on the basis of any specified personal data.

4. GUIDELINES FOR DATA MANAGEMENT

The data controller declares that it handles personal data in accordance with the provisions of the data management information sheet and complies with the provisions of the relevant legislation, with particular attention to the following:

  • Personal data must be handled legally and fairly, as well as in a transparent manner for the data subject.
  • Personal data may only be collected for specific, clear and lawful purposes.
  • The purpose of processing personal data may be appropriate, relevant and only to the extent necessary.
  • Personal data must be accurate and up-to-date. Inaccurate personal data must be deleted immediately.
  • Personal data must be stored in such a way that identification of the data subjects is possible only for the necessary period. Personal data may be stored for a longer period of time only if the storage is for the purpose of archiving in the public interest, for scientific and historical research purposes, or for statistical purposes.
  • The processing of personal data must be carried out in such a way that the appropriate security of personal data is ensured by applying appropriate technical or organizational measures, including protection against unauthorized or illegal processing, accidental loss, destruction or damage of data.
  • The principles of data protection shall be applied to all information relating to identified or identifiable natural persons.

5. IMPORTANT DATA MANAGEMENT INFORMATION

  • The purpose of data management is to enable the service provider / data manager to provide appropriate additional services to the persons registered on the website during the operation of the website.
  • Legal basis for data management: the consent of the person concerned.
  • The group of persons involved in data management: registered users of the website.
  • Duration of data management and deletion of data
  • The duration of data management always depends on the specific user goal, but the data must be deleted immediately if the originally set goal has already been achieved. The person concerned can withdraw their consent to data management at any time by sending a letter to the contact e-mail address. If there is no legal obstacle to the deletion, in this case your data will be deleted.
  • The persons entitled to access the data are: the data controller and its employees.
  • The person concerned may request from the data controller access to the personal data concerning him, their correction, deletion or restriction of processing, and may object to the processing of such personal data, as well as to the data subject’s right to data portability.
  • The person concerned may withdraw his data processing consent at any time, but this does not affect the legality of the data processing carried out on the basis of the consent before the withdrawal.
  • The person concerned may use the right to submit a complaint to the supervisory authority.
  • If the person concerned wants to use the benefits provided by the registration, i.e. wants to use the website’s services in this direction, it is necessary to provide the requested personal data. The person concerned is not obliged to provide personal data, and failure to provide data will not have any adverse consequences. However, it is not possible to use certain functions of the website without registration.
  • The affected person has the right to have the data manager correct or complete inaccurate personal data concerning him without undue delay upon request.
  • The data subject has the right to request that the data controller delete inaccurate personal data concerning him without undue delay, and the data controller is obliged to delete the personal data concerning the data subject without undue delay, if there is no other legal basis for data processing.
  • Modification or deletion of personal data can be initiated by e-mail, phone or letter using the contact options provided above.

6. WEBSITE REGISTRATION

  • The purpose of data management is to provide additional services and make contact.
  • The legal basis for registration data management: your consent.
  • The group of persons involved in data management: registered users of the website.
  • Duration of data management: Data management takes place until consent is withdrawn. You can withdraw your consent to data management at any time by sending a letter to the contact e-mail address.
  • Data is deleted when consent to data management is revoked. You can withdraw your consent to data management at any time by sending a letter to the contact e-mail address.
  • The persons entitled to access the data are: the data controller and its employees.
  • Data storage method: electronic.
  • Modification or deletion of personal data: can be initiated by e-mail, phone or letter using the contact options provided above.
  • The provision of personal data is absolutely necessary for identification in databases and for maintaining contact. The exact company name and address are required for invoicing, which is a legal obligation.
Scope of processed dataThe specific purpose of the data management data
NameIdentification, contact
TitleIdentification, contact
E-mailIdentification, contact.
PhoneIdentification, contact.
Date of registrationTechnical information operation.
IP addressTechnical information operation.

The user’s data management consent can be given by intentionally ticking the empty checkbox on the website that is specifically for this purpose.

You, as an affected person, can object to the processing of your personal data, in this regard you are entitled to the procedure according to the data management information detailed above and this information sheet, as well as the legislation described in the information sheet.

7. SUBMISSION OF ORDER

  • The purpose of data management is: registration and fulfillment of orders placed through the Website, delivery of the ordered products, maintaining contact with orders, issuing invoices, fulfilling accounting obligations. We can only fulfill your order if you provide your contact and billing information, which is absolutely necessary for contact and billing.
  • Legal basis for data management: your consent. In the case of invoicing, data management is based on legal requirements.
  • The group of persons involved in data management: registered users of the website.
  • Duration of data management: Data management takes place until legal requirements or withdrawal of consent. You can withdraw your consent to data management at any time by sending a letter to the contact e-mail address.
  • Deletion of data: this is done when consent to data management is revoked. You can withdraw your consent to data management at any time by sending a letter to the contact e-mail address. Invoicing data can be deleted in accordance with legal regulations.
  • The data controller and its employees are entitled to access the data.
  • Data storage method: electronic.
  • Modification or deletion of personal data can be initiated by e-mail, phone or letter using the contact options provided above.
Scope of processed dataThe specific purpose of the data management data
NameIdentification, contact, invoicing.
Company nameIdentification, contact, invoicing.
TitleIdentification, contact, invoicing.
E-mailIdentification, contact.
PhoneIdentification, contact.
Ordered product dataProduct identification.
Date of registrationTechnical information operation.
IP addressTechnical information operation.

The user’s data management consent can be given by intentionally ticking the empty checkbox on the website that is specifically for this purpose.

The person concerned can object to the processing of his personal data, in this regard he is entitled to the procedure according to the data management information detailed above and this information sheet, as well as the legislation described in the information sheet.

8. INVOICING

  • Purpose of data management: issuing and sending an electronic invoice as an e-mail attachment.
  • Legal basis for data management: mandatory data management based on legislation.
  • The group of people involved in data management: customer partners of the service provider.
  • Duration of data management: Data management takes place until legal requirements or withdrawal of consent. You can withdraw your consent to data management at any time by sending a letter to the contact e-mail address.
  • Deletion of data: this is done when consent to data management is revoked. You can withdraw your consent to data management at any time by sending a letter to the contact e-mail address. Invoicing data can be deleted in accordance with legal regulations.
  • The persons entitled to access the data are: the data controller and its employees.
  • Data storage method: electronic.
  • Modification or deletion of account data: can be initiated by e-mail, phone or letter using the contact options provided above.
Scope of processed dataThe specific purpose of the data management data
NameIdentification, contact, invoicing.
Company nameIdentification, contact, invoicing.
TitleIdentification, contact, invoicing.
E-mailIdentification, contact.
PhoneIdentification, contact.
Tax number/tax IDCustomer identification.
Account dataAccount identification.
Date of issue of invoiceTechnical information operation.

The user’s data management consent can be given by intentionally ticking the empty checkbox on the website that is specifically for this purpose.

The person concerned can object to the processing of his personal data, in this regard he is entitled to the procedure according to the data management information detailed above and this information sheet, as well as the legislation described in the information sheet.

9. SENDING NEWSLETTER

As the operator of the website, we declare that we fully comply with the relevant legal provisions in the information and reviews we publish. We also declare that when subscribing to the newsletter, we are unable to verify the authenticity of the contact data and to determine whether the data provided pertains to an individual or a business. We treat businesses that contact us as customer partners.

The purpose of data management is  to send professional reviews, electronic messages containing advertising, information, and newsletters, from which you can unsubscribe at any time without consequences. You can unsubscribe without any consequences even if your business has ceased to exist in the meantime, you have left the business, or someone has provided us with your contact information.

The legal basis for data management  is your consent. We would like to inform you that the user can give prior and specific consent to the service provider contacting him with advertising offers, information and other mailings at the e-mail address provided during registration. As a result, the user can consent to the service provider managing the necessary personal data for this purpose.

We would like to inform you that if you wish to receive a newsletter from us, you must provide the necessary data. If the data is not provided, we cannot send you a newsletter.

Duration of data management:  Data management takes place until consent is withdrawn. You can withdraw your consent to data management at any time by sending a letter to the contact e-mail address.

Data is deleted  when consent to data management is revoked. You can withdraw your consent to data management at any time by sending a letter to the contact e-mail address.

Consent can also be withdrawn based on the link appearing in the sent newsletters.

The data controller and its employees are entitled to access the data .
Data storage method : electronic.
Modification or deletion of data  can be initiated by e-mail, phone or letter using the contact options provided above.

Scope of processed dataThe specific purpose of the data management data
E-mailIdentification, contact.
Date of subscriptionTechnical information operation
IP addressTechnical information operation

Please note that the e-mail address does not need to contain personal information. So, for example, it is not necessary that the e-mail address contains your name. You are completely free to decide if you provide an e-mail address that contains information referring to your identity. The e-mail address – which serves to maintain contact – is absolutely necessary for the newsletter or professional information sent to you to reach its destination.

10. PERIOD OF DATA MANAGEMENT

Personal data provided on the basis of the User’s consent will be processed by the Data Controller until the purpose of the data management is achieved, or until the User’s consent is revoked. The Data Controller manages the User’s personal data provided during registration until the use of the Website ceases, and in particular until the registration is canceled.

Unless otherwise provided by law, the Data Controller uses the collected personal data a) for the purpose of fulfilling the relevant legal obligation, or b) for the purpose of asserting the legitimate interest of the data controller or a third party, if the assertion of this interest is proportional to the limitation of the right to the protection of personal data without further separate consent , as well as after withdrawing the data subject’s consent. / CXII of 2011. Act § 6 (5) /

The Data Controller stores the personal data provided by the User in order to fulfill accounting obligations for 8 years based on § 169 of Act C of 2000, and in accordance with Act XCII of 2003 on taxation. preserves and manages it within the statutory limitation period.

11. DATA TRANSMISSION, DATA CONNECTION  

The Data Controller does not sell, rent or make available the personal data and information concerning the User to other companies or individuals in any form, except for the provision of data necessary to fulfill accounting and delivery obligations.

The Data Controller ensures the appropriate security of the data in the manner expected of it, and takes the technical and organizational measures that guarantee the enforcement of data protection rules and principles and promote the security of personal data.

Dear Users, we inform you that the Data Controller forwards personal data to a third party or persons only with the consent of the data subject.

12. COOKIES

Cookies are placed on the user’s computer by the visited websites and contain information such as page settings or login status.

Cookies are therefore small files created by visited websites. By saving browsing data, they improve the user experience. With the help of cookies, the website remembers the website settings and offers locally relevant content.

The provider’s website sends a small file (cookie) to the computer of website visitors in order to determine the fact and time of the visit. The service provider informs the website visitor about this.

  • The group of persons involved in data management are  website visitors.
  • The purpose of data management is  additional services, identification, and tracking of visitors.
  • Legal basis for data management:  The user’s consent is not required if the service provider absolutely needs it to use cookies.
  • Scope of the data:  unique identification number, time, setting data.
  • The user has the option to delete cookies from the browser at any time in the Settings menu.
  • Data controllers entitled to access the data:  The data controller does not process personal data using cookies.
  • Data storage method:  electronic.

13. COMMUNITY SITES

Social media is a media tool where the message is spread through social users. Social media uses the Internet and online exposure to transform users from content receivers to content editors.

Social media is an interface of Internet applications that contains content created by users, such as Facebook, Google+, Twitter, etc.

Social media can include public speeches, lectures, presentations, product or service presentations.

Forms of information published in social media can be forums, blog posts, image, video and audio materials, message boards, e-mail messages, etc.

In accordance with the above, the range of processed data may include the user’s public profile picture in addition to personal data.

  • The scope of those affected:  all registered users.
  • The purpose of data collection is  to promote the website or its related website.
  • The legal basis for data management  is the voluntary consent of the data subject.
  • Duration of data management:  according to the regulations that can be viewed on the given social media page.
  • Data deletion deadline:  according to the regulations that can be viewed on the given social media page.
  • They are entitled to access the data:  according to the regulations that can be viewed on the given social media page.
  • Rights related to data management:  according to the regulations that can be viewed on the given social media page.
  • Data storage method:  electronic.

It is important to take into account that when the user uploads or submits any personal data, he gives the operator of the social site a worldwide license to store and use such content. Therefore, it is very important to make sure that the user has full authorization to communicate the published information.

14. RIGHTS RELATED TO DATA MANAGEMENT

The right to request information
You can request information from us via the provided contact details about what data our company processes, on what legal basis, for what data management purpose, from what source, and for how long. Upon your request, we will send information to the e-mail address you provided without delay, but within 30 days at most.

The right to correction
You can ask us to change any of your data via the contact details provided. Upon your request, we will act on this immediately, but within 30 days at the latest, and we will send information to the e-mail address you provided.

The right to deletion
You can ask us to delete your data via the contact details provided. At your request, we will do this immediately, but within 30 days at most, and we will send information to the e-mail address you provided.

The right to block
You can ask us to block your data via the contact details provided. The blocking lasts as long as the reason indicated by you makes it necessary to store the data. At your request, we will do this immediately, but within 30 days at most, and we will send information to the e-mail address you provided.

The right to object
You can object to data processing via the contact details provided. We will examine the objection as soon as possible, but no later than 15 days after the submission of the application, we will make a decision on its merits, and we will inform you of the decision by e-mail.​​

15. POSSIBILITY OF LEGAL ENFORCEMENT RELATED TO DATA MANAGEMENT

In the case of illegal data processing that you have experienced, notify our company so that it is possible to restore the legal status within a short period of time. In your interest, we will do everything we can to resolve the outlined problem.

Service Provider Details:

  • Company name: ALX MACHINERY Kft.
  • Mailing address: 1071 Budapest Dembinszky utca 10, ground floor 8
  • Phone number: +36 70 612 65 82
  • Email :info@alx-machinery.hu
  • Company registration number: 01 09 406311
  • Tax number: 32094475-2-42
  • Bank account number: K&H Bank HU34 1040 4072 5052 7071 5251 1009

16. LEGAL RULES SERVING AS THE BASIS OF DATA MANAGEMENT

– REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL (April 27, 2016) on the protection of natural persons with regard to the processing of personal data and on the free flow of such data, and on the repeal of Regulation 95/46/EC ( general data protection regulation).

– CXII of 2011. Act on the right to self-determination of information and freedom of information.

– LXVI of 1995 on the protection of public records, public archives and private archive material. law.

– 335/2005 on the general requirements for document management of bodies performing public duties. (XII. 29.) Government decree.

– CVIII of 2001 Act on certain issues of electronic commercial services and services related to the information society.

– Act C of 2003 on electronic communications.

Date of entry into force of this Privacy Statement: 10.01.2022.

The data manager reserves the right to make changes.