Data protection, data management

Valid from 2018. april 16.

Directive

The ***CNCdrive Kft.*** (hereinafter referred to as Web Store Owner) has established a privacy policy that protects the personal data of visitors and customers in the most discreet and secure way possible, in accordance with applicable laws. Accordingly, we assure our visitors that we will not disclose to any third party any data necessary for the purchase or registration, unless otherwise required by a competent court.

Registration details

he Web Store Owner respects the rights of users visiting the Site to the protection of their personal data. This Privacy Policy allows you to choose which information you provide on this Website. The Web Store Owner will treat your data provided on this Website in accordance with this Privacy Policy. In any case, your submission of data is voluntary. By submitting your personal data, you authorise the Web Store Owner to use the data you provide in accordance with this Privacy Statement. By registering for the Site, you expressly and unambiguously consent to the Store Owner sending you notices relevant to the subject matter of the Site, and your consent is voluntary and informed. In designing the Site, we have endeavoured to ensure that most of the Content, products and services available on this Site can be accessed without your providing any personal information. This Privacy Statement is available directly from the pages of the Site at any time.

This Privacy Statement applies to the collection of both personal and non-personal data (e.g. data used to compile non-personal visitor statistics).

You have the right to restrict or prohibit the use or recording of the personal data you have provided on this Website by the Store Owner. You have the right to request the Store Owner to delete your personal data from the Site. To do so, please send your request to us at the email address provided on the Site contact page or via the online contact form.

The Store Owner will not share with third parties any personal information voluntarily provided through this Site without the permission of the data owner. Exceptions to this are mandatory disclosures required by applicable law (governmental authorities, subpoena, court order, etc.).

The Site may contain elements that ask visitors for the details of people they know (their name, nickname, or email address). Such personal data provided is also covered by this Privacy Statement and is protected by this Privacy Statement.

The data voluntarily provided, if not explicitly specified on this Site at the point of providing the data, may be used by the Web Store Owner for the following purposes and only for the purposes listed herein: to invite you to subscribe to the Web Store Owner's newsletters (not for automatic sending of newsletters), to send promotional messages about the Web Store Owner's products and services, and to send promotions offering products and services of third parties doing business with the Web Store Owner.

The Site may require the use of cookies for the correct functioning and proper operation of the Services. In these cases, if cookies are enabled in the visitor's browser, the use of cookies is automatic. The cookies that the visitor's browser saves on the visitor's computer do not contain any personal data, they may only contain pieces of information that can be used by the Site to enable the Site to identify the visitor, so that the returning visitor does not have to re-enter certain data already provided and recorded on this Site. The use of cookies is an option to make the browsing of the Site more convenient, and the user can disable the use of cookies at any time in his/her browser. However, some of the services and Content of the Site may require the use of cookies, so these services and Content may not be available on browsers with cookies disabled.

We will take all reasonable steps to ensure the security and protection of your information. The Web Store Owner treats personal and non-personal information received by it as confidential and subject to the obligation of confidentiality. Access to the data is strictly limited to prevent unauthorized access, alteration or unauthorized use of the data.

The Content on the Website is for information purposes only. The Contents have been uploaded in good faith; the Contents, their accuracy and completeness are not guaranteed by the Website Owner. The Website Owner and its employees shall not be liable for any direct or indirect damages or loss of profit arising from the Contents of this Website. The Website may contain hyperlinks to other websites, which are owned by third parties independent of the Website Owner, and therefore the Website Owner shall not be liable for the content of such linked websites or for the products and services available through them.

Cancellation of registration

Of course, we allow our visitors and customers to opt-out of registration and the benefits that come with it, as follows:

Please indicate your intention to do so at the customer service e-mail address provided on our contact us page, or at one of our other contact details.

We will then delete all your data from our system at your request, we will not make a copy of it and we will cease all direct communication with you.

Renewal of registration data

Our system allows you to correct your data if it changes.

You can change your data after logging in. In step 3 of the checkout process, you can enter and change your billing and shipping data, which can be saved without placing an order. Alternatively, you can contact us at the customer service email address provided on our contact page or at one of our other contact details and we will correct your details. We are not able to correct email addresses , if an incorrect email address has been entered, this can be corrected by re-registering.

Data protection, data management

Valid from 2018. april 16.

In accordance with the provisions of Act CXII of 2011 on the Right of Informational Self-Determination and Freedom of Information (hereinafter referred to as the "Information Act"), CNCdrive Kft. provides the following information regarding the data management in connection with the shop.cncdrive.hu webshop (hereinafter referred to as the "Webshop") operated by the company. 

By using the Website, the data subject declares that he or she is at least 16 years of age. A person under the age of 16 may not register, make purchases or subscribe to newsletters in the Webshop, given that the consent or subsequent approval of his or her legal representative is required for the validity of his or her legal declaration of consent to data processing pursuant to Article 6 (3) of the Data Protection Act. The Data Controller is not in a position to verify the legitimacy of the person giving consent, so the data subject warrants that the data he or she has provided are true and correct. The data subject is responsible for the accuracy of the data provided.

The Data Controller informs the data subject that the functions of the Webshop, the registration and fulfilment of orders are only possible if the data subject provides his/her data to the Data Controller and consents to the processing.

1. Data Controller

CNCdrive Kft.

Location: 7833 Görcsöny HRSZ 422/4

Company registration number: Cg.02-09-080088

Tax number: 24366562-2-02

Representative: Balázs Klincsik, Executive Director

Postal address: 7815 Görcsöny HRSZ 422/4

Tel/fax: 06 70 904 0565

E-mail: info@cncdrive.com

Personal data processed by the Data Controller may be accessed by the employees of the Data Controller to the extent necessary to achieve the purpose of the processing as set out in point 3.

1. Legal basis for processing

The Data Controller processes personal data on the basis of the data subject's voluntary and explicit consent, given after having received the necessary information, in accordance with the Infotv. 5 (1) (a) of Art..

The data controller shall process the data contained in the accounting documents in accordance with the provisions of Act C of 2000 on Accounting, on the basis of this legislation.

For the purposes of sending advertising mailings and offers, the Data Controller shall process the data in accordance with the provisions of Act XLVIII of 2008 on the Basic Conditions and Certain Restrictions of Economic Advertising Activities only with the express consent of the data subject. The Customer may at any time, by using the link in the newsletter or by contacting the Data Controller at the contact details specified in point 1, prohibit the Data Controller from sending him/her further advertising mailings.

1. Purpose, duration and scope of data processing

The Controller processes personal data for the following purposes and for the following period:

Type of processing	Data processed	Purpose of data processing	Duration of data processing
Registered user	Name, address, telephone number (optional), email address, tax number (for business users only)	User account management, providing the possibility to view order data, shopping list management, fulfilling orders, sending order confirmations, order order fulfilment communication, billing of charges	Till request of connected data erasure
Guest customer	Name, address, telephone number (not required), email address, tax number (for business users only)	Fulfilling orders, sending order confirmations, communicating about order fulfilment, invoicing charges	Until the order is fulfilled, and the data specified in the Accounting Act in the (currently 8 years)
Send newsletter (with specific consent)	Name, email address	Advertise electronically (newsletter)	Till request of connected data erasure

1. Data processors

The Data Controller may transfer the data to the following data processors for the purposes of recording orders, fulfilling contracts, operating the website, sending newsletters and complying with the Accounting Act.

The Processors shall carry out the processing in accordance with the instructions of the Data Controller, they may not take any substantive decisions concerning the processing, they may process the personal data they become aware of only in accordance with the provisions of the Data Controller, they may not process the personal data for their own purposes, and they shall store, retain and delete the personal data in accordance with the provisions of the Data Controller. In the course of processing, the data may be disclosed to the employees of the processors.

	Address of data processor	Data processing activities	Data subject to processing
Számológép Kft	Siklós, József Attila u. 57, 7800	Accounting activity	Name, adress
Magyar Posta Zrt	1138 Budapest, Dunavirág u. 2-6.	Posting	Name, address, phone number, email address
DPD Hungária Kft.	Budapest, Késmárk utca 14/b, 1158	Shipping	Name, address, phone number, email address
DHL Express	BUD Nemzetközi Repülőtér Terminal 1, DHL épület 302 1185 Budapest	Shipping	Name, address, telephone number, email address, tax number (tax number for business customers)
GLS General Logistics Systems Hungary Csomag-Logisztikai Kft.	2351 Alsónémedi GLS Európa u. 2.	Shipping	Name, address, telephone number, email address, tax number (tax number for business customers)

1. Data transmission

The Data Controller will not transfer the data to third parties.

1. Profiling

The Data Controller informs the data subject that during the use of the Webshop (browsing, shopping), profiling is carried out in order to provide a more effective service to visitors to the Webshop. In the course of profiling, the computer system operating the Webshop looks at the products viewed by the visitor in an anonymous manner, exclusively by means of a technical operation carried out by the web browser, and on the basis of these viewed products, the system recommends new products for viewing in the Webshop according to the interests of the visitor. This activity is to provide a better user experience

user experience.

1. Data processing of a technical nature related to the operation of the Webshop

During the use of the Web Store, non-personal information may be recorded, such as the type of web browser used by the data subject, the address of the website from which he or she accessed the Web Store, etc. - these data are stored by the Data Controller in an anonymous manner.

The Web Store uses Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google uses cookies, which are small data files placed on your computer, to help the website analyse your use of the website, but of course in an undisclosed way.

The non-personally identifiable information generated by the cookie about your use of this website will be transmitted to and stored by Google on servers in the United States of America. Google will use this information for the purpose of evaluating and analysing your use of the website, compiling statistical reports on website activity for the controller and providing other services relating to website activity and internet usage - also, of course, in anonymous form.

Other cookies may be linked to external websites - such as Facebook through the use of "like" or "share" functions on the website - or to Google Remarketing.

When using Google Remarketing, the Data Controller places a cookie on the data subject's computer, which will allow the data subject's browser to be uniquely (but not specifically named) identified. Google will use this to recognise if the data subject has previously visited the Web Store, so that it can display related advertisements to the data subject on the websites of other, external content providers.

You can disable this feature at any time by visiting the official Google ads opt-out page at google.com/ads/preferences/

Anonymity

Google will never associate the IP address of the data subject with any other data held by Google. The IP address of the data subject is stored anonymously and cannot be linked to personal data. You can disable the use of cookies by adjusting your browser settings, but you will not be able to use all the features of the Store.

By using the webshop, the data subject consents to the recording, storage and processing of his/her visit data in the manner and for the purposes set out above.

You can disable cookies in each web browser in the following ways:

Chrome: https://support.google.com/chrome/answer/95647?co=GENIE.Platform%3DDesktop&hl=en

Firefox: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer?redirectlocale=en-US&redirectslug=Cookies

Safari: https://support.apple.com/kb/ph21411?locale=en_US

Facebook comments

In the Webshop, the data subject has the possibility to post comments via the Facebook application. By submitting a comment, the data subject agrees to the processing of his/her comment by the Data Controller (together with his/her name and photo associated with his/her Facebook registration - the current Facebook basic and public user information), and to its display in the Webshop. 

Customer reviews

In the Webshop, the data subject has the opportunity to rate products and services. By submitting a review, the data subject consents to the Data Controller displaying his/her review in the Webshop, using it in advertisements for his/her products or company or in his/her bidding activities, even in an edited form. The Data Controller shall be free to use the submitted evaluation, which the data subject acknowledges by sending the evaluation.

1. Rights of the data subject, remedies

The data subject may request the Data Controller to provide information about the processing of his or her personal data, to rectify his or her personal data and to erase or block his or her data. The data subject may object to the processing of his or her personal data.

At the request of the data subject, the Data Controller shall provide information about the data of the data subject processed by the Data Controller or by the Data Processor, the source of the data, the purposes and legal basis of the processing.
the duration, the name and address of the data processor and his or her activities in relation to the processing and, in the case of a transfer of personal data of the data subject, the legal basis and the recipient of the transfer.

The Data Controller shall, within the shortest possible period (without undue delay), but not exceeding 25 days from the date of the request, or 15 days in the case of a statement of objection, inform the data subject of the request.

the requested information in writing or, in the event of withdrawal of consent, delete the data. In the event of rectification or erasure, the Data Controller shall inform all recipients to whom the data have been disclosed.

The Controller informs the data subject that the withdrawal of consent to the processing of data does not affect the lawfulness of the processing carried out on the basis of the consent before its withdrawal.

The data subject may request information about his/her data or request their rectification, erasure or blocking at the following contact details of the Data Controller, and may object to the processing of his/her data at the following contact details:

CNCdrive Kft.

Postal address: 7833 Görcsöny HRSZ 422/4

tel/fax: 06 70 904 0565

email: info@cncdrive.com

The National Authority for Data Protection and Freedom of Information if the data subject wishes to seek redress. (1125 Budapest, Szilágyi Erzsébet fasor 22/c., postal address: 1530 Budapest, Pf.: 5., www.naih.hu, tel: +36 (1) 391-1400, fax: +36 (1) 391-1410, ugyfelszolgalat@naih.hu), or, at his/her choice, to the competent court in the place where the Data Controller is established or where the data subject resides or is domiciled.

1. Data security

The controller shall carry out the processing in such a way as to ensure the protection of the privacy of the data subjects. The Data Controller shall protect the data by means of information technology solutions, in particular against unauthorised access, alteration, disclosure, transmission, disclosure, erasure or destruction, accidental destruction or damage and inaccessibility resulting from changes in the technology used.

The user account to be created by the data subject during registration is protected by a password provided by the data subject.