Privacy Policy

INTRODUCTION:

VITO Audio Kft. as the owner and operator of www.octogonaudio.hu respects your privacy and is committed to protecting your personal data. This Privacy Policy will inform you as to how we look after your personal data when you visit our website (regardless of where you visit it from) and tell you about your privacy rights and how the law protects you.

This Privacy Policy aims to give you information on how VITO Audio Kft. collects and processes your personal data through your use of this website, including any data you may provide through this website when you sign up to our newsletter, purchase a product or service or take part in a competition.
This website is not intended for children and we do not knowingly collect data relating to children.
It is important that you read this Privacy Policy together with any other privacy notice or fair processing notice we may provide on specific occasions when we are collecting or processing personal data about you so that you are fully aware of how and why we are using your data. This Privacy Policy supplements the other notices and is not intended to override them.

This Privacy Policy has been prepared pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of personal data of natural persons and the free movement of data, subject to Annex CXII. the content of the law on the right to information self-determination and freedom of information.

DEFINITIONS

• personal data: any information relating to an identified or identifiable natural person (data subject); identifies a natural person who, directly or indirectly, in particular by reference to an identifier such as name, number, location, online identifier or one or more factors relating to the physical, physiological, genetic, mental, economic, cultural or social identity of the natural person identified;
• data subject: any natural person identified or identifiable, directly or indirectly, on the basis of personal data
• data subject's consent: a voluntary, specific and well-informed and unambiguous statement of the data subject's consent to indicate his or her consent to the processing of personal data concerning him or her, by means of a statement or an unequivocal statement of confirmation;
• "controller" means the natural or legal person, public authority, agency or any other body which alone or jointly with others determines the purposes and means of the processing of personal data; where the purposes and means of the processing are determined by Union or Member State law, the controller or the specific criteria for the designation of the controller may also be determined by Union or Member State law.
• data management: any operation or set of operations on data, irrespective of the procedure used, in particular their collection, recording, recording, systematisation, storage, alteration, use, interrogation, transmission, disclosure, coordination or aggregation, blocking, erasure and destruction; and prevent further use of the data, take photographs, sound or images, and record physical identifiers (eg fingerprints or palm prints, DNA samples, irises)
• data erasure: making data unrecognizable in such a way that it is no longer possible to be recovered
• data processor: any natural or legal person, public authority, agency or any other body which processes personal data on behalf of the controller;
• data processing: the performance of technical tasks related to data management operations, regardless of the method and means used to perform the operations and the place of application, provided that the technical task is performed on the data
• data set: the totality of the data managed in one register
• data protection incident: a breach of security resulting in the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or unauthorized access to, personal data transmitted, stored or otherwise handled.
• recipient: any natural or legal person, public authority, agency or any other body to whom personal data are disclosed, whether a third party or not. Public authorities that may have access to personal data in the framework of an individual investigation in accordance with Union or Member State law shall not be considered as recipients; the processing of such data by those public authorities must comply with the applicable data protection rules in accordance with the purposes of the processing;
• third party: a natural or legal person, public authority, agency or any other body other than the data subject, the controller, the processor or persons who have been authorized to process personal data under the direct control of the controller or processor.
• information society service: a service provided electronically to absentees, usually for remuneration, to which the recipient of the service has individual access
• e-commerce service: an information society service for the purpose of holding a movable movable item, including money and securities, and natural resources that can be used for that purpose, a service, real estate, property right (collectively, goods) sale, purchase, exchange or other use.
• GDPR (General Data Protection Regulation): the new Data Protection Regulation of the European Union;

USERS:

User is both a natural person registered on this webite and a natural person who is not registered, but who uses the services of this website, places an order, is identified or - directly or indirectly - identifiable on the basis of any specific personal data.

PRIVACY POLICY:

The data controller declares that he / she handles personal data in accordance with the provisions of the data management information and complies with the provisions of the relevant legislation, in particular with regard to the following:

The processing of personal data must be carried out lawfully and fairly and in a way that is transparent to the data subject.
Personal data may only be collected for specified, explicit and legitimate purposes.
The purpose of the processing of personal data must be appropriate and relevant and only to the necessary extent.
Personal information must be accurate and up to date. Inaccurate personal data must be deleted immediately.
Personal data must be stored in a form which permits identification of data subjects for no longer than is necessary. Personal data may be stored for a longer period only if the storage is for archiving purposes in the public interest, for scientific and historical research purposes or for statistical purposes.
The processing of personal data must be carried out in such a way as to ensure adequate security of the personal data, including protection against unauthorized or unlawful processing, accidental loss, destruction or damage, by means of appropriate technical or organizational measures.
The principles of data protection shall apply to all information concerning an identified or identifiable natural person.

REGISTRATION ON THE WEBSITE:

You can give your consent to the data management by intentionally checking the empty checkbox on the website and specifically for this purpose.

You, as an individual concerned, may object to the processing of your personal data in this regard and are entitled to proceed in accordance with the data management information detailed above and this prospectus and the legislation described in the prospectus.

PLACING AN ORDER:

• The purpose of data management is to record and fulfill orders placed through the Website, to deliver the ordered products, to keep in touch with the orders, to issue an invoice, to fulfill the accounting obligation for contact and billing.
• Legal basis for data processing: your consent. In the case of invoicing, the data management is based on a legal requirement.
• Stakeholders: registered users of the website.
• Duration of the data processing: The data processing takes place until the legal regulation or the withdrawal of the consent. You can withdraw your consent to data management at any time by sending an e-mail to the contact e-mail address.
• Deletion of data: occurs when the consent to data management is revoked. You can revoke your consent to data management at any time by sending an email to your contact email address. Billing data can be deleted in accordance with legal regulations.
• The data controller and its employees have the right to access the data.
• Data storage method: electronic.
• Modification or deletion of personal data can be initiated by e-mail, telephone or letter using the contact options provided above.

NEWSLETTER:

• As the operator of the website, we declare that we fully comply with the relevant legal provisions during the information and descriptions published by us. We further declare that when subscribing to the newsletter, we are not in a position to verify the authenticity of the contact details or to establish that the information provided relates to an individual or a company. We treat companies that contact us as customer partners.
• The purpose of data management is to send professional brochures, electronic messages containing advertisements, information, newsletters, about which you can unsubscribe at any time without consequences. You can also unsubscribe without any consequences if your business has in the meantime ceased to exist, you have left the business, or someone has provided us with your contact information.
• The legal basis for data processing is your consent. We inform you that the user may consent in advance and expressly to contact the service provider with advertising offers, information and other items at the e-mail address provided during registration. As a result, the user may consent to the service provider processing the necessary personal data for this purpose.
• We would like to inform you if you want to receive a newsletter from us, you must provide the necessary information. We will not be able to send you a newsletter if you do not provide this information.
• Duration of data processing: Data processing will take place until the withdrawal of consent. You can withdraw your consent to data management at any time by sending an e-mail to the contact e-mail address.
• The data will be deleted when the consent to the data processing is revoked. You can revoke your consent to data management at any time by sending an email to your contact email address.
• Consent can also be revoked by clicking on the link in the newsletters sent out.
• The data controller and its employees have the right to access the data.
• Data storage method: electronic.
• Modification or deletion of data can be initiated by e-mail, telephone or letter using the contact options provided above.
• The data processor used: PaprikaSoft Kft.

Please note that the e-mail address does not need to contain any personally identifiable information. For example, it is not necessary for the e-mail address to include your name. You are completely free to choose an email address that contains information about your identity. The e-mail address used to contact you is absolutely necessary for the newsletter or professional information sent to you to reach its destination.

PERSON ENTITLED TO DATA PROCESSING:

DURATION OF DATA PROCESSING:

The Data Controller handles the personal data provided on the basis of the User's consent until the purpose of the data management is realized or the User's consent is revoked. The Data Controller manages the personal data provided by the User during the registration until the termination of the use of the Website, and in particular until the cancellation of the registration.

Unless otherwise provided by law, the Data Controller

a) for the purpose of fulfilling the legal obligation applicable to it, or

b) for the enforcement of the legitimate interest of the Data Controller or a third party, if the enforcement of this interest is proportionate to the restriction of personal data protection without further consent , and after the withdrawal of the data subject's consent. / 2011 CXII. Section 6 (5) of the Act /

In order to fulfill the accounting obligations, the Data Controller has provided the personal data provided by the User for 8 years pursuant to Section 169 of Act C of 2000, and pursuant to Section XCII of 2003 on the Taxation Procedure, retained and managed within the statutory limitation period.

DATA TRANSMISSION, DATA LINKING:

The Data Controller shall not sell, rent or make available in any form personal data or information about the User to any other company or individual, except for the provision of data necessary for the fulfillment of the accounting and delivery obligation.

The Data Controller shall ensure the adequate security of the data in the manner expected of it and shall take the technical and organizational measures that guarantee the enforcement of data protection rules and principles and promote the security of personal data.

The Data Controller transfers personal data to a third party or persons only with the consent of the data subject.

DATA-PROCESSING ACTIVITIES RELATED TO THE TRANSPORT OF GOODS:

Name of the data processor: Express One Hungary Kft.

The registered office of the data processor: 1239 Budapest, Európa utca 12. L1. building

Telephone number of the data processor: +36 1 8 777 410

E-mail address of the data processor: intcs@expressone.hu

Company registration number: 01-09-980899

VAT number: 13947109-2-43

The Data Processor participates in the delivery of the ordered goods on the basis of a written contract concluded with the Data Controller. In doing so, the Data Processor may manage the name, address and telephone number of the customer for the duration of the delivery of the ordered goods, after which it shall be deleted immediately.

For further data protection issues, the data protection policy, which can be viewed on the data processor 's website, is authoritative.

Name of the data processor: Barion Payment Zrt.

Headquarters of the data processor: 1117 Budapest, Infopark sétány 1.

Telephone number of the data processor: +36 1 464 70 99

The e-mail address of the data processor is: hello@barion.com

The Data Processor participates in the processing of credit card payment transactions on the website on the basis of a written contract concluded with the Data Controller. In doing so, the Data Processor shall transfer the data of the data subject to the extent necessary for the accounting records, in accordance with the provisions of the Civil Code. It shall be managed for a period of time in accordance with Section 169 (2), after which it shall be canceled immediately.

For further data protection issues, the data protection policy, which can be viewed on the data processor 's website, is authoritative.

COOKIES:

Cookies are placed by the websites visited on the user's computer and contain information such as page settings or login status.

Cookies are therefore small files created by the websites you visit. Saving browsing data improves the user experience. With the help of cookies, the website remembers the settings of the website and offers locally relevant content.

The website of the service provider sends a small file (cookie) to the computer of the visitors of the website in order to determine the fact and time of the visit. The service provider informs the visitor of the website about this.

The people involved in data management are the visitors of the website.
The purpose of data management is additional services, identification, and tracking of visitors.
Legal basis for data management: The user's consent is not required if the service provider absolutely needs the use of cookies.
The scope of the data: unique identification number, time, setting data.
The user has the option to delete cookies from the browsers at any time in the Settings menu.
Data controllers entitled to access the data: The data controller does not process personal data using cookies.
Data storage method: electronic.

SOCIAL MEDIA:

A social media is a media tool where a message is disseminated through social users. Social media uses the Internet and online publishing opportunities to move users from content recipients to content editors.

Social media is an interface for web applications that contain user-generated content, such as Facebook, Google+, Twitter, and more.

Social media appearances can be public speaking, lectures, presentations, products or services.

Social media information can take the form of forums, blog posts, images, videos, and audio, message boards, e-mail messages, and more.

As mentioned above, the scope of the managed data can be not only personal data but also the user's public profile picture.

Stakeholders: all registered users.
The purpose of data collection is to promote the website or a related website.
The legal basis for data processing is the voluntary consent of the data subject.
Duration of data management: according to the regulations that can be viewed on the given social site.
Deadline for deleting data: according to the regulations that can be viewed on the given social site.
They have the right to get acquainted with the data: according to the regulations that can be viewed on the given social site.
Rights related to data management: according to the regulations that can be viewed on the given social site.
Data storage method: electronic.
It is important to note that when a user uploads or submits any personal information, he or she gives the social network operator permission to store and use such content. Therefore, it is very important to make sure that the user has full authority to communicate the published information.

 GOOGLE ANALYTICS

Our website uses Google Analytics.

Google Analytics uses internal cookies to generate reports for its customers about the habits of users of the website.

On behalf of the website operator, Google uses the information to evaluate how users use the website. As an additional service, it generates reports related to the activity of the website for the website operator in order to perform the additional services.

The data is stored in an encrypted format on Google’s servers to make it more difficult and prevent data misuse.

Here's how to disable Google Analytics. Quote from the page:

Website users who do not want Google Analytics to report JavaScript on their data can install the Google Analytics Disable Browser Add-on. The plugin prohibits Google Analytics JavaScript (ga.js, analytics.js, and dc.js) from sending information to Google Analytics. The browser extension can be used in most newer browsers. The Google Analytics Disable Browser Add-on does not prevent data from being sent to the site itself and other web analytics services.

https://support.google.com/analytics/answer/6004245?hl=hu

Google's Privacy Policy: https://policies.google.com/privacy?hl=en_US

Information on the use and protection of the data can be found in detail at the links above.

DATA PROTECTION IN DETAIL

https://static.googleusercontent.com/media/www.google.com/en//intl/hu/policies/privacy/google_privacy_policy_hu.pdf

RIGHTS RELATED TO DATA PROCESSING:

ENFORCEMENT RELATING TO DATA PROCESSING:

Should you experience any kind of illegal data processing , please notify our company immediately, so that you have the opportunity to restore the legal status in a short time. We will do our best to solve the problem.

If you feel that the legal status cannot be restored, please notify the authority at the contact details below

National Data Protection and Freedom of Information Authority

Postal address: 1530 Budapest, Pf. 5.

Address: 1125 Budapest, Szilágyi Erzsébet fasor  22/c

Phone: +36 (1) 391-1400

Fax: +36 (1) 391-1410

E-mail: customer service (at) naih.hu

URL:  https://www.naih.hu

Coordinates: N 47 ° 30'56 ''; E 18 ° 59'57 ''

LEGISLATION UNDERLYING DATA PROCESSING: