Privacy Policy

Data Processing Policy

Date of approval: 29/10/2020

Table of Contents

Data Processing Policy
- Data Controller
- Information about the use of cookies
- Data processing
- Rights of the data subjects

Data Controller

Name: Immunetec Proof Kft.

Registered seat: 5008 Szolnok, Krudy Gyula u. 112.

Mailing address, consumer complaints: 5008 Szolnok, Krudy Gyula u. 112.

E-mail: info@immunetec.com

Phone: +36 30 539 3484

Website: https://immunetec.com/

Hosting service provider

Name: MediaCenter Hungary Kft.

Mailing address: 6001 Kecskemét, Pf. 588.

E-mail address: mediacenter@mediacenter.hu

Phone: +36 21 201 0505

Description of data processing performed during the operation of the webshop

Information about the use of cookies

What are cookies?

The Data Controller uses so-called cookies while you visit our website. Cookies are packages of information consisting of letters and numbers, which our website sends to your browser with the purpose of saving some of its settings, facilitating the use of our website and contributing to our collection of a few, relevant pieces of information of a statistical nature about our visitors.

Some cookies do not contain any personal information, and are unable to be used to identify individual users, but others contain such unique identifier – a secret sequence of numbers generated randomly -, which is stored by your device to ensure your identifiability. The operational duration of the particular cookies are specified in their respective descriptions.

Legal basis for and background of cookies

The legal basis for data processing is your consent, which is based on paragraph (1) a) of article 6 of the Regulation.

The main characteristics of the cookies used by the website

Google Adwords cookie Whenever somebody visits our site, the visitor’s cookie-ID is added to the remarketing list. In its products, Google uses cookies, such as DID and SID cookies, to personalize the ads appearing in Google searches, among other purposes. The website uses such cookies, for instance, to remember your recent searches, your previous interactions with certain advertisers’ ads or search results, as well as your visits of advertisers’ websites. AdWords’ conversion tracking tool uses cookies. To track purchases and other conversions arising from an advertisement, the tool saves cookies on the user’s computer, when the user clicks on an ad. Some common applications of cookies are to select ads based on their relevance to the specific user, improve campaign performance reports, and avoid showing ads that the user has already viewed.

Google Analytics cookie: Google Analytics is Google’s analytic tool, which helps the owners of web sites and applications to obtain a clearer picture of their visitors’ activities. The service may use cookies to collect information and prepare reports from the statistic data generated by the usage of the website, without identifying the individual users for Google. The key cookie used by Google Analytics is the “__ga” cookie. Apart from reports prepared from website usage data, Google Analytics – along with some of the advertising cookies described above – can also be used to show more relevant advertisements both in Google products (for instance, in Google Search) and across the internet.

Remarketing cookies These may be shown to previous users and visitors, when they are performing searches on other websites on the Google Display Network or for expressions related to products or services thereof.

Cookies strictly necessary for operation: These cookies are essential for the use of the website, and enable the basic functions of the website to be used. Failing these, several functions of the site will not be available to you. The lifetime of this type of cookies is limited to the duration of the session.

Cookies used to improve user experience: These cookies collect pieces of information on the user’s website usage, such as which sites he or she visits the most often or what error messages he or she receives from the website. These cookies do not collect any identification information, meaning that they only manage completely general, anonymous pieces of information. The data obtained from these are used to improve the performance of our website. The lifetime of this type of cookies is limited to the duration of the session.

Session cookie: These cookies are used to capture the visitor’s location, the browser’s language and the currency used for a payment, and their lifespan is over when the browser is closed, but it never exceeds two hours.

Cookie of the product last viewed: Captures the product last viewed by the visitor. Their lifespan is 60 days.

Cookie of the category last viewed: Captures the category last viewed: Its lifespan is 60 days.

Recommended products cookie: Stores the list of products a user recommends using the “Share with a Friend” function. Its lifespan is 60 days.

Mobile version, design cookie: Detects the device used by the visitor, and switches to full screen mode on mobile. Its lifespan is 365 days.

Cookie consent cookie: In the window popping up upon your arrival at the website, this cookie is used to accept the cookie declaration. Its lifespan is 365 days.

Shopping cart content cookie: Stores the products you added to your shopping cart. Its lifespan is 365 days.

Facebook pixel (Facebook cookie) Facebook pixel is a code used to assist in the preparation of a report on the website, capturing conversions and target audiences, as well as providing the website owner with detailed analytic information on the visitors’ usage of the website. Using Facebook pixel, the owner can show personalized offers and ads on Facebook to the website’s visitors. Please see Facebook’s data processing policy at: https://www.facebook.com/privacy/explanation

If you do not consent to the use of cookies, certain functions will not be available to you. For more information about the deletion of cookies, please visit:

Data processed to ensure the conclusion and the performance of the contract

The conclusion and the performance of the contract may involve several data processing scenarios. We wish to inform you that no data processing related to complaint handling or warranty administration is performed, unless you exercise one of your aforementioned rights.

If you only visit the webshop, but do not purchase anything via the webshop, the provisions regulating the use of data for marketing shall apply to you, as long as you give us your consent to our using your data for marketing purposes.

Further details of the data processing performed for the conclusion and performance of the contract:

Coming into contact

If you contact us with your product queries by e-mail, phone or using a contact form.

You don’t need to contact us beforehand. Go ahead and order anything from our webshop, even if you skip that initial communication.

Processed data

The data you provide while coming in contact with us.

Duration of the data processing

We shall only process the data until communication is over.

Legal basis for the data processing

The voluntary consent you give to the Data Controller by coming into contact with the data controller. [Data processing pursuant to Paragraph (1) a) of article 6 of the Regulation]

Creating an account on the website

By saving the data you provide while creating an account helps the Data Controller ensure more convenient service (e.g. the data subject does not need to re-enter their data the next time they buy something). The conclusion of the contract is not subject to creating an account.

Processed data

During the data processing, the Data Controller processes your name, address, phone number, e-mail address, the characteristics of the product you purchased and the date of your purchase.

Duration of the data processing

Until consent is withdrawn.

Legal basis for the data processing

The voluntary consent you give to the Data Controller by creating an account. [Data processing pursuant to Paragraph (1) a) of article 6 of the Regulation]

Processing your order

Certain data processing activities are necessary while orders are processed

Processed data

During the data processing, the Data Controller processes your name, address, phone number, e-mail address, the characteristics of the product you purchased, the number of your order and the date of your purchase.

If you placed an order in the webshop, the provision and the processing of certain data are indispensable for the performance of the contract.

Duration of the data processing

We shall process the data for five years, in accordance with the limitation period under civil law.

Legal basis for the data processing

The performance of the contract. [Data processing pursuant to Paragraph (1) b) of article 6 of the Regulation]

Issuing an invoice

Data processing is performed in order that invoices are issued in conformity with the legislation and that the obligation of keeping accounting documents on file is met. Pursuant to paragraphs (1)-(2) of section 169 of the Act on Accounting (Sztv.), economic operators must keep the accounting documents that directly or indirectly support the bookkeeping accounts.

Processed data

Name, address, e-mail address, phone number.

Duration of the data processing

The invoices issued must be kept for 8 years from their issuance, in accordance with paragraph (2) of section 169 of Sztv..

Legal basis for the data processing

In compliance with paragraph (1) of section 159 of the Act CXXVII of 2007 on Value Added Tax (VAT Act), the issuance of invoices is mandatory, and in accordance with paragraph (2) of section 169 of Act C of 2000 on Accounting, invoices must be kept for 8 years [Data processing pursuant to Paragraph (1) c) of article 6 of the Regulation]

Data processing related to delivery services

Data processing is performed for the delivery of the product ordered.

Processed data

Name, address, e-mail address, phone number.

Duration of the data processing

The Data Controller processes the data until the merchandise ordered is delivered.

Legal basis for the data processing

Performance of the Contract. [Data processing pursuant to Paragraph (1) b) of article 6 of the Regulation]

Recipients and data processors of the data processing activities related to delivery services

Name of recipient: GLS General Logistics Systems Hungary Csomag-Logisztikai Kft.

Registered seat of recipient: 2351 Alsónémedi, GLS Európa u. 2.

Phone number of recipient: 06-29-88-67-00

Recipient’s e-mail address: info@gls-hungary.com

Recipient’s website: https://gls-group.eu/HU/hu/home

A courier company contributes to the delivery of the goods ordered under its contract with the Data Controller. The courier company processes the personal data it obtains in accordance with its data processing policy available on the company’s website.

Name of recipient: DPD Hungária Kft.

Registered seat of recipient: 1158 Budapest, Késmárk utca 14. B. ép.

Phone number of recipient: +36-1/501-6200

Recipient’s e-mail address: dpd@dpd.hu

Recipient’s website: https://www.dpd.com/hu/

Warranty issues

Data processing is performed for the processing of complaints under warranties. If you have a complaint that you seek to get handled under a warranty, data processing and the provision of data are indispensable.

Processed data

Customer’s name, phone number, e-mail address and the subject of the complaint.

Duration of the data processing

Complaints handled under a warranty are kept for 5 years, in compliance with the consumer protection act.

Legal basis for the data processing

Whether you contact us to get your complaint handled under warranty is at your discretion, but if you come to us, we are obliged to keep the complaint for 5 years, as provided by paragraph (7) of section 17/A of Act CLV of 1997 on Consumer Protection [Data processing pursuant to Paragraph (1) c) of article 6 of the Regulation]

Other consumer complaints

Data processing is performed to manage consumer complaints. If you approach us with a complaint, data processing and the provision of data are indispensable.

Processed data

Customer’s name, phone number, e-mail address and the subject of the complaint.

Duration of the data processing

Complaints handled under a warranty are kept for 5 years, in compliance with the consumer protection act.

Legal basis for the data processing

Whether you contact us to get your complaint resolved is at your discretion, but if you come to us, we are obliged to keep the complaint for 5 years, as provided by paragraph (7) of section 17/A of Act CLV of 1997 on Consumer Protection [Data processing pursuant to Paragraph (1) c) of article 6 of the Regulation]

Data processed in relation to the verifiability of the consent

While you create a user account, place an order or subscribe to a newsletter, the information technology system stores the IT data related to the consent to ensure later verifiability.

Processed data

Date of consent and the data subject’s IP address.

Duration of the data processing

Under legal regulations, the later verifiability of the consent must be guaranteed. For this reason, the duration of the data storage lasts until the limitation following the cessation of the data processing.

Legal basis for the data processing

This obligation is provided for by paragraph (1) of article 7 of the Decree. [Data processing pursuant to Paragraph (1) c) of article 6 of the Regulation]

Data processing for marketing

Data processing related to sending and showing personalized ads

Processed data

Name, address, e-mail address, phone number.

Duration of the data processing

Until consent is withdrawn.

Legal basis for the data processing

The voluntary and express consent you give to the Data Controller, while your data are recorded. [Data processing pursuant to Paragraph (1) a) of article 6 of the Regulation]

Remarketing

Data processing as a remarketing activity takes place with the help of cookies.

Processed data

Data processed by the cookies specified in the cookie policy.

Duration of the data processing

For more information about the data storage durations of specific cookies, please visit:

Google general cookie policy: https://www.google.com/policies/technologies/types/

Google Analytics guide: https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage?hl=hu

Facebook guide: https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen

Legal basis for the data processing

The voluntary consent you give to the Data Controller by using the website. [Data processing pursuant to Paragraph (1) a) of article 6 of the Regulation]

Further data processing

If the Data Controller wishes to perform further data processing, it provides preliminary guidance on the key aspects of the data processing (legal background of and legal basis for the data processing, the purpose of the data processing, the scope of the data processed and the duration of the data processing.

We wish to inform you that the Data Controller must grant authorities’ written requests for data, as required by law. The Data Controller keeps a record of data transfers, as required by paragraphs (2) and (3) of section 15 of the Privacy Act (what personal data were forwarded – and when – by the Data Controller, to which authority, on what legal basis). Upon request, the Data Controller discloses this information, unless such disclosure is prohibited by law.

Recipients of personal data

Data processing intended to store personal data

Name of data processor: MediaCenter Hungary Kft.

Data processor’s contact details:

Phone: +36 21 201 0505

E-mail address: mediacenter@mediacenter.hu

Registered seat: 6001 Kecskemét, Pf. 588.

Website: https://mediacenter.hu/

The Data Processor is in charge of storing personal data, under its contract with the Data Controller. The Data Processor is not entitled to obtain these personal data.

Data processing related to bookkeeping

Data Processor’s name: Qualitas System Kft.

Data Processor’s registered seat: 1141 Budapest, Vezseny utca 4-6/B

Data Processor’s phone number: 06 1 405 5215

Data Processor’s e-mail address: ellenorzes@qualitassystem.hu

Data processor’s website: https://webshopokkonyveloje.hu/

The Data Processor contributes to the booking of accounting documents under its written contract with the Data Controller. Doing so, the Data Processor processes the data subject’s name and address, to the extent necessary for keeping accounting records, and for a duration regulated by paragraph (2) of section 169 of the Sztv. Having fulfilled these tasks, the Data Processor immediately erases this information.

Data processing related to invoicing

Data Processor’s name: KBOSS.hu Kft

Data Processor’s registered seat: 1031 Budapest, Záhony utca 7/C.

Data Processor’s phone number: +36-30-35-44-789

Data Processor’s e-mail address: info@szamlazz.hu

Data processor’s website: https://szamlazz.hu

The Data Processor contributes to the administration of accounting documents under its contract with the Data Controller. Doing so, the Data Processor processes the data subject’s name and address, to the extent necessary for keeping accounting records, and for a duration regulated by paragraph (2) of section 169 of the Sztv. Having fulfilled these tasks, the Data Processor erases this information.

Data processing related to online payments

Data Processor’s name: OTP Mobil Szolgáltató Kft.

Data Processor’s registered seat: 1143 Budapest, Hungária krt. 17-19.

Data processor’s phone number: +36 1/20/30/70 3-666-611

Data processor’s e-mail address: ugyfelszolgalat@simple.hu

Data processor’s website: https://simplepay.hu/

The Data Processor contributes to the execution of online payments under its contract with the Data Controller. Doing so, the Data Processor processes the data subject’s billing name and address, as well as the number and the date of the order, within the period regulated by the Civil Code.

Data Processor’s name: Barion Payment Zrt.

Data Processor’s registered seat: 1117 Budapest, Infopark sétány 1. I. épület 5. emelet 5.

Data Processor’s phone number:

Data processor’s e-mail address:

Data processor’s website: https://www.barion.com/

You are entitled to exercise the following rights during the data processing

Within the period of the data processing, you are entitled to exercise the following rights, as regulated by the provisions of the Regulation:

right to revoke consent
access to information related to personal data and data processing
right to rectification
right to restrict the data processing
right to erasure
right to object
right to portability.

If you wish to exercise your rights, that involves your identification and inevitable communication with the Data Controller. For this purpose, you will need to provide your personal data (however, no identification can take place other than based on such data of yours that the Data Controller processes, anyway), and your complaint regarding data processing will be available to the Data Controller in its e-mail inbox, within the period specified in the complaints section of the present policy. If you have been our customer, and you would like to identify yourself for the administration of a complaint or for an issue to be handled under a warranty, please also provide your order ID for the identification process. Using this, we will be able to identify you as our customer.

The Data Controller responds to complaints related to data processing within 30 days.

Right to withdraw consent

You are entitled to withdraw your consent to the processing of data at any time. In such cases, we erase the data from our systems. Please note, however, that in case of unfulfilled orders, the withdrawal may result in our inability to deliver your order. Furthermore, if your purchase has already been completed, we cannot erase any invoicing data from our systems under relevant accounting regulations, and if you have outstanding debts payable to us, we shall be entitled to keep processing your data, on the grounds of the legitimate interest of collecting the debt, even after you withdraw your consent.

Access to personal data

You are entitled to receive the Data Controller’s feedback on whether the processing of your personal data is in progress, and if it is, then you have the right to:

access the processed data and
receive information from the Data Controller about the following:
- the purposes of the data processing;
- categories of your processed personal data;
- information about the recipients or recipients categories, to whom or to which the Data Controller has disclosed or will disclose your personal data;
- the projected duration of the storage of the personal data, or – if this is impossible – the aspects of the determination thereof;
- your right to seek rectification or erasure of your personal data by the Data Controller or restriction of the processing thereof, as well as to object to the processing of such personal data performed on a legitimate interest;
- the right to lodge a complaint to a supervisory authority;
- all available information about the source of the data, if the data were not collected from you;
- the practice of automated decision-making (if such procedure is applied), including profiling, and – at least in these cases – the information about the applied logic and what significance such data processing has, and what foreseeable consequences it will involve for you.

The purpose of exercising this right is to establish and verify the legality of the data processing. For this reason, in case of multiple requests for information, the Data Controller may charge a reasonable compensation for its costs it incurred while providing the information.

The access to personal data is ensured by the Data Controller through sending you the processed personal data and information by e-mail, once you have been identified. If you have created an account, your access is ensured through the fact that after you sign in to your account, you can view and verify your processed data.

Please indicate in your request if you are asking for access to personal data or seek the information related to data processing.

Right to rectification

You are entitled to ask the Data Controller to immediately rectify any inaccurate personal data of yours.

Right to restrict the data processing

You are entitled to the restriction of the data processing by the Data Controller upon your request, in any one of the following cases:

You dispute the accuracy of personal data, in which case the restriction applies to the amount of time enabling the Data Controller to verify the accuracy of the personal data. If data accuracy can be established right away, no restriction will take place;
the data processing is unlawful, but you oppose the erasure of the data for any reason (for instance, because they are important to you for the enforcement of any claim you may have). Thus, instead of the erasure of the data, you request the restriction of their use;
The Data Controller no longer needs the data for the data processing specified, but you need them to be able to present, enforce or defend certain claims; or
You objected to the data processing, but the Data Controller’s legitimate interest may also substantiate the data processing, in which case the data processing must be restricted, until it is established that the Data Controller’s legitimate interests take precedence over your legitimate interests.

If the data processing is restricted, such personal data may only be processed – with the exception of the storage thereof – with the data subject’s consent, or in order to present, enforce or defend legal claims, or to defend the rights of other natural or legal persons, or to ensure that any important public interest of the European Union or a member state is respected.

The Data Controller will notify you of the lifting of the restriction in advance, at least 3 working days before the lifting takes place.

Right to erasure or right to be forgotten

You are entitled to ask the Data Controller to erase any personal data of yours without any unreasonable delay, in any of the following cases:

the personal data are no longer needed for the purpose for which the Data Controller collected or processed them in another way;
You withdraw your consent, and there is no other legal basis for the data processing;
You object to the data processing based on a legitimate interest, and there is no legitimate reason (that is a legitimate interest) for the data processing that should take precedence,
the Data Controller has been processing the personal data unlawfully, and this has been established on the basis of the complaint,
the Data Controller is required under EU or member state legislation applying to them to erase the personal data.

If the Data Controller has published for any legitimate reason your personal data, and must then erase the data for any of the reasons specified above, the Data Controller must take all reasonable measures within the scope of due diligence – while taking into consideration the available technologies and the costs of their implementation – to ensure that other data controllers processing the data are informed about the fact that you requested for the copy or duplicate of these personal data to be erased.

Erasure is not applicable, if the data processing is necessary for:

the exercise of the right of the freedom of expression or the right to information;
the fulfilment of an obligation imposed by EU or member state legislation on the Data Controller, requiring the processing of personal data (an example of this data processing occurs when data are processed for invoicing, as keeping invoices is required by law), or the fulfilment of a task performed for legitimate public interests, or within the scope of the exercise of public powers accorded to the Data Controller;
the presentation, enforcement and defense of legal claims (for example, if the Data Controller holds claims against you, and they have not been settled, or a consumer or data processing complaint is being processed).

Right to object

You are entitled to object – for reasons related to your situation – to the processing of your data on the basis of a legitimate interest at any time. In this case, the Data Controller may no longer process the personal data, unless they prove that the data processing is necessitated by such compelling, legitimate reasons that take precedence over your interests, rights and freedoms, or which are related to the presentation, enforcement or defense of legal claims.

If the processing of personal data is performed for direct marketing, you are entitled to object at any time to the processing of your personal data for this purpose, including profiling, if that is connected to direct marketing. If you object to the processing of personal data for direct marketing, then no personal data may be processed any further for this purpose.

Right to portability

If the data processing takes place in an automated way, or it is based on your voluntary consent, you have the right to request the Data Controller to give you the data you provided to the Data Controller, which the Data Controller shall put at your disposal in xml, JSON or csv format, as long as that is technically viable, and you may request that the Data Controller forward these data to another data controller in the same formats.

Automated decision-making

You are entitled to be exempt from the effect of decisions based solely on automated data processing (including profiling), which would have a legal effect on you, or affect you to a similarly significant extent. In these cases, the Data Controller is obliged to take appropriate measures to ensure the protection of the data subject’s rights, freedoms and legitimate interests, including at least the right of the data subject that consists in requesting the data controller’s human intervention, expressing its opinion and submitting its challenge with regard to the decision.

The above shall not be applicable, if the decision:

is necessary for the conclusion or performance of the contract between you and the data controller;
is made enabled by such an EU or member state regulation, applicable to the data subject, which also establishes appropriate measures serving your rights, freedoms, and the defense of your legitimate interests; or
is based on your express consent.

Registration to data protection register

In accordance with the provisions of the Privacy Act, the Data Controller had to report some of its data processing activities to the data protection register. This reporting obligation ceased as of 25 May, 2018.

Privacy measures

The Data Controller affirms that it has taken adequate security measures to protect personal data against unauthorized access, alteration, transmission, disclosure, erasure and destruction, as well as to prevent them from becoming inaccessible due to their accidental destruction or damage, or the changes of the technology applied over time.

The Data Controller makes every possible effort, enabled by the organizational and technical circumstances, to ensure that its data processors also take proper data security measures, when handling your personal data.

Available legal remedies

If you believe the Data Controller has violated some legal regulation on data processing, or did not fulfill a request of yours, related to the same, then you can apply for the Hungarian National Authority for Data Protection and Freedom of Information to cease the unlawful processing activity (mailing address: 1363 Budapest, Pf. 9., e-mail: ugyfelszolgalat@naih.hu).

We also wish to inform you that in case of infringements of the provisions of the relevant legal regulations, or if the Data Controller failed to accede to a request of yours, then you may start civil proceedings against the Data Controller.

Modification of the Data Processing Policy

The Data Controller reserves the right to modify the present Data Processing Policy such that does not affect the purpose or the legal basis of the data processing. By using the website following the entry into force of the modification, you accept the modified Data Processing Policy.

If the Data Controller intends to continue processing the data collected, for a purpose other than that of their collection, it shall properly inform you of the purpose of the data processing, also covering the following information:

the duration of the storage of the personal data, or – if this is impossible – the aspects of the determination thereof;
your right to seek the rectification or erasure of your personal data by the Data Controller or the restriction of the processing thereof, as well as to object to the processing of such personal data performed on a legitimate interest, or – in case of data processing based on consent or contractual relationship – to request for your right to portability to be ensured;
in case of data processing based on consent, the fact that you may withdraw your consent at any time,
your right to lodge a complaint to a supervisory authority;
whether your provision of your personal data is based on a legal regulation or a contractual relationship, whether it is a prerequisite for the conclusion of the contract, and whether you are obliged to disclose personal data, and what potential consequences the non-provision of the data may involve;
the practice of automated decision-making (if such procedure is applied), including profiling, and – at least in these cases – the information about the applied logic and what significance such data processing has, and what foreseeable consequences it will involve for you.

The data processing may be commenced after this. If the legal basis of the processing is provided by a consent, you also have to consent to the data processing, in addition to receiving this information.

This document contains all relevant data processing information in relation to the operation of the website, in compliance with the EU’s General Data Protection Regulation (No. 2016/679) (hereinafter referred to as: Regulation. GDPR) and Act CXII of 2011 (hereinafter referred to as: Infotv.).

“Hold mail” and postal point delivery

Please note that Magyar Posta Zrt. identifies the recipient in accordance with the data processing policy in force at any time. For this reason, they may ask you for your personal data when you take delivery at a post office or a postal point.

Privacy Policy

Go shopping on your local site

Hungarian | Magyar

English