DATA MANAGEMENT INFORMATION

About the data management practices for the website  https://famextools.hu/ operated by FAMEX TOOLS Ltd.

1. Introduction

1.1. Data controller data

Data Controller Name: FAMEX TOOLS KFT.

Headquarters: 9021 Győr, Bajcsy-Zsilinszky út 51. III. floor 2.

Company registration number: 08-09-015816

Cj. registered at: the Company Court of Győr General Court

Tax number: 14179583-2-08

Representative: managing director Péter Imre

Email: office@famextools.hu

1.2 The purpose of this Privacy Notice is to inform you about the personal data collected from or about you and how it is processed in the course of the services provided by the Data Controller or through the Website, as well as about the Data Controller's data management practices for its customers and your rights. The Data Controller operates a website at https://famextools.hu/ to provide information about itself, its services, offers and contact details, and processes personal data of visitors to the website and of persons who contact the Data Controller through the website by requesting an offer or sending a message.

1.3 It is important to the Data Controller that your personal data is handled securely and only disclosed to third parties with your voluntary written consent. The Data Controller shall ensure that your personal data is processed lawfully and only to the extent strictly necessary for the purposes and to the extent of the processing, in accordance with the GDPR Regulation and the applicable Hungarian data protection laws and international recommendations, and as set out in this notice.

1.4 Through this Privacy Policy, the Data Controller ensures that the customer who uses the webshop can find out at any time before and during the use of the webshop service which types of data are processed by the Data Controller for which data processing purposes, including the processing of data that cannot be directly related to the customer.

1.5 The Data Controller reserves the right to amend this Privacy Notice. It will inform the data subject thereof by publishing it on the website. Information on data management is available on the website https://famextools.hu/.

2. Information about our data management activities

2.1 The Data Controller only requests personal data from visitors to the website if they wish to request an offer or contact the Data Controller through the website.

The Data Controller carries out the following data management activities in connection with the operation of the website and the webshop:

1. A) Contact us via the Contact form

1. B) Website visit

2.2 The Data Controller does not process data for purposes other than those set out above, in particular to increase the efficiency of its service, to deliver electronic advertising or other targeted content to the user, for market research, to perform profiling or automated decision-making, or to transfer data to an international organisation or a third country outside the European Union. The controller is not obliged to appoint a data protection officer.

2.3. In the event of non-completion of the order or contract, the Data Controller shall delete the processed personal data without delay.

3. Information about data processors

3.1 The Data Controller uses the following data processors for the processing of data, the operation of the website and webshop and the provision of high-quality customer service:

3.2 If the Data Controller uses an additional data processor in the future, it shall inform the data subjects by amending this Notice at least 15 days prior to the use of the data processor.

3.3 In addition, we will only transfer your data within the limits set by law, on the basis of a legal obligation (for example, in response to a request from a public authority, but only to the extent strictly necessary for the purpose of the request, on the basis of a final decision by a public authority) or with your prior explicit consent.

4. Cookie policy

By means of this notice and the Cookie Policy, which forms part of it, the Data Controller is obliged to inform you about the cookies used when browsing the website, the scope, legal basis, duration and rights of the personal data processed on the basis of cookies.

4.1. What are cookies?

Cookies are small data files that are transferred to your computer through the website and are saved and stored by your internet browser. The most commonly used internet browsers usually accept and allow the download and use of cookies by default. If you do not agree to the use of cookies, you can reject or disable them by changing your browser settings, or you can delete cookies already stored on your computer. For more information on the use of cookies, please refer to the "help" section of each browser.

4.2. What cookies does the Data Controller use?

Only technically necessary system cookies are set for the website.

We are obliged to inform you in advance about the cookies used on the website, however, the Data Controller does not need to obtain your prior consent when using these types of cookies.

We do not use or allow cookies on the website that are based on your consent, that allow your personal identification or that may collect data for third parties without your consent. By using the website, you agree to the use of technical cookies below and the privacy provisions applicable to them.

The technique of cookies ensure the secure, proper and high quality user-friendly operation of the website. In this context, temporary technical cookies only store temporary data for the duration of the browsing session. They are essential for the functionality of the website. Permanent technical cookies are used to recognise you on your next visit based on your computer's IP address. These cookies are stored for a longer period of time in the browser's cookie file. You can change the duration of this period in your browser settings.

4.3 The processing of data collected by cookies during your visit to the website is based on the legitimate interest of the Data Controller. The Data Controller can thus ensure the proper and correct functioning of the website service and its monitoring. Furthermore, it enables the Data Controller to ensure the security of the website and to identify visitors who pose an IT threat. The processing of the personal data of the website visitor indicated above (such as IP address, browser settings) is lawful even without his consent. The Data Controller has carried out the necessary balancing of interests test in this regard, and has determined that the legal basis for the processing is the legitimate interest as set out in Article 6(1)(f) of the GDPR. The use of technical and statistical cookies does not undermine the interests, fundamental rights and freedoms of the data subject in a way that would override the legitimate interests of the controller.

4.4 We also inform you that you have the possibility to disable, enable or modify certain types of cookies in the settings of the browser you use. However, the Data Controller is not responsible if our website does not function properly due to the disabling of cookies. For a detailed description of the data collection by cookies here reaches.

4.5 The information collected by cookies is not sold or distributed by the website to third parties.

The website may contain links to external websites operated by third parties. The Data Controller does not control the data protection provisions of external websites, and the Data Controller accepts no legal responsibility for the use of these websites.

You can read more about the cookies used by Google and our privacy policy here:

https://policies.google.com/privacy?hl=hu&gl=hu

https://www.google.com/policies/technologies/types/

5. What rights do you have when we process your data?

Below we explain to you your rights in relation to your personal data, and you can send your requests to the postal or e-mail address of the Data Controller.

The Data Controller will respond to requests within 25 days to the contact details you provide. We store the personal data provided in your enquiry or complaint on the basis of a legal obligation to respond to enquiries and complaints. We will store your personal data for the period prescribed by law, i.e. the general limitation period of 5 years, which is justified by the need to pursue a claim in the event of a dispute or legal action.

5.1. Right to information

You have the right to obtain from the Data Controller clear, comprehensible and transparent information about the processing of your personal data (in particular, its legal basis, duration, purpose, recipients) and your rights. This is the purpose of this Privacy Notice. The information is free of charge unless you have already submitted a request for information for the same set of data in the same year. In such a case, the Data Controller is entitled to charge a fee. We may refuse to provide information only in cases provided for by law, by indicating the legal provision and by informing you of the possibility of recourse to the Authority and of judicial remedies.

5.2. Right of access

You have the right to receive feedback from the Controller on whether your personal data is being processed. If it is ongoing, you have the right to access and be informed about the processing of your personal data:

the purposes of the processing; the categories of personal data concerned; the recipients to whom the personal data may be disclosed, the envisaged storage period, and, if this is not possible, the criteria for determining this period, a description of the data subject's rights.

You have the right to obtain a copy of the personal data processed. If you request additional copies of your personal data, the Controller may charge a reasonable fee based on the administrative costs. If you have made a request by electronic means, the Controller will provide you with the information in electronic form, unless you request this by post or in person.

5.3. Right to rectification and addition

You have the right to ask the Data Controller to correct inaccurate personal data concerning you or to complete incomplete data. The Data Controller will send you confirmation of this.

5.4. Right to cancellation

You have the right to request the deletion of your personal data and the Data Controller will delete your personal data without undue delay if.

• the personal data are no longer necessary for the original purpose,
• You withdraw your consent in the case of processing based on consent
• where the legitimate interests underlying the processing of data by cookies, such as the proper and secure functioning of the website, no longer prevail,
• if the personal data have been unlawfully processed (for example, if the Data Controller has transferred the personal data to a third party without your consent); or
• if the erasure of the personal data is a legal obligation under Hungarian or EU law.

The right of erasure may not be exercised in cases where the processing of the data is required by law, such as the storage of our customers' personal data for the purpose of fulfilling tax obligations, for example in the form of accounting documents.

If the request for erasure is lawful, the Data Controller will extend the erasure to paper data and back-up data in addition to data stored electronically.

5.5. Right to withdraw consent

You have the right to withdraw your consent at any time without restriction. Such withdrawal shall not affect the lawfulness of processing carried out before the withdrawal of consent. You may also initiate the withdrawal by post or electronically at the email address of the Data Controller.

5.6. Right to object

You may object to the processing of your personal data (i) if the processing of the personal data is necessary solely for compliance with a legal obligation to which the Controller is subject or for the purposes of the legitimate interests pursued by the Controller or a third party; (ii) if the processing is for direct marketing, public interest surveys or scientific research. The Data Controller shall examine the lawfulness of the objection and, if the objection is justified, shall terminate the processing and block the personal data processed and shall notify the objection and the action taken on it to all those to whom the personal data concerned by the objection have been disclosed.

5.7. Right to restriction of processing

You have the right to have the Data Controller restrict processing at your request if.

• the data subject contests the accuracy of the personal data, and the Data Controller will restrict processing until it has verified the accuracy of the personal data,
• the processing is unlawful but you object to the deletion of the data,
• The controller no longer needs your data, but you need it to bring, enforce or defend legal claims.

If we do not comply with your request for rectification, blocking or erasure, we will inform you in writing or electronically within 25 days of receipt of your request of the reasons for our refusal and inform you of the possibility of judicial remedy and of recourse to the Authority.

5.8. Right of complaint and redress

You have the right to lodge a complaint with the National Authority for Data Protection and Freedom of Information (NAIH) or to initiate a civil action regarding the processing of your personal data.

Complaints will be investigated by the Authority if you have previously contacted the Company in relation to the exercise of your rights as set out in the notification and the Data Controller has failed to do so.

We also provide you with the address, contact details and website address of the NAIH.

• Headquarters: 1055 Budapest, Falk Miksa utca 9-11
• Postal address: 1530 Budapest, Pf.: 5.
• Phone: +36 (1) 391-1400, Fax: +36 (1) 391-1410
• E-mail:ugyfelszolgalat@naih.hu
  Website: https://naih.hu/

You have the right to take legal action to claim that your rights have been infringed. The court will decide the case out of turn. Data protection litigation falls within the jurisdiction of the courts, which may be brought before the courts in your place of residence or domicile.

6. What is the main legislation governing our data management activities?

• Regulation (EU) 2016/679 of the European Parliament and of the Council on the processing of personal data of natural persons (GDPR)
• Act CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information - (Info tv.)
• Act V of 2013 on the Civil Code (Civil Code Act)
• Act CVIII of 2001 on certain aspects of electronic commerce services and information society services - (Eker tv.)
• Act XLVIII of 2008 on the Basic Conditions and Certain Limits of Economic Advertising Activities (Grtv.)
• Act CLV of 1997 on Consumer Protection (Consumer Protection Act)