Privacy Policy

1. Purpose of the Data Management Information

Magyar Szárazvirág Kft (6050 Lajosmizse Gyártelep 6., hereinafter referred to as the service provider, data controller) acknowledges the content of this legal notice as binding. It undertakes to ensure that all data management related to its activities complies with the expectations set out in this regulation and the applicable national laws, as well as the legal acts of the European Union.
The data protection principles related to the data management of Magyar Szárazvirág Kft are continuously available at www.szarazvirag.hu/adatvedelem.
Magyar Szárazvirág Kft reserves the right to change this notice at any time. Naturally, it will notify its audience of any changes in due time.
If you have any questions related to this notice, please write to us, and our colleague will answer your question.
Magyar Szárazvirág Kft is committed to protecting the personal data of its customers and partners and considers it extremely important to respect its customers' right to informational self-determination. Magyar Szárazvirág Kft treats personal data confidentially and takes all necessary security, technical, and organizational measures to ensure the security of the data.
Magyar Szárazvirág Kft presents its data management practices below.

2. Data Controller's Details

If you wish to contact our company, you can reach the data controller at www.szarazvirag.hu or info@szarazvirag.hu.

Name: Magyar Szárazvirág Kft
Headquarters: 6050 Lajosmizse Gyártelep 6.
Company Registration Number: 03-091080224
Tax Number: 12470314-2-03
Phone Number: +36 76/507-995
Email: info@szarazvirag.hu

3. Scope of Personal Data Managed

3.1 Personal Data Provided During Registration

Data required for issuing invoices and delivery:

Name / Company Name
Postal Code
Country
City
Address

Optional fields:

Tax Number
Bank Account Number

Data required for contact:

Contact Person’s Name
Phone Number
Email Address
Newsletter Subscription

Webshop login data:

Username
Password

3.2 Technical Data
Magyar Szárazvirág Kft selects and operates the IT tools used for personal data management during service provision in such a way that the managed data:

Is accessible to those authorized (availability);
Its authenticity and authentication are ensured (authenticity of data management);
Its integrity is verifiable (data integrity);
Is protected against unauthorized access (data confidentiality).

Magyar Szárazvirág Kft protects the data with appropriate measures against unauthorized access, alteration, transmission, disclosure, deletion, destruction, and accidental destruction.
Magyar Szárazvirág Kft ensures data security during data management with technical, organizational, and organizational measures that provide an adequate level of protection against risks related to data management.
Magyar Szárazvirág Kft maintains:

Confidentiality: Protects information so that only those who are authorized can access it;
Integrity: Protects the accuracy and completeness of the information and processing method;
Availability: Ensures that authorized users can access the desired information when needed and that the related tools are available.

3.3 Cookies
3.3.1 The Role of Cookies

Collect information about visitors and their devices;
Remember visitors' individual settings, which may be used for online transactions, so they do not need to be re-entered;
Facilitate the use of the website;
Provide a quality user experience.

To provide customized service, a small data packet called a cookie is placed on the user's computer and read back during subsequent visits. If the browser returns a previously saved cookie, the cookie manager can link the user's current visit with previous ones, but only concerning its content.
3.3.2 Essential Session Cookies
These cookies ensure that visitors can fully and smoothly browse Magyar Szárazvirág Kft's website, use its functions, and access the services available there. The validity of these types of cookies lasts until the end of the session (browsing), and they are automatically deleted from the computer or device used for browsing when the browser is closed.
3.3.3 Third-Party Cookies (Analytics)
Magyar Szárazvirág Kft's website uses third-party cookies, such as those from Google Analytics. By using the Google Analytics statistical service, Magyar Szárazvirág Kft collects information on how visitors use the website. The data is used to develop the website and improve the user experience. These cookies remain on the visitor's computer or device used for browsing until they expire or are deleted by the visitor.
3.4 Data Related to Online Orders
The data provided during registration.
3.5 Data Related to Online Administration
The data provided during registration.
3.6 Data Related to Newsletters
Newsletter subscription is possible during registration and after registration on the Profile page.
Unsubscribing is possible after logging in, by visiting the Profile page.

4. Intended Use of Managed Data

Magyar Szárazvirág Kft uses personal data exclusively for fulfilling orders, issuing invoices, and operating the website for technical reasons to ensure access to certain information or for general communication.

5. Purpose, Method, and Legal Basis of Data Management

5.1 General Data Management Principles
Magyar Szárazvirág Kft's data management activities are based on voluntary consent or legal authorization. In the case of voluntary consent-based data management, data subjects can withdraw their consent at any stage of the data management.
In some cases, the management, storage, and transmission of certain data provided are made mandatory by laws, which we inform our customers about separately.
We call the attention of data providers to Magyar Szárazvirág Kft that if they do not provide their personal data, it is the data provider's duty to obtain the consent of the data subject.
Our data management principles are in line with the applicable data protection laws, particularly:

Act CXII of 2011 on the Right of Informational Self-Determination and on Freedom of Information (Infotv.);
Regulation (EU) 2016/679 of the European Parliament and of the Council (April 27, 2016) on the protection of natural persons regarding the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, GDPR);
Act V of 2013 on the Civil Code (Ptk.);
Act C of 2000 on Accounting (Számv. tv.);
Act LIII of 2017 on the Prevention and Combating of Money Laundering and Terrorist Financing (Pmt.);
Act CCXXXVII of 2013 on Credit Institutions and Financial Enterprises (Hpt.).

6. Physical Storage Locations of Data

Your personal data (i.e., data that can be associated with you) can be handled in the following ways: On one hand, technical data related to your computer, browser, internet address, and visited pages are automatically generated in our computer system in connection with maintaining an internet connection. On the other hand, you can provide your name, contact information, or other data if you wish to establish personal contact with us while using the website.

7. Data Transmission, Data Processing, and the Scope of Data Recipients

Detail the companies involved in data transmission, processing, or access. Provide basic information about the companies (company introduction) and the scope of employees who have access to the data. Ensure that confidentiality clauses in contracts with partners cover this scope.

8. Rights of Data Subjects and Legal Remedies

Data subjects can request information about their personal data management and request the correction, deletion, or restriction of their personal data, except for mandatory data management. They can exercise their right to data portability and objection in the manner indicated at the time of data collection or through the data controller's contact details above.
8.1 Right to Information
Magyar Szárazvirág Kft takes appropriate measures to provide all information mentioned in Articles 13 and 14 of the GDPR and all notifications under Articles 15 to 22 and 34 regarding personal data processing to data subjects concisely, transparently, intelligibly, and easily accessible, using clear and plain language.
8.2 Right of Access
The data subject has the right to receive feedback from the data controller on whether their personal data is being processed and, if such processing is taking place, to access the personal data and the following information: the purposes of data management; the categories of personal data concerned; the recipients or categories of recipients to whom personal data have been or will be disclosed, including recipients in third countries or international organizations; the planned duration of data storage; the right to rectification, deletion, restriction of data management, and objection; the right to lodge a complaint with a supervisory authority; information on data sources; the existence of automated decision-making, including profiling, and meaningful information about the logic involved and the significance and expected consequences of such processing for the data subject. The data controller provides the information within a maximum of one month from the request's submission.
8.3 Right to Rectification
The data subject can request the correction of inaccurate personal data concerning them and the completion of incomplete data managed by Magyar Szárazvirág Kft.
8.4 Right to Deletion
The data subject has the right to have their personal data deleted by Magyar Szárazvirág Kft without undue delay if one of the following grounds applies:

The personal data is no longer necessary for the purposes for which they were collected or otherwise processed;
The data subject withdraws their consent on which the processing is based, and there is no other legal ground for the processing;
The data subject objects to the processing, and there are no overriding legitimate grounds for the processing;
The personal data has been unlawfully processed;
The personal data has to be erased for compliance with a legal obligation in Union or Member State law to which Magyar Szárazvirág Kft is subject.

Deletion cannot be initiated if data management is necessary: for exercising the right of freedom of expression and information; for compliance with a legal obligation which requires processing under Union or Member State law to which Magyar Szárazvirág Kft is subject; for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller; for reasons of public interest in the area of public health; for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes; or for the establishment, exercise, or defense of legal claims.
8.5 Right to Restriction of Processing
At the request of the data subject, Magyar Szárazvirág Kft restricts data processing if one of the following conditions is met:

The accuracy of the personal data is contested by the data subject, for a period enabling the data controller to verify the accuracy of the personal data;
The processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
The data controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise, or defense of legal claims; or
The data subject has objected to processing pending the verification of whether the legitimate grounds of the data controller override those of the data subject.

If data processing is restricted, such personal data shall, with the exception of storage, only be processed with the data subject's consent or for the establishment, exercise, or defense of legal claims or for protecting the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State.
8.6 Right to Data Portability
The data subject has the right to receive the personal data concerning them, which they have provided to a data controller, in a structured, commonly used, and machine-readable format and has the right to transmit those data to another data controller without hindrance from the data controller to which the personal data have been provided.
8.7 Right to Object
The data subject has the right to object, on grounds relating to their particular situation, at any time to the processing of personal data concerning them, which is based on point (e) or (f) of Article 6(1) of the GDPR, including profiling based on those provisions. Magyar Szárazvirág Kft shall no longer process the personal data unless it demonstrates compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the data subject or for the establishment, exercise, or defense of legal claims.
8.8 Automated Individual Decision-Making, Including Profiling
The data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them.
8.9 Right to Withdraw Consent
The data subject has the right to withdraw their consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
8.10 Right to Lodge a Complaint
The data subject has the right to lodge a complaint with a supervisory authority if they consider that the processing of personal data relating to them infringes the GDPR.

9. Data Security Measures

Magyar Szárazvirág Kft ensures the security of data by implementing appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, transmission, disclosure, deletion, destruction, and accidental destruction, as well as against becoming inaccessible due to changes in the technology used.
Magyar Szárazvirág Kft ensures that in the course of automated processing of personal data, measures are taken to:

Prevent unauthorized data entry;
Prevent unauthorized use of data processing systems;
Ensure that data processing systems can be used by authorized individuals;
Ensure that it can be checked and established to which entities personal data have been or may be transmitted using data transmission equipment;
Ensure that it can be checked and established which personal data were inputted into data processing systems, when, and by whom;
Ensure that installed systems can be restored in case of malfunctions;
Report errors occurring during automated processing.