Data PRIVACY Notice
1. Purpose of this Notice and the Data Controller
The purpose of this Notice is to describe, in full detail, and in accordance with Regulation EU 2016/679 (General Data Protection Regulation, "GDPR") the data processing activity of PP Hungary Solutions Kft. (seat: 1147 Budapest, Telepes utca 26/B. fszt. 7., company registry number: Cg. 01-09-200432, e-mail address: info@gorillawear.hu) as data controller (the "Data Controller") in connection with the purpose set forth in Section 2 below.
2. Purpose of processing
2.1 Web shop
The purpose of the data processing is to register the buyers at gorillawear.hu webpage operated by the Data Controller, and to buy online.
2.2 Newsletter
The purpose of the data processing is to process the personal data of those who register themselves at the gorillawear.hu webpage operated by the Data Controller for contacting purposes and for sending out the newsletters.
3. Data subjects and categories of data processed
The data subjects are the individuals registering on the web shop and/or for the newsletter.
The Data Controller processes the following personal data of the data subjects for the purpose set forth in Section 2.1 above:
a) Shipping information: email address, password, name, phone number, country, ZIP code, city, name of public domain, type of public domain, building, staircase, floor, door.
b) Billing information: Name, tax number, ZIP code, city, name of public domain, type of public domain, building, staircase, floor, door.
c) Purchasing information: name, size, price of the purchased items, etc.
The Data Controller processes the following personal data of the data subjects for the purpose set forth in Section 2.2 above: email address, name.
The source of the above personal data shall be the data subject concerned.
4. Legal basis of the processing
The legal basis of the data processing is the express, previous and informed consent of the data subjects.
The consent to the data process is provided willfully. The data subject shall be entitled to withdraw its consent at any time by providing a notice to the Data Controller; in such case the withdrawal shall not affect the lawfulness of processing based on consent before its withdrawal. In case the data subject rejects to provide its consent, or withdraws their consent, it may cause that the Data Controller shall not be able to contact the data subject, the data subject may not be able to buy at the web shop, and/or may not receive the newsletter.
5. Access to the data
The personal data may be accessed by those employees of the Data Controller who are responsible for operating the web shop and the newsletter.
6. Data processor
Data processing activities shall be provided by contractors, service providers of the Data Controller who are engaged to provide services involving data processing services.
The Data Controller shall ensure with appropriate measures that data processors acting on behalf of the Data Controller shall act and process personal data that was made available for them in accordance with the instructions of the Data Controller and in accordance with the relevant Hungarian and EU laws.
7. Data transfer
The personal data may be disclosed to the competent authorities and/or courts in connection with procedures initiated in front of such authorities/courts. In connection with such procedures, personal data may also be disclosed to the Data Controller`s legal counsel or other professional advisers.
8. Transfer of personal data to third country
The Data Controller shall not transfer the personal data to companies located in third countries (outside the EEA).
9. Data retention
The personal data will be retained by the Data Controller until the consent is withdrawn but for 8 (eight) years after the purchase.
10. Cookie notice
You can access to the cookie policy – which contains information on how the Data Controller uses cookies and other similar technologies - of the Data Controller by clicking to this link.
11. Data Subject rights
(i) Right of access: The data subject may have the right to obtain confirmation as to whether or not his personal data is being processed, and, where that is the case, to request access to the personal data and to certain information relating to the data process.
The right of access applies to – inter alia – the following information: purposes of the processing, the categories of personal data processed, and the recipients or categories of recipient to whom the personal data have been or will be disclosed.
Furthermore, the data subject may have the right to obtain a copy of his personal data processed by the Data Controller.
Right to rectification: In certain cases, the data subject may have the right to request the rectification of inaccurate personal data, or the completion of incomplete personal data.
Right to erasure (right to be forgotten): In certain cases, the data subject may have the right to request the erasure of his personal data, and the Data Controller may be obliged to erase such personal data.
Right to restriction of processing: In certain cases, the data subject may have the right to request the restriction of the processing of his personal data. In this case, the respective data may be processed only for certain purposes.
Right to object: In certain cases, the data subject may have the right to object to the processing of his personal data, and the Data Controller may be required to cease the processing of such data.
It may be possible that the Data Controller is unable to fully or partially grant a request related to the above rights due to the nature of the data. In addition, the above rights are not absolute, and the exercise of the above rights may be subject to conditions pursuant to applicable data protection laws.
The data subject may also lodge a complaint with the National Authority for Data Protection and Freedom of Information (seat: 1024 Budapest, Szilágyi Erzsébet fasor 22/C., Hungary, Telephone: +36 (1) 391 1400, E-mail: ugyfelszolgalat@naih.hu, website: www.naih.hu) or may initiate court proceedings before the court having competence over his place of domicile or habitual residence in connection with the unlawful data processing.
12. Contact
The data subject may exercise his rights set out in Section 11 by sending an e-mail to the Data Controller`s email address, or by sending a postal letter to the Data Controller`s seat. The Data Controller will respond to any requests within the shortest time possible, but in any case no later than within 1 (one) month.
13. Amendment of the Notice
The Data Controller may amend the present Notice unilaterally at any time due to any changes in applicable laws or the Data Controller`s data processing operations. The date of the last update is indicated at the end of the Notice.
Last update: July 4, 2019
