This Data Protection Notice contains information on the processing of personal data on the website https://merchstaff.com (hereinafter referred to as the Website) operated by MerchStaff Kft. (Head Office: 1064 Budapest, Podmaniczky utca 57. 2nd floor , room 14 , Tax ID: 29185429-2-42 ), as data controller (hereinafter referred to as the “Service Provider”), as well as information on the data management and data processing carried out during the provision of its services.
1. LEGAL BASIS OF DATA PROCESSING, PURPOSE, SCOPE OF DATA PROCESSED AND DURATION OF DATA PROCESSING
The Service Provider, as a data controller, processes the data provided by users of the Website and those using the services and those subscribing to newsletters (hereinafter collectively: Users) on the following legal grounds and for the following purposes, pursuant to REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Regulation (EC) No 95/46 (General Data Protection Regulation, hereinafter referred to as "GDPR").
|
Managed data
|
Purpose of data processing
|
Legal basis for data processing
|
Duration of data processing
|
|---|---|---|---|
|
I.) When using the Service, the User:
Name, Address, Contact details, Email address, Your phone number, Billing data (tax identification number, bank account number, bank name, invoice or receipt number). |
Ensuring application, contract fulfillment.
|
The Service Provider's data processing is the performance of the contract according to Section 6(1)(b) of the GDPR.
|
As long as necessary for the performance of the contract, but no longer than until the termination of the contractual relationship. In the case of accounting documents and other data that the Service Provider is required to retain by law, for the period specified by law.
|
|
II.) In case of subscribing to the newsletter, the User:
Name (surname, first name), Email address. |
Sending marketing inquiries, information about new products, promotions, events and other news, and maintaining the quality of service.
|
The legal basis for the Service Provider's data processing is the User's consent, according to Section 6(1)(a) of the GDPR.
|
Until consent is withdrawn, i.e. until unsubscribe.
|
|
III.) Billing information
tax number, bank account number, bank name. |
Issuance of certificates and their preservation.
|
The Service Provider's data processing is the fulfillment of a legal obligation according to Section 6 (1) (c) of the GDPR.
|
For the period specified in Section 166 (1) and Section 169 (1) of Act C of 2000 on Accounting (8-10 years).
|
2. DATA PROCESSORS
The Service Provider does not forward the personal data provided by the User to any other person. If this is necessary, the data may only be forwarded after prior information and consent of the User. An exception to this is the forwarding of data in the event of an official request from the authority or court.
A further exception is that the data provided by the user is transferred by the data controller to the following party for the purpose of fulfilling the email newsletter:
Name: Klaviyo inc.
Address: 125 Summer St, Floor 6Boston, MA 02111 United States
By subscribing to the newsletter on the website, the User gives his consent to marketing inquiries.
The user can unsubscribe from the newsletter at any time, free of charge, without restriction or justification, via the unsubscribe link in the newsletters, or by sending a cancellation request to Merchstaff's central email address (kapsulate@merchstaff.hu).
If you unsubscribe from the newsletter, the personal data recorded in connection with sending the newsletter will be deleted and you will no longer receive newsletters and e-mail notifications from the Service Provider.
3. STORAGE PROVIDER
As a hosting provider for the merchstaff.com website,
Cloudways Ltd.
52 Springvale, Pope Pius XII Street Mosta
MST2653
Malta
It operates on servers, from which backups are made to ensure data security.
Physical storage location of the data: Germany, Frankfurt, DataCenter.
4. USE OF COOKIES
We would like to inform you that on our website https://merchstaff.com we use small data files (hereinafter referred to as cookies) to identify the User. These cookies are provided by Google, Facebook, TikTok and YouTube, and are used through the Google Analytics system. By visiting the website and using some of its functions, the User gives his consent to the storage of the aforementioned cookies on the User's computer and the access to them by the Service Provider, as the data controller.
Cookies are stored for 30 days, however, the User can set and prevent cookie-related activity using a browser program. However, we would like to point out that in the latter case, without the use of cookies, you may not be able to use all the services of the website.
The service provider, as a technical collaborator, may ensure that during the visit to the websites, third parties cooperating with the service provider, in particular Google Inc. and Meta Inc., store using cookies if the User has previously visited the service provider's website and based on this, they may display advertisements to the User on their own interfaces.
The User can delete the cookie from their own computer or set their browser to prohibit the use of cookies.
The User has the right to request information about his/her data processed in the Service Provider's system at any time, in connection with which the Service Provider is obliged to provide the User with the appropriate information on the availability of the information related to data processing and the Policy immediately, but no later than within 5 (five) days, in order for the User to access the following information: processed data, the purpose of data processing, its legal basis, duration, and information about who receives or has received his/her personal data and for what purpose.
The User will receive the requested information in writing within 20 (twenty) days of submitting his request, either on paper or electronically, depending on the form of the request for information. In the case of a paper-based request, any costs incurred will be charged at the same time as the data is provided.
Given that the User may object to the processing of his/her personal data and restrict data processing accordingly, the Service Provider is obliged to restrict data processing in accordance with the restriction within 20 (twenty) days, or to implement the provisions specified in the decision and to provide the User with appropriate information about this electronically.
5. USER RIGHTS IN RELATION TO DATA PROCESSING
The User may exercise the following rights by submitting the form published on the Website or by sending an e-mail request:
RIGHT TO CORRECTION
The User has the right to request the rectification of his/her incorrectly recorded personal data processed by the Service Provider at any time. Following the request, the Service Provider shall correct the inaccurate personal data concerning him/her without undue delay. The User also has the right to request the immediate completion of incomplete personal data.
RIGHT TO DELETION
The User has the right to request the deletion of his/her personal data processed by the Service Provider if he/she has withdrawn his/her consent, the contractual relationship has ended and the deletion does not extend to a document or deed that the Service Provider must retain according to legal requirements. In the latter case, i.e. in the case of data processing required by law, the personal data cannot be deleted.
RIGHT TO RESTRICTION OF DATA PROCESSING
The Service Provider is obliged to restrict personal data in the event of the User's request to do so. If it can be assumed that the deletion is due to the operation of the site, based on the information available to us would violate the User's legitimate interests, in which case the personal data must be restricted. It must be treated as restricted data for as long as the purpose of data processing or legitimate interest that precluded the deletion of the personal data exists.
RIGHT TO DATA PORTABILITY
The User may request the Service Provider to view the data processed about him/her on a data carrier or on paper. If the User requests the transfer of the data on a physical data carrier, the Service Provider is entitled to reimbursement of the costs incurred in connection with the transfer.
RIGHT TO WITHDRAW CONTRIBUTION
THE USER HAS THE RIGHT TO WITHDRAW THE CONSENT GIVEN TO THE DATA PROCESSING AT ANY TIME, IN SUCH CASE THE PROVIDED DATA WILL BE DELETED FROM OUR SYSTEMS; EXCEPT FOR THE SCOPE OF DATA REQUIRED TO BE RETAINED BY LAW.
The Service Provider shall examine user complaints related to data processing and make a decision on their validity, which the applicant shall be informed of in writing within 30 days at the latest. If the Service Provider does not comply with the User's request, it shall be obliged to communicate the factual and legal reasons for the rejection of the request to the User.
1. ENFORCEMENT
If we have violated any legal provisions regarding data processing or have not fulfilled any of your requests, you may initiate an investigation procedure with the National Data Protection and Freedom of Information Authority in order to terminate the presumed unlawful data processing at any of the following contact details:
Headquarters: 1055 Budapest, Falk Miksa Street 9-11.
Mailing address: 1374 Budapest, P.O. Box 603.
The User may enforce his rights in court based on Act V of 2013 on the Civil Code.
1. OTHER PROVISIONS
The Service Provider reserves the right to unilaterally amend this Data Management Notice outside the scope of the legal basis, purpose of data management, and processed data. The amendment shall enter into force on the date of its publication on https://merchstaff.com.
Regarding events promoted on merchstaff.com, we would like to draw your attention to the following: The Service Provider excludes its own liability for any incomplete information provided by it or for any negative consequences (damages) resulting from the handling of incorrectly provided data; only the organizer of the events published on the blog page is liable for such damages.
We would also like to inform you that some of MerchStaff's links may contain contact information for websites operated by third parties, the content of which is not under the control of the MerchStaff team, and therefore the MerchStaff team does not assume any responsibility for the content or operation of such third-party operated sites.
We also draw your attention to the fact that all information, textual content and creative materials available in the MerchStaff webshop are protected by copyright and other intellectual property rules, therefore their use is only possible in compliance with these rules and with the prior written permission of the copyright holder.
This Data Protection Notice will enter into force on 01.01.2025.
