Legal stuff

1. Introduction

It is very important for us to comply with the currently valid data protection regulations and laws, so we will discuss and present opticost.hu and Opti-Cost kft. in detail below, the steps we take for data protection and processes related to data collection.

The data is managed by Opti-Cost Kft., and this company is responsible for the management of personal data.

Contact details:
Full legal name: Opti-Cost Kereskedelmi és Szolgáltató Korlátolt Felelősségű Társaság
E-mail: titkarsag@opticost.hu
Location: 7400 Kaposvár, Jutai út 30/B.

2. WHAT PERSONAL DATA DO WE PROCESS AND FOR WHAT REASONS?

Personal data are those that clearly enable the precise identification of an individual.
On the opticost.hu website, we manage the following personal data, with the precise indication of the legal basis:

COMMUNICATION DATA

This includes any message you send to us through the website, email, social media message, or any other form of communication.

We process and store this data in order to be able to fulfill error reports and to provide a basis for decisions in case of possible legal claims.

Our legal basis for this processing is the user’s verifiable interest in our activity, which is manifested in the messages addressed to us.

USER DATA

This includes the data generated during the use of the website, which enables the technical operation of the site, to maintain the security of the site, to store backups of the users’ activities, and to always have access to the most relevant content.

The legal basis for the processing of the data is the user’s clear interest in our activity, which requires their storage to ensure the technical functioning of the site.

TECHNICAL DATA

This includes data generated during the use of the site, such as the IP address, login information, browser data, visit time of each page, page views and navigation paths, the number and time of page visits, time zones, and the data of the device with which you view the page.

The source of the data is our analytical software.

We process this data in order to analyze the habits of users on the site, to maintain the safe operation of our site, and to understand the usefulness of our individual marketing decisions.

The legal basis for data processing is the user’s clear interest in our activity, which allows us to process this data in accordance with security requirements and use it to increase business in order to operate more effectively.

MARKETING DATA

Which includes the visitor’s preferences, which marketing content they would like to receive from us. We process this data in order to enable participation in prize games and to send advertising related to our products/services in which the user has expressed interest.

The legal basis for data processing is the user’s clear interest in our activity, which allows us to process this data in accordance with security requirements and use it to increase business in order to operate more effectively.

We can sometimes use the collected data for purposes such as providing targeted, relevant ads on the Facebook™ platform and various dynamic advertising platforms, and measure the effectiveness of the ads.

The legal basis for data processing is the user’s clear interest in our activity, which allows us to process this data in accordance with security requirements and use it to increase business in order to operate more effectively.

In the course of our activities, we do not collect sensitive data such as ethnicity, religious views, sexual life and orientation, political opinions and trade union membership, or medical background, and genetic or biometric information.

3. HOW DO WE COLLECT DATA?

We may collect personal data in such a way that the user directly provides it to us (for example, by placing an order or sending a message).

Furthermore, certain data are collected automatically during the use of the site, for example with so-called “cookies” and similar technologies. They only come into effect after the user’s consent has been given.

For more information, please see our Cookie Policy below.

4. OUR PRACTICAL STEPS RELATING TO DATA PROTECTION

For Opti-Cost Kft., the protection of user data and compliance with current regulations are extremely important. Therefore, after the data protection impact assessment carried out on the website, we prepared a list of the collected data, its necessity and legal basis, and its legal compliance.

• In order to protect the data entered on the forms and generated on the site, we use SSL certification on the entire website (Let’s Encrypt Authority X3 certification).

• In order to protect the site against attacks, we use Wordfence security software to protect the stored data against so-called “brute force” and virus attacks.

• In the site’s databases, user data is stored in encrypted form (pseudonymized), so it cannot be read by third parties.

• In this data protection declaration, we provide users with a contact address to request information about the management of their personal data, to modify or delete their personal data.

From time to time, for the sake of our business, it is necessary to provide data to our service partners (for example, a hosting provider).

In such cases, we always choose to meet the requirements of the GDPR regulation and, in the case of a US-based partner, participate in the EU-US Privacy Shield data protection initiative, and we sign a data management contract with them, ensuring responsible data management.

5. MARKETING COMMUNICATION

The continuation of marketing communication is indispensable in the course of the company’s activities. The legal basis for data management in this regard is the expression of interest in our services or the express consent of users.

Based on the Privacy and Electronic Communications Regulations (PECR) of the European Union, we can send messages for marketing purposes to our users if they have purchased from us or have specifically agreed to receive marketing messages.

Suspension of consent and the method of unsubscribing from messages are always clearly visible. At the bottom of each e-mail, you can find the e-mail address required for unsubscribing, at which removal from the database can be requested (in this case, titkarsag@opticost.hu).

We can also send messages in the case of unsubscribing from marketing communications, but only regarding the fulfillment of orders.

6. NOTICE REGARDING PERSONAL DATA

From time to time, it is necessary to share certain personal data with certain of our partners in order to maintain normal business operations:

• IT service providers and service providers performing troubleshooting, maintenance and development of computer systems
• Expert partners such as lawyers, accountants, bankers, insurance companies
• Government bodies that request a report on our activities

International data transfers

In order to maintain business, it is sometimes necessary to share user data with service partners outside the European Economic Area (EEA).

In many cases, countries outside the EEA do not provide the same level of data protection, so European laws prohibit the export of data if the appropriate conditions are not met.

Whenever personal data is transferred outside the EEA, in addition to the steps discussed in point 4, we do the following in order to manage the data securely:

• We only transfer data to countries that the European Commission deems appropriate in terms of data security.
• We only use US-based services that are part of the EU-US Privacy Shield data security initiative.

If the above is not met, we ask for the users’ express consent to the data transfer. Consent can be withdrawn at any time.

Third party links

This page may occasionally contain links to external pages, or code snippets can be found embedded in the page that ensure the operation of external services.

Clicking on these links or using embedded solutions may allow third-party partners to collect data about users.

Although we do our best to properly screen partners, we have no control over their privacy policies and are not responsible for their data management policies.

7. DURATION OF DATA MANAGEMENT

We only store user data for as long as our legal/accounting/data provision obligations make it mandatory, or as long as it is necessary for the operation of the service.

When deciding how long to store, we consider the amount, nature and sensitivity of the data and the potential impact of its leakage in the event of a data breach.

For tax reasons, we need to keep customers’ invoicing and purchase data for at least 8 years in order to fulfill our legal obligations.

Under certain circumstances, we may use the data in an anonymized form for statistical purposes, in which case we store the data for an unlimited period of time without informing you.

8. VISITOR’S RIGHTS

As a citizen of the European Union, the law called General Data Protection Regulation (GDPR) provides the following rights to the users of the site:

a, Access to Personal Information

The users of the site have the right to request a copy of the personal data stored by Opti-Cost Kft. In general, the request is fulfilled free of charge within 14 days of the request.

In case of repeated, abusive, unjustified data requests, Opti-Cost Kft. may charge a moderate amount to secure the data, and additional time may be required to secure the data.

Furthermore, Opti-Cost Kft. asks for proof of identity before releasing the data, in order to prevent abusive use. To request personal data, please use the following contact e-mail address:
titkarsag@opticost.hu

b, Modification of personal data

If the personal data has been changed or entered incorrectly, users have the right to request that the data be changed. To change your personal data, please contact us at titkarsag@opticost.hu.

c, Request to delete personal data

Users have the right to request the deletion of all their personal data. We fulfill the request free of charge within 14 days of the request. After deleting the personal data, the user account will not be available, so any purchased materials will also become unavailable, as the personal data related to the user account is absolutely necessary to access the service.

Opti-Cost Kft. requests proof of identity before deleting personal data, to prevent abusive use. To delete personal data, please use the contact information above.

d, Request to limit the processing of personal data

Users have the right to limit the provision of their data to third parties (service partners) upon request. When submitting the request, you can also name the service partners you want to restrict.

It is important to note that cooperation with certain service providers is essential for the operation of the site, so if they are restricted, the site’s services will become unavailable to the user.

Opti-Cost Kft. asks for proof of identity before restricting the transfer of personal data, in order to prevent abusive use. To limit the transfer of personal data, please use the following e-mail address:

titkarsag@opticost.hu

In Hungary, the official body dealing with data protection is the National Data Protection and Freedom of Information Authority (NAIH). Users can find out more about their data protection rights on the NAIH website.

National Data Protection and Freedom of Information Authority,

Location: 1125 Budapest, Szilágyi Erzsébet fasor 22/C.,
Mailing address: 1530 Budapest, Pf.: 5.,
Phone: 06.1.391.1400,
Fax: 06.1.391.1410,
E-mail: ugyfelszolgalat@naih.hu
Website: http://www.naih.hu

9. ANONYMIZED DATA AND COOKIES

Opticost.hu uses so-called “cookies” and similar technologies, such as tracking codes, re-marketing tags, pixels, on the website, in e-mail messages and advertisements, which are activated after the user’s consent.

These technologies help us better understand user behavior and interests, thus helping us to operate at a higher level and more efficiently.

Our goal is to make the use of opticost.hu as user-friendly and personal as possible. If the user wishes to prohibit the recording of non-personal data by these technologies, it can be done in the following ways:

• their loading can be blocked using the cookie warnings displayed on the website
• by disabling “cookies” in the browser

You can find more information about additional cookies and tracking codes on opticost.hu in the Cookie Policy sheet below.