Adatvédelmi nyilatkozat | Fanny's Animal Portrait

PRIVACY POLICY

I. General provisions

This information defines the data protection and data processing rules that Fine Art 23 sro (registered office: 94341 Nová Vieska, operating the fannysanimalportrait.hu internet portal) applies to.
Nová Vieska 243, Tax ID: SK2121930393 hereinafter referred to as the Controller) hereby acknowledges that it is bound by the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation, hereinafter referred to as the GDPR), Act CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information (hereinafter referred to as the Infotv.), and Act V of 2013 on the Civil Code (hereinafter referred to as the Ptk.).
This Notice contains the principles of the processing of personal data collected from Users on the Data Controller's website and in its mobile or tablet application, as well as the rules of data processing implemented during the Data Controller's media content provision.
For the purposes of this notice, the data controller is Fine Art 23 sro. , which primarily produces fine art products and provides the necessary IT services related to this activity.
For the purposes of this information, a user is someone who browses the website of Fine Art 23 sro on the fannysanimalportrait.hu website or uses the service (i.e. enters the website or application), subscribes to certain newsletters of fannysanimalportrait.hu , participates in its own promotion announced on the fannysanimalportrait.hu website, places an order or requests a quote through the website or contacts the Data Controller, and (for the sake of simplicity within the framework of this policy) the person (data subject) whose personal data the Data Controller processes in connection with its service (hereinafter referred to as: User).

II. Scope of data processed in the course of the Data Controller's core business

Data processed when accessing the fannysanimalportrait.hu website or using the tablet and mobile phone application:
- During the login process, certain data may be technically recorded automatically and generated during the visit. The automatically recorded data is automatically logged by the system at the time of entry or exit, without any special declaration or action by the User. The system saves this data for statistical purposes. For example, the following data may be stored: IP address, browser data, visit parameters.
- The Data Controller may place a cookie on the device used by the User in order to provide an optimal, personalized experience. The cookie enables the fannysanimalportrait.hu site to provide a higher quality of service. The cookie can be deleted by the User from his/her own device, or it is possible to set the browser to prohibit the use of cookies. Through the use of cookies placed by the Data Controller in the course of its own activities, the Data Controller does not collect any data, the cookies are used in the service process on the User's side (on the User's device and browser). The cookies are present on the User's system for an indefinite period of time or until the cookies are deleted by the User.
Unless otherwise provided by law, the Controller may process the personal data listed in this point for the purposes of complying with a legal obligation to which it is subject, for its own legitimate interests or the legitimate interests of a third party, or for commercial purposes, where the exercise of such interests is proportionate to the restriction of the right to the protection of personal data, without further specific consent. Please note that the Data Controller will never link these data to other information that would allow the identification of the person behind these data.
Subscribe to the newsletter (General Newsletter)The Data Controller processes the e-mail address provided by the User when subscribing to the newsletter with the User's consent. Subscription to the newsletter may only be effected with the User's consent to the processing of his/her data in accordance with this information. The purpose of the processing is to send a regular newsletter to the User. Duration of processing: the duration of the provision of the newsletter service or the date of unsubscribing from the newsletter. You can unsubscribe from the newsletter by clicking on the link at the bottom of the newsletter. Unsubscribing from the newsletter is considered as withdrawal of consent. Upon withdrawal of consent, the processed data will be deleted. The Data Controller will not transfer the data.
Participation in the promotion on fannysanimalportrait.hu
In this case, the Data Controller shall inform the User on a case-by-case basis about the possible data processing carried out by the User during the promotion and the method and content of the consent.
Contact us using one of the forms on the site (Order or Contact form)
If the User contacts the Data Controller via a form, the User acknowledges and agrees that the Data Controller records the User's e-mail address and processes it to the extent and for the duration necessary for the purpose of the contact.
Contacting the Data Controller
If the User initiates contact with the Data Controller (e.g. by e-mail or form contact), the User acknowledges and agrees that the Data Controller records the User's e-mail address and processes it to the extent and for the duration necessary for the purpose of the contact.

III. Data processed in the course of other activities of the Data Controller

Unless otherwise provided by law, the Controller may process the personal data listed in Section III of this Notice for the purposes of complying with a legal obligation to which it is subject, for its own legitimate interests or the legitimate interests of a third party, or for commercial purposes, where such interests are proportionate to the restriction of the right to the protection of personal data, without any further specific consent.
Personal data processed in Third Party systems is governed by the Third Party's own privacy notice. The Controller shall use its best efforts to ensure that the Third Party processes the personal data transferred to it in accordance with the law. After May 25, 2018, the Third Party shall record, process and declare to the Controller that the personal data transmitted to it by the Controller and processed or processed by it are recorded, processed or processed in accordance with the provisions of the GDPR.
The Controller provides information on the processing activities of the Third Party in the following sections. By using the website or mobile or tablet applications operated by the Data Controller, the User consents to the use of his/her personal data as set out in this notice, as follows:
Web analytics and ad serving systems process various data about the User by placing cookies and other client-side storage on Users' computers. This data may include:
- Browser type and settings;
- The operating system running on the device and the type of device;
- Cookie information (e.g. to distinguish between devices and browsers, unsubscribe, etc.);
- the IP address from which the User accessed the website;
- segmenting Users on certain devices based on their browsing history and time spent on each page to deliver more relevant ads;
- data on the geographical location of the device, if the User has enabled it in the device settings.
In all cases, the data described in section 4 will be used solely for the purposes of measurement and to provide a more effective advertising service and a better online experience. The cookie and IP address data will never be linked by the Data Controller, the Third Party and the Media Advertising Platform Vendor to any other information that would allow the identification of the person behind this data. Nor will information filled in online forms be processed. No information concerning the privacy of Users, such as religion, political opinions or sexual orientation, will be recorded, stored or processed.
Users have the possibility to opt-out of data processing. If a User does so, no further data will be collected about him/her. The opt-out works by placing a cookie on the User's device for the browser in which the opt-out is set, which indicates to the external service provider's system that the opt-out has been given. If the User changes browser or device, or deletes browsing history including cookies, he/she will have to opt-out again by changing the settings for that device and browser.
Web analytics, ad serving and other external service providers
By using the Data Controller's websites or mobile or tablet applications, the User consents to the use of information related to his or her device by the third party service providers listed in this section.
In the course of the service, Wix.com's system collects data about Users that can be used to create different profiles based on browsing history for sales and marketing purposes, but the platform does not collect any data that can be used to directly identify Users. For more information about Wix.com's services and data management and how to change your preferences, please see the following page.
The Data Controller is Google Inc. Google Analytics and Google AdSense. Google Analitycs uses cookies to help analyse the use of the website. Google AdSense sets a cookie and uses a web beacon to collect information. The information stored by the cookie (including the User's IP address) is stored on servers of Google Inc. in the United States. Google Inc. may transfer the information collected to third parties where required to do so by law, or where such third parties process the information on behalf of Google Inc. In the context of Google AdSense and Google Adwords remarketing, Google Inc. places visitor-tracking cookies on the User's device that monitor visitors' online behaviour and allow Google Inc. to provide them with advertising on other websites based on their behaviour and interests. The tracking cookie also allows Google Inc. to identify the website visitor on other websites. Google Inc. "Privacy Policy" is available at the following website.In addition to cookies, web analytics and ad serving partners use web beacons and click tags (click links and metrics) to collect information in connection with measuring user behaviour and serving ads. Cookies set by service providers can also be deleted from the User's device at any time and the use of cookies can usually be refused by selecting the appropriate settings on the browser(s). Cookies set by external service providers can be identified by the domain associated with the cookie. It is not possible to refuse web beacons and click trackers. For more information on cookies and how they are handled, see the following website.

IV.Purpose and general rules of data processing by the Data Controller

The purposes of the processing carried out by the Data Controller:
- content delivery;
- online content delivery;
- to contact the User in order to inform the User and to complete individual projects (see Newsletters, projects);
- handling and managing user enquiries;
- organising and running promotions in individual cases, contacting winners and providing them with prizes;
- the legitimate interests of the Data Controller.
The Controller will not use the personal data provided for purposes other than those described in these points.
Data processing is carried out on the basis of the Users' voluntary, prior and duly informed declaration, which contains the Users' express consent to the use of their personal data provided by them when using the Site and the personal data generated about them. In the case of processing based on consent, the User has the right to withdraw his consent at any time, without prejudice to the lawfulness of the processing prior to the withdrawal.
The legal basis for the processing is to ensure the fundamental rights to information and expression in the provision of content by the Data Controller, Article 6(1)(e) GDPR, i.e. the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller: the media content and information activities of the Data Controller are in the public interest, and the processing of the related data is a processing carried out for a task in the public interest. The Fundamental Law of Hungary recognises both the right to the protection of personal data [Article VI (3)] and the right of public access to data of public interest [Article VI (3)].
Pursuant to Section 6 (1) of the Media Content Act, media content providers and persons in an employment or other employment relationship with them are entitled, as defined by law, to keep the identity of the person providing information to them in connection with their content service activities confidential in court and official proceedings, and to refuse to hand over any document, document, object or data carrier that could be used to identify the source of the information.
Article 6(1)(f) of the GDPR provides for a legal basis for processing to the extent necessary to protect the legitimate interests of the controller or of a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data, in particular where the data subject is a child. In the case of processing based on legitimate interests, the Controller shall carry out an interest assessment, in which it shall determine the legitimate interests, the impact on the data subject, the necessity and proportionality of the processing and the relationship and priority of the legitimate interests and the rights of the data subject.
The purpose of the data processing is to fulfil the social mission of the Data Controller as a press organisation, to exercise the rights deriving from the freedom of the press, to inform the public in public affairs, to facilitate the discussion of democratic issues, taking into account that the Press Act stipulates as a public interest task for press organisations to inform the public adequately about local, national and European public affairs and events of importance to the citizens of Hungary and the members of the Hungarian nation.
The Controller may use the services of a third party to process personal data, provided that the third party's data processing practices comply with the applicable legal requirements. By accepting this Policy, the User expressly consents to the processing by third parties. The Data Controller shall store data of any gender until the consent to the processing is withdrawn.

V. Rights and obligations of the User

Right to information
The User may at any time request that the Data Controller inform the User whether it is processing the User's personal data and, if so, provide the User with access to the personal data processed by the Data Controller.
The User may request information about the processing of his/her personal data at any time in writing, by registered or certified mail or by registered letter with acknowledgement of receipt, sent to the e-mail address of the Controller fannysanimalportrait@gmail.com or to the registered office of the Controller at the time of the processing. The Data Controller shall consider a request for information sent by letter as authentic if the User can be clearly identified on the basis of the request sent. A request for information sent by e-mail shall be considered authentic by the Data Controller only if it is sent from the registered e-mail address of the User.
The request for information may cover the data of the User processed by the Data Controller, their source, the purpose, legal basis and duration of the processing, the name and address of any Data Processor, the activities related to the processing and, in case of transfer of personal data, who has received or is receiving the User's data and for what purpose.
Right to rectification or modification of the data processed
The User may request the rectification or modification of his/her personal data processed by the Data Controller, as well as the completion of incomplete data. The User may request the rectification or modification of his/her personal data in writing, by registered or certified mail to the e-mail address of the Data Controller fannysanimalportrait@gmail.com or to its registered office. A request sent by letter shall be considered authentic by the Data Controller if the User can be clearly identified on the basis of the request sent. A request sent by e-mail shall be considered authentic by the Data Controller only if it is sent from the registered e-mail address of the User.
Request for erasure of personal data
The User may request the erasure of his/her personal data processed by the Data Controller. The erasure may be refused if the processing is necessary for the purposes of exercising the right to freedom of expression and information, if the processing of personal data is authorised by law or for the establishment, exercise or defence of legal claims. In any case, the Data Controller shall inform the User of the refusal of a request for erasure, indicating the reasons for the refusal. Once the request for erasure of personal data has been complied with, the previous (erased) data can no longer be restored. The User may request the rectification or modification of his/her personal data in writing, by registered or certified mail to the e-mail address of the Data Controller fannysanimalportrait@gmail.com or to its registered office. A request sent by letter shall be considered authentic by the Data Controller if the User can be clearly identified on the basis of the request sent. A request sent by e-mail shall be considered authentic by the Data Controller only if it is sent from the registered e-mail address of the User.
Restrictions on the processing of personal data
The User has the right to have the processing of his/her Personal Data restricted by the Data Controller in the event that the User contests the accuracy of the personal data processed. The restriction shall apply for the period of time necessary to allow the Data Controller to verify the accuracy of the personal data processed. The restriction may also be requested where the User considers that the processing is unlawful but the User objects to the erasure of the personal data processed. The restriction may also be requested where the purpose of the processing has been achieved but the User requires the processing by the Controller for the establishment, exercise or defence of legal claims.
The User may request the restriction of his/her personal data in writing, by registered or certified mail or by registered letter with acknowledgement of receipt sent to the e-mail address of the Controller fannysanimalportrait@gmail.com or to the registered office of the Controller at the time of the request. A request sent by letter shall be considered authentic by the Data Controller if the User can be clearly identified on the basis of the request sent. A request sent by e-mail shall be considered authentic by the Data Controller only if it is sent from the registered e-mail address of the User.
Right to request the transfer, transmission of personal data
The User may request that the personal data provided by the User to the Data Controller and processed by the Data Controller in an automated way be transferred to the Data Controller in a structured, commonly used, machine-readable format and/or transmitted to another Data Controller.
The User may make such a request in writing, by registered or certified mail or by registered letter with acknowledgement of receipt, sent to the e-mail address of the Controller fannysanimalportrait@gmail.com or to the registered office of the Controller at the time of the User's residence. A request sent by letter shall be considered authentic by the Data Controller if the User can be clearly identified on the basis of the request sent. A request sent by e-mail shall be considered authentic by the Data Controller only if it is sent from the registered e-mail address of the User.
Right to object
The User may object to the processing of his/her personal data if the processing of personal data is necessary solely for the fulfilment of a legal obligation to which the Data Controller is subject or for the purposes of the legitimate interests of the Data Controller or a third party; if the purpose of the Data Management is direct business acquisition, or if the Data Management is carried out in the interest of the performance of a task carried out in the public interest. The Data Controller shall examine the legality of the User’s objection and, if it determines that the objection is well-founded, shall terminate the Data Management and block the processed personal data, and shall notify all those to whom the personal data concerned by the objection may have been transmitted of the objection and of the measures taken on the basis thereof.
The User may make such a request in writing, by registered or registered letter with acknowledgment of receipt sent to the Data Controller’s e-mail address fannysanimalportrait@gmail.com or to its current registered office. The Data Controller shall consider the request sent in a letter to be authentic if the User can be clearly identified based on the request sent. The Data Controller considers a request sent by e-mail to be authentic only if it is sent from the User's registered e-mail address.
Deadlines
The Data Controller shall inform the User without undue delay, but in any case within one month of receipt of the request, of the measures taken in response to the request referred to in points 1 to 6. If necessary, taking into account the complexity of the request and the number of requests, this deadline may be extended by a further two months. The Data Controller shall inform the User of the extension of the deadline, indicating the reasons for the delay, within one month of receipt of the request. If the User submitted the request electronically, the information shall be provided electronically, if possible, unless the User requests otherwise. If the Data Controller does not take action in response to the request of the data subject, it shall inform the User without undue delay, but at the latest within one month of receipt of the request, of the reasons for the failure to take action and of the fact that the User may lodge a complaint with the supervisory authority and exercise his/her right to a judicial remedy.
Person responsible for data protection at the Data Controller
The Data Controller's data protection officer provides assistance to the User in making decisions related to data processing and in ensuring the rights of the data subjects via the e-mail address fannysanimalportrait@gmail.com from Monday to Friday, between 9 a.m. and 3 p.m.
Right to complain
The User may directly contact the National Data Protection and Freedom of Information Authority [address: 1055 Budapest, Falk Miksa utca 9-11. Postal address: 1363 Budapest, Pf. 9. Telephone: +36 (1) 391-1400 Fax: +36 (1) 391-1410, e-mail address: ugyfelszolgalat@naih.hu, website: www.naih.hu] with a complaint regarding data processing.
Right to go to court
The User may go to court in the event of a violation of his rights. The court shall have jurisdiction over the case. The case may also be initiated – at the choice of the person concerned – before the court of the User's place of residence or residence.
Obligations of the User
The User guarantees that the consent of the data subject has been legally obtained for the processing of personal data provided or made available by him/her about other natural persons.
When providing his/her e-mail address and the data provided during registration, any User assumes responsibility for using the service exclusively from the provided e-mail address or using the data provided by him/her. In view of this responsibility, any liability related to accesses made using a given e-mail address and/or data lies solely with the User who registered the e-mail address and provided the data.
The Data Controller uses personal data based on the consent of the User concerned and exclusively for the purpose specified. Data Controllers process personal data only for the purposes specified in this Notice and in the relevant legislation. The scope of personal data processed is proportionate to the purpose of data processing and may not go beyond it. In all cases where the Data Controller intends to use the personal data for a purpose other than the original purpose of data collection, the Data Controller shall inform the User thereof and obtain his/her prior, express consent to this effect, or shall provide the User with the opportunity to prohibit the use.
The Data Controller shall not verify the personal data provided. The person providing the Personal Data shall be solely responsible for the accuracy of the Personal Data provided. The personal data of a person under the age of 16 may only be processed with the consent of an adult exercising parental supervision over him/her. The Data Controller shall not be able to verify the entitlement of the person providing the consent or the content of his/her declaration, so the User or the person exercising parental supervision over him/her guarantees that the consent complies with the law. In the absence of a consent declaration, the Data Controller shall not collect personal data relating to a person under the age of 16, with the exception of the IP address, browser data, and visit parameters used when using the content service, which shall be recorded automatically.

VI. Other provisions

In certain cases, the Data Controller may make available to third parties the personal data of the User concerned in response to a formal judicial or police request, legal proceedings, or a justified suspicion of copyright, property or other infringement or violation. The Data Controller is entitled and obliged to transmit to the competent authorities any personal data at its disposal and stored by it in accordance with the law, which it is obliged to transmit by law or by a final and binding obligation of a public authority. The Data Controller shall not be held liable for such transfers and the consequences thereof.
Personal data will be used by the Data Controller on the basis of the consent, public interest activity and/or legitimate interest of the User concerned and only for the purpose for which it is intended. The Controller shall process personal data only for the purposes set out in this Notice and in the applicable legislation. The scope of the personal data processed shall be proportionate to the purpose of the processing and shall not go beyond that purpose. In all cases where the Data Controller intends to use the personal data for a purpose other than that for which they were originally collected, the User shall be informed thereof and shall be given the opportunity to obtain his or her prior explicit consent or to oppose such use.
The Data Controller shall process personal data for the duration of its operation, until the withdrawal of the authorisation granted by the User. In the case of processing based on legitimate interest, the period of processing of the data shall last until the Controller's legitimate interest is established.
The Data Controller shall endeavour to protect its data against unauthorised access and use, loss and unauthorised disclosure by taking organisational and technological measures in accordance with the legal requirements and the objective of data security. The Controller shall take into account the state of the art and developments in science and technology in its data management and related organisational activities. It shall endeavour to use the most secure technology possible to maintain data security and to guarantee data security appropriate to the level of risk, in order to protect the rights and freedoms of natural persons.
The Controller reserves the right to amend this Notice at any time by unilateral decision.
The User accepts the current provisions of this Policy by the next login, and no further consent of the individual User is required.

Applicable law, other provisions

This Privacy Notice is governed by Hungarian law. If the law in force in your country imposes more stringent rules on the parties than those set out in this Privacy Notice, you shall comply with them. You acknowledge and agree, however, that the Controller's liability shall be based on the law applicable to this Privacy Notice and excludes its liability to the fullest extent possible under applicable law and court decisions for non-compliance with the provisions of the User's country. The section headings in this Privacy Notice are for information purposes only and are not in themselves sufficient for an understanding of the processing. If you have any questions that are not clearly answered in this Privacy Notice, please contact fannysanimalportrait@gmail.com.