Barion Pixel
Discounts are available based on the table below: Offer

Privacy Policy

 

Purpose of this Privacy Policy

Yourcontact Ltd. (registered office: 6200 Kiskőrös, Dózsa Gy. Road 52, Hungary; hereinafter referred to as the “Service Provider” or “Data Controller”) acknowledges the contents of this Privacy Policy as binding upon itself. The Data Controller undertakes to ensure that all data processing activities related to its services comply with the provisions of this Policy, applicable national legislation, and the legal acts of the European Union.

The Data Controller’s privacy policies relating to data processing are continuously available on the website at saunahandtuch.at

The Data Controller reserves the right to amend this Privacy Policy at any time. Naturally, users will be informed of any changes in due course.

If you have any questions regarding this Privacy Policy, please contact us and one of our colleagues will be happy to assist you.

The Data Controller is committed to protecting the personal data of its customers and partners and considers the respect of the right to informational self-determination to be of paramount importance. Personal data is treated confidentially, and the Data Controller takes all necessary security, technical, and organizational measures to guarantee the security of personal data.

The Data Controller’s data processing practices are described below.

Data Controller Information

If you wish to contact our company, you may do so via:

Email: iroda@zoltex.hu
 Phone: +36 30 381 8886

All emails received by the Data Controller, including any personal data contained therein, are deleted no later than five (5) years after receipt.

Company Details

Company Name: Yourcontact Ltd.
 Registered Office: 6200 Kiskőrös, Dózsa Gy. Road 52, Hungary
 Company Registration Number: 03-09-114925
 Tax Number: 14017164-2-03
 Phone: +36 30 381 8886
 Email: iroda@zoltex.hu

Data Protection Officer

Name: Zoltán Belák
 Phone: +36 30 381 8886

Categories of Personal Data Processed

Personal Data Required During Registration

The following personal data may be collected:

  • Full Name
  • Phone Number
  • Email Address
  • Billing Address
  • Shipping Address
  • Tax Number (for business customers)

Technical Data

The Data Controller selects and operates the IT tools used for data processing in a manner that ensures that processed data:

  • Is accessible to authorized persons only (availability);
  • Maintains authenticity and verifiability (authenticity of processing);
  • Preserves integrity and consistency (data integrity);
  • Is protected against unauthorized access (confidentiality).

The Data Controller implements appropriate measures to protect data against unauthorized access, alteration, disclosure, transmission, deletion, destruction, and accidental loss.

The Data Controller applies technical, organizational, and administrative safeguards that provide a level of protection appropriate to the risks associated with data processing.

During data processing, the Data Controller ensures:

Confidentiality

Information is protected so that only authorized individuals may access it.

Integrity

The accuracy and completeness of information and processing methods are protected.

Availability

Authorized users can access the information and related tools whenever needed.

Cookies

Purpose of Cookies

Cookies may:

  • Collect information about visitors and their devices;
  • Remember user preferences and settings;
  • Facilitate the use of the website;
  • Improve user experience.

To provide personalized services, the website places small data files, known as cookies, on the user’s device and retrieves them during subsequent visits.

When a browser returns a previously stored cookie, the cookie provider may associate the user’s current visit with previous visits, but only with regard to its own content.

Data Retention Period for Cookies

The storage period of individual cookies may vary.

Further information is available at:

Legal Basis for Cookie Processing

The legal basis for cookie processing is the user’s consent pursuant to Article 6(1)(a) of the General Data Protection Regulation (GDPR).

Types of Cookies Used on the Website

Strictly Necessary Cookies

These cookies are essential for the operation of the website and enable core website functionality. Without these cookies, certain services may not be available.

Their lifetime is limited to the duration of the browsing session.

Performance and User Experience Cookies

These cookies collect information about how visitors use the website, such as which pages are visited most frequently or whether error messages are encountered.

These cookies do not collect information that identifies individual visitors. All information collected is aggregated and anonymous.

Their lifetime is limited to the duration of the browsing session.

Third-Party Cookies (Analytics)

Google Ads Cookies

When a user visits our website, their cookie identifier may be added to a remarketing list. Google uses cookies such as the NID and SID cookies to personalize advertisements displayed across Google services, including Google Search.

These cookies may be used to remember:

  • Recent searches;
  • Previous interactions with advertisements or search results;
  • Visits to advertisers’ websites.

Google Ads Conversion Tracking uses cookies to track sales and other conversions generated by advertisements. Cookies are stored on the user’s device when the user clicks on an advertisement.

Typical uses of these cookies include:

  • Selecting relevant advertisements;
  • Improving campaign performance reports;
  • Preventing users from seeing the same advertisements repeatedly.

Google Analytics Cookies

Google Analytics is a web analytics service provided by Google that helps website owners understand how visitors interact with their websites and applications.

Google Analytics may use cookies to collect information and generate reports on website usage statistics without personally identifying individual visitors.

The primary cookie used by Google Analytics is the “_ga” cookie.

In addition to generating website usage reports, Google Analytics may be used together with advertising cookies to display more relevant advertisements across Google services and the internet.

Remarketing Cookies

Remarketing cookies allow advertisements to be displayed to previous visitors while they browse websites within the Google Display Network or search for products and services related to our offerings.

Session Cookies

These cookies store information such as:

  • Visitor location;
  • Browser language;
  • Currency used for transactions.

Their lifespan lasts until the browser is closed, or for a maximum of two hours.

Mobile Version / Design Cookies

These cookies detect the device used by the visitor and switch the website to a mobile-friendly view when appropriate.

Retention period: 365 days.

Cookie Consent Cookies

These cookies record the user’s acceptance of the website’s cookie policy.

Retention period: 365 days.

Facebook Pixel Cookies

The Facebook Pixel is a tracking code that enables website owners to:

  • Measure conversions;
  • Create custom audiences;
  • Analyze visitor activity on the website.

Through Facebook Pixel technology, personalized advertisements and offers may be displayed to visitors on Facebook platforms.

Facebook’s Privacy Policy is available at:

https://www.facebook.com/privacy/explanation

If you do not accept the use of cookies, certain website functions may not be available.

For information on deleting cookies, please refer to your browser provider’s documentation.

Data Collected for Online Orders

When placing an order through the website, the following personal data may be collected:

  • Full Name
  • Phone Number
  • Email Address
  • Billing Address
  • Shipping Address
  • Tax Number (for business customers)

 

Newsletter Subscription

Data Processor Involved in Newsletter Distribution

Company Name: CREON HEROES Zrt.
 Registered Office: H-5561 Békésszentandrás, Dr. Dunay A. Street 1.
 Phone: +36 20 222 0011
 Email: kapcsolat@webgalamb.hu

The Data Processor assists the Data Controller in distributing newsletters under a contractual agreement.

For this purpose, the Data Processor processes the subscriber’s:

  • Name
  • Email Address

only to the extent necessary for newsletter delivery.

Subscribers may unsubscribe at any time by clicking the unsubscribe link included in every newsletter.

 

Purpose, Method, and Legal Basis of Data Processing

General Data Processing Principles

The Data Controller processes personal data either:

  • Based on the data subject’s voluntary consent; or
  • On the basis of legal authorization.

Where processing is based on consent, the data subject may withdraw their consent at any time.

In certain cases, the collection, storage, or transfer of personal data may be required by law. Where applicable, customers will be informed accordingly.

Persons providing personal data are responsible for obtaining the consent of any third party whose personal data they submit.

The Data Controller’s data processing activities comply with applicable data protection legislation, including but not limited to:

  • Act CXII of 2011 on the Right of Informational Self-Determination and Freedom of Information (Hungary);
  • Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation – GDPR);
  • Act V of 2013 on the Civil Code;
  • Act C of 2000 on Accounting;
  • Act LIII of 2017 on the Prevention and Combating of Money Laundering and Terrorist Financing;
  • Act CCXXXVII of 2013 on Credit Institutions and Financial Enterprises.

 

Physical Storage Location of Personal Data

Personal data may enter our systems in two ways:

  1. Automatically generated technical information related to:
    • Internet connections;
    • Browser software;
    • IP addresses;
    • Visited web pages.
  2. Information voluntarily provided by users when contacting us through the website, including:
    • Name;
    • Contact information;
    • Other information submitted during communication.

 

Data Transfers and Data Processors

The following third parties may process personal data on behalf of the Data Controller:

GLS General Logistics Systems Hungary Ltd.

Address: 2351 Alsónémedi, GLS Európa Street 2.
 Phone: +36 29 886 700
 Email: info@gls-hungary.com

Pannon XP Ltd.

Address: 2142 Nagytarcsa, Csonka János Street 5. (Building B/3)
 Phone: +36 20 77 333 99
 Email: info@pannonxp.hu

KBOSS.hu Ltd. (Számlázz.hu)

Address: 1031 Budapest, Záhony Street 7.
 Phone: +36 30 35 44 789
 Email: info@szamlazz.hu

These processors assist the Data Controller in managing customer orders.

For this purpose, they may process:

  • Name;
  • Address;
  • Phone number;
  • Order number;
  • Order date.

Data is retained for the duration required under applicable civil law limitation periods.

Rights of Data Subjects and Legal Remedies

During the period of data processing, data subjects are entitled to the following rights under the GDPR:

  • Right to withdraw consent
  • Right of access to personal data and information regarding data processing
  • Right to rectification
  • Right to restriction of processing
  • Right to erasure (“right to be forgotten”)
  • Right to object
  • Right to data portability

If you wish to exercise any of these rights, your identification will be required, and the Data Controller may need to communicate with you regarding your request. Therefore, certain personal data may need to be provided for identification purposes (limited to information already processed by the Data Controller).

If you have previously made a purchase and wish to identify yourself in connection with a complaint, warranty claim, or other customer service matter, please provide your order reference number.

The Data Controller will respond to complaints and requests related to data processing no later than 30 days after receipt.

Right to Information

The Data Controller shall take appropriate measures to provide data subjects with all information required under Articles 13 and 14 of the GDPR, as well as any communications under Articles 15–22 and Article 34, in a concise, transparent, intelligible, and easily accessible form using clear and plain language.

Right of Access

You have the right to obtain confirmation from the Data Controller as to whether your personal data is being processed.

If personal data is being processed, you have the right to access:

  • The personal data concerned;
  • The purposes of the processing;
  • The categories of personal data processed;
  • The recipients or categories of recipients to whom personal data has been disclosed or will be disclosed;
  • The planned storage period for personal data, or the criteria used to determine that period;
  • Your right to request rectification, erasure, or restriction of processing;
  • Your right to object to processing;
  • Your right to lodge a complaint with a supervisory authority;
  • Information about the source of personal data where it was not collected directly from you;
  • Information regarding automated decision-making and profiling, including meaningful information about the logic involved and the significance and consequences of such processing.

The purpose of exercising this right may be to verify the lawfulness of data processing. Therefore, in the case of repeated requests, the Data Controller may charge a reasonable administrative fee.

Access to personal data will be provided after successful identification, typically via email. Registered users may also access and review their personal data through their user account.

When submitting a request, please specify whether you are requesting access to personal data or information about data processing activities.

 

Right to Rectification

You have the right to request that the Data Controller correct inaccurate personal data concerning you without undue delay.

 

Right to Erasure (“Right to Be Forgotten”)

You have the right to request the deletion of your personal data where one of the following applies:

  • The personal data is no longer necessary for the purposes for which it was collected;
  • You withdraw consent and there is no other legal basis for processing;
  • You object to the processing and there are no overriding legitimate grounds for the processing;
  • The personal data has been unlawfully processed;
  • The personal data must be erased to comply with a legal obligation;
  • The personal data was collected in relation to the provision of information society services.

The right to erasure does not apply where processing is necessary:

  • For exercising the right of freedom of expression and information;
  • For compliance with a legal obligation;
  • For reasons of public interest;
  • For public health purposes;
  • For archiving, scientific, historical research, or statistical purposes;
  • For the establishment, exercise, or defense of legal claims.

 

Right to Restriction of Processing

You may request restriction of processing where:

  • You contest the accuracy of personal data;
  • The processing is unlawful and you oppose erasure;
  • The Data Controller no longer requires the data but you need it for legal claims;
  • You have objected to processing pending verification of legitimate grounds.

Where processing has been restricted, personal data may only be processed with your consent or for the establishment, exercise, or defense of legal claims, protection of another person’s rights, or reasons of important public interest.

 

Right to Data Portability

Where processing is carried out by automated means and based on your consent, you have the right to receive the personal data you provided in a structured, commonly used, and machine-readable format such as:

  • XML
  • JSON
  • CSV

Where technically feasible, you may request that the data be transmitted directly to another data controller.

 

Right to Object

You have the right to object, on grounds relating to your particular situation, to processing based on:

  • Public interest;
  • Exercise of official authority;
  • Legitimate interests pursued by the Data Controller or a third party.

This right also applies to profiling based on such grounds.

Following an objection, personal data may no longer be processed unless the Data Controller demonstrates compelling legitimate grounds overriding the interests, rights, and freedoms of the data subject or the processing is necessary for legal claims.

 

Automated Decision-Making and Profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

 

Right to Withdraw Consent

You have the right to withdraw your consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

 

Right to Judicial Remedy

If you believe that your rights have been violated, you may bring legal proceedings against the Data Controller.

The competent court shall act with priority in such cases.

 

Data Protection Authority Procedure

Complaints may be submitted to the Hungarian National Authority for Data Protection and Freedom of Information (NAIH):

National Authority for Data Protection and Freedom of Information (NAIH)

Address: 1125 Budapest, Szilágyi Erzsébet fasor 22/C, Hungary
 Postal Address: 1530 Budapest, P.O. Box 5
 Phone: +36 1 391 1400
 Fax: +36 1 391 1410
 Email: ugyfelszolgalat@naih.hu
 Website: http://www.naih.hu

 

Additional Provisions

Information regarding any data processing activities not specifically described in this Privacy Policy will be provided at the time such data is collected.

Please note that courts, prosecutors, investigative authorities, administrative authorities, the National Authority for Data Protection and Freedom of Information, the Hungarian National Bank, and other authorities authorized by law may request information, disclosure of data, transfer of records, or access to documents from the Data Controller.

The Data Controller shall disclose personal data to authorities only to the extent necessary to fulfill the purpose of the request, provided that the authority has specified the exact purpose and scope of the requested data.

 

Final Provision

This Privacy Policy contains all relevant information regarding the operation of the webshop and the processing of personal data in accordance with:

  • Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation – GDPR);
  • Act CXII of 2011 on the Right of Informational Self-Determination and Freedom of Information (Hungary).