Data Controller
Name: Dohány Toy Manufacturer and Distributor Ltd.
Registered Office: 2360 Gyál, Kőrösi út 51.
Mailing Address: 2360 Gyál, Kőrösi út 51.
Tax ID: 12355840-2-13
Phone Number: 30/746-6040
Email: dohanytoys@dohanytoys.hu
Website: www.dohanytoys.hu
Web Hosting Provider
Name: Ergo System Bt.
Registered Office: 1116 Budapest, Fehérvári út 227.
Email: info@ergosystem.hu
Website: www.ergosystem.hu
This document contains all relevant information regarding data processing in connection with the operation of this website, in accordance with the European Union’s General Data Protection Regulation (Regulation (EU) 2016/679) (hereinafter: the “Regulation,” “GDPR”) and Act CXII of 2011 (hereinafter: the “Information Act”).
The Data Controller uses so-called cookies when you visit the website. A cookie is a small file consisting of letters and numbers that our website sends to your browser for the purpose of saving certain settings, facilitating the use of our website, and helping us collect relevant statistical information about our visitors.
Some cookies do not contain personal information and cannot be used to identify individual users; however, some contain a unique identifier—a secret, randomly generated sequence of numbers—that is stored on your device, thereby enabling your identification. The duration of each cookie is specified in the relevant description for that cookie.
The legal basis for data processing is your consent, pursuant to Article 6(1)(a) of the Regulation.
When someone visits our site, the visitor’s cookie ID is added to the remarketing list. Google uses cookies—such as the NID and SID cookies—in Google products to personalize the ads displayed in Google Search, for example. These cookies are used, for example, to remember your most recent searches, your previous interactions with ads from specific advertisers or with search results, and your visits to advertisers’ websites. The AdWords conversion tracking feature uses cookies. To track sales and other conversions resulting from an ad, cookies are stored on the user’s computer when that person clicks on an ad. Some common uses of cookies include selecting ads based on what is relevant to a particular user, refining reports on campaign performance, and preventing the display of ads that the user has already seen.
Google Analytics is Google’s analytics tool that helps website and app owners gain a more accurate picture of their visitors’ activities. The service may use cookies to collect information and generate reports based on statistical data regarding website usage without individually identifying visitors to Google. The main cookie used by Google Analytics is the “__ga” cookie. In addition to generating reports based on website usage statistics, Google Analytics—along with some of the advertising cookies described above—can also be used to display more relevant ads in Google products (such as Google Search) and across the web.
Ads may appear when previous visitors or users browse other websites on the Google Display Network or search for terms related to your products or services.
These cookies are essential for using the website and enable you to use its basic features. Without them, many of the website’s features will not be available to you. The lifespan of these cookies is limited to the duration of your session.
These cookies collect information about the user’s website usage, such as which pages they visit most frequently or what error messages they receive from the website. These cookies do not collect information that identifies the visitor; in other words, they work with completely general, anonymous information. We use the data obtained from these cookies to improve the website’s performance. The lifespan of these types of cookies is limited strictly to the duration of the session.
These cookies store the visitor's location and browser language; they expire when the browser is closed or after a maximum of 2 hours.
Saves the last category viewed. Valid for 60 days.
It detects the device the visitor is using and switches to full-screen mode on mobile devices. It is valid for 365 days.
When you arrive on the site, you accept the cookie policy in the pop-up window. The cookie expires after 365 days.
The identifier of the backend server hosting the page. It remains valid until the browser is closed.
The Facebook pixel is a piece of code that enables the website to track conversions, create target audiences, and provide the site owner with detailed analytics on how visitors use the site. Using the Facebook pixel, the website can display personalized offers and ads to its visitors on Facebook.
You can review Facebook's Privacy Policy here: https://www.facebook.com/privacy/explanation
Saves the previously visited page. Cookie duration: the length of the session.
If you do not accept the use of cookies, certain features will not be available to you. You can find more information about deleting cookies at the links below:
Internet Explorer: http://windows.microsoft.com/en-us/internet-explorer/delete-manage-cookies#ie=ie-11
Firefox: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer
Mozilla: https://support.mozilla.org/hu/kb/weboldalak-altal-elhelyezett-sutik-torlese-szamito
Safari: https://support.apple.com/guide/safari/manage-cookies-and-website-data-sfri11471/mac
Chrome: https://support.google.com/chrome/answer/95647
Edge: https://support.microsoft.com/hu-hu/help/4027947/microsoft-edge-delete-cookies
For example, if you contact us with a question about one of our services via email, a contact form, or by phone.
Data Processed
The data you provided when contacting us.
Duration of data processing
We process the data only until the conclusion of the contact.
Legal basis for data processing
Your voluntary consent, which you provide to the Data Controller when contacting us. [Data processing pursuant to Article 6(1)(a) of the Regulation]
Remarketing
Data processing for remarketing purposes is carried out using cookies.
Data Processed
Data processed by the cookies specified in the Cookie Policy.
Duration of data processing
The data retention period for the specific cookie; more information is available here:
Google's General Cookie Policy:
https://www.google.com/policies/technologies/types/
Google Analytics Information:
https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage?hl=hu
Facebook Information:
https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen
Your voluntary consent, which you provide to the Data Controller by using the website [data processing pursuant to Article 6(1)(a) of the Regulation].
If the Data Controller intends to engage in further data processing, it shall provide advance notice regarding the essential circumstances of the data processing (the legal framework and legal basis for the data processing, the purpose of the data processing, the scope of the data processed, and the duration of the data processing).
Data processing for the purpose of storing personal data
Name of the data processor: Ergo System Bt.
Contact information for the data processor:
Phone number: 06 (1) 284-0027
Email address: info@ergosystemhu
Registered office: 1116 Budapest, Fehérvári út 227.
Website: https://www.ergosystem.hu/
The Data Processor stores personal data pursuant to a contract entered into with the Data Controller. The Data Processor is not authorized to access personal data.
During the period of data processing, you have the following rights in accordance with the provisions of the Regulation:
the right to withdraw consent
Access to personal data and information regarding data processing
right to correction
restriction of data processing,
right to erasure
the right to protest
the right to portability.
If you wish to exercise your rights, this will require your identification, and the Data Controller will need to communicate with you. Therefore, to verify your identity, you will be required to provide personal data (though such verification may only be based on data that the Data Controller already processes about you), and your complaints regarding data processing will be available in the Data Controller’s email account within the timeframe specified in this notice.
The Data Controller will respond to complaints regarding data processing within 30 days at the latest.
You have the right to withdraw your consent to data processing at any time; in such cases, we will delete the provided data from our systems.
You have the right to receive confirmation from the Data Controller as to whether your personal data is being processed, and if it is, you have the right to:
to have access to the personal data being processed and
The Data Controller shall provide the following information:
the purposes of data processing;
the categories of personal data processed about you;
information about the recipients or categories of recipients to whom the Data Controller has disclosed or will disclose the personal data;
the planned duration of the storage of personal data, or, if this is not possible, the criteria for determining that duration;
Your right to request that the Data Controller rectify, erase, or restrict the processing of your personal data, and, in the case of data processing based on legitimate interests, to object to the processing of such personal data;
the right to file a complaint with the supervisory authority;
if the data was not collected from you, any available information regarding its source;
The purpose of exercising this right may be to determine and verify the lawfulness of data processing; therefore, in the event of repeated requests for information, the Data Controller may charge a reasonable fee in exchange for providing the information.
The Data Controller ensures access to personal data by sending you the processed personal data and related information via email after verifying your identity.
Please indicate in your request whether you are requesting access to your personal data or information regarding the processing of your data.
You have the right to request that the Data Controller correct any inaccurate personal data concerning you without delay.
You have the right to request that the Data Controller restrict data processing if any of the following conditions are met:
If you contest the accuracy of the personal data, the restriction applies for a period that allows the Data Controller to verify the accuracy of the personal data; if the correct data can be determined immediately, the restriction will not apply;
the processing of your data is unlawful, but you object to the erasure of the data for any reason (for example, because the data is important to you for the purpose of asserting a legal claim), and therefore you do not request the erasure of the data but instead request that its use be restricted;
the Data Controller no longer needs the personal data for the specified purpose of data processing, but you require it to assert, exercise, or defend legal claims; or
You have objected to the processing of your personal data, but the Data Controller’s legitimate interests may also justify the processing; in this case, until it is determined whether the Data Controller’s legitimate interests take precedence over your legitimate interests, the processing must be restricted.
If data processing is subject to restriction, such personal data may be processed—with the exception of storage—only with the data subject’s consent, or for the purpose of establishing, exercising, or defending legal claims, or for the purpose of protecting the rights of another natural or legal person, or for reasons of substantial public interest of the Union or of a Member State.
The data controller will notify you in advance (at least 3 business days before the restriction is lifted) of the lifting of the restriction on data processing.
You have the right to have the Data Controller erase your personal data without undue delay if any of the following grounds apply:
the personal data is no longer necessary for the purpose for which the Data Controller collected or otherwise processed it;
You withdraw your consent and there is no other legal basis for the processing of your data;
You object to the processing of your personal data based on a legitimate interest, and there is no overriding legitimate reason (i.e., legitimate interest) for the processing,
the Data Controller processed personal data unlawfully, and this was established based on the complaint,
Personal data must be erased to comply with a legal obligation under Union or Member State law applicable to the Data Controller.
If the Data Controller has disclosed personal data processed about you for any lawful reason and is required to erase such data for any of the reasons specified above, it must take all reasonably expected steps—taking into account available technology and the costs of implementation— —including technical measures—to inform other data controllers that process such personal data that you have requested the deletion of links to the personal data in question or the deletion of copies or duplicates of such personal data.
The right to erasure does not apply if the processing is necessary:
for the purpose of exercising the freedom of expression and the right to information;
compliance with an obligation under Union or Member State law to which the data controller is subject and which requires the processing of personal data (such as data processing carried out for invoicing purposes, since the retention of invoices is required by law), or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller;
to assert, enforce, or defend legal claims (e.g., if the Data Controller has a claim against you and has not yet satisfied it, or if a consumer or data protection complaint is pending).
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on legitimate interests. In this case, the Data Controller may no longer process your personal data unless it demonstrates that the processing is justified by compelling legitimate grounds that override your interests, rights, and freedoms, or that are related to the establishment, exercise, or defense of legal claims.
If personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for this purpose, including profiling, to the extent that it is related to direct marketing. If you object to the processing of your personal data for direct marketing purposes, your personal data may no longer be processed for that purpose.
If data processing is carried out by automated means, or if data processing is based on your voluntary consent, you have the right to request that the Data Controller provide you with the data you have provided to the Data Controller, which the Data Controller will make available to you in XML, JSON, or CSV format, provided this is technically feasible; you may also request that the Data Controller transmit the data in this format to another data controller.
You have the right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects concerning you or similarly significantly affects you. In such cases, the Data Controller is required to take appropriate measures to protect the data subject’s rights, freedoms, and legitimate interests, including, at a minimum, the data subject’s right to request human intervention by the Data Controller, to express their point of view, and to object to the decision.
The foregoing does not apply if the decision:
It is necessary for the conclusion or performance of a contract between you and the Data Controller;
the processing is permitted under Union or Member State law applicable to the Data Controller, which also provides for appropriate measures to safeguard your rights, freedoms, and legitimate interests; or
is based on your express consent.
Registration in the Data Protection Registry
Pursuant to the provisions of the Information Act, the Data Controller was required to report certain data processing activities to the data protection registry. This reporting requirement ceased to apply as of May 25, 2018.
The Data Controller declares that it has implemented appropriate security measures to protect personal data against unauthorized access, alteration, disclosure, erasure, or destruction, as well as against accidental loss or damage, and against becoming inaccessible due to changes in the technology used.
The Data Controller will do everything within its organizational and technical capabilities to ensure that its Data Processors also implement appropriate data security measures when processing your personal data.
If you believe that the Data Controller has violated any statutory provision regarding data processing or has failed to comply with a request you have made, you may initiate an investigation by the National Authority for Data Protection and Freedom of Information in order to put an end to the alleged unlawful data processing (mailing address: 1363 Budapest, P.O. Box 9, email: ugyfelszolgalat@naih.hu, phone numbers: +36 (30) 683-5969, +36 (30) 549-6838, +36 (1) 391 1400).
We would also like to inform you that, in the event of a violation of the legal provisions governing data processing, or if the Data Controller has failed to comply with a request you have made, you may file a civil lawsuit against the Data Controller in court.
The Data Controller reserves the right to amend this Privacy Notice in a manner that does not affect the purpose or legal basis of data processing. By continuing to use the website after such amendments take effect, you accept the amended Privacy Notice.
If the Data Controller intends to process the collected data for a purpose other than the purpose for which it was collected, the Data Controller will inform you of the purpose of the data processing and provide you with the following information prior to such further processing:
the period for which personal data will be stored, or, if that is not possible, the criteria used to determine that period;
your right to request from the Data Controller access to your personal data, the rectification or erasure of such data, or the restriction of its processing, and, in the case of data processing based on legitimate interests, to object to the processing of your personal data, and, in cases where data processing is based on consent or a contractual relationship, you may request that your right to data portability be ensured;
in the case of data processing based on consent, that you may withdraw your consent at any time,
the right to file a complaint with the supervisory authority;
whether the provision of personal data is required by law or under a contractual obligation, or whether it is a prerequisite for entering into a contract; whether you are required to provide the personal data; and what the possible consequences of failing to provide the data might be;
the fact that automated decision-making is used (if such a process is used), including profiling, as well as, at least in these cases, the logic applied and understandable information regarding the significance of such data processing and its expected consequences for you.
Data processing may only begin after this; if the legal basis for data processing is consent, you must also give your consent to the data processing in addition to receiving the information.
