DATA MANAGEMENT INFORMATION
If you have any questions about this Privacy Policy, the use of the online store, products, the purchase process or the delivery process, please contact us using one of the contact details below.
Contact details of the webshop
Address for correspondence: 1162 Budapest, Timur utca 53.
Phone number: +36 70 673 7912
Electronic contact details of the company: bigstarstreet@bigstar.hu
The domain of the webshop is https://bigstar.hu
Privacy notice
BIG STAR STREET International Trading Ltd (hereinafter referred to as: Seller, Data Controller), as Data Controller, declares that its data management in connection with the operation of its webshop complies with the current legislation. When processing users’ data, we act in compliance with the following applicable laws.
The purpose of this Privacy Statement is to set out the principles and rules for the processing of personal data and other data provided during the ordering of products from the https://bigstar.hu webshop and made available to the website operators – BIG STAR STREET International Trade Ltd (Controller).
This Statement applies only to the data provided by the Data Controller for the use of the Site and does not apply to the case where a person voluntarily discloses his or her personal data, or part thereof, on the Site or through the Site.
When ordering products from the https://bigstar.hu online store, you may also provide information that constitutes personal data.
Personal data is any data that can be associated with a specific natural person (identified or identifiable) (hereinafter referred to as “data subject”), and any inference that can be drawn from the data concerning the data subject. The personal data will retain this quality during processing as long as the relationship with the data subject can be re-established. In particular, a person may be considered identifiable if he or she can be identified, directly or indirectly, by name, an identification mark or one or more factors specific to his or her physical, physiological, mental, economic, cultural or social identity.
Only the name and e-mail address provided during the user order process can be considered personal data under certain conditions (e.g. the name and e-mail address are real).
Details of the company operating the online shop
Data controller’s data:
Name of data controller: Fűzfa Laura
Address for correspondence: 1162 Budapest, Timur utca 53.
Phone number: 06706737912
E-mail address: laura.fuzfa@bigstar.hu
Website: www.bigstar.hu
Concepts
personal data
: relating to any specified (identified or identifiable) natural person
(hereinafter referred to as “the data subject”), the conclusions that can be drawn from the data concerning the data subject. The personal data will retain this quality during processing as long as the relationship with the data subject can be re-established. In particular, a person may be considered identifiable if he or she can be identified, directly or indirectly, by name, an identification mark or one or more factors specific to his or her physical, physiological, mental, economic, cultural or social identity;
Contribution
: a voluntary and explicit expression of the data subject’s wishes, based on appropriate information, by which he or she gives his or her unambiguous consent to the processing of personal data concerning him or her, whether in full or in relation to specific operations;
data controller
: the natural or legal person or unincorporated body which determines the purposes for which the data are to be processed, takes and executes decisions concerning the processing (including the means used) or has them executed by a processor on its behalf;
data management
means any operation or set of operations which is performed upon data, regardless of the procedure used, such as collection, recording, recording, organisation, storage, alteration, use, disclosure, transmission, alignment or combination, blocking, erasure and destruction, and prevention of further use of the data. Processing of a photograph, sound or image recording
and the recording of physical characteristics that can identify the person (e.g. fingerprints, palm prints, DNA samples, iris scans);
data transmission
: when the data are made available to a specified third party;
disclosure to the public
: when the data is made available to anyone;
data deletion
: rendering data unrecognisable in such a way that it is no longer possible to recover it;
data processing
: the performance of technical tasks related to data processing operations, irrespective of the method and means used to carry out the operations and the place of application;
third party
: a natural or legal person or unincorporated body other than the data subject, the controller or the processor.
Legal basis for processing
The User’s voluntary consent to the use of personal data provided by him/her while using the webshop and to the application of GDPR 6. Article 4(1)(a).
Purpose of data processing
The purpose of the Data Management is solely to facilitate the contact with users, to provide certain services tailored to their needs, to deliver the ordered product.
Consent to data processing
By submitting an order, the user consents to the Data Controller – BIG STAR STREET International Trade Ltd – to process the data provided for the order.
The 2011 Act on the right to information self-determination and freedom of information. CXII. Act 20. § (1), the data subject shall be informed of all facts relating to the webshop, in particular the purpose and legal basis of the processing, the person who is authorised to process the data and the duration of the processing.
Scope of the data processed:
Name: contact, invoicing, ordering
Title: Contact, invoicing, transport
E-mail address: contact, contact, newsletter, delivery notification
Phone number: Contact, contact, delivery notification
Date of purchase/registration: Technical operation
Information on data processing related to the order
The legal background to order-related data processing:
The legal background for data processing is provided by the 2011 Act on the Right to Informational Self-Determination and Freedom of Information. CXII. Act (Infotv.)
The legal basis for the processing of data relating to the order:
The legal basis for data processing is the user’s voluntary consent to the use of personal data provided while using the webshop, and the GDPR 6. Article 4(1)(b).
The purpose of the processing of data relating to the order:
The purpose of the Data Management is solely to facilitate the contact with users, to provide certain services tailored to their needs, to deliver the ordered product.
Data processed: name, address, e-mail address, telephone number.
The duration of the processing of data relating to the order:
The Data Controller shall process the data until the data subject’s request to delete the data, but at least until confirmation of delivery.
Information on billing data management
The legal background to invoicing data management:
The Sztv. 169. § (1)-(2), the contractor must keep the invoice issued for 8 years.
The legal basis for the processing of billing data:
The legal basis for data processing is the voluntary consent of the user to the use of personal data provided while using the webshop, and the application of the General Sales Tax Act 2007. CXXVII. 159. § (1), Act on Accounting 2000. Act C of 2006 No 169. § (2) and GDPR 6. processing pursuant to Article [1(1)(c)]
The purpose of the processing of data relating to invoicing:
The Sztv. 169. § (1)-(2), the obligation to keep accounting documents directly and indirectly supporting the accounting accounts.
Data processed: name, address, e-mail address and telephone number
The Service Provider stores the customer’s data only for the purpose of fulfilling the contract and for subsequent proof of the terms of the contract during the duration of the contract.
Duration of the processing of data relating to invoicing:
The Data Controller shall process the data of the data subject in accordance with the 2000. Act C of 2006 No 169. §, it must keep it for at least 8 years.
Information on data processing in relation to transport
The legal background to transport-related data processing:
The legal background for data processing is provided by the 2011 Act on the Right to Informational Self-Determination and Freedom of Information. CXII. Act (Infotv.)
The legal basis for the processing of data relating to the transport:
The legal basis for data processing is the user’s voluntary consent to the use of personal data provided during the use of the webshop, and GDPR 6. Article 3(1)(b).
Purpose of data processing in relation to transport:
Delivery of the goods ordered and notification of the time of delivery.
Data processed: name, address, e-mail address, telephone number
Duration of the processing of data relating to the transport:
The Data Controller shall process the data until the data subject’s request to delete the data, but at least until confirmation of delivery.
Name and contact details of the data controller: GLS General Logistics Systems Hungary Csomag-Logisztikai Kft. 2351 Alsónémedi, GLS Európa u. 2. Phone: +36 29 886 660; e-mail: mailing@gls-hungary.com. – The Data Processor will deliver the ordered product to the address provided by the customer in accordance with the written contract with the Data Controller. To carry out this process, the Processor may process the name, address, telephone number and email address of the customer for the duration of the delivery of the ordered goods, after which it will be deleted immediately.
Information on data management related to newsletter and personalised advertising
Purpose of data processing related to the sending of newsletters: the purpose of data processing is solely to facilitate contact with users, where appropriate, to provide certain services tailored to their needs, to inform them about new and promotional products. Data processed in connection with the sending of newsletters: name, address, e-mail address and telephone number. Duration of data processing in relation to the newsletter: the Data Controller will process the data until the data subject’s request to delete the data. Legal basis for data processing in connection with the sending of the newsletter: the legal basis for data processing is the user’s voluntary consent to the use of personal data provided while using the webshop, and the Infotv. 5. § (1) and the 2001. CVIII. Act 13/A. § (3). Legal background of data processing related to the sending of the newsletter. CXII. Act (Infotv.) on the collection of data by means of a newsletter:
Füzfa Laura – LOCATION: 1162 Budapest, Timur utca 53. – ADDRESS NUMBER: 10816806242 TELEPHONE NUMBER: 06706737912 – E-MAIL ADDRESS: laura.fuzfa@bigstar.hu – DATA STORAGE LOCATION: 1162 Budapest, Timur utca 53. The data processor shall cooperate with the data controller in the sending of newsletters in the manner specified in a written contract with the data controller, and to this end may process the names and email addresses of subscribers to the newsletter to the extent necessary for sending the newsletter, until the Data Subject requests to unsubscribe or delete the newsletter.
Information on data management related to registration
The legal background to registration-related data processing:
The legal background of data processing GDPR 6. Article 1(1)(b)
The legal basis for the processing of data related to the registration:
The legal basis for data processing is the user’s voluntary consent to the use of personal data provided during the use of the webshop, and GDPR 6. Article 1(1)(b).
The purpose of data processing in relation to registration:
The purpose of the processing is solely to facilitate contact with users, where appropriate, to provide certain services tailored to their needs, to describe new and promotional products.
Data processed in connection with registration: name, address, e-mail address and telephone number. Duration of data processing in relation to registration: the data controller processes the data until the data subject’s request for data erasure.
Treatment of cookies
During the use of the website, the Operator installs small data files (cookies) on the user’s computer, containing data that cannot be directly linked to the user, in order to record data, to identify the user and to facilitate the user’s further visits. The data obtained by the Data Controller through the use of data files is not linked by the Data Controller to the identification data of the User concerned. During the use of the webshop, the Data Controller records and processes the following data about the Data Subject:
the IP address used by the User;
the browser type;
the characteristics of the operating system of the device used for browsing;
the date of the visit;
the pages visited;
Legal background on cookie management:
The processing of cookies is governed by the Data Protection Act of 2011 on the right to information self-determination and freedom of information. CXII. Act (Infotv.) and the Act on Certain Issues of Information Society Services of 2001. CVIII. Act on certain aspects of information society services. The legal basis for data processing is the Infotv. 5. § (1) point a) of the User’s consent.
Cookie setting:
For most browsers, the Data Subject has the option to set cookies. By default, the browser automatically accepts cookies, but these can usually be changed to prevent automatic acceptance and each time you are offered the choice of whether or not to allow cookies.
The purpose of using cookies:
In the course of facilitating or enabling the usability and processes of the website, limiting or deleting cookies, the User may not be able to use certain functions of the website or may only be able to use them in a limited way.
Main features of the cookies used by the website:
“Persistent cookies”: are stored on your computer, notebook or mobile device even after you leave the website. These cookies allow the website to recognise your
User as a returning visitor. Not suitable for personal identification
Session cookies are only temporarily stored on your computer, notebook or mobile device until you leave the website. These cookies record the actions taken on the website during a visit. These cookies are automatically deleted from your computer, notebook or mobile device when you finish your session or close your browser.
Google Analytics Google Analytics is Google’s analytics tool that helps website and application owners to get a more accurate picture of their visitors’ activities. The service may use cookies to collect information and compile reports on website usage statistics without individually identifying visitors to Google. The main cookie used by Google Analytics is the “__ga” cookie. In addition to reporting on site usage statistics, Google Analytics, along with some of the advertising cookies described above, can also be used to display more relevant ads on Google services (such as Google Search) and across the web, and to measure interactions with the ads we display.
Google Adwords Cookies: Google Adwords cookies are also used to make ads more attractive to users and more valuable to advertisers and publishers. Some common uses of cookies include: selecting ads based on what is relevant to a particular user, improving campaign performance reporting, and avoiding displaying ads that the user has already viewed. Google uses cookies – such as NID and SID cookies – to personalise the ads you see in Google products, such as Google Search. For example, such cookies may be used to remember a User’s recent searches, past interactions with certain advertisers’ ads or search results, and visits to advertisers’ websites. This helps us to show you tailored ads on Google.
If the user does not agree to the use of cookies, certain functions will not be available to the user. For more information on deleting cookies, please see the “help” menu in your browser.
The Operator does not require the user’s consent when using the following cookies:
The cookie used for a password-protected session;
The cookie used for the shopping cart;
Security cookie;
You can set your browser to notify you when the Operator wishes to place cookies on your computer, or you can opt out of receiving cookies at any time.
Users should be aware that by not accepting cookies, certain pages or functions may not function properly, and the user may not be granted access to certain data.
Users have the option to delete cookies in the Tools/Settings menu. In the bottom of the Privacy settings menu.
The cookies used on the website are not in themselves capable of identifying the User.
Social media: the Data Controller maintains social media pages (Facebook/Instragam/Twitter, etc.) for the purpose of publicising and promoting the products of the webshop. If the User has “liked” or interacted with our webshop through a social networking site, we may process the following personal data of those Users: registered name, public profile picture of the User. Users are subject to the privacy terms and conditions of the relevant social media. In case of publication of illegal, offensive content, the Data Controller may exclude the User without prior notice. The legal basis for processing is the User’s voluntary consent to the processing of personal data on social networking sites.
Data processors and their processing activities
NAME OF DATA PROCESSOR FOR PERSONAL DATA STORAGE: Laura Fűzfa – SITUATION:
1162 Budapest, Timur utca 53. – ADDRESS NUMBER: 10816806242 – E-MAIL ADDRESS: laura.fuzfa@bigstar.hu – PHONE NUMBER: 06706737912 ; DATA RECORDING LOCATION: 1162 Budapest, Timur utca 53. The data processor shall perform the tasks specified in a written contract with the controller and shall not be entitled to access personal data.
Data security
The Data Controller shall endeavour to take all reasonable measures to ensure the security of the computer systems it uses, in particular to prevent unauthorised access to data stored on the site.
We have taken the following steps to ensure the security of your personal data:
- the pseudonymisation and encryption of personal data;
- ensuring the continued confidentiality of the systems and services used to process personal data;
- in the event of a physical or technical incident, the ability to restore access to and availability of personal data in a timely manner;
- a procedure to test, assess and evaluate regularly the effectiveness of the technical and organisational measures taken to ensure the security of processing;
- SSL certificate;
Rights of the user in relation to data management
The User may request information about the processing of his/her personal data and may request the rectification, erasure and blocking of his/her personal data. The User may request the deletion or modification of his/her personal data or request information on data management by:
E-mail address: laura.fuzfa@bigstar.hu
Address for correspondence: 1162 Budapest, Timur utca 53.
At the User’s request, the Data Controller shall provide information about the data processed by it, the legal basis, purpose and duration of data processing. The Data Controller shall provide the information in writing within the shortest possible time from the date of the request, but not later than 25 days. The user may request the correction, modification or deletion of his/her data at any time. The data controller is obliged to correct, amend or delete the personal data requested by the user within 25 days. Where the controller communicates the factual and legal grounds for refusing the request for rectification, blocking or erasure in writing or, with the consent of the Data Subject, by electronic means within 25 days of receipt of the request. In case of refusal of a request for rectification, erasure or blocking, the controller shall inform the Data Subject of the possibility of judicial remedy and of recourse to the Authority.
The information must be provided to the natural person in a concise, transparent, comprehensible and easily accessible form, in clear and plain language.
The information must be provided in writing or by other means, including electronic means where appropriate. At the request of the Data Subject, oral information may be provided, provided that the identity of the Data Subject has been verified by other means.
The controller shall inform the data subject of the action taken on the request without undue delay and in any event within one month of receipt of the request. If necessary, and taking into account the complexity of the application and the number of requests, this deadline may be extended by a further two months. The Data Controller shall inform the Data Subject of the extension of the time limit within one month of receipt of the request, stating the reasons for the delay. If the Data Subject has submitted the request by electronic means, the information shall be provided by electronic means where possible, unless the Data Subject requests otherwise. If the controller fails to take action on a request from the Data Subject, the controller shall inform the Data Subject without delay, but no later than one month after receipt of the request, of the reasons for the failure to act and of the possibility for the Data Subject to lodge a complaint with a supervisory authority and to exercise his or her right of judicial remedy.
The Service Provider respects and protects personal data. The use of the Contractor’s data is subject to the applicable provisions of the Data Protection Act. The Service Provider stores the customer’s data only for the purpose of fulfilling the contract and for subsequent proof of the terms of the contract during the duration of the contract. The Service Provider shall keep the Customer’s data for the period from 2000. Act C of 2006 No 169. §, it must keep it for at least 8 years.
The Service Provider will take all reasonable measures to keep the data secure, but shall not be liable for any loss, corruption or access by unauthorized persons due to natural disasters, criminal acts or other unforeseeable causes.
Right to transparent prior information
Natural persons have the right to be informed about the processing of their personal data in a concise, transparent and easily accessible form, in a clear and comprehensible manner.
The right to rectification
The Data Subject shall have the right to obtain, upon his or her request and without undue delay, the rectification of inaccurate personal data relating to him or her.
The right to erasure
The Data Subject shall have the right at any time, upon his or her request, to obtain from the controller the erasure of personal data concerning him or her without undue delay if:
the personal data are no longer necessary for the purposes for which they were collected; the Data Subject withdraws the consent on which the processing is based and there is no other legal basis for the processing;
the Data Subject objects to the processing of his or her data and there are no overriding legitimate grounds for the processing;
the personal data have been unlawfully processed.
Where the controller has given third parties access to the data to be deleted, it must inform all those to whom it has disclosed the Data Subject’s data to delete all references to and personal data held by them.
Right to restriction of processing
The Data Subject shall have the right to obtain, at his or her request, restriction of processing by the controller if one of the following conditions is met:
the Data Subject contests the accuracy of the personal data;
the processing is unlawful and the Data Subject opposes the erasure of the data and requests instead the restriction of their use;
the controller no longer needs the personal data, but the Data Subject requests them in order to pursue legal claims.
The right to data portability
The Data Subject shall have the right to receive personal data concerning him or her which he or she has provided to a controller in a structured, commonly used, machine-readable format and the right to transmit such data to another controller without hindrance from the controller to whom the personal data have been provided, if the processing is based on consent or on a contract and the processing is carried out by automated means.
Automated data processing
The Data Subject has the right not to be subject to a decision based solely on automated processing, including profiling, which would significantly affect him or her.
Right to object
The Data Subject has the right to object at any time, on grounds relating to his or her particular situation, to the processing of his or her personal data in accordance with 6. Article 1(1) e) or (f), including by profiling based on those provisions. In this case, the controller may no longer process the personal data, unless the controller proves that the processing is justified by compelling legitimate grounds which override the interests, rights and freedoms of the Data Subject. The Data Controller shall examine the objection and decide on its merits within the shortest possible time from the date of the request, but not later than 15 days, and inform the applicant in writing of its decision.
If the Data Controller does not comply with the user’s request for rectification, blocking or erasure, it shall inform the user in writing within 25 days of receipt of the request of the fact of the refusal of the request for rectification, blocking or erasure and the legal grounds for such refusal. In the event of a refusal of a request for rectification, erasure or blocking, the controller shall inform the Data Subject of the possibility of judicial remedy and of recourse to the Authority.
Description of the possibilities for complaint handling
If the Data Subject believes that the Data Controller has not complied with the legal provisions on data processing in relation to his or her data or has not complied with the Data Subject’s request for data processing, the User may lodge a complaint with the National Data Protection and
You can request an investigation by the Freedom of Information Authority by contacting one of the following:
postal address: 1530 Budapest, PO Box 5, e-mail: ugyfelszolgalat@naih.hu
If the Data Subject does not agree with the decision of the Data Controller, he or she may appeal against it to a court within 30 days of its notification. The court acts by default.
Third party storing personal data
Name of the data processor: Tárhely.Eu Szolgáltató Kft.
The data processor is located at Ormánság utca 4, 1144 Budapest, Hungary. X. floor 241.
Telephone number of the data processor: +36 1 789 2 789
E-mail address of the data processor: support@tarhely.eu
Data transmission
Name: Naspers OCS Hungary Kft. Address: 1074 Budapest, Rákóczi út 70-72. E-mail address:
info@arukereso.hu
Web address: www.arukereso.hu Privacy notice:
http://www.arukereso.hu/static/adatvedelem.html In order to operate the trusted shop program of www.arukereso.hu (Naspers OCS Hungary Kft. 1074 Budapest, Rákóczi út 70-72., Tax number: 24868291-2-42, Company registration number: 01-09-186759), the e-mail address of the customer and the name of the product purchased will be transmitted to arukereso.hu after purchases are made here. The purpose of the data transfer: to request and display customer feedback. The personal data thus transmitted will be processed by Naspers OCS Hungary Kft. in accordance with the Privacy and Data Protection Policy of www.arukereso.hu.
OTP Bank.
Bank headquarters: 1051 Budapest, Nádor u. 16
Telephone: (06 1) 366 6666
Bank’s web address: https://www.otpbank.hu/
Privacy Policy https://www.otpbank.hu/portal/hu/adatvedelem
The User may report complaints about the activities of the data controller to the following contact details:
Postal address: Postal address: 1162 Budapest, Timur utca 53.
Phone number: 06706737912
E-mail address: laura.fuzfa@bigstar.hu
National Authority for Data Protection and Freedom of Information 1125 Budapest, Szilágyi Erzsébet fasor 22/C.
Postal address: 1530 Budapest, P.O. Box 5.
Phone: +36 -1-391-1400
Fax: +36-1-391-1410
E-mail: ugyfelszolgalat@naih.hu
Date of entry into force: 30.06.2022.