Privacy Policy

Brown Kft., the operator of the online store www.alascarefrigerants.com, provides the following information to the visitor of the website and to the person contacting its customer service regarding the Data Management Information Sheet below: to the data subject or visitor about its data management practices, its technical measures regarding personal data, and about the visitors’ legal remedies.

Contents:

  • 1. The data controller
  • 2.Principles of data management
  • 3. Data management
  • 3.1. Application of cookies
  • 3.2. Data management related to newsletters
  • 3.3. Registration and order submission
  • 3.4. Complaint handling
  • 3.6.Facebook page
  • 3.7.Personal data managed on www.alaskarefrigerants.com
  • 3.8. Application of YouTube, Instagram and Facebook links
  • 3.9. Other data management
    4. Data security
    5. Data processors
    6. The rights of data subjects and their enforcement
  • 6.1. Data management measures taken during the exercise of data subject rights
  • 6.2. The data subject’s right of access
  • 6.3. Right to rectification
  • 6.4. The right to deletion is “the right to be forgotten”
  • 6.5. The right to restrict data processing
  • 6.6. The right to data portability
  • 6.7. The right to protest
  • 6.8. Legal remedies

1.) The data manager

The controller of personal data is Brown Kft.., whose

mailing address: Alkotmány utca 17, 6120 Kiskunmajsa.

email address:  info@alascarefrigerants.com

phone number:

tax number: 32544341-2-03

Company registration number: 03-09-138339,

representative: Barnabás Szécsényi,

data protection officer: Barnabás Szécsényi,

contact details of the data protection officer:

mailing address: Alkotmány utca 17, 6120 Kiskunmajsa.

email address:  info@alascarefrigerants.com

2.) Principles of data management

During the  activities carried out on www.alaskarefrigerants.com , such as visiting it, registering, ordering products, subscribing to our newsletter, personal data is handled, processed and used.

Regulation EU 2016/679 of the European Parliament and the Council hereinafter: according to the GDPR, any information relating to an “identified or identifiable natural person” is considered personal data; a natural person can be identified directly or indirectly, in particular on the basis of an identifier such as name, number, location data, online identifier or one or more factors relating to the physical, physiological, genetic, mental, economic, cultural or social identity of the natural person identifiable;”.

We process personal data legally and fairly, as well as transparently for the data subject, only for specific purposes, in accordance with the principle of data saving. We only process personal data that is essential for the realization of the purpose of data management and suitable for achieving the purpose. We process personal data only to the extent and for the time necessary to achieve the goal.

During our data management activities, we act in accordance with the following legislation:

  •  
  • CLV of 1997 on consumer protection. law (Fgytv.,
  • Act C of 2000 on accounting (Accounting),
  • CVIII of 2001 on certain issues of electronic commercial services and services related to the information society. law (E-garden),
  • Act C of 2003 on electronic communications (Eht.),
  • XLVIII of 2008 on the basic conditions and certain limitations of economic advertising activity. law (Grt.),
  • CXII of 2011 on the right to information self-determination and freedom of information. law (Infotv.),
  • Act V of 2013 on the Civil Code (Ptk.).
  • REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL (April 27, 2016) on the protection of natural persons with regard to the processing of personal data and on the free flow of such data, and on the repeal of Regulation 95/46/EC (general data protection regulation) – (GDPR)

3.) Data management

3.1. Application of cookies

If the data subject visits www.alaskarefrigerants.com, our website places cookies, i.e. short data files, on the visitor’s computer. This enables our website to recognize the device used by the data subject when a connection is established between the data subject’s device and our website.

Temporary cookies are placed on the visitor’s device by our website only during a specific session and are deleted when the session ends.

We also use permanent cookies on our website, which remain on the computer until the visitor deletes them.

Our tomorrow uses a cookie that collects data about the Internet browsing habits of the affected person. The purpose of this is to display advertisements tailored to the person concerned on his computer.

The cookies used on our website are the following:

  1.  

    1. A cookie neve: Google Analytics
      •  
  •  
        • The purpose of the cookie: Collection of complex statistical data
  •  
        • Nature of the cookie: behavior monitor
  •  
        • Lifetime of the cookie: 1 year
  •  
        • The legal basis for data management: the consent of the data subject, which is provided for in point 6 (1) a) of the GDPR, as well as Infotv. Section a) of paragraph (1) of § 5, and E-kertv. 13/A. (4) of §
  1.  

    1. A cookie neve: Cookie
      •  
  •  
        • Purpose of the cookie: Search engine, research
  •  
        • Nature of the cookie: behavior monitor
  •  
        • Lifetime of the cookie: 1 year
  •  
        • The legal basis for data management: the consent of the data subject, which is provided for in point 6 (1) a) of the GDPR, as well as Infotv. Section a) of paragraph (1) of § 5, and E-kertv. 13/A. (4) of §

    1. A cookie neve: Optimonk
      •  
  •  
        • The purpose of the cookie: Advertising, retargeting
  •  
        • Nature of the cookie: behavior monitor
  •  
        • Lifetime of the cookie: 4 years
  •  
        • The legal basis for data management: the consent of the data subject, which is provided for in point 6 (1) a) of the GDPR, as well as Infotv. Section a) of paragraph (1) of § 5, and E-kertv. 13/A. (4) of §

    1. To cookie snow: Facebook
      •  
  •  
        • The purpose of the cookie: it tracks Facebook members (and non-members) for the purpose of market research analysis and product development
  •  
        • Nature of the cookie: behavior monitor
  •  
        • Lifetime of the cookie: 1 year
  •  
        • The legal basis for data management: the consent of the data subject, which is provided for in point 6 (1) a) of the GDPR, as well as Infotv. Section a) of paragraph (1) of § 5, and E-kertv. 13/A. (4) of §

    1. A cookie neve: Facebook Pixel
      •  
  •  
        • The purpose of the cookie: Conversion measurement
  •  
        • Nature of the cookie: not a behavior monitor
  •  
        • Lifetime of the cookie: 1 year
  •  
        • The legal basis for data management: the consent of the data subject, which is provided for in point 6 (1) a) of the GDPR, as well as Infotv. Section a) of paragraph (1) of § 5, and E-kertv. 13/A. (4) of §

    1. A cookie neve: Google Ads Enhanced Conversions
      •  
  •  
        • The purpose of the cookie: Conversion measurement
  •  
        • Nature of the cookie: not a behavior monitor
  •  
        • Lifetime of the cookie: 2 years
  •  
        • The legal basis for data management: the consent of the data subject, which is provided for in point 6 (1) a) of the GDPR, as well as Infotv. Section a) of paragraph (1) of § 5, and E-kertv. 13/A. (4) of §

    1. A cookie neve: Google Tag Manager
      •  
  •  
        • The purpose of the cookie: Analytica and advertising activity control
  •  
        • Nature of the cookie: not a behavior monitor
  •  
        • Lifetime of the cookie: 1 year
  •  
        • The legal basis for data management: the consent of the data subject, which is provided for in point 6 (1) a) of the GDPR, as well as Infotv. Section a) of paragraph (1) of § 5, and E-kertv. 13/A. (4) of §

    1. A cookie neve: Bing Ads UET (Universal Event Tracker)
      •  
  •  
        • The purpose of the cookie: Advertising, retargeting
  •  
        • Nature of the cookie: behavior monitor
  •  
        • Lifetime of the cookie: 180 days
  •  
        • The legal basis for data management: the consent of the data subject, which is provided for in point 6 (1) a) of the GDPR, as well as Infotv. Section a) of paragraph (1) of § 5, and E-kertv. 13/A. (4) of §

    1. Cookie name: Bing Ads conversion code
      •  
  •  
        • The purpose of the cookie: Conversion measurement
  •  
        • Nature of the cookie: not a behavior monitor
  •  
        • Lifetime of the cookie: 180 days
  •  
        • The legal basis for data management: the consent of the data subject, which is provided for in point 6 (1) a) of the GDPR, as well as Infotv. Section a) of paragraph (1) of § 5, and E-kertv. 13/A. (4) of §

Google Ads Enhanced Conversions: Google’s enhanced conversion analysis cookie is also used for the analysis of purchases, further information on its use and operation can be found on the  page https://www.google.de/intl/de/adsense/start/  . Google’s privacy policy for customer data is available at the following link:  https://support.google.com/adspolicy/answer/7475709?hl=hu .

Automated decision-making and profiling:  on the basis of personal data collected about Internet habits with the help of cookies, we display personalized advertisements to the visitor that are adapted to the Internet history.

3.2. Data management related to newsletters:

Scope of processed data:  e-mail address, name and postal code, gender, age, interests, shopping habits of the person subscribing to the newsletter, date of subscription, IP address of subscription, date of confirmation of subscription, IP address of confirmation, newsletter openings , clicks on the links in the newsletters are recorded.

The purpose of data management is:  building a direct marketing database, sending commercial advertising to interested parties who have subscribed to the newsletter, within the framework of this, notifying those concerned about our new offers, promotions, and sweepstakes, as well as sending cart reminders to customers who have subscribed to the newsletter about products placed in the cart but not ordered.

Legal basis for data management:

  •  

The consent of the data subject, which is referred to in Article 6 (1) point a) of the GDPR and Infotv. Article 5, paragraph (1) point a) provides. You can withdraw your consent at any time by sending a letter to the e-mail address info@alascarefrigerants.com or by sending a letter to Brown Kft. 6120 Kiskunmajsa Alkotmány utca 17. As well as the legitimate interest of the data controller, which is based on point f) of Article 6 (1) of the GDPR. In this case, the data subject has the right to object to the handling of his personal data at any time in a letter sent to the e-mail address info@alascarefrigerants.com , in a letter sent to the postal address of Brown Kft. 6120 Kiskunmajsa Alkotmány utca 17.

Duration of data management:  until deletion at the request of the data subject. The newsletters contain an unsubscribe link in case the person concerned does not wish to receive the newsletter later, he can unsubscribe immediately by clicking on this link. You can also unsubscribe using the data controller’s contact details set out in point 1).

Automated decision-making and profiling:  based on the personal data of the data subjects, we classify the data subjects into customer profiles and send them newsletters tailored to the given profile.

3.3. Registration and order submission

Scope of processed data:

  •  
  •  
    • during registration: title, surname, first name, telephone number, e-mail address, password,
  •  
    • when placing the order: delivery method, payment method, billing address, delivery address.

Purpose of data management:  creation and fulfillment of the contract, invoicing and claims management related to the contract, as well as customer contact.

Legal basis for data management:

  •  
  •  
    • performance of a contract, because the data management is necessary for the performance of a contract in which the data subject is one of the parties, or the data management is necessary for taking steps at the request of the data subject prior to the conclusion of the contract; this is provided for in Article 6 (1) b) of the GDPR.
  •  
    • if the contract has been fulfilled, thereafter the legal basis for data management is the fulfillment of the legal obligation for the data manager; this is provided for in Article 6 (1) point c) of the GDPR.

Duration of data management:  until deletion at the request of the data subject, but if the contract has been concluded, the Accounting Office. Based on § 169, paragraph (2), 8 years.

3.4. Complaint handling

A/  A Brown Kft.. – Fgytv 17/A. In the case of a verbal complaint pursuant to paragraph (2) of § § – the personal data of the consumer who calls the customer service is recorded in a separate complaint report, if the consumer does not agree with the handling of the complaint or the immediate investigation of the complaint is not possible.

Scope of processed data:  consumer’s name, address, e-mail address, telephone number; the place, time and method of presenting the complaint; a detailed description of the consumer’s complaint, a list of documents, documents and other evidence presented by the consumer; the company’s statement on its position regarding the consumer’s complaint; the place and time of taking the minutes; unique identification number of the complaint; and all data that the consumer provides voluntarily in his complaint.

Purpose of data management:  complaint management.

The legal basis for data management:  the consent of the data subject, which is referred to in Article 6 (1) point a) of the GDPR and Infotv. Article 5, paragraph (1) point a) provides. You can withdraw your consent at any time by sending a letter to the e-mail address info@alascarefrigerants.com or by sending a letter to Brown Kft. 6120 Kiskunmajsa Alkotmány utca 17. The legal basis for data management is also Fgytv 17/A. Paragraphs (3)-(7) of §

Duration of data management:  Fgytv 17/A. 5 years based on § (7).

B/ A Brown Kft.. – Fgytv 17/A. In the case of a written complaint according to paragraph (6) of § § – the personal data of the consumer who sends an e-mail or postal letter to the customer service is handled.

Scope of processed data:  all data that the consumer provides voluntarily in his complaint.

Purpose of data management:  complaint management.

Legal basis for data management:

  •  
  •  
    • the consent of the data subject, which is referred to in Article 6 (1) point a) of the GDPR and Infotv. Article 5, paragraph (1) point a) provides. You can withdraw your consent at any time by sending a letter to the e-mail address info@alascarefrigerants.com or by sending a letter to Brown Kft. 6120 Kiskunmajsa Alkotmány utca 17. The legal basis for data management is also Fgytv 17/A. Paragraphs (6)-(7) of §
  •  
    • – performance of the contract, if the data management is necessary for the performance of a contract in which the data subject is one of the parties, or the data management is necessary for taking steps at the request of the data subject prior to the conclusion of the contract; this is provided for in Article 6 (1) b) of the GDPR.

Duration of data management:  Fgytv 17/A. 5 years based on § (7).

3.5. Facebook page for Alaska Refrigerants

On the Facebook page operated by Brown Kft., visitors can make comments, send messages to our company, and provide personal data.

Facebook also handles personal data on the Facebook page. If you would like to receive information about Facebook’s data management, please read  Facebook’s data management policy!

The range of data managed by Brown Kft..: all data that the data subject voluntarily provides by sending a comment or message, as well as publicly available profile data, if the data subject has followed or liked the Facebook page.

Our company has no influence on which data is available in the case of a publicly available profile, the relevant settings can be made by the person concerned via the following link:  https://www.facebook.com/settings?tab=privacy .

The purpose of data management is  to manage customer reactions, answer questions, and – if the person concerned has followed or liked the Facebook page – sharing and liking our Facebook page, our promotions and products.

The legal basis for data management:  the consent of the data subject, which is referred to in Article 6 (1) point a) of the GDPR and Infotv. Article 5, paragraph (1) point a) provides.

Duration of data management:  until deletion at the request of the data subject, with the data controller deleting personal data after a maximum of 5 years.

In addition to the above, Facebook also provides us with statistical data that cannot be linked to a specific person, such as user data regarding age, gender, age, place of residence. These data are used to develop our own site.

3.7.Personal data managed on www.alaskarefrigerants.com

On the website of Brown Kft.’s web store www.alaskarefrigerants.com  , visitors can make comments and send messages to our company, in the framework of which they can provide personal data.

Scope of processed data:  all data that the data subject voluntarily provides in their comments and messages.

The purpose of data management is  to manage customer reactions and answer questions.

The legal basis for data management:  the consent of the data subject, which is referred to in Article 6 (1) point a) of the GDPR and Infotv. Article 5, paragraph (1) point a) provides.

Duration of data management:  until deletion at the request of the data subject, with the data controller deleting personal data after a maximum of 5 years.

3.8. Application of YouTube, Instagram and Facebook links

On www.alaskarefrigerants.com ,  we have placed links to the Alaska Refrigerants subpages operating on YouTube, Instagram and Facebook. If the person concerned clicks on these, the social service provider’s page will open, and after logging in, the Alaska Refrigerants subpage can be viewed.

3.9. Other data management

Regarding data management not included in this information, we provide information immediately before the data is collected.

4.) Data security

Brown Kft. ensures the protection of personal data with the following organizational and technical measures:

  •  
  •  
    • based on its internal regulations, personal data can only be accessed by employees whose work requires the processing of personal data,
  •  
    • ensures the protection of electronically stored personal data with continuous virus protection, the use of a firewall and logging activities, which can also be used to check who and when accessed the personal data. These solutions ensure the protection of the IT system against computer fraud and burglary.

5.) Data processors

Data processor is the organization displayed in the list below, which processes the specified personal data of the data subject on behalf of Brown Kft. Data processing means performing technical tasks related to the management of the data subject’s personal data.

Company name

Title

Activity

Which data do you manage?

Stripe INC.

https://stripe.com/en-hu

bank card transaction authentication

affected e-mail address, payer ID, transaction amount, date, time, invoicing data

DPD Hungary Kft. 

1134 Budapest, Véci út 33. 2nd floor.

courier service activity

affected name, payer ID, transaction amount, date, delivery address, telephone number

PACKETA  HUNGARY Kft.

1044 Budapest, Ezred utca 1-3. B2/11. intact.

courier service activity

affected name, payer ID, transaction amount, date, delivery address, telephone number

I understand that the following personal data stored by Brown Kft. (6120 Kiskunmajsa, Alkotmány utca 17.) in the user database of www.alaskarefrigerants.com will be transferred to Stripe as a data processor. The range of data transmitted by the data controller is as follows: Name of data transmitted by Brown Kft.: payment identifier, transaction amount, date, time, name of the person concerned, e-mail address, telephone number, billing address, product name, date of purchase.
The nature and purpose of the data processing activity carried out by the data processor can be found in the Stripe Data Management Information Sheet at the following link:
https://stripe.com/en-hu/privacy

6.) The rights of those concerned and their enforcement 

6.1. Data management measures taken during the exercise of data subject rights

When exercising the data subject’s rights contained in these points, the data controller shall inform the data subject without undue delay, but in any case within one month of the receipt of the request, of the measures taken following the data subject’s request. If necessary, taking into account the complexity of the application and the number of applications, this deadline can be extended by another two months. The data controller shall inform the data subject of the extension of the deadline, indicating the reasons for the delay, within one month of receiving the request. If the data controller does not take measures following the data subject’s request, it shall inform the data subject without delay, but at the latest within one month of receipt of the request, of the reasons for the failure to take action, as well as of the fact that the data subject may file a complaint with a supervisory authority and exercise his right to judicial redress.

The data controller provides information and measures free of charge. If the data subject’s request is clearly unfounded or – especially due to its repetitive nature – excessive, the data controller may, taking into account the administrative costs associated with providing the requested information or information or taking the requested measure, charge a reasonable fee or refuse to take action based on the request. It is the responsibility of the data controller to prove that the request is clearly unfounded or excessive.

If the data controller has well-founded doubts about the identity of the natural person submitting the request, it can request the provision of additional information necessary to confirm the identity of the person concerned.

6.2. The data subject’s right of access

The data subject has the right to receive feedback from the data controller as to whether his personal data is being processed. If such data processing is in progress, you have the right to access your personal data and the following information:

  •  
  •  
    • the purposes of data management;
  •  
    • categories of personal data concerned;
  •  
    • the recipients or categories of recipients to whom or to whom the personal data has been or will be communicated, including in particular recipients in third countries and international organizations;
  •  
    • where applicable, the planned period of storage of personal data or, if this is not possible, the criteria for determining this period;
  •  
    • the right of the data subject to request from the data controller the correction, deletion or restriction of processing of personal data concerning him and to object to the processing of such personal data;
  •  
    • the right to submit a complaint to a supervisory authority;
  •  
    • if the data were not collected from the data subject, all available information about their source;
  •  
    • the fact of automated decision-making, including profiling, as well as, at least in these cases, comprehensible information about the logic used and the significance of such data management and the expected consequences for the data subject.

The data controller provides a copy of the personal data that is the subject of data management to the data subject. For additional copies requested by the data subject, the data controller may charge a reasonable fee based on administrative costs. If the data subject submitted the request electronically, we will provide the information in a widely used electronic format, unless the data subject requests otherwise.

6.3. Right to rectification

The data subject has the right to request that the data controller correct inaccurate personal data relating to him without undue delay. Taking into account the purpose of the data management, the data subject is entitled to request the completion of incomplete personal data, including by means of a supplementary statement.

The data manager informs all recipients of the correction to whom or to whom the personal data was communicated, unless this proves to be impossible or requires a disproportionately large effort. At the request of the data subject, the data controller informs about these recipients.

6.4. The right to erasure (“the right to be forgotten”)

The data subject has the right to request that the data controller delete his personal data without undue delay if one of the following reasons exists:

  •  
  •  
    • personal data are no longer needed for the purpose for which they were collected or otherwise processed;
  •  
    • the data subject withdraws the consent that forms the basis of the data management, and there is no other legal basis for the data management;
  •  
    • the data subject objects to the data processing and there is no overriding legal reason for the data processing or if the data processing is related to direct business acquisition;
  •  
    • personal data has been processed unlawfully;
  •  
    • the personal data must be deleted in order to fulfill the legal obligation prescribed by EU or Member State law applicable to the data controller;
  •  
    • the collection of personal data took place in connection with the offering of services related to the information society.

The above provision does not apply – among other things – if data management is necessary:

  •  
  •  
    • for the purpose of fulfilling the obligation under the EU or Member State law applicable to the data controller requiring the processing of personal data, or for the execution of a task performed in the public interest or in the context of the exercise of public authority conferred on the data controller;
  •  
    • for the presentation, enforcement and defense of legal claims.

The data manager informs all recipients of the deletion to whom or to whom the personal data was communicated, unless this proves to be impossible or requires a disproportionately large effort. At the request of the data subject, the data controller informs about these recipients.

6.5. The right to restrict data processing

The data subject has the right to have the data controller restrict data processing at his request if one of the following conditions is met:

  •  
  •  
    • the data subject disputes the accuracy of the personal data, in which case the limitation applies to the period that allows the data controller to check the accuracy of the personal data;
  •  
    • the data processing is illegal and the data subject opposes the deletion of the data and instead requests the restriction of its use;
  •  
    • the data controller no longer needs the personal data for the purpose of data management, but the data subject requires them to present, enforce or defend legal claims; obsession
  •  
    • the data subject objected to data processing; in this case, the restriction applies to the period until it is established whether the legitimate reasons of the data controller take precedence over the legitimate reasons of the data subject.

If data management is subject to restrictions, such personal data may only be processed with the consent of the data subject, with the exception of storage, or to submit, enforce or defend legal claims, or to protect the rights of another natural or legal person, or in the important public interest of the Union or a member state.

The data controller informs the data subject at whose request the data processing was restricted based on paragraph (1) in advance of the lifting of the data processing restriction.

The data manager informs all recipients of the data management restriction to whom or to whom the personal data was disclosed, unless this proves to be impossible or requires a disproportionately large effort. At the request of the data subject, the data controller informs about these recipients.

6.6. The right to data portability

The data subject has the right to receive the personal data concerning him/her provided by him/her to a data controller in a segmented, widely used, machine-readable format, and is also entitled to transmit this data to another data controller without being hindered by the data controller whose provided the personal data if

  •  
  •  
    • data management is based on consent or a contract; and
  •  
    • data management is automated.

When exercising the right to data portability in accordance with paragraph (1), the data subject is entitled to – if this is technically feasible – request the direct transmission of personal data between data controllers.

6.7. The right to protest

The data subject has the right to object to the processing of his personal data at any time if the legal basis for this is the legitimate interest of the data controller. In this case, the data controller will not process the personal data further, unless it proves that the data processing is justified by compelling legitimate reasons that take precedence over the interests, rights and freedoms of the data subject, or that are related to the submission, enforcement or defense of legal claims.

If personal data is processed for the purpose of direct business acquisition, the data subject has the right to object at any time to the processing of his personal data for this purpose, including profiling, if it is related to direct business acquisition. If the data subject objects to the processing of personal data for the purpose of direct business acquisition, then the personal data may no longer be processed for this purpose.

6.8. Legal remedies

In case of violation of your rights related to data management, you can go to court. The adjudication of the lawsuit falls within the jurisdiction of the court. At the choice of the person concerned, the lawsuit can also be initiated before the court of their place of residence or residence.

You can also contact the National Data Protection and Freedom of Information Authority (address: 1125 Budapest Szilágyi Erzsébet fasor 22/c., mailing address: 1530 Budapest, Pf.: 5., phone: 0613911400, fax: 0613911410, e-mail: ugyfelszolgalat@naih. hu, web: www.naih.hu)

The data controller is obliged to compensate the damage caused by the data controller or the data processor by unlawful handling of your data or by violating the requirements of data security. If the data controller violates your privacy rights by illegally handling your data or violating data security requirements, you may demand damages.

  1. 04. 10.