{"id":1586,"date":"2026-03-09T15:59:44","date_gmt":"2026-03-09T14:59:44","guid":{"rendered":"https:\/\/brizlo.hu\/data-management-policy\/"},"modified":"2026-08-25T14:57:41","modified_gmt":"2026-08-25T12:57:41","slug":"data-management-policy","status":"publish","type":"page","link":"https:\/\/brizlo.hu\/en\/data-management-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Privacy Policy<\/h1>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Data Management Information\u00a0<\/strong><\/p>\n

He accepted\u00a0Pihepets Kft.<\/strong>\u00a0(Place: 1089 Budapest, Orczy \u00fat 12, Business Registration No: 01-09-387984, Tax No 25481819-2-42, tel.: + 3620-4010000, e-mail address: info@brizlo.hu; represented by:\u00a0Szabolcs M\u00e1sody<\/strong><\/em>\u00a0(hereinafter referred to as “Controller”) on 11 September 2024.\u00a0<\/p>\n

1. \/ General provisions\u00a0<\/strong><\/p>\n

This Privacy Policy is the subject of the Data Controller’s\u00a0www.brizlo.hu\u00a0On the basis of its commercial activities on the website, the processing of personal data by the Controller is carried out under Regulation (EU) 2016 \/ 679 of the European Parliament and of the Council (“GDPR ‘) of the European Parliament and of the Council of 2011 on the right of self-determination of information and freedom of information (” Infotv’) and other applicable legislation.\u00a0<\/p>\n

The Privacy and Data Management Principles applied by the Data Controller are set out in this Guide to ensure that the personal data of natural persons associated with it are not damaged.\u00a0<\/p>\n

The Data Controller reserves the right to unilaterally modify its privacy policy and the content of this Information System in the event of a change in the services it provides and in accordance with the legal provisions in force at all times. The Data Controller shall notify the data subjects of any change in this Information Document at the same time as the change.\u00a0\u00a0www.brizlo.hu website.\u00a0<\/p>\n

2. \/ Legal context\u00a0<\/strong><\/p>\n

\u2022 This Regulation shall be binding in its entirety and directly applicable in all Member States.\u00a0<\/p>\n

\u2022 Act CXII of 2011 on the right of information self-determination and freedom of information\u00a0<\/p>\n

\u2022 Act V of 2013 on the Civil Code\u00a0<\/p>\n

\u2022 Act XLVIII of 2008 on the basic conditions and certain limitations of economic advertising\u00a0<\/p>\n

\u2022 Act CVIII of 2001 on certain aspects of electronic commercial services and information society services<\/p>\n

3. \/ Definitions \u00a0<\/strong><\/p>\n

Personal data \/ Data subject:<\/strong>\u00a0any information concerning an identified or identifiable natural person (“data subject ‘); it may be identified by a natural person who can be identified, directly or indirectly, in particular on the basis of one or more factors relating to the physical, physiological, genetic, intellectual, economic, cultural or social identity of an individual, such as an identifier, such as name, number, location, online identifier or natural person.\u00a0<\/p>\n

Data management:\u00a0<\/strong>any operations or operations carried out in an automated or non-automated manner on personal data or files, such as collection, recording, organisation, division, storage, conversion or alteration, query, consultation, use, transmission, dissemination or other means of communication, coordination or interconnection, restriction, deletion or destruction.\u00a0<\/p>\n

Data processing:<\/strong>\u00a0the total of data processing operations carried out by the processor acting on behalf of or pursuant to the Data Controller.\u00a0<\/p>\n

Data Controller:\u00a0<\/strong>the natural or legal person, public authority, agency or any other body that determines the purposes and means of processing personal data individually or jointly; where the purposes and means of processing are determined by Union or national law, the controller or the specific criteria for the designation of the controller may be determined by Union or Member State law.\u00a0<\/p>\n

Data processor:<\/strong>\u00a0the natural or legal person, public authority, agency or any other body which manages personal data on behalf of the controller.\u00a0<\/p>\n

Data destruction:<\/strong>\u00a0total physical destruction of the data medium containing the data.\u00a0<\/p>\n

Data transmission:<\/strong>\u00a0making the data available to a specific third party.\u00a0<\/p>\n

Delete data:<\/strong>\u00a0making data unrecognizable in such a way that it is no longer possible to restore it.\u00a0<\/p>\n

Data protection incident: a breach of security resulting in accidental or unlawful destruction, loss, alteration, unauthorised disclosure or unauthorised access to personal data transmitted, stored or otherwise processed.\u00a0<\/p>\n

EEA State:<\/strong>\u00a0a Member State of the European Union and another State party to the Agreement on the European Economic Area and a State whose national is a citizen of the European Union and its Member States and a citizen of a State Party to the Agreement on the European Economic Area under an international contract concluded by a State not party to the Agreement on the European Economic Area.\u00a0<\/p>\n

Third person:<\/strong>\u00a0the natural or legal person, public authority, agency or any other body other than the data subject, controller, processor or persons authorised to handle personal data under the direct authority of the controller or processor.<\/p>\n

Third country:\u00a0<\/strong>any State which is not an EGT State.\u00a0<\/p>\n

Contribution:\u00a0<\/strong>a voluntary, concrete and appropriate information-based and clear statement of the Data Subject’s will to indicate, by means of a declaration or an unambiguous act of confirmation, its consent to the processing of personal data concerning him.\u00a0<\/p>\n

Disclosure:\u00a0<\/strong>making the data available to anyone.\u00a0<\/p>\n

4. \/ Data Management Scope:\u00a0<\/strong><\/p>\n

The processing shall cover:\u00a0<\/p>\n

– natural persons who:\u00a0<\/p>\n

\u2022 at the Controller, www.bizlo.hu The Internet store (hereinafter referred to as “website ‘) which is available on its website (hereinafter referred to as” web store’) registers themselves in connection with contacts; advertising or other information; newsletter for sending; \u2022 register with the Controller personally or in the web store for the purpose of ordering (“order ‘).\u00a0\u00a0<\/p>\n

The above is hereinafter referred to as “concerned, concerned.”\u00a0<\/em><\/p>\n

The material scope of this prospectus shall cover any processing carried out by the Controller in which personal data are processed, irrespective of the nature of the personal data.\u00a0<\/p>\n

5. \/ Source of data:\u00a0<\/strong><\/p>\n

Data voluntarily provided by the concerned.\u00a0\u00a0<\/p>\n

6. \/ Principles of data management:\u00a0<\/strong><\/p>\n

The Controller shall, during the processing of personal data, act in accordance with the following principles concerning the processing of personal data:\u00a0\u00a0<\/p>\n

(a) personal data shall be treated legally and fairly and in a transparent manner to the Data Subject;\u00a0<\/p>\n

(b) the collection of personal data may be carried out only for a specific, clear and lawful purpose and therefore subject to a purpose;\u00a0<\/p>\n

(c) in all cases the processing must be limited to the required amount (“data savings”);\u00a0<\/p>\n

(d) the data processed must be accurate and up to date if necessary: all reasonable measures must be taken to ensure that personal data which are inaccurate for the purposes of processing are deleted or corrected (“accuracy”);<\/p>\n

(e) the personal data must be stored in a form which allows the Data Subject to be identified only for the time necessary to achieve the purposes of processing personal data (“limited storage”);\u00a0<\/p>\n

(f) the processing of personal data shall be carried out in such a way as to ensure adequate security of personal data, including protection against unauthorised or unlawful processing, accidental loss, destruction or damage (integrity and confidentiality).\u00a0<\/p>\n

7 \/ Scope of data processed, purpose, duration and legal basis for data processing\u00a0<\/strong><\/p>\n

\u2022 Contact; advertising or other information; personal data required to be provided when sending a newsletter: \u00a0<\/strong><\/em><\/p>\n

\n\n\n\n\n\n
\n

Handled data\u00a0<\/strong><\/em><\/p>\n<\/td>\n

\n

Purpose of data processing\u00a0<\/strong><\/em><\/p>\n<\/td>\n

\n

Duration of data processing<\/strong><\/em><\/p>\n<\/td>\n

\n

Legal basis for data processing<\/strong><\/em><\/p>\n<\/td>\n<\/tr>\n

\n

Surname and forename:\u00a0<\/em><\/p>\n<\/td>\n

\n

For personal address in the newsletter<\/em><\/p>\n<\/td>\n

\n

until withdrawal\u00a0<\/em><\/p>\n<\/td>\n

\n

Article 6 (1) (a) of the GDPR provides that the data subject’s consent to processing<\/em><\/p>\n<\/td>\n<\/tr>\n

\n

Email address:\u00a0<\/em><\/p>\n<\/td>\n

\n

Information about the offers, actions, new products and the operation and operation of the web store also concerns customers. Occasionally – in the case of previous purchases, –\u00a0<\/em><\/p>\n

sending a tender in case of possible marketing of a similar new product.<\/em><\/p>\n<\/td>\n

\n

until withdrawal\u00a0<\/em><\/p>\n<\/td>\n

\n

In accordance with Article 6 (1) (a) of the GDPR, the consent of the Data Subject to data processing is required.<\/em><\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n

\u2022 Personal data required to be provided for purchase in a web store\u00a0<\/strong><\/em><\/p>\n

\n\n\n\n\n
\n

Handled data\u00a0<\/em><\/strong><\/p>\n<\/td>\n

\n

Purpose of data processing\u00a0<\/em><\/strong><\/p>\n<\/td>\n

\n

Duration of data processing\u00a0<\/em><\/strong><\/p>\n<\/td>\n

\n

Legal basis for data processing<\/em><\/strong><\/p>\n<\/td>\n<\/tr>\n

\n

Wireless and\u00a0\u00a0<\/em><\/p>\n

first name<\/em><\/p>\n<\/td>\n

\n

1. \/\u00a0\u00a0<\/em><\/p>\n

About the order\u00a0\u00a0<\/em><\/p>\n

contract,\u00a0\u00a0<\/em><\/p>\n

consignment note<\/em><\/p>\n<\/td>\n

\n

1. \/ For five years following the date of delivery of the order<\/em><\/p>\n<\/td>\n

\n

1. \/ In relation to order: GDPR pursuant to Article 6 (1) (b) of the contract<\/em><\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n

\n\n\n\n\n
\u00a0<\/td>\n\n

for preparation,\u00a0\u00a0<\/em><\/p>\n

thank you card exhibition,\u00a0\u00a0<\/em><\/p>\n

consignment\u00a0<\/em><\/p>\n

2. \/ Exposition of account from order\u00a0<\/em><\/p>\n<\/td>\n

\n

2. \/ Issuing of the account\u00a0\u00a0<\/em><\/p>\n

for eight years thereafter<\/em><\/p>\n<\/td>\n

\n

Section 13 \/ A of Act CVIII of 2001 on certain aspects of electronic commercial services and information society services\u00a0<\/em><\/p>\n

2013. Section 6: 22 (limitation – five years)\u00a0<\/em><\/p>\n

2. \/ In relation to invoicing: Article 6 (1) (c) GDPR – Article 169 (2) – (3) of Law CXXVII of 2007 on general turnover tax and Article 169 of Law C of 2000 on accounting\u00a0<\/em><\/p>\n

Section 13 \/ A of Act CVIII of 2001 on certain aspects of electronic commercial services and information society services<\/em><\/p>\n<\/td>\n<\/tr>\n

\n

Address\u00a0<\/em><\/p>\n<\/td>\n

\n

1. \/\u00a0\u00a0<\/em><\/p>\n

About the order\u00a0\u00a0<\/em><\/p>\n

contract,\u00a0\u00a0<\/em><\/p>\n

consignment note\u00a0\u00a0<\/em><\/p>\n

for preparation,\u00a0\u00a0<\/em><\/p>\n

thank you card\u00a0\u00a0<\/em><\/p>\n

exhibition,\u00a0\u00a0<\/em><\/p>\n

consignment\u00a0<\/em><\/p>\n

2. \/ Exposition of account from order<\/em><\/p>\n<\/td>\n

\n

1. \/ For five years following the date of delivery of the order\u00a0<\/em><\/p>\n

2. \/ Issuing of the account\u00a0\u00a0<\/em><\/p>\n

for eight years thereafter<\/em><\/p>\n<\/td>\n

\n

1. \/ In relation to order: GDPR pursuant to Article 6 (1) (b) of the contract\u00a0<\/em><\/p>\n

Section 13 \/ A of Act CVIII of 2001 on certain aspects of electronic commercial services and information society services\u00a0<\/em><\/p>\n

2013. Section 6: 22 (limitation – five years)\u00a0<\/em><\/p>\n

2. \/ In relation to invoicing: fulfilment of the legal obligation under Article 6 (1) (c) GDPR – legal obligation Article 159 of Law CXXVII of 2007 on general turnover tax –<\/em><\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n

\n\n\n\n\n\n\n
\u00a0<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n\n

Article 169 (2) – (3) of Law C of 2000 on accounting and accounting\u00a0<\/em><\/p>\n

Section 13 \/ A of Act CVIII of 2001 on certain aspects of electronic commercial services and information society services<\/em><\/p>\n<\/td>\n<\/tr>\n

\n

Telephone number\u00a0<\/em><\/p>\n<\/td>\n

\n

About the order\u00a0\u00a0<\/em><\/p>\n

information,\u00a0\u00a0<\/em><\/p>\n

relations\u00a0<\/em><\/p>\n<\/td>\n

\n

For five years after the date of delivery of the order at the website store<\/em><\/p>\n<\/td>\n

\n

GDPR pursuant to Article 6 (1) (b) of the contract\u00a0<\/em><\/p>\n

2013. Section 6: 22 (limitation – five years)<\/em><\/p>\n<\/td>\n<\/tr>\n

\n

E-mail address\u00a0<\/em><\/p>\n<\/td>\n

\n

About the order\u00a0\u00a0<\/em><\/p>\n

information,\u00a0\u00a0<\/em><\/p>\n

relations\u00a0<\/em><\/p>\n<\/td>\n

\n

For five years after the date of delivery of the order at the website store<\/em><\/p>\n<\/td>\n

\n

GDPR pursuant to Article 6 (1) (b) of the contract\u00a0<\/em><\/p>\n

2013. Section 6: 22 (limitation – five years)<\/em><\/p>\n<\/td>\n<\/tr>\n

\n

Address of delivery\u00a0<\/em><\/p>\n<\/td>\n

\n

Order\u00a0\u00a0<\/em><\/p>\n

for dispatch\u00a0\u00a0<\/em><\/p>\n

(If\u00a0\u00a0<\/em><\/p>\n

delivery address\u00a0\u00a0<\/em><\/p>\n

different from address)<\/em><\/p>\n<\/td>\n

\n

For five years after the date of delivery of the order at the website store<\/em><\/p>\n<\/td>\n

\n

GDPR pursuant to Article 6 (1) (b) of the contract\u00a0<\/em><\/p>\n

2013. Section 6: 22 (limitation – five years)<\/em><\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n

The provision of personal data listed above is necessary for the performance of a contract at a webstore and is mandatory (necessary) for the execution of the order. If personal data are not provided, the order cannot be executed\u00a0\u00a0<\/p>\n

8. \/ Data transmission and Addressees\u00a0<\/strong><\/p>\n

A The Controller shall not transmit personal data to third countries or international organisations.\u00a0\u00a0<\/p>\n

B The Controller shall transmit the data processed to the following addressees:<\/p>\n

Data Processors of the Data Controller:\u00a0<\/p>\n

\n\n\n\n\n\n\n\n\n\n
\n

Name and contact details\u00a0<\/em><\/strong><\/p>\n<\/td>\n

\n

Which data\u00a0<\/em><\/strong><\/p>\n

applicable<\/em><\/strong><\/p>\n<\/td>\n

\n

Purpose of transmission<\/em><\/strong><\/p>\n<\/td>\n<\/tr>\n

\n

_\u00a0<\/p>\n

Kft.\u00a0<\/p>\n

(1089 Budapest)\u00a0<\/p>\n

12 Orczy Road)<\/p>\n<\/td>\n

\n

All treated data\u00a0<\/p>\n<\/td>\n

\n

accounting and\u00a0<\/p>\n

payroll<\/p>\n<\/td>\n<\/tr>\n

\n

GLS courier service (2351 Lower N\u00e9medi, GLS Europe Street 2.)<\/p>\n<\/td>\n

\n

Name, address and contact details\u00a0<\/p>\n

telephone number, e-mail address<\/p>\n<\/td>\n

\n

Orders\u00a0<\/p>\n

delivery<\/p>\n<\/td>\n<\/tr>\n

\n

Hungarian Posta Zrt. (1138 Budapest,\u00a0<\/p>\n

2-6. DunaFlorist Street)<\/p>\n<\/td>\n

\n

Name, address and contact details\u00a0<\/p>\n

telephone number, e-mail address<\/p>\n<\/td>\n

\n

Orders\u00a0<\/p>\n

delivery<\/p>\n<\/td>\n<\/tr>\n

\n

\u266a\u00a0<\/p>\n

KBOSS.hu Kft.\u00a0<\/p>\n

(1031 Budapest,\u00a0<\/p>\n

7 Z\u00e1hany Street)<\/p>\n<\/td>\n

\n

Name, address, telephone number, e-mail address<\/p>\n<\/td>\n

\n

issuing accounts<\/p>\n<\/td>\n<\/tr>\n

\n

Creatit Solutions Background and\u00a0<\/p>\n

Communication\u00a0<\/p>\n

Restricted\u00a0<\/p>\n

Responsible\u00a0<\/p>\n

Company\u00a0<\/p>\n

(6724 Szeged,\u00a0<\/p>\n

59 Circular Street)<\/p>\n<\/td>\n

\n

All treated data\u00a0<\/p>\n<\/td>\n

\n

For stakeholders\u00a0<\/p>\n

relevant\u00a0<\/p>\n

Data controllers\u00a0<\/p>\n

software\u00a0<\/p>\n

Operation<\/p>\n<\/td>\n<\/tr>\n

\n

X- COM\u00a0<\/p>\n

Telecommunications, Trade\u00a0<\/p>\n

Developer and Manufacturer Limited\u00a0<\/p>\n

Responsible\u00a0<\/p>\n

Company\u00a0<\/p>\n

(1156 Budapest,\u00a0<\/p>\n

Ny\u00edr Palace 12.)<\/p>\n<\/td>\n

\n

All treated data\u00a0<\/p>\n<\/td>\n

\n

For stakeholders\u00a0<\/p>\n

operation of relevant e-mails and\u00a0<\/p>\n

processing of data controllers’ domains<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n

C. Other\u00a0<\/p>\n

The price of the products purchased in the web store is the limited liability company OTP Mobile Service (1138 Budapest, V\u00e1ci \u00fat 135- 139. B is intact. 5.) (hereinafter referred to as “OTP Mobile Ltd.”) shall be paid to the Controller.<\/p>\n

In the case of orders, personal data shall be provided on the prepaid page of the web store “SimplePay,” the Forename, Surname, Postal code, Municipality, Address, Building, Floor, Door, Telephone number. Once the data is provided, the Data Subject will be transferred to the secure payment page of “SimplePay,” where the card data required for payment are required. The payment will then be possible.\u00a0\u00a0<\/p>\n

Neither the data entered on the “SimplePay” payment preparation page nor the data entered on the “SimplePay” payment page are disclosed to the Data Controller, which are independent and protected websites.\u00a0<\/p>\n

Therefore, the Controller does not carry out any data management activity in the course of payment as described above. In the course of payment, the sole, independent data manager is OTP Mobile Kft.\u00a0\u00a0<\/p>\n

9. \/ Technical processing of data:\u00a0<\/strong><\/p>\n

The Data Controller stores the data of the data subjects solely by electronic means on servers in Hungary, and personal data are not transferred to a data processor in a third country.\u00a0<\/p>\n

The Controller shall ensure the security of personal data by appropriate technical and organisational measures. The Data Controller shall provide computer equipment for the processing, storage of personal data with adequate protection (password, firewall) and shall ensure that only those authorised are able to access such equipment.\u00a0\u00a0<\/p>\n

The Controller shall also ensure that personal data are not damaged, destroyed or made known in the event of force majeure.\u00a0<\/p>\n

10. Rights of data subjects related to data management\u00a0<\/strong><\/p>\n

In the course of data processing, the Data Controller shall ensure the right of the data subjects to protect their data. The Parties shall be entitled to:\u00a0<\/p>\n

(a) right of information: The Data Subject shall have the right to be informed of the information relating to data processing prior to the commencement of the processing activity.\u00a0<\/p>\n

(b) Right of access: The Data Subject is entitled to receive feedback from the Controller on whether or not his or her personal data are being processed and, if such processing is ongoing, is entitled to obtain access to personal data and relevant information (purpose of processing, duration of storage of personal data, etc.)\u00a0<\/p>\n

(c) Right to rectification and deletion: The Data Subject is entitled to correct inaccurate personal data relating to him without undue delay at his request. The Data Subject shall have the right to delete personal data relating to him without undue delay at his request and the Data Controller shall be obliged to delete personal data relating to the Data Subject without undue delay if the data subject has withdrawn his express consent or the purpose of processing has ceased for other reasons. Unless, in the light of legislation, data are to be kept. However, in addition to the above, data which cannot be deleted under the law or at the time of the request for this information are further processed by the Controller.\u00a0<\/p>\n

(d) the right to restrict the processing of personal data: The Data Subject is entitled, at his request, to restrict the processing of personal data if he disputes the accuracy of personal data (in this case, the restriction applies to the period allowing the Data Controller to verify the accuracy of personal data); the processing of data is unlawful and the Data Subject objects to the deletion of the data and requests instead to limit their use; the Data Controller no longer needs personal data for the purposes of data processing, but the Data Subject requires them to submit, enforce or protect legal needs.\u00a0<\/p>\n

(e) the obligation to notify personal data in relation to rectification or erasure or restriction of processing: The Controller shall inform all addressees of the correction, erasure or restriction of processing with whom or with whom the personal data has been communicated, unless this proves impossible or requires disproportionate effort.\u00a0<\/p>\n

(f) Right to data portability: The Data Subject is entitled to receive personal data relating to him made available to a Controller in a widely used machine-readable format and to transmit such data to another Controller.\u00a0<\/p>\n

(g) right of complaint and appeal: The Data Subject is entitled to lodge a complaint with the supervisory authority under Article 77 of the GDPR if the Data Subject considers that the processing of personal data relating to him is in breach of GDPR. Furthermore, Infotv. Pursuant to Article 22 of the Supervisory Authority, the controller may initiate an investigation to verify the legality of his or her actions if the Controller limits or refuses to apply for the enforcement of his or her rights, and may request the processing of his \/ her personal data to be conducted by the supervisory authority if he \/ she considers that the controller or the processor acting on his \/ her behalf infringes the requirements laid down in the law on the processing of personal data or in the compulsory act of the European Union.\u00a0<\/p>\n

The Data Subject may exercise his right to complain at: Nthe Authority for Data Protection and Freedom of Information in Hungary; address: 1055 Budapest, Falk Miksa utca 9-11.; Tel: + 36 (1) 391-1400; Fax: + 36 (1) 391-1410; www: http:\/\/www.naih.hu; email: ugyfelszolgalat@naih.hu\u00a0<\/em><\/p>\n

The Data Subject may apply to a court in the event of a breach of its rights or in other cases specified in Infotv (Article 23 Infotv). It shall be the jurisdiction of the General Court. The action – The Data Subject’s choice – may also be brought before the court of residence or residence of the Data Subject.<\/b><\/p>\n

11. \/ Specific rules for the provision of information for advertising purposes\u00a0<\/strong><\/p>\n

The Data Controller shall send to the Data Controllers a message containing information on the purpose of data processing and the services it provides in order to make use of the services.\u00a0\u00a0<\/p>\n

The Data Subject notes, however, that the subscription to the newsletter service is also a contribution within the meaning of Article 6 (1) of Law XLVIII of 2008 on the essential conditions and certain limitations of economic advertising activities, whereby the Data Controller is entitled to transmit advertising and marketing requests directly to the data subject’s electronic mail address in relation to the services organised by the Data Controller. The Data Controller expressly contributes to sending him news, newsletters, advertising and promotional offers about the services he provides.\u00a0<\/p>\n

If the Data Subject does not wish to receive any future messages considered as advertising, he may cancel this at any time using the opportunity offered by the Data Controller in a newsletter and expressly prohibit the sending of requests containing advertising by mail or e-mail addressed to the Data Controller. The waiver referred to above shall be without prejudice to the legality of the processing carried out prior to the withdrawal.\u00a0<\/p>\n

12. \/ Facebook, Google Analytics, Google Adwords, Hotjar provisions\u00a0<\/strong><\/p>\n

12.1.Facebook\u00a0<\/p>\n

More information about the cookies placed by facebook can be found on the following link:\u00a0https:\/\/hu-hu.facebook.com\/policies\/cookies\/\u00a0With regard to disabling cookies, more information can be obtained using the attached link.\u00a0<\/p>\n

12.2. Google Analytics\u00a0<\/p>\n

Google Analytics is an analytical service provided by Google Inc. (, “Google”), which examines user activities on the website using the user’s computer. The legal basis for web analytical data processing is the voluntary consent of the user of the website. Cookies used for analytical purposes are anonymised and aggregated data, which make it difficult to identify the device but not excluded.\u00a0\u00a0<\/p>\n

Data collected by Google Analytics cookies that are transferred and stored on Google servers. The collected information, data is processed by Google. Google aims to assess and evaluate the user’s website visiting habits, report on the frequency of use of the website and provide further related services using the website. When using Google Analytics, Google cannot link the IP address transmitted via the browser to other data.<\/p>\n

Google Analytics uses cookies for analytical purposes. More information about cookies used by Google Analytics is available on the following link:\u00a0\u00a0https:\/\/developers.google.com\/analytics\/devguides\/collection\/analyticsjs\/cookie\u00a0usage # analytitsjs\u00a0<\/p>\n

12.3. Google Adwords\u00a0<\/p>\n

Google Adwords Remarketing will be used by the website, which aims to target visitors later on Google Display web sites with remarketing ads. Remarketing code uses cookies to label visitors to the website. Users of the website have the opportunity to disable these cookies. You can do this by visiting the manager of Google ad settings and following the instructions there. If the cookies are disabled, no further personalised offers will be made by the Service Provider.\u00a0\u00a0<\/p>\n

For more information about cookies used by Google, see the following link:\u00a0https:\/\/policies.google.com\/technologies\/ads?hl=hu\u00a0<\/p>\n

Google’s privacy statement is available on the following link:\u00a0\u00a0https:\/\/policies.google.com\/privacy?hl=hu\u00a0<\/p>\n

12.4. Hotjar\u00a0<\/p>\n

The website sometimes uses Hotjar’s web analysis to analyse the behaviour of users. Hotjar examines user interactions on the website using the cookies on the user’s computer. The legal basis for data processing for web analysis is the voluntary consent of the user of the website. Cookies used for analytical purposes are anonymised and aggregated data, which make it difficult to identify the device \/ computer but not excluded.\u00a0\u00a0<\/p>\n

Hotjar uses cookies for analytical purposes. Additional information about the cookies Hotjar uses is available on the following link:\u00a0\u00a0https:\/\/www.hotjar.com\/legal\/policies\/cookie-information\u00a0<\/p>\n

13 \/ Final provisions\u00a0<\/strong><\/p>\n

If the website is visited, the IP address of the Consumer may be registered, but the IT solutions used in the operation of the website do not allow the Controller to access the User’s personal data, these data will be used solely to improve the website and to improve the services available through it (for statistics and analyses).\u00a0<\/p>\n

The website during the first visit is called “cookie” (hereinafter referred to as “cookie”) can be installed on the customer’s computer, phone hard disk, in memory, in order to make the contents of the page faster and simpler when you visit the site.\u00a0<\/p>\n

Take care. In case of refusal to download “cookies” certain elements of the sheet may not be displayed.\u00a0<\/p>\n

The Controller does not exchange “cookies” with websites operated by third parties and does not allow them to be traded on its own website. Detailed rules for “cookie treatment”\u00a0www.brizlo.hu\u00a0are included in pop-up cookie handling windows.\u00a0\u00a0<\/p>\n

The Data Controller reserves the right to make changes and corrections at any time without notification to the website or to terminate the website or the information provided in whole or in part. The Controller does not guarantee continuity and integrity of access to the website; the Data Controller is not liable for any damage caused by malfunctioning.\u00a0<\/p>\n

The Controller shall compensate for any damage caused by unlawful processing of data of the Data Subject or breach of the requirements of data security, unless such damage was due to the intentional or seriously negligent behaviour of the injured person.\u00a0<\/p>\n

14 \/ Relevant legislation \u00a0<\/strong><\/p>\n

For matters not settled in this Information, Regulation (EU) 2016 \/ 679 of the European Parliament and of the Council (GDPR), Law CXII of 2011, Law V of 2013 on Information Self-determination and Freedom of Information, Civil Code and other relevant legislation shall apply.\u00a0<\/p>\n

This data management information has been produced in Hungarian.\u00a0\u00a0<\/p>\n

This Data Management Guide is valid from today until withdrawal.\u00a0<\/p>\n

Budapest, September 11, 2024<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

It was accepted by Pihepets Kft. (Place: 1089 Budapest, Orczy \u00fat 12, tax number 25481819-2-02, tel. 0612109283, e-mail address: info@brizlo.eu) (hereinafter referred to as “Data Controller ‘).<\/p>\n

1. \/ General provisions<\/b><\/p>\n

\u00a0<\/b>Subject-matter of this Data Protection Code managed by Data Controller\u00a0https:\/\/brizlo.hu\/<\/span>\u00a0<\/span>In the context of the operation of a web store (hereinafter referred to as “website store ‘), the processing of personal data held by the Data Controller under Regulation (EU) 2016 \/ 679 of the European Parliament and of the Council (GDPR) of 2011 on the right of self-determination of information and freedom of information (” Infotv’) and other applicable legislation.<\/p>\n

This Regulation lays down the principles of data protection and data management applied by the Data Controller in order to ensure that the privacy rights of natural persons involved in the provision of services in connection with the web store are not infringed.<\/p>\n

The Data Controller reserves the right to unilaterally modify its data protection policy and the content of this Regulation in the event of a change in the services it provides and in accordance with the legal provisions in force at all times. Any changes to these Rules shall be published by the Data Controller at the same time as the change.<\/p>\n

2. \/ Scope of data subjects<\/b><\/p>\n

Natural persons (hereinafter referred to as “affected ‘) who purchase the products of the Controller via the web store (hereinafter referred to as” the supply of goods’) or are specifically registered on the website for the newsletter service,<\/p>\n

\u00a0<\/b>3. \/ Purpose of data processing<\/b><\/p>\n

The Data Controller shall record and manage the personal data of data subjects voluntarily provided for the following purposes relating to the supply of goods: contract, performance, termination, newsletter and advertising information relating to the supply of goods in the webstore.<\/p>\n

4. \/ Legal basis for data processing and source of data<\/b><\/p>\n

The legal basis for the processing of data shall be the prior voluntary consent given by data subjects in the possession of appropriate information on data processing and the conclusion of contracts, contracts and termination of contracts relating to the supply of goods.<\/p>\n

The source of the data is the voluntary data provided by the data subjects.<\/p>\n

The personal data of the data subject shall be processed by the controller in accordance with this Regulation, either by giving the personal data of the data subject on the website or by subscribing to the information for the purpose of sending the newsletter advertising.<\/p>\n

Where data are provided by the data subject for the purpose of the supply of goods, data shall be processed for the purpose of concluding contracts, performance of contracts, termination of contracts relating to the supply of goods. The data subject notes that\u00a0a contribution to the processing of data for more than one processing purpose,\u00a0<\/i>take it with the purchase.<\/p>\n

If the data subject subscribe to information for advertising purposes, his or her data shall be processed for the purpose of sending a newsletter and providing information for advertising purposes. The data subject notes that\u00a0with a single contribution to the processing of data for a number of purposes\u00a0<\/i>accept it with the sign-up.<\/p>\n

\u00a05. \/ Data on data subjects, duration of data processing<\/b><\/p>\n

The processing shall cover the following data of data subjects:<\/p>\n

In the case of supply of goods:<\/p>\n

    \n
  • name,<\/li>\n
  • address, billing address,<\/li>\n
  • date of birth,<\/li>\n
  • identity card number or passport number or driving licence number<\/li>\n
  • email address.<\/li>\n<\/ul>\n

    In the case of subscriptions to newsletter advertising:<\/p>\n

      \n
    • name,<\/li>\n
    • e-mail the address.<\/li>\n<\/ul>\n

      In the case of the supply of goods, the transfer of the data referred to above to the Controller is a prerequisite for the conclusion and performance of the contract relating to the supply of goods.<\/p>\n

      In the case of subscriptions to newsletter information for advertising purposes, the provision of information as described above is a prerequisite for sending the relevant electronic information.<\/p>\n

      In the event of failure to provide information, the data subject shall not be able to conclude or receive any information relating to the supply of goods.<\/p>\n

      The processing shall start by filling in the registration interface (providing data for the supply of goods or subscriptions to newsletter information).<\/p>\n

      In the case of the supply of goods, the Data Controller will manage the data for six years.\u00a0\u00a0<\/p>\n

      In the event of registration for newsletter advertising, the data shall be processed by the Controller until the date of withdrawal but not for more than 10 years.<\/p>\n

      Upon expiry of the period of processing, the Data Controller shall permanently delete data of data subjects in a way that cannot be restored.<\/p>\n

      The data processing consent of the person concerned may be withdrawn at any time, without justification, orally, in writing, by electronic mail. In this case, the Controller shall permanently delete all data in a manner that cannot be restored, except in the case of supply of goods, data that are required for a longer period of retention by civil, tax or other legislation.\u00a0\u00a0 \u00a0<\/p>\n

      6. \/ Type of data transmitted<\/b><\/p>\n

      The Controller shall not use personal data for purposes other than those indicated. Personal data may be transferred to third parties only with the prior and informed consent of the data subjects, except in the case of any legally binding transmission.<\/p>\n

      7 \/ Obligations of the Controller’s performance assistants during the processing<\/b><\/p>\n

      Personal data received by the Controller may be disclosed only by the Data Controller’s agents involved in the implementation of the data management objectives set out in these Rules, who are subject to confidentiality obligations in respect of all the data they have known pursuant to their employment contract, contract of employment, legal provisions relating to their employment or instructions.<\/p>\n

      Compliance with the Data Protection Code shall be binding on the Data Controller, on all his \/ her performance assistants, including former performance assistants, (hereinafter referred to as “performance aide ‘) in the processing of data subjects’ personal data.<\/p>\n

      A performance assistant may not disclose or communicate to another person or make available any personal data related to data subjects known during his or her legal relationship, either during or after his \/ her legal relationship.<\/p>\n

      A performance aide may communicate to another performance aide the personal data known in the course of the relationship if this is necessary for the performance of the work. The Data Controller may only communicate the personal data known during the relationship to other third parties with the consent of the Data Controller. The Data Controller may only transmit personal data known in the course of the relationship with the Data Controller, regardless of how the transfer takes place by using which means.<\/p>\n

      The AACC shall report to the Controller immediately if any breach of these Rules becomes known.<\/p>\n

      8. \/ Technical processing of data:<\/b><\/p>\n

      The Data Controller stores personal data of data subjects exclusively by electronic means on servers in Hungary, and personal data are not transferred to the Data Controller or processor in either domestic or third country.<\/p>\n

      The Controller shall ensure the security of personal data by appropriate technical and organisational measures. The Data Controller shall provide computer equipment for the processing, storage of personal data with adequate protection (password, firewall) and shall ensure that only those authorised are able to access such equipment. The Controller shall also ensure that personal data are not damaged, destroyed or made known in the event of force majeure.<\/p>\n

      9. \/ Rights of persons concerned in relation to data management<\/b><\/p>\n

      The data subject may apply to the Controller:<\/p>\n

        \n
      • Information on the processing of personal data: the Controller shall, at the request of the data subject, provide, within no more than 30 days of receipt of the request, information on the data he manages, the source, the purpose, legal basis, the duration of the processing, and the legal basis and the addressee of the transfer where the personal data are transmitted. The refusal of information shall be possible only in cases governed by law. The information shall be free of charge if the applicant has not submitted a request for information to the Controller in respect of the same data range in the current year. In other cases, the Controller may determine reimbursement.<\/li>\n
      • Corrections to personal data: if personal data are not true and the personal data corresponding to them are available to the Controller, the personal data shall be rectified on their own authority or at the request of the data subject.<\/li>\n
      • Adding your personal data: if personal data are required to be supplemented and the personal data to be supplemented are available to the Controller, the personal data shall be corrected on their own authority, otherwise at the request of the data subject.<\/li>\n
      • Deletion of personal data: personal data shall be deleted by the Controller if it is unlawful; the data subject requests it; the purpose of processing has ceased or the time limit for storing the data has expired; it has been ordered by the court or authority.<\/li>\n
      • The Data Controller shall seal the personal data instead of erasure if the data subject so requests, or if it can be assumed that the deletion would harm the legitimate interests of the data subject on the basis of the information at his disposal. Personal data thus sealed may be processed only as long as there is a purpose of processing which has excluded the deletion of personal data.<\/li>\n
      • The portability of your personal data: you will receive personal data from the Data Controller in a widely used machine-readable format, which will be distributed to another Controller.<\/li>\n<\/ul>\n

        In addition to the foregoing, the data subject may object to the processing of his personal data if the processing or transmission of personal data is necessary solely to fulfil the legal obligation of the Controller or to enforce the legitimate interests of the Controller, Data Receiver or third party.<\/p>\n

        The Controller shall examine the objection as soon as possible and within a maximum of 15 days from the date of submission of the request, take a decision on its merits and inform the applicant in writing of its decision.<\/p>\n

        Details of the above entitlements are provided in Infotv. It is included in Sections 14-19 and 21 respectively.<\/p>\n

        The data subject shall have the right to initiate proceedings before the National Data Protection and Freedom of Information Authority in relation to the processing which he considers to be unlawful.<\/p>\n

        The person concerned may apply to a court in cases specified in Infotv (Article 23 of the Infotv.). The court has jurisdiction over the trial. The proceedings may, at the discretion of the data subject, be brought before the court of residence or residence of the data subject.<\/p>\n

        \u00a0\u00a010. Data protection incident<\/b><\/p>\n

        A data protection incident shall be considered as:<\/p>\n

        a breach of security resulting in accidental or unlawful destruction, loss, alteration, unauthorised communication or unauthorised access to personal data transmitted, stored or otherwise processed.<\/p>\n

        In particular, it can be considered as an incident: theft or loss of a “company” laptop or mobile phone, unauthorized access to customer databases, breaking into web store information systems and access to data.<\/p>\n

        The controller shall, by means of his \/ her manager, immediately take the necessary steps in the event of a data protection incident and notify the data protection incident to alleviate the damage caused by it.\u00a0<\/p>\n

        Where a data protection incident is likely to entail a high risk to the rights and freedoms of natural persons, the Data Controller shall inform the data subject of the data protection incident without undue delay. The information provided to the data subject shall state clearly and clearly the nature of the data protection incident and shall provide the most important information and measures.<\/p>\n

        The data subject shall not be informed as referred to in the preceding paragraph if any of the following conditions are met:<\/p>\n

        (a) the Data Controller has implemented appropriate technical and organisational protection measures and these measures have been applied in respect of the data covered by the data breach, in particular those measures, such as the use of encryption, which make data incomprehensible to persons not entitled to access personal data;<\/p>\n

        (b) after the data protection incident, the Data Controller has taken additional measures to ensure that the high risk referred to in the preceding points for the rights and freedoms of the data subject is no longer likely to be met;<\/p>\n

        (c) the information would require disproportionate effort. In such cases, data subjects shall be informed by means of publicly published information or similar measures to ensure similar effective information to those concerned.<\/p>\n

        \u00a0<\/b>11. \/ Specific rules for the provision of information for advertising purposes<\/b><\/p>\n

        The Data Controller shall send the data subjects a message containing information on their products, services and news.<\/p>\n

        The data subject takes note of the fact that the subscription to the newsletter service is also a contribution pursuant to Article 6 (1) to (2) of Law XLVIII of 2008 on the essential conditions and certain limitations of economic advertising activities, whereby the Controller is entitled to transmit advertising and marketing requests directly to the email address of the data subject. The data subject expressly contributes to sending him news, newsletters, advertising and promotional offers relating to the services he provides.<\/p>\n

        If the data subject does not wish to receive messages that are considered advertising in the future, he may cancel this by using the opportunity offered by the Data Controller in a newsletter and may expressly prohibit the sending of advertising requests in a postal or electronic mail addressed to the Controller.<\/p>\n

        \u00a012 \/ Final provisions<\/b><\/p>\n

        If the website is visited, the IP address of the Consumer may be registered, but the IT solutions used in the operation of the website do not allow the Controller to access the User’s personal data, these data will be used solely to improve the website and to improve the services available through it (for statistics and analyses).<\/p>\n

        The website during the first visit is called “cookie” can be installed on the Consumer’s computer, phone hard disk, memory to make the contents of the page and roaming, navigation faster and simpler when you visit the site. In case of refusal to download “cookie ‘, some elements of the sheet may not be displayed.<\/p>\n

        With websites operated by third parties, we do not exchange cookies and we do not allow them on our website.<\/p>\n

        Google Analytics (Google Analytics) is allowed to work on our website. This will give us information about how the website visitors use the site. The visiting habits of the website are compiled by Google analytics on the basis of anonymous users, we do not allow Google to use your data (whether it uses it for its own purposes or shares it with anyone).<\/p>\n

        The Data Controller reserves the right to make changes and corrections at any time without notification to the website or to terminate the website or the information provided in whole or in part. The Controller does not guarantee continuity and integrity of access to the website; the Data Controller is not liable for any damage caused by malfunctioning.<\/p>\n

        The Controller shall compensate for any damage caused by the unlawful handling of the data concerned or breach of the requirements of data security, unless the damage was due to the intentional or seriously negligent behaviour of the injured person.<\/p>\n

        For matters not covered by these Rules, the provisions of Act V of 2013 on the Civil Code, Act CXII of 2011, the right of self-determination of information and freedom of information, Regulation (EU) 2016 \/ 679 of the European Parliament and of the Council (GDPR) and other relevant legislation shall apply.<\/p>\n

        The administrator shall be responsible for the activities of the Controller and for the compliance with this Data Management Code.<\/p>\n

        It shall be valid from the date of this Data Management Code until it is withdrawn.<\/p>\n

        Budapest, 2021.06.01.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"

        Privacy Policy Data Management Information\u00a0 He accepted\u00a0Pihepets Kft.\u00a0(Place: 1089 Budapest, Orczy \u00fat 12, Business Registration No: 01-09-387984, Tax No 25481819-2-42, tel.: + 3620-4010000, e-mail address: info@brizlo.hu; represented by:\u00a0Szabolcs M\u00e1sody\u00a0(hereinafter referred to as “Controller”) on 11 September 2024.\u00a0 1. \/ General provisions\u00a0 This Privacy Policy is the subject of the Data Controller’s\u00a0www.brizlo.hu\u00a0On the basis of its […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-1586","page","type-page","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/brizlo.hu\/en\/wp-json\/wp\/v2\/pages\/1586","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/brizlo.hu\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/brizlo.hu\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/brizlo.hu\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/brizlo.hu\/en\/wp-json\/wp\/v2\/comments?post=1586"}],"version-history":[{"count":4,"href":"https:\/\/brizlo.hu\/en\/wp-json\/wp\/v2\/pages\/1586\/revisions"}],"predecessor-version":[{"id":3024,"href":"https:\/\/brizlo.hu\/en\/wp-json\/wp\/v2\/pages\/1586\/revisions\/3024"}],"wp:attachment":[{"href":"https:\/\/brizlo.hu\/en\/wp-json\/wp\/v2\/media?parent=1586"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}