+36 70 418 9945 4400 Nyíregyháza, Kállói út 71.
 

Privacy Policy

Privacy Policy

This is an automatic translation provided for convenience. The Hungarian version of this document is the authoritative one.
Date of adoption: 2024-07-01

Data controller

Name: Kelet-Solar Kft. 

Registered office: 4400 Nyíregyháza Kállói út 71.

Postal address, complaint handling: 4400 Nyíregyháza Kállói út 71.

E-mail: webshop@keletsolar.hu

Phone number: +36 70 391 5561

Website: https://keletsolar.hu

Hosting provider

Name: Giganet internetszolgáltató Kft

Postal address: 4400 Nyíregyháza, Vasvári Pál u. 1. fsz.

E-mail address: info@giganet.hu

Phone number: +36 42 512 000

Description of the data processing carried out in operating the web shop

This document contains all relevant data processing information relating to the operation of the web shop, in accordance with Regulation (EU) 2016/679 of the European Union, the General Data Protection Regulation (hereinafter: the Regulation, GDPR), and Act CXII of 2011 (hereinafter: Infotv.).

What is a cookie?

When you visit the website, the Data Controller uses so-called cookies. A cookie is a package of information made up of letters and numbers that our website sends to your browser  in order to save certain settings, make it easier to use our website and help us collect some relevant statistical information about our visitors.

Some cookies do not contain personal information and cannot be used to identify an individual user, but some of them contain a unique identifier – a secret, randomly generated sequence of numbers – which is stored by your device and thereby also makes you identifiable. The duration of each cookie is set out in the description of that cookie.

Legal background and legal basis of cookies:

We basically distinguish three types of cookies: cookies essential for operation, which ensure the proper functioning of the Website, statistical cookies and marketing cookies.

The legal basis for the data processing is your consent pursuant to Article 6(1)(a) of the Regulation in the case of statistical and marketing cookies, and the legitimate interest in ensuring the operation of the Website pursuant to Article 6(1)(f) of the Regulation in the case of cookies necessary for operation.

Main characteristics of the cookies used by the website:

Cookies essential for operation:

If you do not accept the use of these cookies, certain functions may not be available to you.

Strictly necessary cookies: These cookies are essential for using the website and enable the use of its basic functions. Without them, many functions of the site will not be available to you. The lifetime of this type of cookie is limited to the duration of the session.

Session cookie: These cookies store the visitor's location, the browser language and the payment currency; their lifetime lasts until the browser is closed or a maximum of 2 hours.

Age-restricted content cookie: These cookies record the fact that age-restricted content has been approved and that the data subject is over 18 years of age; their lifetime lasts until the browser is closed.

Recommended products cookie: Records the list of products to be recommended in the “recommend to a friend” function. Its lifetime is 60 days.

Mobile version, design cookie: Detects the device used by the visitor and switches to full view on mobile. Its lifetime is 365 days.

Cookie acceptance cookie: On arrival at the site, the visitor accepts the statement on the storage of cookies in the notification window. Its lifetime is 365 days.

Logout #2 cookie: Under option #2, the system logs the visitor out after 90 days. Its lifetime is 90 days.

Backend identifier cookie: The identifier of the backend server serving the site. Its lifetime lasts until the browser is closed.

employee_login_last_email Stores the e-mail address used at login until the browser is closed.

Ealrm, ealem, ealpw Provides permanent login. Its lifetime is 180 days.

come_from Performs login redirection. Its lifetime is 10 minutes.

currency Stores the customer's currency. Its lifetime is 30 days.

externaFontsLoaded Helps load fonts. The cookie's lifetime is 3 weeks.

NOCHACHE Speeds up the loading of the website. The cookie's lifetime: the length of the session.

previousURL Saves the previously visited page. The cookie's lifetime: the length of the session.

mccid and mceid Internal information to ensure that the pages work correctly. The cookie's lifetime: the length of the session.

SRV_id Internal information to ensure high availability. The cookie's lifetime: the length of the session.

CookiesOK Consent to the use of cookies. The cookie's lifetime is 1 week.

PHPSESSID Used to identify the login. The cookie's lifetime: the length of the session.

Statistical cookies:

Google Analytics cookie: Google Analytics is Google's analytics tool that helps website and app owners get a more accurate picture of their visitors' activities. The service may use cookies to collect information and report statistics on website usage without personally identifying visitors to Google. The main cookie used by Google Analytics is the „__ga” cookie. In addition to reports based on website usage statistics, Google Analytics – together with some of the advertising cookies described above – can also be used to show more relevant ads in Google products (such as Google Search) and across the web.

Cookies that improve the user experience: These cookies collect information about how the user uses the website, for example which pages they visit most often or what error messages they receive from the website. These cookies do not collect information that identifies the visitor, i.e. they work with entirely general, anonymous information. The data obtained from them is used to improve the performance of the website. The lifetime of this type of cookie is limited to the duration of the session.

Referrer cookies: They record the external site from which the visitor arrived at the site. Their lifetime lasts until the browser is closed.

Last viewed product cookie: Records the products the visitor viewed most recently. Their lifetime is 60 days.

Last viewed category cookie: Records the most recently viewed category. Its lifetime is 60 days.

Cart cookie: Records the products placed in the cart. Its lifetime is 365 days.

Smart offer cookie: Records the conditions for displaying smart offers (e.g. whether the visitor has been on the site before, whether they have an order). Its lifetime is 30 days.

referal Helps identify the earlier source of visits. The cookie's lifetime is 3 months.

Marketing cookies:

Google Adwords cookie When someone visits our site, the visitor's cookie ID is added to the remarketing list. Google uses cookies – such as the NID and SID cookies – in Google products, for example to customise the ads shown in Google Search. It uses such cookies, for example, to remember your most recent searches, your previous interactions with individual advertisers' ads or search results, and your visits to advertisers' websites. The AdWords conversion tracking feature uses cookies. To track sales and other conversions resulting from an ad, it saves cookies on the user's computer when that person clicks on an ad. Some common uses of cookies: selecting ads based on what is relevant to the given user, improving reports on campaign performance, and avoiding showing ads the user has already seen.

Remarketing cookies: These may be shown to previous visitors or users when they browse other websites on the Google Display Network or search for terms related to its products or services

predictionio User identifier cookie for recommending personalised ads. Its lifetime is 3 months.

Facebook pixel (Facebook cookie) The Facebook pixel is a code that enables the website to report on conversions, build target audiences and provide the site owner with detailed analytics on how visitors use the website. Using the Facebook pixel, personalised offers and ads can be shown to website visitors on Facebook. You can read Facebook's data policy here: https://www.facebook.com/privacy/explanation

You can find more information on deleting cookies at the following links:

Internet Explorer:  http://windows.microsoft.com/en-us/internet-explorer/delete-manage-cookies#ie=ie-11

Firefox:  https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer

Mozilla: https://support.mozilla.org/hu/kb/weboldalak-altal-elhelyezett-sutik-torlese-szamito

Safari: https://support.apple.com/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Chrome: https://support.google.com/chrome/answer/95647

Edge: https://support.microsoft.com/hu-hu/help/4027947/microsoft-edge-delete-cookies

Data processed for the conclusion and performance of the contract

Several cases of data processing may take place for the conclusion and performance of the contract. Please note that data processing related to complaint handling and warranty administration only takes place if you exercise one of these rights.

If you do not make a purchase through the web shop but are only a visitor to it, the provisions on data processing for marketing purposes may apply to you if you give us your consent for marketing purposes.

Data processing for the conclusion and performance of the contract in more detail:

Registration on the website

By storing the data provided during registration, the Data Controller can provide a more convenient service (e.g. the data subject does not have to enter their data again for a new purchase). Registration is not a condition for concluding the contract

Data processed
In the course of the data processing, the Data Controller processes your name, address, phone number, e-mail address, the characteristics of the purchased Goods and the time of purchase.

Duration of data processing
Until your consent is withdrawn.

Legal basis for data processing
Your voluntary consent, which you give to the Data Controller by registering [data processing under Article 6(1)(a) of the Regulation]

Order processing

Data processing activities are necessary when processing orders in order to perform the contract.

Data processed
In the course of the data processing, the Data Controller processes your name, address, phone number, e-mail address, the characteristics of the purchased Goods, the order number and the time of purchase.

If you have placed an order in the web shop, the data processing and the provision of the data are essential for the performance of the contract.

Duration of data processing
We process the data for 5 years in accordance with the civil law limitation period.

Legal basis for data processing
Performance of the contract. [data processing under Article 6(1)(b) of the Regulation]

Issuing the invoice

The data processing is carried out in order to issue an invoice in compliance with the law and to fulfil the obligation to retain accounting documents. Pursuant to Section 169(1)-(2) of the Accounting Act (Sztv.), business companies must retain the accounting documents that directly and indirectly support their bookkeeping.

Data processed
Name, address, e-mail address, phone number.

Duration of data processing
Pursuant to Section 169(2) of the Accounting Act (Sztv.), issued invoices must be retained for 8 years from the date of issue.

Legal basis for data processing
Pursuant to Section 159(1) of Act CXXVII of 2007 on Value Added Tax, issuing an invoice is mandatory, and it must be retained for 8 years pursuant to Section 169(2) of Act C of 2000 on Accounting [data processing under Article 6(1)(c) of the Regulation].

Data processing related to the delivery of goods

The data processing is carried out in order to deliver the ordered product.

Data processed
Name, address, e-mail address, phone number.

Duration of data processing
The Data Controller processes the data for the duration of the delivery of the ordered goods.

Legal basis for data processing
Performance of the contract [data processing under Article 6(1)(b) of the Regulation].

Recipients and data processors of the data processing related to the delivery of goods

Name of the recipient: Magyar Posta Zártkörűen Működő Részvénytársaság

Registered office of the recipient: 1138 Budapest, Dunavirág utca 2-6.

Phone number of the recipient: +36-1/767-8200

E-mail address of the recipient: ugyfelszolgalat@posta.hu

Website of the recipient: posta.hu

The courier service assists in delivering the ordered goods on the basis of a contract concluded with the Data Controller. The courier service processes the personal data received in accordance with the privacy notice available on its website.

Handling of warranty and guarantee claims

We must handle warranty and guarantee claims in accordance with the rules of NGM Decree 19/2014. (IV. 29.), which also specifies how your claim must be handled.

Data processed

When handling warranty and guarantee claims, we must proceed in accordance with the rules of NGM Decree 19/2014. (IV. 29.).

Under the Decree, we are obliged to draw up a record of the warranty or guarantee claim you report to us, in which we record:

  1. your name and address, as well as your statement that you consent to the processing of your data recorded in the record as set out in the Decree,
  2. the name and purchase price of the movable item sold under the contract concluded between you and us,
  3. the date of performance of the contract,
  4. the date on which the defect was reported,
  5. the description of the defect,
  6. the right you wish to enforce on the basis of your warranty or guarantee claim, and
  7. the method of settling the warranty or guarantee claim, or the reason for rejecting the claim or the right you wish to enforce on its basis.

If we take over the purchased Goods from you, we must issue a receipt stating

  1. your name and address,
  2. the data necessary to identify the item,
  3. the date on which the item was received, and
  4. the date on which you can collect the repaired item.

Duration of data processing
The business is obliged to keep the record drawn up of the consumer's warranty or guarantee claim for three years from the date it was drawn up and to present it at the request of the supervisory authority.

Legal basis for data processing
The legal basis for the data processing is compliance with the legal obligations under NGM Decree 19/2014. (IV. 29.) [Section 4(1) and Section 6(1)] [data processing under Article 6(1)(c) of the Regulation].

Data processing for marketing purposes

Prize draw

The data processing is carried out in order to run the prize draw.

Data processed
Name, e-mail address, phone number.

Duration of data processing
The data will be deleted after the prize draw has closed, except for the winner's data, which the Data Controller is obliged to retain for 8 years under the Accounting Act.

Legal basis for data processing
Your voluntary consent, which you give to the Data Controller by using the website. [data processing under Article 6(1)(a) of the Regulation]

Further data processing

If the Data Controller wishes to carry out further data processing, it will provide prior information on the essential circumstances of the data processing (legal background and legal basis of the data processing, purpose of the data processing, scope of the data processed, duration of the data processing).

Recipients of personal data

Data processing for the storage of personal data

Name of the data processor: Giganet internetszolgáltató Kft

Contact details of the data processor:

Phone number: +36 42 512 000

E-mail address: info@giganet.hu

Registered office: 4400 Nyíregyháza, Vasvári Pál u. 1. fsz.

Website: https://www.giganet.hu

The Data Processor stores the personal data on the basis of a contract concluded with the Data Controller. It is not entitled to access the personal data.

Data processing related to accounting

Name of the data processor: Szekeres-Audit Kft

Registered office of the data processor: 4400 Nyíregyháza Jósa András utca 7

Phone number of the data processor:  +36 30 953 6695

E-mail address of the data processor: szesangab@gmail.com

Website of the data processor:

The Data Processor assists in the bookkeeping of accounting documents on the basis of a written contract concluded with the Data Controller. In doing so, the Data Processor processes the data subject's name and address to the extent necessary for the accounting records, for the period specified in Section 169(2) of the Accounting Act (Sztv.), and then deletes them without delay.

Data processing related to invoicing

Name of the data processor: KBOSS.hu Kft – Számlázz.hu

Registered office of the data processor: 1031 Budapest Záhony utca 7.

Phone number of the data processor:  +36

E-mail address of the data processor: kboss.hu.kft@szamlazz.hu

Website of the data processor: https://www.szamlazz.hu/szamla/main

The Data Processor assists in keeping records of accounting documents on the basis of a contract concluded with the Data Controller. In doing so, the Data Processor processes the data subject's name and address to the extent necessary for the accounting records, for the period specified in Section 169(2) of the Accounting Act (Sztv.), and then deletes them.

Data processing related to online payment

Name of the data controller: OTP Mobil Kft.

Registered office of the data controller: 1143 Budapest, Hungária krt. 17-19.

Phone number of the data controller:  +36(70)366-6611

E-mail address of the data controller: ugyfelszolgalat@simple.hu

Website of the data controller: https://simplepay.hu

The payment service provider assists in carrying out the online payment on the basis of a contract concluded with the Data Controller, for which purpose data is transferred to the online payment service provider during the purchase process. In doing so, the online payment service provider processes the data subject's billing name and address, the order number and the order date in accordance with its own data processing rules.

Purpose of the data transfer: to provide the online payment service provider with the transaction data necessary for the payment transaction related to the purchase and initiated with it.

Legal basis for the data transfer: the performance of the contract concluded between you and the Data Controller pursuant to Article 6(1)(b) of the Regulation, which includes payment by the customer, and in the case of online payment the data transfer described in this section is necessary for the payment

Trusted Shop programme

A www.arukereso.hu (Online Comparison Shopping Kft. 1074 Budapest, Rákóczi út 70-72., Tax number: 24868291-2-42, Company registration number: 01-09-186759) runs a Trusted Shop programme; for its operation, after purchases made here the customer's e-mail address and the name of the Goods purchased are transferred to arukereso.hu . Purpose of the data transfer: requesting and displaying customer feedback. Online Comparison Shopping Kft. processes the personal data transferred in this way in accordance with its www.arukereso.hu Data Protection and Data Processing Policy. Online Comparison Shopping KFT is the data controller of the data transferred in this context.

Your rights in relation to data processing

During the period of data processing, you have the following rights under the provisions of the Regulation:

  • the right to withdraw consent
  • access to personal data and information related to the data processing
  • right to rectification
  • restriction of processing,
  • right to erasure
  • right to object
  • right to data portability.

If you wish to exercise your rights, this involves identifying you, and the Data Controller will necessarily need to communicate with you. Therefore, personal data will need to be provided for identification (however, identification may only be based on data that the Data Controller already processes about you), and your complaints regarding data processing will be available in the Data Controller's e-mail account within the period specified for complaints in this notice. If you were our customer and wish to identify yourself for complaint handling or warranty administration, please also provide your order ID for identification. Using this, we can also identify you as a customer.

The Data Controller will respond to complaints regarding data processing within 30 days at the latest.

Right to withdraw consent

You are entitled to withdraw your consent to data processing at any time, in which case the data provided will be deleted from our systems. Please note, however, that in the case of an order not yet fulfilled, withdrawal may mean that we are unable to deliver to you. In addition, if the purchase has already been made, we cannot delete the invoicing data from our systems due to accounting regulations, and if you owe us a debt, we may continue to process your data on the basis of our legitimate interest in collecting the claim even if you withdraw your consent.

Access to personal data

You are entitled to receive confirmation from the Data Controller as to whether or not your personal data is being processed, and if so, you are entitled to:

  • obtain access to the personal data processed and
  • be informed by the Data Controller of the following:
    • the purposes of the data processing;
    • the categories of personal data processed about you;
    • information on the recipients or categories of recipients to whom the Data Controller has disclosed or will disclose the personal data;
    • the envisaged period for which the personal data will be stored, or, if this is not possible, the criteria used to determine that period;
    • your right to request from the Data Controller rectification or erasure of personal data concerning you or restriction of its processing, and, in the case of data processing based on legitimate interest, to object to the processing of such personal data;
    • the right to lodge a complaint with a supervisory authority;
    • where the data was not collected from you, any available information as to its source;
    • the existence of automated decision-making (if such a procedure is used), including profiling, and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you.

The purpose of exercising this right may be to establish and verify the lawfulness of the data processing; therefore, in the case of repeated requests for information, the Data Controller may charge a reasonable fee in return for providing the information.

The Data Controller provides access to personal data by sending you the personal data processed and the information by e-mail after identifying you. If you have registered, we provide access by allowing you to view and check the personal data processed about you after logging in to your user account.

Please indicate in your request whether you are requesting access to the personal data or information related to the data processing.

Right to rectification

You are entitled to have the Data Controller rectify inaccurate personal data concerning you without delay at your request.

Right to restriction of processing

You are entitled to have the Data Controller restrict the data processing at your request if one of the following applies:

  • you contest the accuracy of the personal data, in which case the restriction applies for a period enabling the Data Controller to verify the accuracy of the personal data; if the accurate data can be established immediately, no restriction will take place;
  • the data processing is unlawful, but you oppose the erasure of the data for any reason (for example, because the data is important to you for enforcing a legal claim), and therefore you do not request the erasure of the data but request the restriction of its use instead;
  • the Data Controller no longer needs the personal data for the stated purpose of the data processing, but you require it for the establishment, exercise or defence of legal claims; or
  • you have objected to the data processing, but the Data Controller's legitimate interest may also justify the data processing; in this case, the data processing must be restricted pending verification of whether the legitimate grounds of the Data Controller override your legitimate grounds.

Where data processing has been restricted, such personal data may, with the exception of storage, only be processed with the consent of the data subject, or for the establishment, exercise or defence of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or of a Member State.

The Data Controller will inform you in advance (at least 3 working days before the restriction is lifted) about the lifting of the restriction of processing.

Right to erasure – right to be forgotten

You are entitled to have the Data Controller erase personal data concerning you without undue delay if one of the following grounds applies:

  • the personal data is no longer necessary for the purpose for which the Data Controller collected or otherwise processed it;
  • you withdraw your consent and there is no other legal basis for the data processing;
  • you object to data processing based on legitimate interest, and there are no overriding legitimate grounds (i.e. legitimate interest) for the data processing,
  • the personal data has been unlawfully processed by the Data Controller and this has been established on the basis of a complaint,
  • the personal data must be erased for compliance with a legal obligation under Union or Member State law to which the Data Controller is subject.

Where the Data Controller has made the personal data concerning you public for any lawful reason and is obliged to erase it for any of the reasons stated above, it shall, taking account of available technology and the cost of implementation, take reasonable steps – including technical measures – to inform other controllers processing the data that you have requested the erasure of any links to, or copies or replications of, that personal data.

Erasure does not apply to the extent that the data processing is necessary:

  • for exercising the right of freedom of expression and information;
  • for compliance with an obligation under Union or Member State law to which the controller is subject requiring the processing of personal data (such as data processing in the context of invoicing, since the retention of invoices is required by law), or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
  • for the establishment, exercise or defence of legal claims (e.g. if the Data Controller has a claim against you that you have not yet settled, or if a consumer or data protection complaint is being handled).

Right to object

You are entitled to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on legitimate interest. In this case, the Data Controller may no longer process the personal data unless it demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms, or which relate to the establishment, exercise or defence of legal claims.

Where personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing, including profiling to the extent that it is related to direct marketing. If you object to the processing of personal data for direct marketing purposes, the personal data will no longer be processed for such purposes.

Right to data portability

If the data processing is carried out by automated means, or if the data processing is based on your voluntary consent, you have the right to request from the Data Controller the data you provided to the Data Controller, which the Data Controller will make available to you in xml, JSON or csv format; where technically feasible, you may request that the Data Controller transmit the data in this form to another data controller.

Automated decision-making

You have the right not to be subject to a decision based solely on automated processing (including profiling) which produces legal effects concerning you or similarly significantly affects you. In such cases, the Data Controller is obliged to implement suitable measures to safeguard the data subject's rights, freedoms and legitimate interests, including at least the data subject's right to obtain human intervention on the part of the controller, to express their point of view and to contest the decision.

The above does not apply if the decision:

  • is necessary for entering into, or performance of, a contract between you and the Data Controller;
  • is authorised by Union or Member State law to which the Data Controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or
  • is based on your explicit consent.

Registration in the data protection register

Under the provisions of the Infotv., the Data Controller was required to register certain data processing operations in the data protection register. This registration obligation ceased on 25 May 2018.

Data security measures

The Data Controller declares that it has taken appropriate security measures to protect personal data against unauthorised access, alteration, transmission, disclosure, erasure or destruction, as well as accidental destruction and damage, and against becoming inaccessible due to changes in the technology used.

The Data Controller does everything within its organisational and technical capabilities to ensure that its Data Processors also take appropriate data security measures when working with your personal data.

Legal remedies

If you believe that the Data Controller has infringed a statutory provision on data processing or has failed to fulfil any of your requests, you may initiate an investigation by the Hungarian National Authority for Data Protection and Freedom of Information (NAIH) in order to end the allegedly unlawful data processing (postal address: 1363 Budapest, Pf. 9., e-mail: ugyfelszolgalat@naih.hu, phone numbers: +36 (30) 683-5969 +36 (30) 549-6838; +36 (1) 391 1400).

We also inform you that in the event of an infringement of the statutory provisions on data processing, or if the Data Controller has failed to fulfil any of your requests, you may bring a civil action against the Data Controller before a court. 

Amendment of the privacy notice

The Data Controller reserves the right to amend this privacy notice in a way that does not affect the purpose and legal basis of the data processing. By using the website after the amendment takes effect, you accept the amended privacy notice.

If the Data Controller intends to further process the collected data for a purpose other than that for which it was collected, it will inform you of the purpose of the data processing and of the following information before the further processing:

  • the period for which the personal data will be stored, or, if this is not possible, the criteria used to determine that period;
  • your right to request from the Data Controller access to, rectification or erasure of personal data concerning you or restriction of its processing, and, in the case of data processing based on legitimate interest, to object to the processing of personal data, and, in the case of data processing based on consent or a contractual relationship, to request that your right to data portability be ensured;
  • in the case of data processing based on consent, that you may withdraw your consent at any time,
  • your right to lodge a complaint with a supervisory authority;
  • whether the provision of personal data is a statutory or contractual requirement or a requirement necessary to enter into a contract, whether you are obliged to provide the personal data, and the possible consequences of failure to provide such data;
  • the existence of automated decision-making (if such a procedure is used), including profiling, and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you.

The data processing may only begin after this, and where the legal basis for the data processing is consent, you must also consent to the data processing in addition to receiving the information.