VETTÓ Kft. ( http://www.glikol.hu )
for visitors and registered users of the website
Introduction
During the operation of the website, the provider / data controller processes the personal data of registered users in order to provide them with appropriate services.
The provider fully intends to comply with the legal requirements regarding the processing of personal data, in particular the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council.
This privacy notice has been prepared on the basis of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, taking into account the content of Act CXII of 2011 on the right to informational self-determination and freedom of information.
Name of the provider / data controller:
| Name / company name: | VETTÓ Kft. |
| Registered office: | 1094 Budapest, Viola utca 27-29. 1. em. 13. |
| Tax number: | 11266118-2-43 |
| Name and address of the website: | www.glikol.hu |
| This privacy notice is available at: | www.glikol.hu/adatkezeles |
Contact details of the data controller:
| Name / company name: | VETTÓ Kft. |
| Registered office: | 1094, Budapest, Viola utca 27-29. 1/13. |
| Postal address: | 1094, Budapest, Viola utca 27-29. 1/13. |
| Email: | info@vetto.hu |
| Phone: | +36302375302 |
Definitions
GDPR (General Data Protection Regulation) — the new Data Protection Regulation of the European Union;
processing: any operation or set of operations performed on personal data or sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
processor: a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;
personal data: any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
controller: the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;
consent of the data subject: any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;
personal data breach: a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.
recipient: a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing;
third party: a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.
Data Processing Principles
The data controller declares that it processes personal data in accordance with this privacy notice and complies with the requirements of the applicable legislation, with particular regard to the following:
Personal data must be processed lawfully, fairly and in a transparent manner in relation to the data subject.
Personal data may only be collected for specified, explicit and legitimate purposes.
The purpose of personal data processing must be adequate, relevant and limited to what is necessary.
Personal data must be accurate and kept up to date. Inaccurate personal data must be erased without delay.
Personal data must be stored in a form which permits identification of data subjects for no longer than is necessary. Personal data may be stored for longer periods insofar as the data will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes.
Personal data must be processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.
The principles of data protection must be applied to all information relating to an identified or identifiable natural person.
Important Data Processing Information
The purpose of data processing is to enable the provider / data controller to provide registered users with appropriate additional services during the operation of the website.
The legal basis for data processing is the consent of the data subject.
The scope of persons affected by data processing: registered users of the website.
Duration of data processing and data deletion. The duration of data processing always depends on the specific user purpose, but data must be deleted without delay once the originally stated purpose has been achieved. The data subject may withdraw consent to data processing at any time by sending an email to the contact address. If there is no legal obstacle to deletion, the data will be deleted.
Those authorised to access the data: the data controller and its employees.
The data subject may request from the data controller access to and rectification or erasure of personal data or restriction of processing concerning the data subject, and may object to such processing, as well as exercise the right to data portability.
The data subject may withdraw consent to data processing at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
The data subject has the right to lodge a complaint with a supervisory authority.
If the data subject wishes to use the benefits of registration, i.e. to use the website’s services, it is necessary to provide the requested personal data. The data subject is not obliged to provide personal data; failure to provide data will have no adverse consequences. However, certain functions of the website cannot be used without registration.
The data subject has the right to obtain from the data controller, without undue delay, the rectification or completion of inaccurate personal data concerning him or her.
The data subject has the right to obtain from the data controller the erasure of inaccurate personal data concerning him or her without undue delay, and the controller shall erase the personal data concerning the data subject without undue delay where the processing has no other legal basis.
Modification or deletion of personal data may be initiated by email, telephone or post using the contact details provided above.
Website Registration
The purpose of data processing is to provide additional services and establish contact.
The legal basis for registration data processing is your consent.
The scope of persons affected: registered users of the website.
Duration of data processing. Data processing continues until consent is withdrawn. You may withdraw your consent to data processing at any time by sending an email to the contact address.
Data is deleted upon withdrawal of consent to data processing. You may withdraw your consent to data processing at any time by sending an email to the contact address.
Those authorised to access the data: the data controller and its employees.
Data storage method: electronic.
Modification or deletion of personal data may be initiated by email, telephone or post using the contact details provided above.
The provision of personal data is strictly necessary for identification in the databases and for maintaining contact. The exact company name and address are required for invoicing, which is a statutory obligation.
| Scope of processed data | Specific purpose of data processing |
|---|---|
| Name | Identification, contact, invoicing. |
| Company name | Identification, contact, invoicing. |
| Address | Identification, contact, invoicing. |
| Identification, contact. | |
| Phone | Identification, contact. |
| Date of registration | Technical information operation. |
| IP address | Technical information operation. |
The user may give consent to data processing by deliberately ticking the empty checkbox provided specifically for this purpose on the website.
You, as the data subject, may object to the processing of your personal data and are entitled to the procedures described in the data processing information detailed above, this notice, and the laws referred to in this notice.
Placing an Order
The purpose of data processing is to provide additional services, establish contact and send confirmation emails. We can only fulfil your order if you provide your contact and billing details, which are strictly necessary for communication and invoicing.
The legal basis for data processing is your consent. In the case of invoicing, the legal basis is a statutory requirement.
The scope of persons affected: registered users of the website.
Duration of data processing. Data processing is based on statutory requirements or continues until consent is withdrawn. You may withdraw your consent to data processing at any time by sending an email to the contact address.
Data is deleted upon withdrawal of consent to data processing. You may withdraw your consent to data processing at any time by sending an email to the contact address. Deletion of billing data may only take place in accordance with statutory requirements.
Those authorised to access the data: the data controller and its employees.
Data storage method: electronic.
Modification or deletion of personal data may be initiated by email, telephone or post using the contact details provided above.
| Scope of processed data | Specific purpose of data processing |
|---|---|
| Name | Identification, contact, invoicing. |
| Company name | Identification, contact, invoicing. |
| Address | Identification, contact, invoicing. |
| Identification, contact. | |
| Phone | Identification, contact. |
| Ordered product details | Identification of the product. |
| Date of registration | Technical information operation. |
| IP address | Technical information operation. |
The user may give consent to data processing by deliberately ticking the empty checkbox provided specifically for this purpose on the website.
The data subject may object to the processing of their personal data and is entitled to the procedures described in the data processing information detailed above, this notice, and the laws referred to in this notice.
Invoicing
The purpose of data processing is to issue and send electronic invoices as email attachments.
The legal basis for data processing is mandatory processing required by law.
The scope of persons affected: customers of the provider.
Duration of data processing. Data processing is based on statutory requirements or continues until consent is withdrawn. You may withdraw your consent to data processing at any time by sending an email to the contact address.
Data is deleted upon withdrawal of consent to data processing. You may withdraw your consent to data processing at any time by sending an email to the contact address. Deletion of billing data may only take place in accordance with statutory requirements.
Those authorised to access the data: the data controller and its employees.
Data storage method: electronic.
Modification or deletion of billing data may be initiated by email, telephone or post using the contact details provided above.
| Scope of processed data | Specific purpose of data processing |
|---|---|
| Name | Identification, contact, invoicing. |
| Company name | Identification, contact, invoicing. |
| Address | Identification, contact, invoicing. |
| Identification, contact. | |
| Phone | Identification, contact. |
| Tax number / tax identification number | Identification of the customer. |
| Invoice data | Identification of the invoice. |
| Date of invoice issue | Technical information operation. |
The user may give consent to data processing by deliberately ticking the empty checkbox provided specifically for this purpose on the website.
The data subject may object to the processing of their personal data and is entitled to the procedures described in the data processing information detailed above, this notice, and the laws referred to in this notice.
Newsletter
As operator of the website, we declare that we fully comply with the applicable legal provisions in respect of all information and publications we make available. We also declare that when subscribing to the newsletter, we are not in a position to verify the authenticity of the contact details provided, nor to determine whether the data provided relates to a private individual or a business. Businesses that contact us are treated as customer partners.
The purpose of data processing is to send professional information, electronic messages containing advertisements, information and newsletters, from which you may unsubscribe at any time without consequence. You may also unsubscribe without consequence if your business has since ceased to exist, you have left the business, or someone has shared your contact details with us.
The legal basis for data processing is your consent. We inform you that the user may give prior and explicit consent to the provider contacting them with promotional offers, information and other communications at the email address provided during registration. Consequently, the user may consent to the provider processing the necessary personal data for this purpose.
Please note that if you wish to receive newsletters from us, you are required to provide the necessary data. If you fail to provide the data, we will be unable to send you a newsletter.
Duration of data processing. Data processing continues until consent is withdrawn. You may withdraw your consent to data processing at any time by sending an email to the contact address.
Data is deleted upon withdrawal of consent to data processing. You may withdraw your consent to data processing at any time by sending an email to the contact address.
Consent may also be withdrawn via the unsubscribe link in any newsletter sent.
Those authorised to access the data: the data controller and its employees.
Data storage method: electronic.
Modification or deletion of data may be initiated by email, telephone or post using the contact details provided above.
| Data processor used: | https://www.hatasreklam.hu/ |
| Scope of processed data | Specific purpose of data processing |
|---|---|
| Name | Identification, contact. |
| Identification, contact. | |
| Date of subscription | Technical information operation. |
| IP address | Technical information operation. |
Please note that neither your username nor your email address needs to contain information that identifies you personally. For example, it is not necessary for your username or email address to contain your name. You are entirely free to decide whether to provide a username or email address that contains information identifying you. The email address — which is used for communication — is strictly necessary to ensure that newsletters or professional information sent to you reaches you.
Cookies
Cookies are placed on the user’s computer by visited websites and contain information such as site settings or login status.
Cookies are small files created by visited websites. They improve the user experience by saving browsing data. With the help of cookies, the website remembers site settings and offers locally relevant content.
The provider’s website sends a small file (cookie) to the computers of website visitors in order to record the fact and time of the visit. The provider informs website visitors of this.
The scope of persons affected by data processing: visitors to the website.
The purpose of data processing: additional services, identification, tracking of visitors.
Legal basis for data processing. The user’s consent is not required where the provider strictly needs to use cookies.
Data processed: unique identifier, timestamp, setting data.
The user has the option to enable or disable cookies individually in the cookie settings menu, change their settings at any time, and delete cookie files from their device at any time.
Those authorised to access the data: the data controller. The data controller does not process personal data through the use of cookies.
Data storage method: electronic.
Social Media
A social media platform is a media tool through which messages are spread via community users. Social media uses the internet and online publishing opportunities to enable users to become content creators rather than just content consumers.
Social media is a type of internet application containing user-generated content, such as Facebook, Google+, Twitter, etc.
Social media can take the form of public speeches, presentations, demonstrations, and descriptions of products or services.
Information on social media can take the form of forums, blog posts, images, videos, audio content, message boards, emails, etc.
In accordance with the above, the scope of data processed may include, in addition to personal data, the user’s public profile picture.
Scope of data subjects: all registered users.
The purpose of data collection is the promotion of the website or related web pages.
The legal basis for data processing is the voluntary consent of the data subject.
Duration of data processing: as set out in the regulations of the relevant social media platform.
Data deletion deadline: as set out in the regulations of the relevant social media platform.
Those authorised to access the data: as set out in the regulations of the relevant social media platform.
Rights related to data processing: as set out in the regulations of the relevant social media platform.
Data storage method: electronic.
It is important to note that when a user uploads or submits personal data, they grant the social media platform operator a worldwide licence to store and use such content. It is therefore very important to ensure that the user has full rights to share the information being published.
Google Analytics
Our website □ uses □ does not use Google Analytics
If Google Analytics is used:
Google Analytics compiles reports for its clients on the behaviour of website users based on internal cookies.
On behalf of the website operator, Google uses the information to evaluate how users use the website. It also compiles reports on website activity for the website operator to enable it to provide further services.
Data is stored by Google’s servers in an encoded format to make misuse more difficult and to prevent it.
Google Analytics can be disabled as follows. Quoted from the page:
Website users who do not want Google Analytics JavaScript to report data about them can install the Google Analytics opt-out browser add-on. The add-on prevents the Google Analytics JavaScript (ga.js, analytics.js, and dc.js) from sharing information with Google Analytics. The browser add-on is available for most modern browsers. The Google Analytics opt-out browser add-on does not prevent data from being sent to the website itself or to other web analytics services.
https://support.google.com/analytics/answer/6004245?hl=en
Google’s privacy policy: https://policies.google.com/privacy?hl=en
Detailed information on data use and protection is available at the links above.
Detailed privacy policy:
https://static.googleusercontent.com/media/www.google.com/en//intl/hu/policies/privacy/google_privacy_policy_hu.pdf
Data Processors
Hosting Provider:
| Name / company name: | Hatás Reklámstúdió Kft. |
| Registered office: | 5000, Szolnok, Eötvös tér 2. |
| Phone: | +36-56-513-015 |
| Email: | hatas@hatasreklam.hu |
The data you provide is stored on a server operated by the hosting provider. Only our staff and the staff operating the server have access to the data, and all are responsible for the secure handling of the data.
Name of activity: hosting service, server service.
Purpose of data processing: to ensure the operation of the website.
Data processed: personal data provided by the data subject.
Duration of data processing and data deletion deadline. Data processing continues until the end of the website’s operation, or in accordance with the contractual agreement between the website operator and the hosting provider. The data subject may also request deletion of their data by contacting the hosting provider directly.
The legal basis for data processing is the consent of the data subject or processing required by law.
Rights Related to Data Processing
Right to Information
You may contact us at the details provided to request information about what data our company processes about you, on what legal basis, for what purpose, from what source, and for how long. We will respond to your request without undue delay and within a maximum of 30 days, to the email address you have provided.
Right to Rectification
You may contact us at the details provided to request that we modify any of your data. We will act on your request without undue delay and within a maximum of 30 days, and will notify you at the email address you have provided.
Right to Erasure
You may contact us at the details provided to request the deletion of your data. We will fulfil your request without undue delay and within a maximum of 30 days, and will notify you at the email address you have provided.
Right to Restriction
You may contact us at the details provided to request the restriction of your data. The restriction will last for as long as the reason you have indicated makes storage of the data necessary. We will act on your request without undue delay and within a maximum of 30 days, and will notify you at the email address you have provided.
Right to Object
You may contact us at the details provided to object to the processing of your data. We will examine the objection within the shortest possible time from the date of submission and no later than 15 days, make a decision on its merits, and inform you of the decision by email.
Enforcement of Rights Related to Data Processing
If you experience unlawful data processing, please notify our company so that we can restore the lawful situation as quickly as possible. We will do everything in your interest to resolve the issue described.
If in your judgement the lawful situation cannot be restored, please notify the authority at the following contact details:
National Authority for Data Protection and Freedom of Information
Postal address: 1530 Budapest, P.O. Box 5.
Address: 1125 Budapest, Szilágyi Erzsébet fasor 22/c.
Phone: +36 (1) 391-1400
Fax: +36 (1) 391-1410
E-mail: ugyfelszolgalat (at) naih.hu
URL: https://naih.hu
Coordinates: N 47°30’56”; E 18°59’57”
Legal Basis for Data Processing
REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL (of 27 April 2016) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
Act CXII of 2011 on the right to informational self-determination and freedom of information.
Act LXVI of 1995 on public records, public archives and the protection of private archival material.
Government Decree 335/2005 (XII. 29.) on the general requirements for records management of bodies performing public duties.
Act CVIII of 2001 on certain issues of electronic commerce services and information society services.
Act C of 2003 on electronic communications.
Date of entry into force: 1 June 2026.