Furever by Csányi Ltd. Privacy Policy

Data Controller:

  • Furever by Csányi Kft.
  • Registered office: 2724 Újlengyel, Határ út 12.
  • Tax number: 25112603-2-13

Data processors:

  • Webhosting: Siteground Inc.
  • DM: Mailchimp Inc.
  • Database: Google / Alphabet Inc.
  • Marketing: Mundus Creatus Bt.

1. Newsletter

Objective: Send offers to subscribers.

  • Managed data: Name, email address.
  • Legal basis for processing: Consent (Article 6(1)(a) GDPR).
  • Data retention period: Until consent is withdrawn.
  • Data processor: Mailchimp Inc.

2. Shopping

Objective: Processing and administration of purchase transactions.

  • Managed data: Name, email address, telephone, billing address, postal address.
  • Legal basis for processing: Performance of a contract (Article 6(1)(b) GDPR).
  • Data retention period: In accordance with legal obligations (e.g. 8 years under the Accounting Act).
  • Data processor: Siteground Inc., Google / Alphabet Inc.

3. Events

Objective: Ensuring registration and participation in events.

  • Managed data: Name, email address, telephone.
  • Legal basis for processing: Consent (Article 6(1)(a) GDPR).
  • Data retention period: 1 year after the end of the event.
  • Data processor: Google / Alphabet Inc.

4. Making an appointment at the shop

Objective: Managing appointments to visit the shop.

  • Managed data: Name, email address, telephone.
  • Legal basis for processing: Consent (Article 6(1)(a) GDPR).
  • Data retention period: 6 months after the date of expiry.
  • Data processor: Google / Alphabet Inc.

5. Loyalty scheme

Objective: Running a loyalty programme and offering discounts.

  • Managed data: Name, email, phone, address, previous purchases, discounts, loyalty points.
  • Legal basis for processing: Consent (Article 6(1)(a) GDPR).
  • Data retention period: 1 year after the end of participation in the scheme.
  • Data processor: Google / Alphabet Inc., Mundus Creatus Bt.

Principles of data management

  • Legality, fairness and transparency: We process data lawfully, fairly and transparently.
  • Goal orientation: We only collect and process data for specified, explicit and legitimate purposes.
  • Data savings: The processing is limited to what is necessary, relevant and adequate for the purpose.
  • Accuracy: We ensure that the data is accurate and up-to-date.
  • Limited shelf life: We ensure that the data is accurate and up-to-date.
  • Integrity and confidentiality: We use appropriate technical and organisational measures to ensure the security of your data.

Rights of data subjects

  • Right of access: The data subject shall have the right to be informed by the controller whether or not his or her personal data are being processed and, if so, to have access to the personal data and to the following information: the purposes of the processing, the categories of personal data concerned, the recipients or categories of recipients of the data, the duration of the processing.
  • Right to rectification: The data subject may request the rectification of inaccurate personal data concerning him or her or the completion of incomplete data.
  • Right to erasure ("right to be forgotten"): The data subject shall have the right to obtain the erasure of personal data where the purposes of the processing have ceased, the processing is unlawful, the data subject withdraws his or her consent or objects to the processing.
  • Right to restriction of processing: The data subject has the right to request the restriction of processing if he or she contests the accuracy of the personal data, the processing is unlawful but the data subject opposes the erasure of the data, or the controller no longer needs the personal data but the data subject requires them for legal claims.
  • Right to data portability: The data subject has the right to request to receive personal data relating to him or her which he or she has provided to the controller in a structured, commonly used, machine-readable format and the right to transmit such data to another controller.
  • Right to object: The data subject has the right to object to the processing of personal data at any time if the processing is carried out for direct marketing purposes.

Contact

If you have any questions about data processing, please contact us using the following contact details:

Data protection incident handling

Data breaches are promptly investigated and, where necessary, data subjects and the supervisory authority are notified. We will keep a record of the incident, including the fact of the incident, its impact and the measures taken to remedy it.

This policy provides transparency about our data management practices and ensures that we comply with all legal requirements when processing personal data.

Shopping Cart0

Basket

Szechenyi logo