Winmax Kft. (hereinafter: Data Controller) is committed to protecting the personal data of the users and customers of the winmax.hu website (hereinafter: Website). This notice has been prepared on the basis of Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Act CXII of 2011 on the Right of Informational Self-Determination and on the Freedom of Information (Infotv.).
1. Data controller details
- Company name: Winmax Kft.
- Registered office: 1131 Budapest, Madridi u. 9
- Email: service@winmax.hu
- Phone: +36 70 608 9688
2. Scope of processed data and purpose of processing
2.1 Registration and purchase
During registration and purchase on the Website, the Data Controller processes the following data: name, e-mail address, phone number, billing and shipping address, and order details (ordered products, price, payment method). The purpose of processing is the fulfilment of the order, the conclusion, definition, modification and monitoring of the performance of the contract, the invoicing of the resulting fees, and the enforcement of related claims. The legal basis of processing is the performance of the contract (Article 6(1)(b) GDPR) and, for accounting documents, compliance with a legal obligation (Article 6(1)(c) GDPR).
2.2 Contact
When you contact us via the Contact page or by e-mail, the Data Controller processes the name, e-mail address and message content provided, for the purpose of answering the enquiry. The legal basis of processing is the consent of the data subject (Article 6(1)(a) GDPR).
2.3 Newsletter
If the Customer subscribes to the Service Provider’s newsletter, the Data Controller processes the name and e-mail address provided in order to send commercial offers and promotions. The legal basis of processing is the voluntary consent of the data subject, which the Customer may withdraw at any time, free of charge and without restriction or justification, by clicking the unsubscribe link at the bottom of the newsletter.
2.4 Cookies
The Website uses cookies that are necessary for operation, as well as cookies that improve the user experience and are used for statistical measurement. The legal basis for strictly necessary cookies is the legitimate interest of the Data Controller (Article 6(1)(f) GDPR); the legal basis for statistical and marketing cookies is the visitor’s consent, which can be given or declined on the cookie notice bar displayed on the Website.
| Cookie type | Purpose | Lifetime |
|---|---|---|
| Session cookie (e.g. cart contents) | Required for the purchase process and login to work | End of session / max. 2 weeks |
| Language setting | Remembers the selected language | 1 year |
| Statistics cookie | Measuring traffic and performance data | up to 2 years |
3. Data processors
To fulfil orders, process payments and issue invoices, the Data Controller may use the following types of data processors: hosting provider, courier/shipping partner, online payment provider, operator of the invoicing system. Data processors may process the personal data transferred to them only in accordance with the Data Controller’s instructions and to the extent necessary to provide the service.
4. Data retention period
The Data Controller is obliged to retain data related to orders and invoicing for 8 years under Act C of 2000 on Accounting. Data related to newsletter subscription are processed until consent is withdrawn; data provided in the contact form are processed for 1 year from the answering of the enquiry.
5. Rights of data subjects
Under the GDPR, the Customer has the following rights regarding the processing of their personal data:
- Right of access: you may request information on whether the Data Controller processes your data and, if so, which data, for what purpose and on what legal basis.
- Right to rectification: you may request the rectification or completion of inaccurate or incomplete data.
- Right to erasure: you may request the erasure of your data if their processing is no longer necessary or you have withdrawn your consent.
- Right to restriction of processing: in certain cases you may request the restriction of the processing of your data.
- Right to data portability: you may request to receive the data you have provided in a structured, commonly used, machine-readable format.
- Right to object: in the case of processing based on legitimate interests, you may object to the processing.
Requests concerning the exercise of the above rights can be sent to service@winmax.hu. The Data Controller will fulfil the request without undue delay and at the latest within 1 month of receipt.
6. Legal remedies
If, in the Customer’s opinion, the Data Controller processes their personal data in violation of legal provisions, they may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH), and in case of infringement of their rights they may turn to the courts.
- Hungarian National Authority for Data Protection and Freedom of Information
Address: 1055 Budapest, Falk Miksa utca 9-11.
Postal address: 1363 Budapest, P.O. Box 9.
E-mail: ugyfelszolgalat@naih.hu
Weboldal: naih.hu
7. Data security
The Data Controller ensures the security of personal data by appropriate technical and organisational measures, protecting them against unauthorised access, alteration, transmission, disclosure, deletion or destruction, as well as accidental destruction and damage.