Privacy policy.
Information on data processing and data protection
1. INTRODUCTION:
We inform you that Unix Autó Kft., as the person responsible, processes personal data during the operation of the web shop it operates https://autoaz.de/ and the informative website (hereinafter: “ website” ) natural persons who visit the website, register there and make a purchase there are processed as data subjects (hereinafter: “data subjects”). The controller provides the information contained in this notice regarding the processing of personal data of data subjects in accordance with Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (hereinafter: “GDPR”).
2. CONTACT DETAILS OF THE RESPONSIBLE PERSON AND HIS REPRESENTATIVE:The Responsible Person:Name: Unix Autó és Alkatrészészkereskedelmi Korlátolt Felelősségű Társaság (hereinafter: Responsible Person or Unix Autó)Registered Office: 1139 Budapest, Frangepán utca 55-57.Representative:Name: Antal Zombori, Managing Director Contact details: info@unixauto.hu 3. Name and CONTACT DETAILS OF THE DATA PROTECTION OFFICERAccording to the GDPR, a data protection officer has been appointed at the Controller, whose contact details are as follows: karpati.gergely@unixauto.huContact details gdpr@autoaz.com
CHARACTERISTICS OF INDIVIDUAL DATA PROCESSING
4. REGISTRATION IN THE WEBSHOPThe controller informs the data subjects that prior registration is required to purchase in the webshop, but that the purchase after registration is not mandatory.The data subject is liable for any damage resulting from the provision of incorrect or incorrect data. The person responsible reserves the right to delete an obviously incorrect or incorrect registration and, in case of doubt, to check the accuracy of the data provided. Please note that to complete the registration (to avoid registrations with incorrect or incorrect data) the system sends an automatic email to the email address provided, in which the person concerned confirms their registration by clicking on the email address provided Links can confirm. Affected persons: natural persons who register in the webshop, which can be both natural persons and private persons who act on behalf of legal entities (register)
Scope of processed data: |
Purpose of data processing |
Legal basis for data processing |
Email address, last name, first name, password |
Carrying out registration, setting up a user account for the data subjects and the possibility of making purchases later. |
The controller processes this data in accordance with Article 6 paragraph (1) point a) of the GDPR (your consent) , which is done by checking the checkbox in front of the “Register” button on the registration interface. |
Persons authorized to access: the personal data provided above may be viewed by the responsible employees of the area responsible for the operation of the webshop.
Data transfer: The person responsible does not transfer the above-mentioned personal data of the data subjects to any third parties within the EU, to any third country or to any international organization.
Processor : the controller does not use processors to achieve the purpose of data processing.
Place and method of data processing: The personal data provided by the data subject are stored on the controller's servers in the European Union.
Data retention period :
·         until the consent of the data subject is revoked, until the user account is finally deleted, which the data subject can request in a request sent to the contact details of the person responsible listed under point 2 or by deleting the registration in the web shop,
·         in the event of registration with obviously incorrect or untrue information or in the event of non-confirmation of the registration, immediately after the error or untrue information was discovered and not confirmed,
·         if the user does not use the user account, after 2 years of inactivity, the user account will be automatically deleted by the controller at its sole discretion, unless the data subject has previously made a purchase in the web shop and thus the data of the previous purchase will be as in the next section stored as described.
1.     PURCHASE IN THE WEBSHOP
Because purchasing is not mandatory after registration and if the data subject does not make a purchase after registration, the controller only processes the personal data of the data subjects specified in point 4. If the registered user also makes a purchase in the webshop, he is obliged to provide the personal data necessary for the conclusion, fulfillment of the purchase contract and invoicing before the purchase, as well as the vehicle data necessary for the purpose of the purchase due to the type of product sold by the Controller selection of the product to purchase are required.
Data subjects : natural persons who make a purchase in the online shop
Scope of processed data: |
Purpose of data processing |
Legal basis for data processing |
Last name, first name, billing address (residential address), delivery address, order number, name, quantity, value of the purchased product, payment method, bank card number, name on the bank card, expiry date, CVC/CVV, transaction data |
Preparation and conclusion of the contract with the customer, fulfillment of the contract, issuing invoices and receipts based on the contract, correct maintenance of receipts. |
The controller collects and processes these personal data in accordance with Article 6 paragraph (1) point b) of the GDPR (for the preparation and performance of the contract ) until the contract is fulfilled.If the contract between the parties has been fulfilled (the data subject as buyer has paid the purchase price and the controller as seller has delivered the ordered product to the buyer who took delivery of the product), the legal basis for data processing is Article 6 paragraph ( 1) Point c) of the GDPR and Section 169 paragraph (2) of the Accounting Act (fulfillment of a legal obligation ). |
Vehicle type, year of vehicle construction, engine code, registration number, chassis number, comment |
Saving vehicles from previous purchases as favorites to facilitate the future purchasing process to identify the products ordered. |
The person responsible only processes this data if the data subject saves this data. The legal basis for data processing is Article 6 paragraph (1) point a) of the GDPR (your consent), which you give by saving your data as a favorite. |
Email address, telephone number |
Maintaining contact with the data subject for the performance of the contract, notifying the data subject of the performance of the contract. |
The controller processes these personal data in accordance with Article 6 paragraph (1) point b) of the GDPR (data processing necessary for the preparation and performance of a contract to be concluded with you ). |
Persons authorized to access: the above personal data may be viewed by employees responsible for sales, customer service, financial tasks and warehouse management.
Data transfer: The controller transfers the following personal data of the data subjects to the following third parties:
Scope of transmitted data: |
Purpose of data transmission |
Legal basis for data transfer |
Recipient of the data transfer and his contact details |
Name, billing address, name, quantity and value of the product purchased |
Fulfillment of legal reporting requirements |
The controller transmits this personal data in accordance with Article 6 paragraph (1) point c) of the GDPR, Section 178 paragraph (1a) of the VAT Act and Annex 10 (fulfillment of a legal obligation ). |
National Tax and Customs Office (Hungarian name: Nemzeti Adó-, és Vámhivatal)Registered office: 1054 Budapest, Széchenyi u.Contact details: 1818@1818.hu |
Last name, first name, email address, billing address, delivery address, payment method, bank card number, name on the bank card, expiry date, CVC/CVV |
Execution of the bank card transaction, booking of the transaction, confirmation of the transaction, handling possible complaints related to fraud monitoring, customer service tasks |
The controller transmits this personal data in accordance with Article 6 paragraph (1) point b) of the GDPR ( data processing necessary for the performance of a contract concluded with you ). |
PayPal (EurĂłpa) S.Ă rl et Cie, SCAAddress: 22-24 Boulevard Royal, L-2449 LuxembourgContact details: https://www.paypal.com/hu/webapps/mpp/homeÂBarion Payment Zrt.Address: H-1117, Budapest, Irinyi JĂłzsef utca 4-20. 2. emeletContact details: https://www.barion.com/hu/ugyfelszolgalat/ |
Processor: the controller uses the following processors to achieve the purpose of data processing:
Â
Name and contact details of the processor used |
Data processing operations carried out by the processor |
GLS General Logistics Systems Hungary Kft.Registered office: 2351 Alsónémedi, GLS Európa utca 2.Contact details: info@gls-hungary.com |
Delivering the ordered products, collecting and returning the products to be returned and maintaining contact with the buyer for this purpose |
Place and method of data processing: The personal data provided by the data subject are stored on the controller's servers in the European Union.
Data retention period:
·         The person responsible keeps the contract and invoice data as basic accounting documents in accordance with Section 169 paragraph (2) of the Accounting Act until the last day of the 8th year after the last day of the year in which the invoice was issued.
·         The Controller processes the personal data processed in accordance with the data subject's consent until the data subject withdraws his or her consent, which may be requested by the data subject in a request to the contact details of the Controller referred to in point 2.
1.     SEND NEWSLETTER (PROCESSING OF MARKETING DATA)
The data subject has the opportunity to request general information about news, promotions and products on the website and to receive this by email. These messages are considered data processing for direct marketing purposes under the relevant legislation. In connection with this data processing, the controller provides the following information.
Data subjects : natural persons who request newsletters and have therefore subscribed to receiving advertising mail
Scope of processed data: |
Purpose of data processing |
Legal basis for data processing |
Name, email address |
Send email containing advertisements, news, promotions, information; Designing and adapting personalized commercial offers in order to send personalized advertising mail to a filtered, selected group of recipients |
The controller processes this data in accordance with Article 6 paragraph (1) point a) of the GDPR ( your consent ), which is done when subscribing to newsletters by ticking the checkbox in front of the “Register” button on the website. |
Email address, fact of subscription to newsletters (yes/no) |
Storage of information about whether the data subject has subscribed to the newsletter in order to be able to prove at a later date whether they have given or not given their consent. |
The controller processes this data in accordance with Article 6 paragraph (1) point f) of the GDPR (legitimate interest of the controller) . The Controller defines his legitimate interest in recording the fact of giving consent and proof of this fact, which interests cannot be carried out without the management of the data specified in this point. The person responsible has prepared the interest assessment in connection with the legitimate interest as a legal basis and makes it available to the data subjects upon request. |
Persons authorized to access: the personal data provided above may be viewed by the responsible employees of the department responsible for marketing activities and the IT department.
Data transfer: The person responsible does not transfer the above-mentioned personal data of the data subjects to any third parties within the EU, to any third country or to any international organization.
Processor: the controller uses the following processors to achieve the purpose of data processing:
Â
Name and contact details of the processor used |
Data processing operations carried out by the processor |
GetResponseAddress: Gdansk (80-309), Grunwaldzka 413( NEON)80-309 Gdansk, Poland+48 58 668 31 30EU VAT ID: 9581468984Contact details: https://www.getresponse.com/help |
Send newsletters, mass mailings, create analyses, statistics |
Place and method of data processing: The personal data provided by the data subject are stored on the controller's servers in the European Union. The processor only has access to the personal data through remote access to the controller's system.
Data retention period: until you unsubscribe from newsletters and thus until the data subject’s consent is revoked. The data will also be deleted if the data subject deletes their user account.
7. SEND PERSONALIZED ADVERTISING MESSAGES (PROFILING) The Controller hereby informs the data subjects that Users have the possibility, after their express consent, to receive personalized newsletters and other marketing messages (e-mail, SMS) according to their preferences. According to the relevant legislation, these messages are considered direct marketing and advertising messages and the sending of personalized messages relies on profiling. In connection with data processing, the controller provides the following information.
Significance of the logic used, the data processing and the likely consequences of the data processing for the data subject: As part of the profiling (data analysis), the person responsible draws from the analysis and comparison of the personal data listed in this section as well as from the comparison of the data statistical and demographic data held by the controller or coming from external sources, conclusions about the purchasing habits, expected preferences and interests of the data subject. These conclusions are used by the Controller to enable him to develop personalized, individual promotions and offers for the users of the webshop and to send these offers to the relevant target group.
The analysis and processing of data results in the data subjects being divided into groups with different characteristics, which means that the controller does not offer certain offers and discounts to all, but only to certain groups, so that these offers and discounts will not be sent unsolicited to all affected persons who have subscribed to the newsletter, but only to those who are interested in it.
Your consent is required for data analysis, which you can grant or change at any time or revoke at any time without giving reasons and free of charge.
Data subjects: natural persons who have subscribed to the personalized newsletters
Scope of processed data: |
Purpose of data processing |
Legal basis for data processing |
Name, email address, telephone number, date of birth, online purchasing behavior, shopping habits, type, price of products ordered, browsing habits, demographic data |
Designing and adapting personalized commercial offers in order to send personalized advertising mail to a filtered, selected group of recipients |
The controller processes this data in accordance with Article 6 paragraph (1) point a) of the GDPR ( your consent ), which is done when subscribing to personalized newsletters by ticking the checkbox on the website |
Email address, phone number, fact that you have subscribed to your personalized newsletters (yes/no) |
Storage of information about whether the data subject has subscribed to personalized newsletters in order to be able to prove at a later date whether he or she has given or not given consent. |
The controller processes this data in accordance with Article 6 paragraph (1) point f) of the GDPR (legitimate interest of the controller) . The Controller defines his legitimate interest in recording the fact of giving consent and proof of this fact, which interests cannot be carried out without the processing of the data specified in this point. The person responsible has prepared the interest assessment in connection with the legitimate interest as a legal basis and makes it available to the data subjects upon request |
Â
Persons authorized to access: the personal data provided above may be viewed by the responsible employees of the department responsible for marketing activities and the IT department.
Data transfer: The controller does not transmit the above-mentioned personal data of the data subjects to any third parties within the EU, to any third country or to any international organization. Processor: the controller uses the following processors to achieve the purpose of data processing:
Name and contact details of the processor used |
Data processing operations carried out by the processor |
GetResponseAddress: Gdansk (80-309), Grunwaldzka 413 ( NEON)80-309 Gdansk, Poland+48 58 668 31 30EU VAT ID: 9581468984Contact details: https://www.getresponse.com/help |
Send newsletters, mass emails, mass SMS, create analyses, statistics |
Place and method of data processing: The personal data provided by the data subject are stored on the controller's servers in the European Union. The processor only has access to the personal data through remote access to the controller's system.
Data retention period: until you unsubscribe from newsletters and thus until the data subject’s consent is revoked. The data will also be deleted if the data subject deletes their user account.
Please note that we do not send unsolicited commercial messages. You can unsubscribe from receiving personalized and general newsletters and other direct marketing messages free of charge without restriction and without giving any reason. In this case, we will delete your personal data that is necessary to send you marketing messages from our records and we will no longer contact you for marketing purposes. You can unsubscribe from electronic newsletters by clicking on the link in the email message and unsubscribing from the newsletter in your user account.
8. DATA PROCESSING FOR THE PURPOSES OF CONTACTING, VEHICLE SEARCHThe data subjects have the option of sending a message directly to the controller or to the specific organizational units of the controller, using the contact details provided in the “ Contact” menu item on the website. The data subject sends the message to the email addresses indicated on the website directly from their own email application or by filling out the “ Send message” form located on the website.
Data subjects: natural persons who contact the person responsible.
Â
Scope of processed data: |
Purpose of data processing |
Legal basis for data processing |
Name, email address, telephone number, order number, all data provided by the data subject in the messageÂWhen searching for unknown vehicles: chassis number, make, model, year of manufacture, email address |
Maintaining contact between the controller and the data subjects, dealing with and responding to any requests or questions and dealing with consumer complaints. |
The controller processes this data in accordance with Article 6 paragraph (1) letter a) of the GDPR (your consent) , whereby the consent is given in the case of a contact form before sending the message, ticking the checkbox on the website, or by sending an email message is sent.If the message is a consumer complaint, the legal basis for data processing is Article 6 paragraph (1) point c) of the GDPR and is carried out in accordance with Section 17/A paragraph (5) of the Consumer Protection Act (fulfillment of a legal obligation ). |
Persons authorized to access: the personal data provided above may be viewed by the responsible employees of the area corresponding to the subject of the message, of the customer service, of the sales area and of the IT area.
Data transfer: The controller does not transmit the above-mentioned personal data of the data subjects provided for contact to any third party within the EU, to any third country or to any international organization. Processor: the controller does not use any processor to achieve the purpose of data processing :Place and method of data processing: The personal data provided by the data subject are stored on the controller's servers in the European Union.
Data retention period: the controller processes the personal data of the data subject until the data subject withdraws his consent, but no longer than one year from the date of providing the data. If, based on the subject of the message, it is determined that the person responsible has additional tasks, the retention period of the data will be adapted to the respective task (e.g. the civil law statute of limitations for enforcing civil law claims, the statute of limitations for criminal law measures). crime, or time of the final discontinuation of the criminal proceedings, etc.)
9. COOKIES DATA PROCESSINGThe person responsible hereby informs the data subjects that the website uses cookies. Cookies are small data files used by websites to improve user experience. These files are stored on the user's device when they visit the website and are read again on subsequent visits, allowing the user to be identified. In some cases, these files are considered personal data within the meaning of the GDPR, because if the browser sends back a previously stored cookie, the service provider processing cookies has the opportunity to link the user's current visit to previous visits, however only in relation to its own content. According to the relevant legislation, cookies may be placed on the user's device without the user's consent if they are necessary for the functioning of the website. All other (non-essential) cookies can only be set with the user’s consent. You can check and change your previous consents to the use/processing of cookies by clicking here.
9.1. REQUIRED COOKIESData subjects: natural persons who visit the websiteScope of data processed: session ID, time of visit to the websitePurpose of data processing: The necessary cookies facilitate the usability of the website and enable basic functions such as navigation on the website and the Access to secure websites, login authentication, load balancing and storage of language settings. Without the use of these cookies, the website cannot function properly. Legal basis for data processing: The consent of the data subject is not required for the use of the necessary cookies; these data are processed by the controller in accordance with Article 6 paragraph (1) point f) of the GDPR (legitimate interest of the person responsible) and Section 25 Paragraph (2) of the Act on Data Protection and Protection of Privacy in Telecommunications and Telemedia (Telecommunications Telemedia Data Protection Act - TTDSG). The person responsible has prepared the interest assessment in connection with the legitimate interest as a legal basis and makes it available to the data subjects upon request.
Â
SURNAME |
PURPOSE |
RETENTION PERIOD |
_answer |
It helps prevent Cross-Site Request Forgery (CSRF), generates a unique identifier to prevent these CSRF attacks |
End of session |
_sesid |
It retains user session data for each page request |
End of session |
_ccons |
A cookie that stores the fact that the information about the use of cookies has been accepted. |
1 year |
_pgsiz |
This cookie describes the number of products to be displayed per page. |
1 year |
_acto |
Cookie to identify logged in users |
1 year |
_vehty |
When selecting a vehicle, the last vehicle type selected by the user is saved here. |
1 year |
_vehma |
When selecting a vehicle, the last vehicle manufacturer selected by the user is saved here |
1 year |
_vehmo |
When selecting a vehicle, the last vehicle model selected by the user is saved here |
1 year |
_vehid |
When selecting a vehicle, the last vehicle selected by the user is saved here |
1 year |
_garve |
The vehicles in the user's garage are saved in the logged out state. |
1 year |
_lstar |
This cookie stores the identifiers of the last products viewed on the website. |
1 year |
_lstve |
If you are logged out, this cookie stores the specific vehicles most recently selected by the user. |
1 year |
_guid |
This cookie stores the unique identifier generated for each user. |
1 year |
_gufapro |
This cookie stores the wish list of logged out users. |
1 year |
Â
9.1A Usage-oriented cookies
Data subjects: natural persons who visit the website Scope of data processed: storage of personalized product-related settings
Purpose of data processing: The necessary cookies make the website easier to use and enable basic functions. Without using these cookies, the website cannot function as intended.
Legal basis for data processing: Usage-oriented cookies are processed by the person responsible in accordance with Article 6 paragraph (1) point a) of the GDPR (consent of the data subject), which is given the first time you visit the site by ticking the checkbox in the pop-up -Window is done by the person concerned.
Â
SURNAME |
PURPOSE |
RETENTION PERIOD |
_vehty |
When selecting a vehicle, the last vehicle type selected by the user is saved here. |
1 year |
_vehma |
When selecting a vehicle, the last vehicle manufacturer selected by the user is saved here |
1 year |
_vehmo |
When selecting a vehicle, the last vehicle model selected by the user is saved here |
1 year |
_vehid |
When selecting a vehicle, the last vehicle selected by the user is saved here |
1 year |
_garve |
The vehicles in the user's garage are saved in the logged out state. |
1 year |
_lstar |
This cookie stores the identifiers of the last products viewed on the website. |
1 year |
_lstve |
If you are logged out, this cookie stores the specific vehicles most recently selected by the user. |
1 year |
_gufapro |
This cookie stores the wish list of logged out users. |
1 year |
Â
9.2 STATISTICAL COOKIES Data subjects: natural persons who visit the website and give their consent to data processing
Scope of data processed: anonymized IP address, relay URL (previously visited page); Pages viewed (date, time, URL, address, length of stay), files downloaded, links clicked on other websites, specific goals achieved (conversions), technical information: operating system; browser type, version and language; Device type, brand, model and resolution, approximate location (country and city, if available, based on anonymized IP address), demographic characteristics and interestsPurpose of data processing: Statistical cookies help the website owner understand how visitors contact the website. The information is collected anonymously.Legal basis for data processing: Statistical cookies are processed by the controller in accordance with Article 6 paragraph (1) point a) of the GDPR (consent of the data subject), which is provided when you first visit the site by ticking the checkboxes in the pop-up. up window is done by the person concerned.
Â
SURNAME |
PURPOSE |
RETENTION PERIOD |
_ga |
This cookie registers a unique identifier that can be used to create statistical data about the user's use of the website. |
2 years from the date the data was collected/updated |
_gid |
This cookie registers a unique identifier that can be used to create statistical data about the user's use of the website. |
1 day after the data was collected/updated |
9.3 MARKETING
Data subjects: natural persons who visit the website and give their consent to data processing Scope of data processed: IP address of the device, cookie ID, device ID of mobile devices (Device ID), re-lay URL ( previously visited page), pages viewed (date, time, URL, address, length of stay), files downloaded, links clicked on other websites, specific goals achieved (conversions), technical information: operating system; browser type, version and language; Device type, brand, model and resolution, approximate location (country and, if applicable, city). Purpose of data processing: Marketing cookies are used to follow visitors to websites. The purpose of setting marketing cookies is to display personalized advertising tailored to users' interests. The information obtained in this way is valuable for advertisers.Legal basis for data processing: The marketing cookies are processed by the controller in accordance with Article 6 paragraph (1) point a) of the GDPR (consent of the data subject), which is given when you first visit the site by ticking the checkbox in the pop-up window is made by the person concerned.
Â
SURNAME |
PURPOSE |
RETENTION PERIOD |
gaVisitorUuid |
This cookie is used by GetResponse to individually identify users. |
1 year |
gaVisitorResubscribed |
This cookie is used by GetResponse to individually identify users. |
1 year |
^BarionMarketingConsent. |
These cookies are used by the Barion Smart Gateway service. The purpose is to store your declaration as to whether you agree to the collection of data from your surfing behavior and the evaluation of your shopping behavior to display personalized advertising and offers. If you have given your consent, we will also use the data collected by the following credit card fraud prevention cookies, which are among the cookies required for operation, and your browsing habits to study your shopping behavior and display personalized advertising and offers. |
1.5 years |
grUuidHasBeenSet |
This post is used by GetResponse. |
Unlimited |
gaLocalStorageVisitKey |
This post is used by GetResponse. |
Unlimited |
 9.4 COMMON RULES FOR THE PROCESSING OF COOKIES
Persons authorized to access: the personal data collected through the use of cookies may be viewed by the responsible employees of the area responsible for marketing activities as well as the management of the controller. Processors: the controller uses the following processors to achieve the purpose of data processing.
Name and contact details of the processor used |
Data processing operations carried out by the processor |
Dialogue Creatives Kft.Address: 1036 Budapest, Lajos utca 48-66. Ep., HungaryContact details: hello@dialoguecreatives.com |
Create statistics, analyses, marketing campaigns and personalized offers based on the cookie data. |