privacy policy

Acceptance date: 2024-04-23

Data controller

Name: Pit Box Kft.

Registered office: 2600 Vác, Rózsa utca 3/A 1em. 2 ajt.

Postal address, complaints handling: 2600 Vác, Rózsa utca 3/A 1st floor, 2nd floor.

Email: sales@fansbrands.com

Phone number : +40 (31) 631 27 51

Website: https://fansbrands.ro/

Hosting service provider

Name: UNAS Online Kft.

Postal address: 9400 Sopron, Kőszegi út 14.

Email: unas@unas.hu

Phone number:

Name: Shopify Commerce Singapore Pte. Ltd.

Postal address : 77 Robinson Road, # 13-00 Robinson 77, Singapore 068896

E-mail:

Phone number :

Description of data processing activities carried out within the operation of the online store

This document contains all relevant information regarding data processing regarding the operation of the online store in accordance with the General Data Protection Regulation (2016/679) of the European Union (hereinafter referred to as: the Regulation or GDPR) and Act CXII of 2011 (hereinafter referred to as: the Privacy Act).

Information on the use of cookies

What is a cookie?

When visiting the website, the Data Controller uses cookies. A cookie is a package of information consisting of letters and numbers sent to your browser by our website for the purpose of saving certain settings, facilitating the use of our website and helping us collect relevant, statistical information about our visitors.

Some cookies do not contain personal information and are not suitable for identifying individual users, but some cookies contain a unique identifier, i.e. a sequence of randomly generated secret numbers, which will be stored by your device and therefore ensure your identification. The lifespan of each cookie is included in the relevant description.

Legal context and legal grounds of cookies:

The legal basis for the processing is your consent in accordance with Article 6(1)(a) of the Regulation.

The main characteristics of the cookies used by the website: Strictly necessary cookies:

If you do not accept the use of cookies, certain features will not be available to you.

Strictly necessary cookies : These cookies are essential for the use of the website and enable the use of basic website functions. Without these cookies, several website functions will not be available to you. The lifespan of these cookies is limited solely to the duration of the session.

Session cookies: These cookies store the user's location, browser language and the currency in which the payment is made. Their lifespan lasts until the browser is closed or a maximum of 2 hours.

Age -restricted content cookies : These cookies record that age - restricted content has been approved and that the person in question is over 18 years old, their lifespan lasts until the browser is closed .

Recommended product cookies: Records the list of products intended to be recommended, within the "Recommend to a friend" function. Their lifespan is 60 days.

Mobile version , design cookies: Detects the device used by the visitor and switches to full mobile viewing. Their lifespan is 365 days.

Cookie acceptance cookies: Upon arrival on the site, you accept the statement regarding the storage of cookies in the appropriate window. Their lifespan is 365 days.

Exit cookies # 2: Logs the visitor after 90 days, according to option #2. Their lifespan is 90 days.

Backend identification cookies: The identifier of the backend server serving the site. Their lifespan lasts until the browser is closed.

Statistical cookies:

Google Analytics Cookies: Google Analytics is an analytical tool from Google that allows website and app owners to get a more accurate picture of their visitors' activities. The service may use cookies to collect information and compile statistical data reports on website usage, without individually identifying visitors to Google. Google Analytics primarily uses " ga" cookies. In addition to reporting statistical data on website usage, Google Analytics, together with the advertising cookies described above, may also be used to display more relevant ads in Google products (for example, in Google Search) and across the web.

Cookies to improve the user experience : These cookies collect information about how the user uses the website, for example , which pages the user visits most frequently or what error messages the user receives from the website. These cookies do not collect information that identifies the visitor, i.e. they work with completely general, anonymous information. They use the data extracted from this information to improve the performance of the website. The lifespan of these cookies is limited exclusively to the duration of the session.

Referral cookies : These record the external websites from which the visitor arrived at the site. Their lifespan lasts until the browser is closed.

Last viewed product cookies: Records the last product viewed by the visitor. Their lifespan is 60 days.

Last viewed cookie category: Records the last category viewed. Their lifespan is 60 days.

Cart cookies : Records products added to the cart. Their lifespan is 365 days.

Smart offer cookies : Record the conditions for displaying smart offers (for example, if the visitor has already been to the site, if they have an order). Their lifespan is 30 days.

Marketing cookies:

Google Adwords Cookies When someone visits our website, the visitor's cookie identifier will be added to the remarketing list. Google uses cookies - for example, NID and SID cookies - across Google products, such as to personalize the ads displayed on Google search. Google uses these cookies, for example, to remember your past searches, interactions with certain advertisers' ads or search results, or visits to advertisers' websites. AdWords conversion tracking uses cookies. To track sales and other conversions resulting from advertising, cookies are saved on the user's computer when the user clicks on the ad. Some common ways cookies are used are: to select ads based on what is relevant to the user, to improve campaign performance reports, and to avoid showing ads that the user has already seen.

Remarketing cookies: These cookies may appear to previous visitors or users when they browse other websites on

Google Display Network or search for terms related to its products or services.

Facebook pixel (Facebook cookies) Facebook pixel is a code that allows a website to report on conversions, compile target audiences and provide the website owner with detailed analysis of the use of the website by visitors. Facebook pixel allows the display of personalized ads to website visitors on the Facebook platform. You can read Facebook's privacy policy here: https://www.facebook.com/privacy/explanation

You can find additional information about deleting cookies at the following links:

Internet Explorer: http://windows.microsoft.com/en-us/internet-explorer/delete-manage-cookies#ie=ie-11 Firefox: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer

Mozilla: https://support.mozilla.org/hu/kb/weboldalak-altal-elelezyzett-sutik-torlese-szamito

Safari: https://support.apple.com/guide/safari/manage-cookies-and-website-data-sfri11471/mac Chrome: https://support.google.com/chrome/answer/95647

Edge: https://support.microsoft.com/hu-hu/help/4027947/microsoft-edge-delete-cookies

Data processed for the purpose of concluding and executing the contract

In order to conclude and execute the contract, several cases of data processing may occur. We hereby inform you that data processing related to complaint handling and warranty rights administration will only be carried out if you exercise one of these rights.

If you do not purchase through the online store, but only arrive as a visitor, then the provisions regarding data processing for marketing purposes may apply if you give us consent for marketing purposes.

The data processing activities for the purpose of concluding and performing the contract in detail are:

contact

If, for example, you contact us by email, via the contact form or by phone for a product inquiry. Prior contact is not required, you can order from the online store at any time in the absence of it.

Processed data

The data you provide when you contact us.

Data processing period

We process the data only until the contact is terminated.

Legal basis for data processing

Your voluntary consent given to the data controller by contacting us. [Data processing pursuant to Article 6(1)(a) of the Regulation]

Website registration

By storing the data provided upon registration, the data controller can provide more convenient services (for example, the data subject will not have to provide their data every time they shop on the website). Registration is not a requirement to contract

Processed data

FansBRANDS® - Official Motorsport Fan Store

During data processing, the data controller processes the name, address, telephone number, email address, properties of the purchased products and date of purchase.

Data processing period

FansBRANDS® - Official Motorsport Fan Store

Until you withdraw your consent.

Legal basis for data processing

Your voluntary consent given to the data controller by registration. [Data processing pursuant to Article 6(1)(a) of the Regulation].

Order processing

Data processing activities during order management, necessary for the purpose of contract execution.

Processed data

FansBRANDS® - Official Motorsport Fan Store

During data processing, the data controller processes the name, address, email address, properties of the purchased products, order number and date of purchase.

If you place an order in the online store, data processing and provision of data is inevitable for the execution of the contract.

Data processing period

FansBRANDS® - Official Motorsport Fan Store

We process the data for 5 years, in accordance with the civil law statute of limitations.

Legal basis for data processing

Performance of the contract. [Data processing pursuant to Article 6(1)(b) of the Regulation].

Issuing the invoice

The data processing is carried out for the purpose of issuing the invoice in accordance with the law and for fulfilling the obligation to keep the accounting document. In accordance with paragraphs (1)-(2) of Section 169 of the Accounting Act, economic organizations must keep accounting documents that directly and indirectly support accounting records.

Processed data

FansBRANDS® - Official Motorsport Fan Store

Name, address, email address, phone number.

Data processing period

In accordance with paragraph (2) of section 169 of the Accounting Act, issued invoices must be kept for 8 years from the date of issue.

Legal basis for data processing

In accordance with paragraph (1) of section 159 of Act CXXVII of 2007 on Value Added Tax, the issuance of an invoice is mandatory.

and, in accordance with paragraph (2) of section 169 of the Accounting Act, invoices issued must be kept for 8 years. [Data processing pursuant to Article 6(1)(c) of the Regulation].

Processing of data related to product delivery

Data processing is carried out for the purpose of delivering the ordered product.

Processed data

FansBRANDS® - The Official Motorsport Fan Store Name, address, email address, telephone number. Data processing period

FansBRANDS® - Official Motorsport Fan Store

Data processing is carried out for the purpose of delivering the ordered product.

Legal basis for data processing

Performance of the contract. [Data processing pursuant to Article 6(1)(b) of the Regulation].

Recipients and persons authorized to process data for the delivery of goods

Recipient's name: GLS General Logistics Systems Hungary Csomag-Logisztikai Kft.

Address of the recipient: 2351 Alsónémedi, GLS Európa u. 2.

Recipient's phone number : 06-29-88-67-00

Recipient's email address: info@gls-hungary.com

Recipient's website: https://gls-group.eu/HU/hu/home

The courier service participates in the delivery of the ordered product based on the contract concluded with the data controller. The courier service processes the data provided to it in accordance with the privacy policy available on its website.

Recipient Name: UPS

Recipient's registered office: Atlanta, United States

Recipient's phone number: +36 1 877 0000

Recipient email address: https://www.ups.com/upsemail/input?loc=hu_HU

Recipient's website: https://www.ups.com/

Handling warranty and compensation claims

Regarding warranty rights, we must proceed in accordance with Decree 19/2014. (IV. 29.) of the Minister of National Economy, which establishes the manner of managing these rights.

Processed data

FansBRANDS® - Official Motorsport Fan Store

Regarding warranty rights, we must proceed in accordance with Decree 19/2014. (IV. 29.) of the Minister of National Economy.

In accordance with the decree, we must take note of the guarantee or guarantee application that has been notified to us, in which we record:

your name and address, as well as a declaration expressing your consent to the processing of your data indicated in the registration in accordance with the decree,
the name and purchase price of the tangible object sold under the contract concluded between us,
date of execution of the contract,
date of reporting the defect,
description of the defect,
the right you wish to exercise based on your right to warranty and
the manner of handling the guarantee request or the request for a guarantee call or the justification for rejecting the right intended to be invoked based on the request.

If we collect the purchased product from you, we must issue a receipt, which must include the following:

your name and address,
the data necessary to identify the object,
the date of receipt of the object and
the date you can accept the object

Data processing period

FansBRANDS® - Official Motorsport Fan Store

The enterprise is obliged to keep the record of the registration of the warranty claim submitted by the consumer for three years from the date of registration and to present it at the request of the control authority in this regard.

Legal basis for data processing

The legal basis for data processing is compliance with the legal obligations provided for by Decree 19/2014 (IV. 29.) of the Minister of National Economy [paragraph (1) section 4. and paragraph (1) section 6] [Data processing pursuant to Article 6 paragraph (1) letter (c) of the Regulation].

Handling other consumer complaints

The data processing will be carried out for the purpose of handling consumer protection complaints. If you contact us with a complaint, the processing of data and the provision of data will be unavoidable.

Processed data

FansBRANDS® - Official Motorsport Fan Store

Buyer's name, phone number, email address, content of the complaint.

Data processing period

FansBRANDS® - Official Motorsport Fan Store

Consumer complaints are kept for 3 years, under the Consumer Protection Law.

Legal basis for data processing

You can decide voluntarily whether you intend to submit a complaint to us, but if you do so, we are required to retain your complaint for a period of 3 years in accordance with paragraph (7) of section 17/A of the Consumer Protection Act 1997 (Processing of data pursuant to Article 6(1)(c) of the Regulation).

Data processed in connection with the verifiability of consent

When registering, placing an order or subscribing to the newsletter, the IT system stores IT data related to consent for record-keeping purposes.

Processed data

FansBRANDS® - Official Motorsport Fan Store

Date of consent and IP address of the data subject.

Data processing period

FansBRANDS® - Official Motorsport Fan Store

Due to compliance with legal provisions, consent must be able to be verified later, therefore, the data is stored for the limitation period following the cessation of data processing.

Legal basis for data processing

This obligation is laid down in Article 7(1) of the Regulation [Processing pursuant to Article 6(1)(c) of the Regulation].

Data processing for marketing purposes

Data processing related to sending newsletters

Data processing is carried out for the purpose of sending newsletters.

Processed data

FansBRANDS® - The Official Motorsport Fan Store Name, address, email address, telephone number. Data processing period

FansBRANDS® - Official Motorsport Fan Shop until the data subject withdraws their consent. Legal basis for data processing

Your voluntary consent given to the data controller by subscribing to the newsletter. [Data processing pursuant to Article 6(1)(a) of the Regulation].

Processing of data related to sending and displaying personalized ads

The data processing is carried out for the purpose of sending advertising content in accordance with the sphere of interest of the data subject.

Processed data

FansBRANDS® - The Official Motorsport Fan Store Name, address, email address, telephone number. Data processing period

FansBRANDS® - Official Motorsport Fan Store

Until you withdraw your consent.

Legal basis for data processing

Your voluntary, separate consent given to the data controller at the time of data collection. [Data processing pursuant to Article 6(1)(a) of the Regulation].

Remarketing

Data processing is carried out as a remarketing activity, enabled by cookies.

Processed data

FansBRANDS® - Official Motorsport Fan Store

Data processed by cookies defined in the cookie notice.

Data processing period

The period of data storage by the given cookie. Additional information is available here:

General information about cookies from Google: https://www.google.com/policies/technologies/types/

Google Analytics information: https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage?hl=hu

Facebook information: https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen

Legal basis for data processing

Your voluntary consent given to the data controller by using the website. [Data processing pursuant to Article 6(1)(a) of the Regulation].

competitions

Data processing is carried out for the purpose of conducting competitions.

Processed data

FansBRANDS® - Official Motorsport Fan Store

Name, email address, phone number.

Data processing period

FansBRANDS® - Official Motorsport Fan Store

The data will be deleted after the contest closes, except for the winners' data, which the data controller is obliged to keep for 8 years, in accordance with the Accounting Law.

Legal basis for data processing

Your voluntary consent given to the data controller by using the website. [Data processing pursuant to Article 6(1)(a) of the Regulation].

Additional data processing activities

If the data controller intends to carry out any other data processing activities, it will provide prior information on the actual circumstances of the data processing (legal context and legal basis of the data processing, scope of the processed data, period of data processing).

Recipients of personal data

Activities of data controllers for the storage of personal data

Name of the person authorized by the operator: UNAS Online Kft.

Contact details of the person authorized by the operator:

Telephone number of the person authorized by the operator :

Email address of the person authorized by the controller : unas@unas.hu

Registered office of the person authorized by the operator: 9400 Sopron, Kőszegi út 14.

Website of the data controller: unas.hu

The Data Controller stores personal data on the basis of a contract concluded with the Data Controller. The person authorized by the controller does not have the right to access the personal data.

Name of the person authorized by the operator: Shopify Commerce Singapore Pte. Ltd.

Contact details of the person authorized by the operator:

Telephone number of the person authorized by the operator :

Email address of the person authorized by the operator:

Registered office of the person authorized by the operator : 77 Robinson Road, #13-00 Robinson 77, Singapore 068896

Website of the person authorized by the operator: https://www.shopify.com/

The Data Controller stores personal data on the basis of a contract concluded with the Data Controller. The person authorized by the controller does not have the right to access the personal data.

Activities of data controllers related to sending newsletters

Name of the company operating the newsletter system: UNAS Online Kft.

Registered office of the company managing the newsletter system: 9400 Sopron, Kőszegi út 14.

Telephone number of the company that manages the newsletter system:

Email address of the company operating the newsletter system: unas@unas.hu

Website of the company operating the newsletter system: unas.hu

The processor participates in sending newsletters on the basis of a contract concluded with the data controller. As part of this participation, the processor processes the name and address of the data subject to the extent necessary for sending the newsletters.

Activities of data controllers related to sending newsletters

Name of the company operating the newsletter system: ActiveCampaign

Registered office of the company operating the newsletter system: 150 North Michigan Avenue Suite 1230 Chicago, IL 60601 United States of America.

Telephone number of the company that manages the newsletter system: +1 (773) 904-0945

Email address of the company operating the newsletter system: privacy@activecampaign.com

Website of the company operating the newsletter system: https://www.activecampaign.com

Activities of data controllers related to sending newsletters

Name of the company operating the newsletter system: The Marketer

Registered office of the company operating the newsletter system: Romania - Badea Cartan 66, Sector 2, Bucharest, Office 3, Zone II, Room 2, Bl. 40, Sc.A, Et.5, Ap.26,

Telephone number of the company managing the newsletter system: +40724470432

Email address of the company operating the newsletter system: iam@themarketer.com

Website of the company operating the newsletter system: https://themarketer.com/

Data controllers' activities related to sending newsletters

Name of the company operating the newsletter system: Klavyio

Registered office of the company operating the newsletter system: 49 Southwark Bridge Rd London SE1 9HH, UK

Telephone number of the company managing the newsletter system:

Email address of the company operating the newsletter system: sales@klaviyo.com

Website of the company operating the newsletter system: https://www.klaviyo.com/

Processing of accounting-related data

Name of the person authorized by the operator: P-Kontroll Bt.

Registered office of the person authorized by the operator: 2600 Vác, Pap Béla u. 10.

Telephone number of the person authorized by the operator : +36-27/316-210

Email address of the person authorized by the controller : konyveles@pkontroll.hu

Website of the data controller : www.pkontroll.hu

The processor participates in the accounting on the basis of a written contract with the data controller. Within the framework of this participation, the processor processes the name and address of the data subject, to the extent necessary for accounting records, for the period specified in paragraph 2 of Section 169 of the Accounting Act, and will delete them immediately thereafter.

Billing-related data controller activities

Name of the person authorized by the operator: Innovip.hu Kft.

Registered office of the person authorized by the operator: 6723 Szeged, Gát utca 7/B.

Phone number of the person authorized by the operator : +36 20 367 6755 Email of the person authorized by the operator : iroda@innovip.hu Website of the person authorized by the operator : https://www.innovip.hu/

The data controller participates in the recording of accounting documents on the basis of a written contract concluded with the data controller. Within the framework of this participation, the processor processes the name and address of the data subject, to the extent necessary for the accounting documents, for the period in accordance with paragraph 2 of Section 169 of the Accounting Act, and will delete them immediately thereafter.

Activities of data controllers related to billing

Name of the person authorized by the operator: Microsoft Dynamics 365 Business Central

Registered office of the person authorized by the operator : Microsoft Building 92, NE 36th St, Redmond, WA 98052, United States of America.

Telephone number of the person authorized by the operator : +1 425-882-8080

Email address of the person authorized by the operator:

Website of the person authorized by the operator: https://www.microsoft.com

Activities of data controllers related to billing

Name of the person authorized by the operator: Odoo SA

Registered office of the person authorized by the operator: Chaussée de Namur, 40 1367 Grand Rosière Belgium

Telephone number of the person authorized by the operator : +32 2 616 8002 Email of the person authorized by the operator : privacy@odoo.com Website of the person authorized by the operator : https://www.odoo.com/

Activities of data controllers related to billing

Name of the person authorized by the operator: Billingo Technologies Zrt.

Registered office of the person authorized by the operator: 1133 Budapest, Árbóc utca 6.

Telephone number of the person authorized by the operator : +36-1/500-9491

Email address of the person authorized by the operator: hello@billingo.hu

Website of the data controller : https://www.billingo.hu/

Activities of data controllers related to the operation of the CRM system

Name of the person authorized by the operator: UNAS Online Kft.

Registered office of the person authorized by the operator: 9400 Sopron, Kőszegi út 14.

Telephone number of the person authorized by the operator:

Email address of the person authorized by the controller : unas@unas.hu

Website of the data controller: unas.hu

The data processor participates in the registration of orders on the basis of a contract concluded with the data controller. As part of this participation, the data processor processes the name, address, telephone number, order numbers and data of the data subject within the limitation period provided for by civil law.

Activities of data controllers related to the operation of the CRM system

Name of the person authorized by the operator: Innovip.hu Kft.

Registered office of the person authorized by the operator: 6723 Szeged, Gát utca 7/B.

Telephone number of the person authorized by the operator : +36 20 367 6755

Email address of the person authorized by the controller : iroda@innovip.hu

Website of the data controller : https://www.innovip.hu/

Activities of data controllers related to the operation of the CRM system

Name of the person authorized by the operator: easySales

Registered office of the person authorized by the operator: Lieutenant Ștefan Marinescu 9, floor 6, Bucharest - Romania.

Phone number of the person authorized by the operator : +36213007056 Email of the person authorized by the operator : contact@easy-sales.com Website of the person authorized by the operator : https://easy-sales.com/hu

Activities of data controllers related to the operation of the CRM system

Name of the person authorized by the operator: KOMPaaS.tech Kft.

Registered office of the person authorized by the operator: 1114 Budapest, Kemenes utca 8. félemelet 3. - Hungary

Phone number of the person authorized by the operator : +36 1 4900999 Email of the person authorized by the operator : support@mcntele.com Website of the person authorized by the operator : https://kompaas.hu/

Activities of data controllers related to the operation of the CRM system

Name of the person authorized by the operator: VIVnetworks.com sro

Registered office of the person authorized by the operator: Jungmannovo náměstí 18, 110 00 Prága 1

Telephone number of the person authorized by the operator : +420 734 447 050

Email address of the person authorized by the operator: podpora@vivnetworks.com

Website of the person authorized by the operator: https://www.vivnetworks.com/hu/

Activities of data controllers related to the operation of the CRM system

Name of the person authorized by the operator: SC DECATHLON SRL

Registered office of the person empowered by the operator: Militari Shopping, Bulevardul Iuliu Maniu 546-560, Bucharest 060032 - Romania.

Telephone number of the person authorized by the operator : +40 21 408 5000 Email of the person authorized by the operator: contact@decathlon.ro Website of the person authorized by the operator : https://www.decathlon.ro/

Activities of data controllers related to the operation of the CRM system

Name of the person authorized by the operator: Amazon.com

Registered office of the person authorized by the operator : 410 Terry Ave N, Seattle 98109, WA

Phone number of the person authorized by the operator : +1 (206) 266-4064 Email address of the person authorized by the operator : copyright@amazon.com Website of the person authorized by the operator : https://www.amazon.com/

Activities of data controllers related to the operation of the CRM system

Name of the person authorized by the operator: Pepita Group Zrt.

Registered office of the person authorized by the operator: 5520 Szeghalom, belterület hrsz 2619/58

Telephone number of the person authorized by the operator : +36 1 510 07 60 Email address of the person authorized by the operator: segitunk@pepita.hu Website of the person authorized by the operator : https://pepita.hu/

numbers and dates, within the civil law statute of limitations.

Processing of data related to online payment

Name of the data controller: Worldline SA

Registered office of the data controller: Tour Voltaire, 1 Place des Degrés, CS 81162, 92059 Paris la Défense Cedex.

Data operator's telephone number:

Data controller's email address:

Data controller website: https://www.six-payment-services.com/

The online payment service provider participates in the implementation of online payments on the basis of a written contract concluded with the data controller, for the purpose of which data is transferred to the online payment service provider during the purchase process. During this participation, the online payment service provider processes the name and billing address of the data subject, as well as the order number and date, in accordance with its own privacy policy.

Purpose of data transfer: providing the online payment service provider with the transaction data necessary for the payment operation initiated at the online payment service provider and related to the purchase.

Legal basis: performance of the contract concluded between you and the data controller pursuant to Article 6(1)(b) of the Regulation, which includes payment by the buyer and for which, in the case of online payments, the transfer of data pursuant to this section is necessary.

Name of data controller: Stripe

Registered office of the data controller: 354 Oyster Point Boulevard. South San Francisco, CA 94080

Data operator phone number : 888-926-2289

Data controller's email address:

Data controller website: https://stripe.com/

Trusted Shop Program (Megbízható bolt)

For the purpose of operating the Megbízható Bolt program of www.arukereso.hu (Online Comparison Shopping Kft. 1074 Budapest, Rákóczi út 70-72., tax identification number: 24868291-2-42, company registration number: 01-09-186759), the buyer's email address and the name of the purchased product will be transmitted to arukereso.hu . Purpose of data transfer: requesting and displaying customer feedback. Online Comparison Shopping Kft. processes the personal data transferred in this way in accordance with the Data Processing and Privacy Policies of www.arukereso.hu. With regard to the data transferred in this area, Online Comparison Shopping Kft. qualifies as a data controller.

Data transfer to third countries

FansBRANDS® - Official Motorsport Store

The following processor is located outside the European Union and processes data outside the European Union. The processor is a member of the Privacy Shield List, which means that it ensures that data is processed with the safeguards provided for in the European Union. More information is available here: www.privacyshild.gov

The Rocket Science Group LLC (MailChimp)

Address: 1 North Dearborn Street, 5th floor Chicago, IL 60602 https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active

Your rights during data processing

During the data processing period, you have the following rights in accordance with the provisions of the regulation:

the right to withdraw consent

access to personal data and information related to data processing the right to rectification

restriction of data processing, right to erasure

the right to object

the right to data portability.

If you wish to exercise your rights, this will involve your identification and the Data Controller must necessarily communicate with you. Therefore, for the purpose of identification, it will be necessary for you to provide personal data (but only your data already processed by the Data Controller can serve as a basis for identification), and your complaints regarding data processing will be available in your email account for the period specified in this Complaints Privacy Notice. If you were our customer and would like to identify yourself for the purpose of complaint management or the guarantee management process, please also enter your order ID for identification. In this way, we can identify you as our customer.

The data controller will respond to complaints regarding data processing within 30 days at the latest.

The right to withdraw consent

You have the right to withdraw your consent to the processing of your data at any time, in which case the data provided will be deleted from our system. However, please note that in the case of an order that has not yet been fulfilled, the withdrawal of consent may result in us not being able to complete the delivery of your order. Furthermore, if the purchase has already been completed, based on accounting regulations, we cannot delete the billing date from our systems, and if there is an amount remaining unpaid by you to us, we may process your data even in the event of withdrawal of your consent based on the legitimate interest of debt collection.

Access to personal data

You have the right to obtain from the data controller confirmation as to whether your personal data is being processed, and in this case, you have the right to:

to obtain access to the personal data processed and

to receive information from the data controller regarding the following: the purposes of data processing;

the categories of personal data processed;

information on the recipients or categories of recipients to whom the personal data have been or will be disclosed;

the intended period for which the personal data will be processed or, where this is not possible, the criteria used to determine that period;

the existence of your right to request the data controller to rectify or delete personal data.

data or to restrict the processing of personal data concerning you or to object to such processing; the right to lodge a complaint with a supervisory authority;

if the personal data are not collected from the data subject, any available information regarding their source;

the existence of automated decision-making, including profiling, and, at least in these cases, meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for you.

The purpose of exercising these rights may be to establish and verify the lawfulness of data processing, therefore, in the event of multiple requests for information, the data controller may charge a fair fee in exchange for providing the information.

Access to personal data is provided by the data controller by sending the processed personal data and information by e-mail, after identifying you. If you have registered, we provide you with access so that you can view and verify your personal data by logging into your user account.

Please indicate in your request that you are requesting access to personal data or information regarding data processing.

Right to rectification

You have the right to obtain from the data controller, without delay, the rectification of inaccurate personal data concerning you.

The right to restriction of data processing

You have the right to obtain from the controller restriction of processing where one of the following situations applies:

the accuracy of the personal data is contested by you, for a period enabling the data controller to verify the accuracy of the personal data, and if the accuracy of the data can be established immediately, then no restriction shall take place;

the data processing is unlawful and you oppose the deletion of the personal data for any reason (for example, because the data is necessary for a possible claim) and instead request the restriction of their use;

the operator no longer needs the personal data for the purposes of processing, but they are requested by the data subject for the establishment, exercise or defence of legal rights or

if you have objected to the processing of the data, but the legitimate interest of the data controller can also serve as a reason for it, the processing of the data must be restricted until it can be determined whether the legitimate grounds of the data controller override the legitimate grounds stated by you.

If processing has been restricted, these personal data are processed, with the exception of storage, only with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

You will be informed by the data controller before the processing restriction is lifted (at least 3 working days before the restriction is lifted).

Right to erasure - the right to be forgotten

You have the right to obtain from the data controller the erasure of personal data concerning you without undue delay where one of the following reasons applies:

the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed by the data controller;

you withdraw your consent on which the processing is based and there is no other legal basis for the processing;

you object to the processing based on legitimate interest and there are no overriding legitimate reasons (namely legitimate interest) for the processing,

the personal data have been processed unlawfully by the data controller, if this has been established on the basis of the complaint,

the personal data must be erased in order to comply with a legal obligation laid down in Union law or the law of a Member State to which the data controller is subject.

Where the data controller, on any legal basis, has made the personal data public and is obliged to erase the personal data for any of the above reasons, the controller, taking into account available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform other data controllers processing the personal data that you have requested the erasure by such controllers of any links to, or any copy or reproduction of, those personal data.

Erasure does not apply to the extent that processing is necessary:

for the exercise of the right to freedom of expression and information;

or for compliance with a legal obligation requiring processing under Union or Member State law to which the data controller is subject (processing of data in the context of invoicing is one of these cases, since withholding the invoice is provided for by law) or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller;

for the establishment, exercise or defense of legal claims (for example, if the data controller has a claim against you that has not yet been satisfied or if there is an ongoing complaint handling process).

Right to object

You have the right to object at any time, on grounds relating to your particular situation, to processing of personal data concerning you which is based on legitimate interests. In such a case, the data controller shall no longer process the personal data unless the data controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.

Where personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purposes of such marketing, which includes profiling to the extent that it is related to such direct marketing. If you object to the processing for direct marketing purposes, your personal data will no longer be processed for such purposes.

Right to data portability

If the data processing is carried out in an automated manner or if the data management is based on your voluntary consent, you have the right to request from the data controller the data you have provided to the data controller, which the data controller will send in xml, JSON or csv format at your disposal and, if technically feasible, you may request that the data controller transmit the data in this form to another data controller.

Automated decision-making process

You have the right not to be subject to a decision based solely on automated processing (including profiling) and which produces legal effects concerning you or similarly significantly affects you. In such cases, the data controller shall implement suitable measures to safeguard the data subject's rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express his or her point of view and contest the decision.

The above does not apply if the decision:

is necessary for the conclusion and performance of the contract between you and the data controller;

is authorised by Union law or the law of a Member State to which the controller applies and which also provides that

appropriate measures to protect your rights and freedoms and legitimate interests; or is based on your explicit consent.

Reporting to the data protection registration system

In accordance with the Privacy Act, the data controller must report certain data processing activities to the data protection registration system. This reporting obligation ceased on May 25, 2018.

Registration number with the NAIH (Hungarian National Authority for Data Protection and Freedom of Information) before May 25, 2018:

Data protection registration number : NAIH - 103878 / 2016

Data security measures

The data controller declares that it has taken appropriate security measures to protect personal data against unauthorized access, modification, transmission, disclosure, deletion or destruction, as well as against accidental destruction and damage, as well as against inaccessibility due to changes in the technology used.

The data controller will do everything organizationally and technically possible to ensure that its processors also take appropriate data security measures when working with your personal data.

means

If, in your opinion, the data controller has violated a legal provision regarding data processing or has not fulfilled any of your requests, then, in order to put an end to the alleged unlawful data processing, you may initiate the investigation procedure of the Hungarian National Authority for Data Protection and Freedom of Information (postal address: H-1363 Budapest, Pf. 9., e-mail: ugyfelszolgalat@naih.hu, telephone numbers: +36 (30) 683-5969 +36 (30) 549-6838;

+36 (1) 391 1400).

We also wish to inform you that, in the event of a violation of the legal provisions regarding data processing or if the data controller has not fulfilled any of your requests, you may file a civil action against the data controller in court.

Privacy policy change

The data controller reserves the right to amend this data management information in a way that does not affect the purpose and legal basis of the data processing. By using the website after the amendment enters into force, you accept the amended privacy notice.

If the data controller wishes to carry out further processing of the collected data for a purpose other than that for which they were collected, it will inform you, before starting any further processing of the data, of the purpose of the data processing and of the following information:

the intended period for which the personal data will be processed or, where this is not possible, the criteria used to determine that period;

the existence of your right to request from the data controller access to personal data, rectification or erasure thereof or restriction of processing of personal data concerning you, or to object to such processing in the case of data processing for reasons of legitimate interest or to request data portability in the case of data processing based on consent or the contractual relationship;

in the case of data processing based on consent, the fact that you can withdraw your consent at any time, the right to lodge a complaint with a supervisory authority;

whether the provision of personal data is based on legislation or a contractual obligation or is a prerequisite for concluding a contract, as well as whether you are obliged to provide personal data and what possible consequences may arise from failure to comply with the obligation to provide the data;

Data processing can only begin thereafter and, in the case of data processing based on consent, your consent to data processing will also be required, in addition to providing the above information.

Data processing information

privacy policy

Data controller

Hosting service provider

Phone number:

Description of data processing activities carried out within the operation of the online store

Information on the use of cookies

What is a cookie?

Legal context and legal grounds of cookies:

The main characteristics of the cookies used by the website: Strictly necessary cookies:

Statistical cookies:

Marketing cookies:

Data processed for the purpose of concluding and executing the contract

contact

Processed data

Data processing period

Legal basis for data processing

Website registration

Processed data

Data processing period

Legal basis for data processing

Order processing

Processed data

Data processing period

Legal basis for data processing

Issuing the invoice

Processed data

Data processing period

Legal basis for data processing

Processing of data related to product delivery

Processed data

FansBRANDS® - Official Motorsport Fan Store

Legal basis for data processing

Recipient Name: UPS

Handling warranty and compensation claims

Processed data

Data processing period

Legal basis for data processing

Handling other consumer complaints

Processed data

Data processing period

Legal basis for data processing

Data processed in connection with the verifiability of consent

Processed data

Data processing period

Legal basis for data processing

Data processing for marketing purposes

Processed data

Processing of data related to sending and displaying personalized ads

Processed data

FansBRANDS® - Official Motorsport Fan Store

Legal basis for data processing

Remarketing

Processed data

Data processing period

Legal basis for data processing

competitions

Processed data

Data processing period

Legal basis for data processing

Additional data processing activities

Recipients of personal data

Contact details of the person authorized by the operator:

Website of the data controller: unas.hu

Activities of data controllers related to sending newsletters

Activities of data controllers related to sending newsletters

Activities of data controllers related to sending newsletters

Name of the company operating the newsletter system: The Marketer

Telephone number of the company managing the newsletter system: +40724470432

Data controllers' activities related to sending newsletters

Name of the company operating the newsletter system: Klavyio

Telephone number of the company managing the newsletter system:

Processing of accounting-related data

Billing-related data controller activities

Activities of data controllers related to billing

Email address of the person authorized by the operator:

Activities of data controllers related to billing

Activities of data controllers related to billing

Activities of data controllers related to the operation of the CRM system

Telephone number of the person authorized by the operator: