Privacy Policy
The purpose of this Privacy Policy (hereinafter: Privacy Policy) is to provide information regarding the processing of personal data of natural persons using the https://manlift.hu/ (hereinafter: “Website“) website, as well as information related to the provision of services and sale of products.
Man-Lift Kft. is responsible for your provided data, including data provided on the website, via email, by phone, or in person.
Data Controller Contact Information, Data Processor
Man-Lift Engineering Commercial and Service Limited Liability Company (hereinafter: Data Controller)
Registered Office: 2131 Göd, Pesti út 53.
Phone: +36-26-525-367
Fax: +36-26-525-368
Email Address: manlift@manlift.hu
Website: https://manlift.hu/
Data Processor
Hosting provider: MediaCenter Hungary Kft. (6000 Kecskemét, Sosztakovics u. 3. II/6.)
Scope of Processed Data, Purpose, Legal Basis, and Duration of Data Processing
1. Data processing related to contract performance
| Data processing related to service provision and product sales | |||
| Scope of processed data | Purpose of data processing | Duration of data processing | Legal basis |
Contact persons concerned
Invoicing and shipping:
|
| In accordance with the retention obligation under the Accounting Act, the Data Controller deletes personal data related to contracts 8 years after the performance of the contract (or the issuance of the accounting document). The personal data of contact persons processed in the contract may only be processed for the purpose of maintaining the contractual relationship. The retention period for contact personal data recorded in the contract shall not exceed the retention period applicable to the given contract. |
|
2. Cookies
The Data Controller uses so-called “cookies” and other similar technologies to collect additional data about the use of the Website and to improve the quality of its services.
What is a cookie?
A cookie is a simple, small file stored on your device, for example, to enable access to the basic functions of a given website, or to remember your previous settings and preferences, and to collect statistical data. There are different types of cookies depending on their functions and tasks, and they are stored on users’ devices for different durations: session cookies are deleted at the end of each browsing session; persistent cookies have a duration predetermined by their owner. In addition to cookies, other digital technologies also serve to store information or access data stored on your device. These technologies are treated as cookies, and whenever cookies are mentioned in this privacy policy, these technologies should also be understood.
What is the difference between a first-party cookie and a third-party cookie?
We distinguish between so-called first-party cookies and third-party cookies. The word “party” refers to the domain specified in the cookie, i.e., the website that places the cookie. First-party cookies are managed by Wavin itself, or on behalf and for the benefit of Wavin, and refer to Wavin’s domain name. Third-party cookies are managed by a third party and place a reference to their own domain name in the cookie. For example, if we embed YouTube videos on our Website, cookies from the YouTube domain will also be placed.
Cookie Types Information
| Cookie Types | First-party / Third-party | Explanation |
| Operational Cookies (Session) | First-party | The Data Controller uses operational cookies on the Website to assist registered users with logging into their accounts and submitting contact forms. The Data Controller may place cookies to test changes and developments on the Website to enhance the user experience. |
| Analytical cookies | First-party and third-party | Analytical cookies allow us to recognize visitors and to keep track of their numbers in order to monitor visitor activity and the content visited. This helps us determine how often individual pages are visited and which of our content and services are most popular. Through these, we can improve the quality of the Website and our services. |
Please note that, based on the laws binding on the Data Controller, we must request your consent before using certain types of cookies when you open the Website. If you refuse to consent to the placement of cookies, we will not place cookies on your device. However, in this case, we will not be able to provide personalized services on our Website. If you have consented to the placement of cookies, you can withdraw your consent at any time.
If operational or analytical cookies are rejected, the Data Controller will not receive information about the Website’s performance and content quality, thus unable to enhance the user experience.
For further guidance on withdrawing or modifying your consent to the placement of cookies, or on activating, deactivating, and deleting them, please open the “help” function of your browser. Please note that if you disable cookies in your browser, the Website may not function properly, and some services or certain functions of the Website may not be available or may not work smoothly, and you may have to modify or manually enter some information or settings each time.
Data Subject Rights
Withdrawal of consent
Data subjects are entitled to withdraw their consent to the given data processing at any time during the data processing period; however, the withdrawal does not affect the lawfulness of data processing carried out based on consent before the withdrawal.
Access
The data subject has the right to obtain confirmation from the Data Controller as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the following information:
a) the purposes of the processing;
b) the categories of personal data concerned;
c) the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations;
d) where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
e) the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;
f) the right to lodge a complaint with a supervisory authority;
g) where the personal data are not collected from the data subject, any available information as to their source.
Rectification
The data subject has the right to obtain from the Data Controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject has the right to have incomplete personal data completed, including by means of providing a supplementary statement.
Right to object
The data subject shall have the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on the legitimate interests pursued by the Data Controller. In such a case, the Data Controller shall no longer process the personal data unless the Data Controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of legal claims.
Erasure and Restriction
The data subject shall have the right to obtain from the Data Controller the erasure of personal data concerning him or her without undue delay and the Data Controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies:
a) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
b) the data subject withdraws consent on which the processing is based and where there is no other legal ground for the processing;
c) the data subject objects to the processing and there are no overriding legitimate grounds for the processing,
d) the personal data have been unlawfully processed;
e) the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject;
f) the personal data have been collected in relation to the offer of information society services directly to a child.
The above provisions shall not apply to the extent that processing is necessary:
- for exercising the right of freedom of expression and information;
- for compliance with a legal obligation which requires processing by Union or Member State law to which the Data Controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
- for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in so far as the right to erasure is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
- for the establishment, exercise or defense of legal claims.
The data subject shall have the right to obtain from the Data Controller restriction of processing where one of the following applies:
a) the accuracy of the personal data is contested by the data subject, for a period enabling the Data Controller to verify the accuracy of the personal data;
b) the processing is unlawful and the data subject opposes the erasure of the personal data and requests instead the restriction of their use;
c) the Data Controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defense of legal claims; or
d) the data subject has objected to processing; pending the verification whether the legitimate grounds of the Data Controller override those of the data subject.
Where processing has been restricted, such personal data shall, with the exception of storage, only be processed with the data subject’s consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
The Data Controller shall inform the data subject, at whose request processing has been restricted, before the restriction of processing is lifted.
Data portability
The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where:
a) the processing is based on consent or on a contract; and
b) the processing is carried out by automated means.
In exercising his or her right to data portability, the data subject shall have the right to have the personal data transmitted directly from one controller to another, where technically feasible.
Please note that if the receipt of data is not technically feasible for the recipient, the right to data portability cannot be exercised.
Legal remedies
If the data subject considers that the processing of his or her personal data by the Data Controller infringes the data protection regulations in force at any time, in particular the provisions of the General Data Protection Regulation, he or she has the right to lodge a complaint with the competent data protection supervisory authority of the Member State of his or her habitual residence, place of work or place of the alleged infringement.
In Hungary, a complaint can be lodged with the National Authority for Data Protection and Freedom of Information (“NAIH”).
NAIH contact details:
Name: National Authority for Data Protection and Freedom of Information
Headquarters: 1024 Budapest, Szilágyi Erzsébet fasor 22/C.
Postal address: 1530 Budapest, Pf.: 5.
Email: ugyfelszolgalat@naih.hu
Website: http://www.naih.hu
The data subject – irrespective of their right to complain – may also turn to the court in case of the above infringement. The data subject is also entitled to judicial remedy against a legally binding decision of the supervisory authority concerning him or her. Furthermore, the data subject is entitled to a judicial remedy if the supervisory authority does not deal with the complaint or does not inform the data subject within three months about the procedural developments or the outcome of the lodged complaint.
Contacting the Data Controller
You can contact us using the contact details at the beginning of this policy if you:
- would like to know if we process your personal data or if we have access to it;
- need your data corrected;
- would like your data erased or blocked;
- would like to restrict your data;
- would like to object to the processing of your data,
- wish for your data to be transferred to a third organization.
Upon your request, we may ask for additional information to confirm your identity.
Automated Decision-Making, Profiling
No automated decision-making or profiling is carried out by the Data Controller during the processing of data concerning data subjects.
Miscellaneous Provisions
This Privacy Policy is effective from May 25, 2018.