Data Protection, Data Processing
By using the Online Store, the user declares that he or she is at least 16 years of age. Persons under the age of 16 may not register with the Online Store, make purchases, or subscribe to the newsletter, given that, pursuant to Section 6(3) of the Information Act, the consent of their legal representative or subsequent approval is required for the validity of their legal declaration containing consent to data processing. The Data Controller is unable to verify the authority of the person providing consent; therefore, the data subject guarantees that the information provided is accurate. The data subject is responsible for the accuracy of the information provided.
The Data Controller hereby informs the data subject that the functions of the online store, as well as the recording and fulfillment of orders, are only possible if the data subject provides their data to the Data Controller and consents to the processing of such data.
1. Data Controller
Company: Bruckner’s Antiques Kft.
Headquarters: 1055 Budapest, Szent István krt. 5.
Tax ID: 32095665-2-41
Representative: Miklós György Csepeli
Phone: +36 70 376-4171
Email: brucknersltd@gmail.com
(hereinafter referred to as: Data Controller)
The personal data processed by the Data Controller may be accessed by the Data Controller’s employees to the extent necessary to achieve the data processing purpose specified in Section 3.
2. Legal Basis for Data Processing
The Data Controller processes personal data based on the data subject’s voluntary and explicit consent, given after receiving the necessary information, in accordance with Section 5(1)(a) of the Information Act.
The data controller processes the data contained in accounting documents in accordance with the provisions of Act C of 2000 on Accounting and pursuant to this law.
For the purpose of sending promotional materials and offers, the Data Controller shall process data only with the data subject’s express consent given specifically for this purpose, in accordance with the provisions of Act XLVIII of 2008 on the Fundamental Conditions and Certain Restrictions of Commercial Advertising Activities. The Customer may at any time opt out of receiving further promotional communications from the Data Controller by clicking the link provided in the newsletter or by contacting the Data Controller using the contact information specified in Section 1.
3. Purpose and duration of data processing; scope of data processed
The Data Controller processes personal data for the following purposes and for the following periods:
| Type of Data Processing | Scope of Processed Data | Purpose of Data Processing | Duration of Data Processing |
| Registered user | Name, address, phone number (optional), email address, tax ID number (for business users only) | Managing user accounts, providing the ability to view order details, managing shopping lists , fulfilling orders, sending order confirmations, communicating regarding the fulfillment of orders , and billing fees | Until the data subject submits a request for data deletion to |
| Guest Shopper | Name, address, phone number ( is not required), email address, tax ID number (for business users only) | fulfilling orders, sending order confirmations, communicating regarding order fulfillment, invoicing fees | Until the order is fulfilled, , or until the deadline specified by law for the data defined in the Accounting Act (currently: 8 years) |
| Sending a newsletter(with separate consent) | Name, email address | Send an electronic advertisement to (newsletter) | Until the data subject submits a request for data deletion to |
4. Data Processors
The data controller may transfer data to the following data processors for the purposes of recording orders, fulfilling contracts, operating the website, sending newsletters, and complying with the provisions of the Accounting Act.
Data Processors shall carry out data processing in accordance with the Data Controller’s instructions; they may not make any substantive decisions regarding data processing; they may process personal data that comes to their knowledge solely in accordance with the Data Controller’s instructions; they may not process data for their own purposes; and they are required to store, retain, and delete personal data in accordance with the Data Controller’s instructions. During data processing, the Data Processors’ employees may also become aware of the data.
| Name of the Data Processor | Address of the data processor | Data Processing Activities | Data Subject to Processing |
| DPD Hungary Kft. | 1134 Budapest, 33 Váci út, 2nd floor | Parcel Shipping | Name, address, phone number, email address, |
| Hungarian Post Ltd. | 1138 Budapest, Dunavirág St. 2–6. | Parcel Shipping | Name, address, phone number, email address, |
| FedEx | Budapest BUD International Airport, Logistics Center No. II – Office Building 283, 1185 | Parcel Shipping | Name, address, phone number, email address, tax ID number (for corporate customers) |
| UPS Hungary Freight Forwarding Limited Liability Company | 154 Lőrinci Street, Vecsés 2220. | Parcel Shipping | Name, address, phone number, email address, tax ID number (for corporate customers) |
| TNT Express Hungary Kft. | 1185 Budapest, International Airport, Terminal 1 | Parcel Shipping | Name, address, phone number, email address, tax ID number (for corporate customers) |
5. Data Transfer
The Data Controller does not disclose the data to third parties.
6. Profile Creation
The Data Controller hereby informs the data subject that, during the use of the Online Store (browsing, shopping), it performs profiling in order to provide more effective service to visitors of the Online Store. During profiling, the IT system operating the Online Store anonymously reviews the products viewed by the visitor—exclusively through technical operations performed by the web browser—and, based on these viewed products and in accordance with the visitor’s interests, the system recommends additional products for viewing in the Online Store. This activity is carried out to provide a better user experience.
7. Technical data processing related to the operation of the online store
While using the Online Store, non-personally identifiable information may be recorded, such as the type of web browser used by the data subject, the URL of the website from which the user accessed the Online Store, etc.—the Data Controller stores this data in an anonymous manner.
The Online Store uses the Google Analytics web analytics service provided by Google Inc. (“Google”). Google uses cookies—small data files stored on the user’s computer—to help analyze the use of the Online Store, of course in an anonymous manner.
Google transmits the non-personally identifiable information generated by cookies regarding the use of the website to its servers in the United States, where it is stored. Google uses this information to evaluate and analyze the use of the website, to compile statistical reports for the Data Controller regarding activities on the website, and to provide other services related to the website and internet usage—of course, also in an anonymous manner.
Other cookies may be associated with external websites—such as through the use of Facebook’s “Like” or “Share” features on the website—or with Google Remarketing.
When using Google Remarketing, the Data Controller places a cookie on the data subject’s computer, which allows the data subject’s browser to be uniquely (but not personally) identified. Google uses this to recognize whether the data subject has previously visited the Online Store, allowing it to display related ads to the data subject on the websites of other, external content providers.
The Customer can disable this feature at any time on the official page for turning off Google ads:
google.com/ads/preferences/
Anonymity
Google never links the data subject's IP address to any other data stored by Google. The data subject's IP address is stored anonymously, so it cannot be linked to their personal data. The data subject can disable the use of cookies in their browser settings; however, in this case, they will not be able to use all the features of the online store.
By using the online store, the data subject consents to the collection, storage, and processing of their visit data in the manner and for the purposes specified above.
You can disable cookies in each web browser using the following methods:
Chrome: https://support.google.com/chrome/answer/95647?co=GENIE.Platform%3DDesktop&hl=en
Safari: https://support.apple.com/kb/ph21411?locale=en_US
Facebook comments
In the Online Store, the data subject has the option to post comments via the Facebook application. By submitting a comment, the data subject consents to the Data Controller recording (along with the name and photo associated with their Facebook registration—as well as the current basic and public user information on Facebook), processing, and displaying their comment in the Online Store.
Customer Reviews
In the Online Store, the data subject has the opportunity to rate products and services. By submitting a review, the data subject consents to the Data Controller displaying the review in the Online Store, using it in advertisements for its products or company, or utilizing it in its marketing activities—even in an edited form. The Data Controller has full discretion over the submitted review, and the data subject acknowledges this by submitting the review.
8. The Data Subject's Rights and Remedies
The data subject may request that the Data Controller provide information regarding the processing of their personal data, correct their personal data, and erase or block their data. The data subject may object to the processing of their personal data.
At the request of the data subject, the Data Controller shall provide information regarding the data concerning the data subject that it controls or that is processed by it or by the Data Processor, the source of such data, the purpose of the data processing, the legal basis for it,
the duration of the processing, the name and address of the data processor, and the activities related to the data processing; and—in the event that the data subject’s personal data is transferred—the legal basis for the transfer and the recipient of the data.
The Data Controller shall, within the shortest possible time from the submission of the request (without undue delay), but no later than 25 days—or 15 days in the case of an objection—provide the requested information in writing upon the data subject’s request to that effect, or, in the event of withdrawal of consent, delete the data. In the event of rectification or erasure, the Data Controller has notified all recipients to whom the data was disclosed.
The Data Controller hereby informs data subjects that the withdrawal of consent to the processing of data does not affect the lawfulness of the data processing carried out on the basis of that consent prior to the withdrawal.
You may request information about your personal data, or request its correction, deletion, or blocking, by contacting the Data Controller at the contact information provided below; you may also object to the processing of your personal data through these same contact channels:
Name: Miklós György Csepeli
Phone: +36 70 376-4171
Email: brucknersltd@gmail.com
If the data subject wishes to file a complaint, they may do so with the National Authority for Data Protection and Freedom of Information (1125 Budapest, Szilágyi Erzsébet fasor 22/c., mailing address: 1530 Budapest, P.O. Box 5, www.naih.hu, phone: +36 (1) 391-1400, fax: +36 (1) 391-1410, ugyfelszolgalat@naih.hu), or, at their discretion, to the court with jurisdiction over the Data Controller’s registered office, the data subject’s place of residence, or place of stay.
9. Data Security
The Data Controller processes data in a manner that ensures the protection of the data subjects’ privacy. The Data Controller protects the data using information technology solutions, in particular against unauthorized access, alteration, transmission, disclosure, deletion, or destruction, as well as against accidental destruction or damage, and against becoming inaccessible due to changes in the technology used.
The user account that the data subject is required to create during registration is protected by the password provided by the data subject.