Data processing information
This information describes data processing related to the use of the website https://klartstudio.com/, the operation of the web store, contacting you, sending newsletters, and the use of the Google and Meta marketing platforms.
Data controller
HEIM CLARA
Headquarters: 2400 Dunaújváros, Jászai Mari Square 4. 3/2
Tax number: 77099228-1-27
Registration number: 56028920
Hosting and domain
Cweb Hosting Ltd. / Cweb.hu
Hosting and domain services.
E-mail:
info@cweb.hu
Website:
cweb.hu
Marketing
Google Analytics, Google Ads, Google Tag Manager.
Meta interfaces, Meta Pixel, Meta ads.
Data processing for marketing purposes is based on consent.
Introduction
HEIM KLÁRA, a sole proprietor, explains in this data management information what personal data it processes when using the website https://klartstudio.com/, for what purpose it processes them, on what legal basis the data is processed, and what rights the data subjects can exercise.
The information has been prepared based on Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, i.e. the GDPR.
The data processing information can be accessed at: https://klartstudio.com/adatvedelem/
Amendments to the information will enter into force upon publication at the above address.
Data controller's data
Concepts
Personal data
Any information relating to an identified or identifiable natural person.
Data management
Any operation performed on personal data. Such operations include collection, recording, organization, storage, modification, retrieval, use, disclosure by transmission, erasure, and destruction.
Data controller
The person or organization that determines the purposes and means of processing personal data.
Data processor
The person or organization that processes personal data on behalf of the data controller.
Affected
The natural person to whom the processed personal data relates.
Contribution
A voluntary, specific, adequately informed and unambiguous statement by the data subject.
Data protection incident
A breach of security that results in unauthorized access, loss, alteration, destruction or unauthorized disclosure of processed personal data.
Principles of personal data processing
- Personal data is processed lawfully, fairly and transparently.
- Data collection is for specific, explicit and legitimate purposes.
- Data processing is limited to the data necessary for the given purpose.
- The data is accurate and, where necessary, up-to-date.
- Data is stored only for as long as necessary.
- The data controller protects personal data with appropriate technical and organizational measures.
The data controller is responsible for compliance with the above principles and their verifiability.
Data processing related to the operation of a web store
During the operation of the web store, the data controller processes personal data in order to fulfill the order, maintain contact, invoicing, delivery, manage the customer account and ensure the exercise of the right of withdrawal.
The range of stakeholders
Natural persons who register on the website, make purchases, place orders or use the services of the web store.
Duration of data processing
Data related to the performance of the contract may be processed until the end of the civil law limitation period. The retention period of accounting documents is 8 years according to the Accounting Act.
Consequences of failure to provide data
Without providing the necessary personal data, the processing and fulfillment of your order cannot be ensured.
Contact and customer communication
The data controller handles inquiries received via the contact details provided on the website, by email, by telephone, via contact form and via social media messages.
The data controller will retain the received inquiries for a maximum of 2 years.
Cookies and cookie management
The website uses cookies to ensure functionality, improve user experience, perform statistical measurements and process data for marketing purposes.
Browser settings
The visitor can delete or restrict the use of cookies in their browser settings.
Google services
The website may use Google services for statistical, measurement and marketing purposes.
Google's own privacy policy is available here: https://policies.google.com/privacy?hl=hu
Meta and Facebook data management
The data controller may also be present on Meta and Facebook platforms. These platforms support the presentation of services, communication and marketing activities.
Meta's own data protection information is available here: https://www.facebook.com/privacy/policy/
Facebook / Meta joint data management
For Facebook Page Analytics, the controller and Meta Platforms Ireland Limited may be considered joint controllers. The joint data processing terms are available here: Facebook Page Analytics Data Controller Appendix
Newsletter and direct sales
The data controller sends newsletters and electronic messages for marketing purposes only based on the prior, clear and explicit consent of the data subject.
The data subject can unsubscribe at any time, free of charge.
Data processing continues until consent is withdrawn, unsubscribed, or newsletter delivery is stopped.
Complaints handling
The data controller processes personal data when handling customer complaints, quality objections and consumer protection matters.
The data controller will retain the minutes, transcript and response to the complaint for 3 years.
Data processors and recipients
The data controller may use data processors for its operations. The data processors act according to the instructions of the data controller.
Google Privacy Policy
Meta data management information
It is worth finalizing the data of the courier service, online payment provider, invoicing program and newsletter sending system based on the services actually used.
Social media platforms
The data controller may also be present on social media platforms. The purpose of social media platforms is to present services, communicate and maintain contact with interested parties.
Managed data
- public name or username,
- public profile picture,
- comments, reactions and messages,
- additional data voluntarily provided by the data subject.
Purpose of data processing
- presentation of services,
- marketing communication,
- keeping in touch,
- replying to messages.
The data controller retains social media messages for a maximum of 2 years.
Rights of data subjects
Right of access
The data subject may request information about whether the data controller is processing his or her personal data.
Right to rectification
The data subject may request the correction of inaccurate personal data.
Right to erasure
The data subject may request the deletion of their personal data in the cases specified by law.
Right to restrict data processing
The data subject may request the restriction of data processing if the conditions specified in the GDPR are met.
Right to data portability
The data subject may request to receive the personal data provided by him/her in a structured, machine-readable format.
Right to object
The data subject may object to data processing based on legitimate interest.
Withdraw consent
The data subject may withdraw their consent at any time. The withdrawal does not affect the lawfulness of previous data processing.
Way of exercising rights
The data subject may request access to, rectification, erasure, restriction of processing, portability or withdrawal of consent for their personal data using the contact details below.