{"id":101602,"date":"2022-05-17T07:44:38","date_gmt":"2022-05-17T07:44:38","guid":{"rendered":"https:\/\/organparts.camelotdesign.hu\/?page_id=101602"},"modified":"2026-09-21T12:43:59","modified_gmt":"2026-09-21T12:43:59","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/organparts.info\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"

ORGANPARTS.INFO DATA PROTECTION NOTICE<\/h2>\n

P\u00e9csi Orgona\u00e9p\u00edt\u0151 Manufakt\u00fara Kft.<\/p>\n

Privacy Notice<\/h2>\n

Introduction<\/h2>\n

A\/The P\u00e9csi Orgona\u00e9p\u00edt\u0151 Manufakt\u00fara Kft. (7630 P\u00e9cs, Iparsziget u. 3., tax number: 11013415-2-02, company registration number: 02-09-062663) <\/strong>(hereinafter: the Service Provider, data controller) processes personal data in accordance with the provisions set out in this privacy notice.<\/p>\n

REGULATION (EU) 2016\/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95\/46\/EC (General Data Protection Regulation) (27 April 2016), we hereby provide the following information.<\/p>\n

This privacy notice governs the processing of personal data on the following websites and mobile applications: https:\/\/organparts.info\/<\/a><\/p>\n

The privacy notice is available on the following page: https:\/\/organparts.info\/en\/privacy-policy\/<\/a><\/p>\n

Amendments to the prospectus shall take effect upon publication at the above address.<\/p>\n

The data controller and their contact details<\/h2>\n

Name: P\u00e9csi Orgona\u00e9p\u00edt\u0151 Manufakt\u00fara Kft.<\/p>\n

Registered office: \u00a07630 P\u00e9cs, Iparsziget u. 3. Hungary<\/p>\n

E-mail: \u00a0pom@pomorgona.com<\/a><\/p>\n

Phone: \u00a0+36 72 239 603<\/p>\n

Definitions<\/h2>\n
    \n
  1. \u201cpersonal data<\/em>\u201d<\/strong>: any information relating to an identified or identifiable natural person (\u201cdata subject\u201d); a natural person is considered to be identifiable if they can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;<\/li>\n
  2. \u201cdata processing<\/em>\u201d<\/strong>: any operation or set of operations which is carried out on personal data or on sets of personal data, whether or not by automated means, including collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;<\/li>\n
  3. \u201cdata controller<\/em>\u201d<\/strong>: a natural or legal person, public authority, agency or any other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of the processing are determined by Union or Member State law, Union or Member State law may also determine the controller or specific criteria for the designation of the controller;<\/li>\n
  4. \u201cdata processor<\/em>\u201d<\/strong>: a natural or legal person, public authority, agency or any other body which processes personal data on behalf of the data controller;<\/li>\n
  5. \u201crecipient<\/em>\u201d<\/strong>: a natural or legal person, public authority, agency or any other body to whom personal data are disclosed, whether or not they are a third party. Public authorities which, in the context of a specific investigation, may access personal data in accordance with Union or Member State law shall not be regarded as recipients; the processing of such data by those public authorities must comply with the applicable data protection rules in accordance with the purposes of the processing;<\/li>\n
  6. \u201cthe data subject\u2019s consent<\/em>\u201d<\/strong>: a freely given, specific and informed and unambiguous indication of the data subject\u2019s wishes, by which the data subject, by a statement or a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;<\/li>\n
  7. \u201cdata breach<\/em>\u201d<\/strong>: a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or unauthorised access to, personal data transmitted, stored or otherwise processed.<\/li>\n
  8. \u201eprofiling<\/em>\u201d<\/strong>: any form of automated processing of personal data consisting of the evaluation of certain personal characteristics relating to a natural person, in particular with regard to work performance, economic situation, state of health, personal preferences, interests, reliability, behaviour, location or movements;<\/li>\n
  9. \u2018third party\u2019<\/em><\/strong>: a natural or legal person, public authority, agency or any other body other than the data subject, the data controller, the data processor or those persons authorised to process personal data under the direct authority of the data controller or data processor.<\/li>\n<\/ol>\n

    Principles governing the processing of personal data<\/h2>\n

    Personal data:<\/p>\n

      \n
    1. must be processed lawfully, fairly and in a manner that is transparent to the data subject (\u201clawfulness, fairness and transparency<\/em>\u201d<\/strong>);<\/li>\n
    2. data shall be collected only for specified, explicit and legitimate purposes, and shall not be processed in a manner incompatible with those purposes; in accordance with Article 89(1), further processing for the purposes of archiving in the public interest, scientific or historical research, or statistical purposes shall not be regarded as incompatible with the original purpose (\u2018purpose limitation<\/em>\u2019<\/strong>);<\/li>\n
    3. they must be appropriate and relevant to the purposes of data processing, and must be limited to what is necessary (\u201cdata minimisation<\/em>\u201d<\/strong>);<\/li>\n
    4. they must be accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that personal data which are inaccurate, having regard to the purposes of the processing, are erased or rectified without delay (\u201caccuracy<\/em>\u201d<\/strong>);<\/li>\n
    5. Personal data must be stored in a form which permits identification of data subjects only for as long as is necessary to fulfil the purposes for which the personal data are processed; personal data may be stored for a longer period only if the processing is carried out in accordance with Article 89(1) for archiving purposes in the public interest, for scientific or historical research purposes or for statistical purposes, subject to the implementation of appropriate technical and organisational measures as provided for in this Regulation to safeguard the rights and freedoms of data subjects (\u2018limited retention<\/em>\u2019<\/strong>);<\/li>\n
    6. The processing must be carried out in such a way as to ensure, through the application of appropriate technical or organisational measures, the adequate security of personal data, including protection against unauthorised or unlawful processing, accidental loss, destruction or damage (\u201cintegrity and confidentiality<\/em>\u201d<\/strong>).<\/li>\n
    7. The data controller is responsible for ensuring compliance with the above and must be able to demonstrate such compliance (\u2018accountability<\/em>\u2019<\/strong>).<\/li>\n<\/ol>\n

      The data controller declares that its data processing is carried out in accordance with the principles set out in this section.<\/p>\n

      Data processing in connection with the fulfilment of orders<\/h2>\n

      1. The fact that data is collected, the scope of the data processed and the purpose of data processing<\/strong>:<\/p>\n

      \n\n\n\n\n\n\n\n\n\n\n\n\n\n
      Personal data<\/th>\nThe purpose of data processing<\/th>\nLegal basis<\/th>\n<\/tr>\n<\/thead>\n
      User name<\/td>\nIdentification, enabling registration.<\/td>\nThe data subject\u2019s consent, Article 6(1)(a) of the GDPR.<\/td>\n<\/tr>\n
      Password<\/td>\nIt is designed to ensure secure access to your user account.<\/td>\n<\/td>\n<\/tr>\n
      Surname and first name<\/td>\nRequired for making contact, making a purchase, issuing a valid invoice and exercising the right of withdrawal.<\/td>\nPerformance of a contract, Article 6(1)(b) of the GDPR.<\/td>\n<\/tr>\n
      E-mail address<\/td>\nKeeping in touch.<\/td>\n<\/td>\n<\/tr>\n
      Phone number<\/td>\nMaintaining contact and resolving issues relating to invoicing or delivery more efficiently.<\/td>\n<\/td>\n<\/tr>\n
      Billing name and address<\/td>\nIssuing a valid invoice, as well as drawing up the contract, determining and amending its terms, monitoring its performance, invoicing the fees arising therefrom, and enforcing any related claims.<\/td>\nCompliance with a legal obligation, Article 6(1)(c) of the GDPR.
      (The legal obligation is set out in Section 169(2) of Act C of 2000 on Accounting)<\/td>\n<\/tr>\n
      Delivery name and address<\/td>\nEnabling home delivery.<\/td>\nPerformance of a contract, Article 6(1)(b) of the GDPR.<\/td>\n<\/tr>\n
      Date of purchase\/registration<\/td>\nCarrying out a technical operation.<\/td>\nPerformance of a contract, Article 6(1)(b) of the GDPR.<\/td>\n<\/tr>\n
      IP address at the time of purchase\/registration<\/td>\nCarrying out a technical procedure.<\/td>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/figure>\n

      2. Data subjects: All data subjects who are registered on the online shop\u2019s website or who are customers. Neither the username nor the email address is required to contain personal data.<\/p>\n

      3. Duration of data processing and deadline for erasure: Where any of the conditions set out in Article 17(1) of the GDPR apply, processing shall continue until the data subject submits a request for erasure. The data controller shall inform the data subject electronically, in accordance with Article 19 of the GDPR, of the erasure of any personal data provided by the data subject. If the data subject\u2019s request for erasure also extends to the email address provided by them, the data controller shall erase that email address following the provision of this notification. This does not apply to accounting documents, however, as these must be retained for 8 years in accordance with Section 169(2) of Act C of 2000 on Accounting. The data subject\u2019s contractual data may be erased upon expiry of the civil law limitation period, following a request for erasure from the data subject.<\/p>\n

      Accounting documents directly or indirectly supporting the accounting entries (including general ledger accounts, analytical records and detailed records) must be retained in a legible form for at least 8 years, in such a way that they can be retrieved by reference to the accounting records.<\/em><\/p>\n

      4. Information on the rights of data subjects in relation to data processing:<\/p>\n