Privacy Notice

What principles do we follow in our data processing?

Our company adheres to the following principles when processing data:

We process personal data lawfully and fairly, and in a manner that is transparent to you.
We collect personal data only for specified, explicit and legitimate purposes, and we do not process it in a manner incompatible with those purposes.
The personal data we collect and process is appropriate and relevant to the purposes of data processing, and is limited to what is necessary.
Our company takes all reasonable measures to ensure that the data we process is accurate and, where necessary, up to date; we will delete or rectify any inaccurate personal data without delay.
We store personal data in such a way that you can only be identified for as long as is necessary to fulfil the purposes for which the personal data is processed.
By implementing appropriate technical and organisational measures, we ensure that personal data is adequately protected against unauthorised or unlawful processing, accidental loss, destruction or damage.
Our company processes your personal data
We process your personal data – that is, we collect, record, organise, store and use it – on the basis of your prior, informed and voluntary consent, and only to the extent necessary and, in all cases, for the specific purpose for which it was collected.
In certain cases, the processing of your data is based on legal requirements and is mandatory; in such cases, we will draw your attention to this fact specifically.
or, in certain cases, our Company or a third party has a legitimate interest in processing your personal data, for example, the operation, development and security of our website.

Who are we?

Company name: Orange Design Kft.
Registered office: 2096 Üröm, Kamilla u 7/a.
Website: www.orangedesign.hu
Postal address: 2096 Üröm, Kamilla Street 7/a
Email address: info@orangedesign.hu
Tax registration number: 11674436-2-41
Under Article 37 of the GDPR, our company is not required to appoint a data protection officer

Our company’s web hosting provider is:

Name of hosting provider: EVOLUTIONET KFT.

Hosting provider’s registered office: 7342 Mágocs, 75 Széchenyi Street

Hosting provider’s website: www.szerverzum.hu

Hosting provider’s email address: ugyfelszolgalat@szerverzum.hu

The data we process:

We only ask visitors to our website for their personal data if they wish to register, log in or take part in a prize draw.

We do not link the personal data provided in connection with registration or the use of our marketing services, and identifying our visitors is not, in principle, our aim.

If you have any questions regarding data processing, please contact info@orangedesign.hu You may request further information by email or at the postal address above; we will send our reply to you within 15 days (but no later than one month) to the contact details you have provided.

What are cookies and how do we manage them?

Cookies are small data files (hereinafter: cookies) which are placed on your computer via the website as you use it, and which are saved and stored by your web browser. Most commonly used web browsers (Chrome, Firefox, etc.) accept and allow the downloading and use of cookies by default; however, it is up to you to reject or disable them by changing your browser settings, or to delete cookies that are already stored on your computer. Further information on the use of cookies can be found in the „Help” menu of each browser.

There are certain cookies that do not require your prior consent. Our website provides brief information about these when you first visit the site; examples include authentication cookies, multimedia player cookies, load-balancing cookies, session cookies that help personalise the user interface, and user-centred security cookies.

With regard to cookies that require consent – given that data processing begins as soon as you visit the website – our Company will inform you of this at the start of your first visit and will ask for your consent.

Our company does not use, nor does it permit the use of, any cookies that would enable third parties to collect data without your consent.

You are not obliged to accept cookies; however, our Company accepts no liability should our website fail to function as expected if cookies are not enabled.

What sort of cookies do we use?

Name: _ga
Service provider: domained.hu
Purpose: To register a unique identifier which generates statistical data on how visitors use the website.
Expiry: 2 years
Type: HTTP

Name: _gat
Service provider: domained.hu
Purpose: To store the rate used by Google Analytics for request throttling.
Expiry: Workflow
Type: HTTP

Name: _gid
Service provider: domained.hu
Purpose: To register a unique identifier which generates statistical data on how visitors use the website.
Expiry: Workflow
Type: HTTP

Name: _fbp
Service provider: domained.hu
Purpose: Facebook uses this to provide advertising products to a third party (e.g. real-time ads)
Expiry: 3 months
Type: HTTP

Name: fr
Service provider: facebook.com
Purpose: Facebook uses this cookie to offer a range of advertising products (such as real-time bidding from third-party advertisers)
Expiry: 3 months
Type: HTTP

You can read more about third-party cookies here on this page.

What else do you need to know about how we process data in connection with our website?

You provide us with your personal data voluntarily during registration or whilst communicating with our Company; for this reason, we ask that you take care to ensure that the data you provide is genuine, correct and accurate, as you are responsible for this. Incorrect, inaccurate or incomplete data may prevent you from using our services.

If you provide the personal data of another person rather than your own, we will assume that you have the necessary authorisation to do so.

You may withdraw your consent to the processing of your personal data at any time, free of charge, by cancelling your registration, by withdrawing your consent to data processing, or by withdrawing your consent to the processing or use of any data that is mandatory to provide during registration, or by requesting that such data be blocked.
We undertake to record the withdrawal of consent within 30 days for technical reasons; however, please note that we may continue to process certain data after the withdrawal of consent in order to fulfil our legal obligations or to pursue our legitimate interests.

In the event of the misuse of personal data, or if any of our visitors commits a criminal offence or attacks our Company’s system, we shall immediately delete that visitor’s data at the same time as cancelling their registration, or – where necessary – retain them for the duration of proceedings to establish civil liability or conduct criminal proceedings.

What do you need to know about our data processing for direct marketing and newsletters?

You may do so by amending the personal data you provided in your declaration during registration or, at a later date, by amending your personal data stored on the newsletter and/or direct marketing registration page (i.e. by clearly expressing your intention to give consent), you may give your consent for us to use your personal data for marketing purposes. In this case – until such time as you withdraw your consent – we will process your data for the purposes of direct marketing and/or sending newsletters, and we will send you advertising and other communications, as well as information and offers, and/or forward newsletters to you (Section 6 of the Grtv.).

You may give your consent to direct marketing and the newsletter either jointly or separately, and you may withdraw your consent free of charge at any time.

We always regard the cancellation of registration as a withdrawal of consent. We do not interpret the withdrawal of consent for data processing for direct marketing and/or newsletter purposes as simultaneously constituting a withdrawal of consent for data processing in relation to our website. How does this work? What data do we retain, and on what basis, if consent to receive the newsletter has been withdrawn? In the case of consents, each consent applies to a specific purpose; thus, registering on the website and subscribing to the newsletter are two separate purposes, two separate databases, and the two cannot be linked.

We undertake to process the registration of the withdrawal or cancellation of individual consents within 15 days, for technical reasons.

What do you need to know about prize draws?

Our company may organise prize draws as part of promotional campaigns, the specific terms and conditions of which are set out in separate rules. The rules for the current promotion can always be found via a link prominently displayed on the homepage of our website.

Other data processing issues

We may only disclose your data within the limits set out by law; in the case of our data processors, we ensure – by stipulating contractual terms – that they do not use your personal data for purposes contrary to your consent. Further information can be found in point 2.

Our company does not transfer data abroad.

The courts, the public prosecutor’s office and other authorities (e.g. the police, the tax office, the National Authority for Data Protection and Freedom of Information) may contact our Company to request information, the disclosure of data or the provision of documents. In such cases, we must fulfil our obligation to provide information, but only to the extent strictly necessary to fulfil the purpose of the request.

Our contractors and employees involved in our company’s data control and/or data processing are entitled to access your personal data to a predetermined extent, subject to a duty of confidentiality.

We protect your personal data through appropriate technical and other measures; we ensure the security and availability of the data, and safeguard it against unauthorised access, alteration, damage, disclosure and any other unauthorised use.

As part of our organisational measures, we control physical access to our premises, provide ongoing training for our staff and keep paper-based documents under appropriate security. As part of our technical measures, we use encryption, password protection and antivirus software. However, please note that data transmission via the internet cannot be considered entirely secure. Our company makes every effort to ensure that our processes are as secure as possible; however, we cannot accept full responsibility for data transmission via our website, though we adhere to strict regulations regarding data received by our company to ensure the security of your data and to prevent unauthorised access.

With regard to security matters, we would ask for your help in keeping your existing password for our website safe and not sharing it with anyone.

What are your rights and the remedies available to you?

You may request information about data processing; you may request the rectification, amendment or supplementation of your personal data processed by us; you may object to the processing of your data; and you may request the erasure or blocking of your data (with the exception of mandatory data processing); You may seek redress through the courts, lodge a complaint with the supervisory authority, or initiate proceedings (https://naih.hu/panaszuegyintezes-rendje.html).
Supervisory Authority: National Authority for Data Protection and Freedom of Information

Registered office: 1125 Budapest, 22/c Szilágyi Erzsébet fasor.
Postal address: 1530 Budapest, PO Box 5.
Telephone: +36 (1) 391-1400
Fax: +36 (1) 391-1410
Email: ugyfelszolgalat@naih.hu
Website: https://naih.hu/

At your request, we will provide you with information regarding the personal data we hold about you, or which is processed by us – or by our appointed data processor –

about its data,
regarding their source,
the purpose and legal basis of data processing,
its duration, or, if this is not possible, the criteria for determining that duration,
the names and addresses of our data processors and the nature of their activities in relation to data processing,
the circumstances and impact of data protection incidents, the measures we have taken to address and prevent them, and
in the event that your personal data is transferred, the legal basis for the transfer and the recipient.

We will provide our response within 15 days of the submission of the request (but no later than one month). This information is provided free of charge, unless you have already submitted a request for information to us regarding the same set of data in the current year. We will refund any fees you have already paid if we have processed the data unlawfully or if the request for information has led to a correction. We may refuse to provide information only in the cases specified by law, citing the relevant legal provision and informing you of your right to seek judicial redress or to lodge a complaint with the Authority.

Our company will inform you, as well as all those to whom the data has previously been transferred for the purposes of data processing, unless failure to provide such notification would not infringe upon your legitimate interests.

Should we not comply with your request for rectification, restriction or erasure, we will, within 15 days of receiving your request (but no later than one month), either in writing or – with your consent – by electronic means – of the reasons for our refusal and inform you of your right to seek judicial redress and to lodge a complaint with the Authority.

If you object to the processing of your personal data, we will examine your objection within 15 days of the submission of your request (but no later than one month) and inform you of our decision in writing. If we decide that your objection is well-founded, we will cease processing your data – including any further collection and transfer of data – and block the data; we will also notify all those to whom the personal data covered by the objection was previously transferred of the objection, and the measures taken as a result to all those to whom we have previously transferred the personal data concerned by the objection, and who are obliged to take action to ensure that the right to object is upheld.

We shall refuse to comply with the request if we can demonstrate that the data processing is justified by compelling legitimate grounds which take precedence over your interests, rights and freedoms, or which relate to the establishment, exercise or defence of legal claims. If you disagree with our decision, or if we fail to meet the deadline, you may bring the matter before a court within 30 days of the date on which the decision was notified or the last day of the deadline.

The adjudication of data protection cases falls within the jurisdiction of the court; the case may also be brought before the court with jurisdiction over the data subject’s place of residence or place of stay, at the data subject’s discretion. Foreign nationals may also lodge a complaint with the supervisory authority with jurisdiction over their place of residence.

Before submitting your complaint to the supervisory authority or the courts, please contact our Company so that we can discuss the matter and resolve the issue as quickly as possible.

What are the main pieces of legislation governing our activities?

Regulation (EU) 2016/679 of the European Parliament and of the Council on the processing of personal data (GDPR)
Act CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information – (Info Act)
Act V of 2013 on the Civil Code (Ptk.)
Act CVIII of 2001 on certain aspects of electronic commerce services and information society services – (Eker Act)
Act C of 2003 on Electronic Communications – (Ehtv)
Act CLV of 1997 on Consumer Protection (Consumer Protection Act)
Act CLXV of 2013 on complaints and reports in the public interest. (Pktv.)
Act XLVIII of 2008 on the fundamental conditions and certain restrictions governing commercial advertising (Grtv.)

Amendment to the Privacy Notice

Our company reserves the right to amend this Privacy Notice, in which case it will inform data subjects accordingly. Information relating to data processing is published on the orangedesign.hu website.