Privacy Policy

1. Purpose of this Policy

The purpose of this Policy is to set out the data protection and data processing principles applied by Eterna Steel Kft. (registered office: 1062 Budapest, Andrássy út 55. 4. emelet 3. ajtó, tax number: 32908103-1-42, company registration number: 01-09-448913, registering authority: Company Registry Court of the Budapest-Capital Regional Court) and the Company's data protection and data processing policy.

Eterna Steel Kft. (hereinafter: Service Provider) processes the data of visitors to the trapezlemezes.hu website (hereinafter: Website) and of those registering on the Website (hereinafter collectively: Data Subject) in the course of operating the Website.

The purpose of this Policy is to ensure that, in all areas of the services provided by the Service Provider, every individual — regardless of nationality or place of residence — has their rights and fundamental freedoms respected, in particular their right to privacy, during the automated processing of their personal data (data protection).

2. The Service Provider as Data Controller

• Name: Eterna Steel Kft.
• Registered office: 1062 Budapest, Andrássy út 55. 4. emelet 3. ajtó
• Mailing address: 1182 Budapest, Kerékkötő út 52.
• Tax number: 32908103-1-42
• EU VAT number: HU32908103
• Company registration number: 01-09-448913
• Phone: +36 1 300-92-06
• Email: hello@trapezlemezes.hu

3. Scope of Personal Data Processed

3.1. Registration

During registration, the Data Subject is required to provide the following personal data:

• Username
• Full name
• Personal email address
• Billing address (billing name, street name, house number, city, postal code)
• Phone number

3.2. Technical Data

Data recorded technically during the operation of the system: data of the Data Subject's computer generated while using the service, which the Service Provider's system records automatically as a result of technical processes. The automatically recorded data is logged by the system automatically upon entry and exit, without any separate declaration or action by the Data Subject. This data may not be linked with other personal user data, except in cases required by law. Only the Service Provider has access to this data.

3.3. Cookies

During visits to the Website, the Service Provider sends one or more cookies — small files containing a string of characters — to the visitor's computer, by means of which their browser can be uniquely identified. These cookies are provided by Google and are used through the Google AdWords system.

These cookies are used as follows: third-party providers, including Google, use these cookies to store whether the Data Subject has previously visited the advertiser's website, and based on this they display advertisements to the Data Subject on websites of the third-party providers' partners.

After opting out, the Data Subject will no longer receive personalised offers from the Service Provider.

Cookies used:

• Session cookies: session cookies are automatically deleted after the Data Subject's visit. These cookies serve to make the Service Provider's Website work more efficiently and securely.
• Persistent cookies: the Service Provider also uses persistent cookies for a better user experience (e.g. providing optimised navigation). These cookies are stored in the browser's cookie file for a longer period.
• Cookies used for password-protected sessions
• Cookies required for the shopping cart
• Security cookies

External servers assist in the independent measurement and auditing of the Website's traffic and other web analytics data (Google Analytics). The data controllers can provide detailed information to the Data Subject about the handling of measurement data. Their contact details: www.google.com/analytics

3.4. General Data Processing Related to Online Orders

The Service Provider reserves the right, subject to the Data Subject's consent and in the manner specified in the Hungarian Information Act, to record the identity card number of the natural person collecting the goods in person at its premises on the invoices.

3.5. Data Processing Related to Newsletters

On the trapezlemezes.hu website it is possible to subscribe to a personalised newsletter. In connection with this option, the user subscribing to the newsletter voluntarily provides the following personal data for processing:

• Name
• Email address
• Phone number
• Address
• Behavioural patterns related to website usage
• Behavioural patterns related to newsletter reading
• Purchasing habits

4. Legal Basis, Purpose and Method of Data Processing

4.1.

Data processing takes place on the basis of the voluntary, duly informed declaration of the Data Subject regarding the content available on the trapezlemezes.hu website, which declaration contains the Data Subject's express consent to the use of their personal data provided while using the Website.

4.2.

The purpose of data processing is to ensure the provision of the services available on the Website. The Service Provider processes the data provided by the Data Subject for specified purposes only: fulfilling the order, home delivery, enabling invoicing, keeping in contact, and — if the Data Subject has subscribed to the newsletter — sending newsletters.

4.3.

The purpose of the automatically recorded data is to produce statistics, to technically improve the IT system, and to protect the rights of the Data Subject.

4.4.

The Service Provider shall not use the personal data provided for purposes other than those set out in these clauses. Disclosure of personal data to third parties or authorities — unless otherwise required by law with binding force — is only possible with the prior, express consent of the Data Subject.

4.5.

The Service Provider does not verify the personal data provided to it. The person providing the data is solely responsible for its accuracy.

5. Duration of Data Processing

5.1.

The processing of personal data provided during registration begins with the registration and lasts until its deletion upon request.

5.2.

Logged data — with the exception of the date of the last visit, which is automatically overwritten — is stored by the system for 6 months from the time of logging.

5.3.

The above provisions do not affect compliance with retention obligations laid down by law (e.g. accounting legislation).

5.4.

In the case of newsletters, personal data is processed until the Data Subject unsubscribes from the newsletter.

6. Persons with Access to the Data, Data Transfer, Data Processing

6.1.

The data may primarily be accessed by the Service Provider and the Service Provider's internal staff; however, they do not publish it or transfer it to third parties.

6.2.

For the operation of the underlying IT system, the fulfilment of orders and the settlement of accounts, the Service Provider may engage data processors (e.g. system operator, transport company, accountant).

Data Processors

6.3.

Eterna Steel Kft. processes the personal data of Data Subjects in a traceable manner and in compliance with the law. Beyond the above, we only transfer personal data to third parties with the Data Subject's consent, and only disclose it in response to official requests from authorities.

7. Rights of the Data Subject and Enforcement Options

7.1.

The Data Subject is entitled at any time to request information about the personal data concerning them processed by the Service Provider, and may modify it at any time.

7.2.

At the Data Subject's request, the Service Provider provides information about the data concerning them that it processes, the data processed by a data processor engaged by it or on its instructions, the source of the data, the purpose, legal basis and duration of the processing. The Service Provider provides the requested information in writing within 30 days of the submission of the request.

7.3.

The Data Subject may exercise their rights via the following contact details:

• Mailing address: 1182 Budapest, Kerékkötő út 52.
• Customer service: Tel.: +36 1 300-92-06
• Email: hello@trapezlemezes.hu

7.4.

The Data Subject is entitled at any time to request the correction or deletion of incorrectly recorded data. The Service Provider deletes the data within 3 working days of receiving the request, in which case it cannot be restored.

7.5.

The Data Subject may also request the blocking of their data. The Service Provider blocks personal data if the Data Subject so requests, or if, based on the information available, it can be assumed that deletion would harm the legitimate interests of the Data Subject.

7.6.

Under the Hungarian Information Act and the Hungarian Civil Code (Act V of 2013), the Data Subject may:

• turn to the Hungarian National Authority for Data Protection and Freedom of Information (1125 Budapest, Szilágyi Erzsébet fasor 22/c.; www.naih.hu), or
• enforce their rights before a court.

7.7.

If the Data Subject provided a third party's data during registration for the use of the service, or caused any damage while using the Website, the Service Provider is entitled to claim damages from the Data Subject.

8. Newsletter, Personalised Newsletter

8.1.

The Service Provider pays particular attention to the lawful use of the email addresses it processes, and therefore only uses them in the manner specified below to send informational or promotional emails.

8.2.

The processing of email addresses primarily serves to identify the Data Subject and to maintain contact during the fulfilment of orders and the use of services.

8.3.

In the event of changes to the services provided by the Service Provider or to the General Terms and Conditions, the Service Provider notifies the Data Subjects of the changes electronically, by email.

8.4. Newsletter

The Service Provider only sends emails containing advertisements or promotions (newsletters) to the email addresses provided during registration with the express consent of the Data Subject. The Data Subject may unsubscribe from the newsletter free of charge at any time by clicking the "Unsubscribe" button at the bottom of the newsletter.

8.5. Personalised Newsletter

Eterna Steel Kft. may also use users' personal data to send them personalised offers in the form of a newsletter. If the user unsubscribes from the newsletter, they will no longer receive personalised newsletters either.

9. Miscellaneous Provisions

9.1.

The Service Provider's system may collect data about the activity of Data Subjects, which cannot be linked with other data provided by the Data Subject at registration.

9.2.

Whenever the Service Provider intends to use the data provided for a purpose other than the purpose of the original data collection, it informs the Data Subject and obtains their prior, express consent.

9.3.

The Service Provider undertakes to ensure the security of the data and to take the technical measures that ensure that the recorded, stored and processed data is protected.

9.4.

The Service Provider reserves the right to unilaterally amend this Policy, subject to prior notification of the Data Subjects via the Website.