Privacy Policy

Acceptance date: 2024-04-23

Data controller

Name: Pit Box Kft.

Registered office: 2600 Vác, Rózsa utca 3/A 1em. 2ajt.

Postal address, complaints management: 2600 Vác, Rózsa utca 3/A 1em. 2ajt.

Email: sales@fansbrands.com

Telephone number: +1 (213) 454-09-57, +44 20 4525 6774

Website: https://fansbrands.it/

Hosting Service Provider

Name: UNAS Online Kft.

Postal address: 9400 Sopron, Kőszegi út 14.

Email: unas@unas.hu

Phone number:

Name: Shopify Commerce Singapore Pte. Ltd.

Postal Address: 77 Robinson Road, #13-00 Robinson 77, Singapore 068896

E-mail:

Phone number:

Description of data processing activities carried out in the context of the operation of the webshop

This document contains all relevant information on data processing relating to the operation of the webshop in accordance with the General Data Protection Regulation (2016/679) of the European Union (hereinafter: Regulation or GDPR) and Act CXII of 2011 (hereinafter: Privacy Act).

Information on the use of cookies

What is a cookie?

When you visit the website, the Data Controller uses cookies. A cookie is a packet of information composed of letters and numbers sent to your browser from our website with the purpose of saving certain settings, facilitating the use of our website and helping us to collect relevant statistical information about our visitors.

Some cookies do not contain personal information and are not suitable for identifying individual users, but some cookies contain a unique identifier, i.e. a randomly generated secret numeric sequence, which will be stored by your device and therefore will ensure your identification. The operational duration of each cookie is reported in the relative description.

Legal context and legal bases of cookies:

The legal basis for the processing is your consent pursuant to Article 6, paragraph 1, letter a), of the Regulation.

Main characteristics of the cookies used by the website:

Strictly necessary cookies:

If you do not accept the use of cookies, some functions will not be available to you.

Cookies strictly necessary for operation: These cookies are essential for using the website and allow you to use the basic functions of the site. Without these cookies, some functions of the site will not be available to the user. The duration of these cookies is limited exclusively to the duration of the session.

Session Cookies: These cookies store the user's location, browser language and payment currency. They last until the browser is closed or for a maximum of 2 hours.

Age-restricted content cookies: These cookies record the approval of content prohibited for age reasons and that the interested party is over 18 years old; their duration lasts until the browser is closed.

Recommended products cookies: They record the list of products intended to be recommended, corresponding to the "Recommend to a friend" function. Their duration is 60 days.

Mobile version, design cookies: Detects the device used by the visitor and switches to full mobile view. Their duration is 365 days.

Acceptance Cookies: Upon arrival on the site, the user accepts the information on the storage of cookies in the appropriate window. Their duration is 365 days.

Exit Cookie #2: Allows the visitor to exit the site after 90 days, based on option #2. Their duration is 90 days.

Backend identification cookies: Identifier of the backend server that serves the site. Their duration lasts until the browser is closed.

Statistical cookies:

Google Analytics Cookies: Google Analytics is Google's analytics tool that allows website and application owners to gain a better understanding of their visitors' activities. The service can use cookies to collect information and compile statistical reports on website usage without identifying individual visitors to Google. Google Analytics primarily uses "__ga" cookies. In addition to reporting website usage statistics, Google Analytics, along with the advertising cookies described above, can be used to display more relevant ads in Google products (e.g. Google Search) and across the web.

Cookies to improve user experience: These cookies collect information about how the user uses the website, for example which pages the user visits most often or which error messages the website sends them. These cookies do not collect information that identifies the visitor, i.e. they work with completely generic and anonymous information. They use the data extracted from this information to improve the performance of the website. The duration of these cookies is limited exclusively to the duration of the session.

Referral cookies: They record the external websites from which the visitor has arrived at the site. Their duration lasts until the browser is closed.

Last viewed product cookies: They record the last product viewed by the visitor. Their duration is 60 days.

Last viewed category cookies: They record the last category viewed by the visitor. Their duration is 60 days.

Cart Cookies: They record the products added to the cart. Their duration is 365 days.

Smart Offers Cookies: They record the conditions for displaying smart offers (for example, if the visitor has already been on the site, if he has placed an order). Their duration is 30 days.

Marketing cookies:

Google Adwords Cookies When someone visits our website, the visitor's cookie identifier is added to the remarketing list. Google uses cookies - such as the NID and SID cookies - in Google products, for example, to personalize the ads displayed in Google search. Google uses these cookies, for example, to remember previous searches, interactions with certain advertisers' ads or search results, or visits to advertisers' websites. AdWords conversion tracking uses cookies. In order to track sales and other conversions from advertising, cookies are saved on the user's computer when the user clicks on the ad. Some common ways in which cookies are used are to target ads based on what is relevant to a particular user, to improve reporting on campaign performance, and to avoid showing ads the user has already seen.

Remarketing cookies: These cookies may appear to previous visitors or users when they browse other websites in the Google Display Network or search for terms related to its products or services.

Facebook Pixel (Facebook Cookies) The Facebook pixel is a code that allows you to compile a website conversion report, compile a targeted audience and provide the site owner with a detailed analysis of how visitors use the website. The Facebook pixel allows you to display personalized ads for site visitors on the Facebook platform. You can read Facebook's privacy policy here: https://www.facebook.com/privacy/explanation

Further information on deleting cookies is available at the following links:

Internet Explorer: http://windows.microsoft.com/en-us/internet-explorer/delete-manage-cookies#ie=ie-11

Firefox: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer

Mozilla: https://support.mozilla.org/hu/kb/weboldalak-altal-elhelyezett-sutik-torlese-szamito

Safari: https://support.apple.com/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Chrome: https://support.google.com/chrome/answer/95647

Edge: https://support.microsoft.com/hu-hu/help/4027947/microsoft-edge-delete-cookies

Data processed for the purposes of concluding and executing the contract

For the purposes of concluding and executing the contract, various cases of data processing may occur. We inform you that the processing of data relating to the management of complaints and the administration of warranty rights will only take place if you exercise one of these rights.

If you do not purchase via the webshop, but only come as a visitor, the provisions on data processing for marketing purposes may apply to you if you give us consent for marketing purposes.

The data processing activities for the purpose of concluding and executing the contract in detail are:

Contact

For example, if you contact us by email, contact form or telephone to request information about a product. A preliminary contact is not necessary, you can order from the webshop at any time without it.

Processed data

The data you provide when contacting us.

Data processing period

We process the data only until the end of the contact.

Legal basis for data processing

Your voluntary consent given to the Data Controller by contacting us. [Data processing pursuant to Article 6, paragraph 1, letter a), of the Regulation.

Website Registration

By storing the data provided at the time of registration, the Data Controller can provide a more convenient service (for example, the interested party will not have to provide their data for each purchase on the site). Registration is not a requirement to enter into a contract

Processed data

FansBRANDS® - Official Motorsport Fan Shop

During data processing, the Data Controller processes your name, address, telephone number, email address, the characteristics of the products purchased and the date of purchase.

Data processing period

FansBRANDS® - Official Motorsport Fan Shop Until consent is revoked.

Legal basis for data processing

Your voluntary consent given to the Data Controller by registering. [Data processing pursuant to Article 6, paragraph 1, letter a) of the Regulation]

Order Processing

Data processing activities during order management necessary for the execution of the contract.

Processed data

FansBRANDS® - Official Motorsport Fan Shop

During data processing, the Data Controller processes your name, address, email address, the characteristics of the products purchased, the order number and the date of purchase.

If you place an order in the webshop, data processing and provision of data is unavoidable for the execution of the contract.

Data processing period

FansBRANDS® - Official Motorsport Fan Shop

We process the data for 5 years in accordance with the civil statute of limitations.

Legal basis for data processing

Performance of the contract. [Data processing pursuant to Article 6, paragraph 1, letter b), of the Regulation.

Issuing the invoice

Data processing is carried out for the purpose of issuing an invoice in accordance with the law and fulfilling the obligation to keep an accounting document. In accordance with paragraphs (1)-(2) of Article 169 of the Accounting Act, economic organizations must keep accounting documents that directly and indirectly support accounting records.

Processed data

FansBRANDS® - Official Motorsport Fan Shop Name, address, email address, telephone number.

Data processing period

According to paragraph (2) of Article 169 of the Accounting Act, issued invoices must be kept for 8 years from their issuance.

Legal basis for data processing

Pursuant to paragraph (1) of Article 159 of Act CXXVII of 2007 on Value Added Tax, issuing an invoice is mandatory, and pursuant to paragraph (2) of Article 169 of the Accounting Act, issued invoices must be kept for 8 years. [Data processing pursuant to Article 6, paragraph 1, letter c) of the Regulation.

Processing of data relating to the delivery of products

The data processing is carried out for the purpose of delivering the ordered product.

The data processed

FansBRANDS® - Official Motorsport Fan Shop Name, address, email address, telephone number.

Data processing period

FansBRANDS® - Official Motorsport Fan Shop

The data processing is carried out in order to deliver the ordered product.

Legal basis for data processing

Execution of the contract. [ Recipients and data controllers for the delivery of the products

Recipient's name: GLS General Logistics Systems Hungary Csomag-Logisztikai Kft.

Registered office of the recipient: 2351 Alsónémedi, GLS Európa u. 2.

Recipient's phone number: 06-29-88-67-00

Recipient email address: info@gls-hungary.com

Recipient's website: https://gls-group.eu/HU/hu/home

The courier participates in the delivery of the ordered product based on the contract stipulated with the Data Controller. The courier processes the data provided to it in accordance with the privacy policy available on its website.

Recipient Name: UPS

Recipient's registered office: Atlanta, Egyesült Államok

Recipient's phone number: +36 1 877 0000

Recipient email address: https://www.ups.com/upsemail/input?loc=hu_HU

Recipient's website: https://www.ups.com/

The courier service participates in the delivery of the ordered product based on the contract entered into with the Data Controller. The courier processes the data provided to it in accordance with the privacy policy available on its website.

Warranty rights management

As regards guarantee rights, we must proceed in accordance with Decree 19/2014. (IV. 29.) of the Minister of National Economy, which determines the methods of managing such rights.

Processed data

FansBRANDS® - Official Motorsport Fan Shop

As regards guarantee rights, we must proceed in accordance with Decree 19/2014. (IV. 29.) of the Minister of National Economy.

Under the Decree, we must take note of the warranty or guarantee claim notified to us, in which we record:

name, address and declaration of consent to the processing of data indicated in the register pursuant to the Decree,
name and purchase price of the material object sold under the contract concluded between us, c. date of execution of the contract,
date of notification of defect,
description of the defect,
the right you wish to assert under the guarantee or warranty right, and
the way in which the warranty claim was handled or the justification for the refusal of the right you intend to assert on the basis of the claim.

If we take delivery of the Product purchased by you, we must issue an acknowledgement of receipt, which must include the following:

your name and address,
data necessary for the identification of the object,
the date of receipt of the item and
the date on which you will be able to accept the repaired item.

Data processing period

FansBRANDS® - Official Motorsport Fan Store

The company is obliged to keep a record of the warranty or guarantee claim submitted by the consumer for three years from the registration and to submit it upon request of the supervisory authority.

Legal basis for data processing

The legal basis for data processing is compliance with the legal obligations set out in Legislative Decree 19/2014 (IV.

29.) of the Minister of National Economy [paragraph (1) section 4. and paragraph (1) section 6] [Data processing pursuant to Article 6, paragraph 1, letter c) of the Regulation].

Handling of other consumer protection complaints

The data processing will be carried out for the purpose of handling complaints in the field of consumer protection. If you contact us with a complaint, data processing and provision of data will be unavoidable.

Processed data

FansBRANDS® - Official Motorsport Fan Shop

Buyer's name, phone number, email address, content of the complaint.

Data processing period

FansBRANDS® - Official Motorsport Fan Shop

Consumer complaints are retained for 3 years under the Consumer Protection Act.

Legal basis for data processing

You may voluntarily decide whether to submit a complaint to us, but if you do so, we are obliged to retain your complaint for a period of 3 years pursuant to paragraph (7) of Article 17/A of the CLV Act 1997 on Consumer Protection [Data processing pursuant to Article 6(1)(c) of the Regulation].

Data processed in relation to the verifiability of consent

When registering, ordering or subscribing to the newsletter, the computer system stores the computer data relating to consent for evidentiary purposes.

Processed data

FansBRANDS® - Official Motorsport Fan Shop

The date of consent and the IP address of the data subject.

Data processing period

FansBRANDS® - Official Motorsport Fan Shop

In compliance with the provisions of the law, consent must be verifiable subsequently, therefore the data is retained for the limitation period following the cessation of the treatment.

Legal basis for data processing

This obligation is provided for by Article 7, paragraph 1, of the Regulation [Processing of data pursuant to Article 6, paragraph 1, letter c), of the Regulation].

Processing of data for marketing purposes Processing of data relating to sending newsletters

The data is processed for sending newsletters.

Processed data

FansBRANDS® - Official Motorsport Fan Shop Name, address, email address, telephone number.

Data processing period

FansBRANDS® - Official Motorsport Fan Shop

Until the interested party revokes their consent.

Legal basis for data processing

Your voluntary consent given to the Data Controller by registering for the newsletter. [Data processing pursuant to

Article 6, paragraph 1, letter a) of the Regulation]

Processing of data relating to the sending and display of personalized ads

The data processing is carried out for the sending of advertising content based on the interested party's interest range.

Processed data

FansBRANDS® - Official Motorsport Fan Shop Name, address, email address, telephone number.

Data processing period

FansBRANDS® - Official Motorsport Fan Shop Until consent is revoked.

Legal basis for data processing

Your voluntary and separate consent given to the Data Controller at the time of data collection. [Data processing pursuant to

Article 6, paragraph 1, letter a) of the Regulation]

Remarketing

The data processing is carried out as a remarketing activity, enabled by cookies.

Processed data

FansBRANDS® - Official Motorsport Fan Shop

Data processed by cookies as defined in the cookie policy.

Data processing period

The period of data retention by the cookie in question. Further information is available here: General information on Google cookies: https://www.google.com/policies/technologies/types/ Information on Google Analytics: https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage?hl=hu Information on Facebook:

https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen

Legal basis for data processing

Your voluntary consent given to the Data Controller by using the website. [Data processing pursuant to Article

6(1)(a) of the Regulation]

Prize competition

The data processing is carried out for the purpose of carrying out the prize competition.

Processed data

FansBRANDS® - Official Motorsport Fan Shop Name, email address, telephone number.

Data processing period

FansBRANDS® - Official Motorsport Fan Shop

The data will be deleted after the competition closes, with the exception of the winners' data, which the Data Controller is obliged to keep for 8 years under the Accounting Act.

Legal basis for data processing

Your voluntary consent given to the Data Controller by using the website. [Data processing pursuant to Article

6(1)(a) of the Regulation]

Further data processing activities

If the Data Controller intends to carry out further data processing activities, it will provide preliminary information on the actual circumstances of the data processing (legal context and legal basis of data processing, scope of data processed, period of data processing).

Recipients of personal data Activities of data controllers for the storage of personal data

Name of the controller: UNAS Online Kft.

Contact details of the data controller:

Telephone number of the data controller:

E-mail of the controller : unas@unas.hu

Registered office of the controller: 9400 Sopron, Kőszegi út 14.

Controller's website: unas.hu

The Data Processor stores personal data on the basis of a contract with the Data Controller. The Data Processor is not authorized to access personal data.

Name of the data controller: Shopify Commerce Singapore Pte. Ltd.

Contact details of the data controller:

Telephone number of the data controller:

Email of the data controller:

Registered office of the data controller: 77 Robinson Road, #13-00 Robinson 77, Singapore 068896

Data Controller Website: https://www.shopify.com/

The Data Processor stores personal data on the basis of a contract with the Data Controller. The Data Processor is not authorized to access personal data.

Activities of data controllers related to sending newsletters

Name of the company operating the newsletter system: UNAS Online Kft.

Registered office of the company operating the newsletter system: 9400 Sopron, Kőszegi út 14.

Telephone number of the company that manages the newsletter system:

Email address of the company managing the newsletter system: unas@unas.hu

Website of the company that manages the newsletter system: unas.hu

The Data Processor participates in the sending of newsletters based on a contract concluded with the Data Controller. As part of this participation, the Data Processor processes the name and address of the data subject, to the extent necessary for sending the newsletter.

Activities of the Data Controllers related to sending newsletters

Name of the company that manages the newsletter system: ActiveCampaign

Registered office of the company that manages the newsletter system: 150 North Michigan Avenue Suite 1230 Chicago, IL 60601 United States

Telephone number of the company that manages the newsletter system: +1 (773) 904-0945

Email address of the company that manages the newsletter system: privacy@activecampaign.com

Website of the company that manages the newsletter system: https://www.activecampaign.com

Activities of the Data Controllers related to sending newsletters

Name of the company that manages the newsletter system: The Marketer

Registered office of the company managing the newsletter system: Romania - Badea Cartan 66, District 2, Bucharest,

Office 3, Zone II, Room 2, Bl. 40, Sc.A, Et.5, Ap.26,

Telephone number of the company that manages the newsletter system: +40724470432

Email address of the company that manages the newsletter system: iam@themarketer.com

Website of the company that manages the newsletter system: https://themarketer.com/

Activities of the Data Controllers related to sending newsletters

Name of the company that manages the newsletter system: Klavyio

Registered office of the company that manages the newsletter system: 49 Southwark Bridge Rd London SE1 9HH, UK Telephone number of the company that manages the newsletter system:

Email address of the company that manages the newsletter system: sales@klaviyo.com

Website of the company that manages the newsletter system: https://www.klaviyo.com/

The Data Processor participates in sending newsletters by virtue of a contract concluded with the Data Controller. As part of this participation, the Data Processor processes the name and address of the data subject, to the extent necessary for sending the newsletters.

Processing of accounting data

Name of the controller: P-Kontroll Bt.

Registered office of the Controller: 2600 Vác, Pap Béla u. 10.

Telephone number of the data controller: +36-27/316-210

E-mail of the controller: konyveles@pkontroll.hu

Controller's website : www.pkontroll.hu

The Processor participates in accounting on the basis of a written contract with the Controller. As part of such participation, the Processor processes the name and address of the data subject, to the extent necessary for accounting records, for the period in accordance with paragraph (2) of Article 169 of the Accounting Act, and deletes them immediately thereafter.

Activities of the data controllers relating to billing data

Name of the data controller: Innovip.hu Kft.

Registered office of the data controller: 6723 Szeged, Gát utca 7/B.

Telephone number of the data controller: +36 20 367 6755

E-mail of the controller : iroda@innovip.hu

Controller's website : https://www.innovip.hu/

The Processor participates in the recording of accounting documents on the basis of a written contract concluded with the Controller. As part of such participation, the Processor processes the name and address of the data subject, to the extent necessary for accounting records, for the period in accordance with paragraph (2) of Article 169 of the Accounting Act, and deletes them immediately thereafter.

Activities of the data controllers relating to billing data

Name of data controller: Microsoft Dynamics 365 Business Central

Data controller's registered office: Microsoft Building 92, NE 36th St, Redmond, WA 98052, USA Data controller's telephone number: +1 425-882-8080 Data controller's email:

Controller's website : https://www.microsoft.com

The Data Processor participates in the recording of accounting documents on the basis of a written contract concluded with the Data Controller. As part of this participation, the Data Processor processes the name and address of the data subject, to the extent necessary for accounting records, for the period in accordance with paragraph (2) of Article 169 of the Accounting Act, and deletes them immediately thereafter.

Activities of the data controllers relating to billing data

Name of the data controller: Odoo SA

Registered office of the data controller: Chaussée de Namur, 40 1367 Grand Rosière Belgium

Telephone number of the data controller: +32 2 616 8002

Data controller email : privacy@odoo.com

Controller's website : https://www.odoo.com/

Activities of the data controllers relating to billing data

Name of the data controller: Billingo Technologies Zrt.

Registered office of the data controller: 1133 Budapest, Árbóc utca 6. Telephone number of the data controller: +36-1/500-9491

Controller 's email : hello@billingo.hu

Controller's website : https://www.billingo.hu/

Activities of data processors relating to the operation of the CRM system

Name of the data controller: UNAS Online Kft.

Registered office of the controller: 9400 Sopron, Kőszegi út 14.

Telephone number of the data controller:

Data controller email: unas@unas.hu

Controller's website: unas.hu

The Data Processor participates in the registration of orders based on a contract concluded with the Data Controller. As part of this participation, the Data Processor processes the data subject's name, address, telephone number, order numbers and dates, within the civil statute of limitations.

Activities of data controllers relating to the operation of the CRM system

Name of the controller: Innovip.hu Kft.

Registered office of the data controller: 6723 Szeged, Gát utca 7/B.

Telephone number of the data controller: +36 20 367 6755

Email of the controller : iroda@innovip.hu

Controller's website : https://www.innovip.hu/

Activities of data controllers relating to the operation of the CRM system

Name of the data controller: easySales

Registered office of the controller: Locotenent Stefan Marinescu 9, emelet 6, Bucharest - Romania

Telephone number of the data controller: +36213007056

Email of the data controller : contact@easy-sales.com

Controller's website: https://easy-sales.com/hu

Activities of data controllers relating to the operation of the CRM system

Name of the controller: KOMPaaS.tech Kft

Registered office of the data controller: 1114 Budapest, Kemenes utca 8. félemelet 3. - Magyarország

Telephone number of the data controller: +36 1 4900999

Data Controller email: support@mcntele.com Data Controller website: https://kompaas.hu/ The Data Controller participates in the registration of orders based on a contract concluded with the Controller. As part of this participation, the Data Controller processes the data subject's name, address, telephone number, order numbers and dates, within the civil statute of limitations.

Activities of data controllers relating to the operation of the CRM system

Name of the controller: VIVnetworks.com sro

Registered office of the controller: Jungmannovo náměstí 18, 110 00 Prague 1

Telephone number of the data controller: +420 734 447 050

Data controller email: podpora@vivnetworks.com

Controller's website : https://www.vivnetworks.com/hu/

Activities of data controllers relating to the operation of the CRM system

Name of the data controller: SC DECATHLON SRL

Registered office of the data controller: Militari Shopping, Bulevardul Iuliu Maniu 546-560, București 060032 Romania

Telephone number of the data controller: +40 21 408 5000

Email of the data controller: contact@decathlon.ro

Website of the controller: https://www.decathlon.ro/

Activities of data controllers relating to the operation of the CRM system

Name of the data controller: Amazon.com

Data Controller's registered office: 410 Terry Ave N, Seattle 98109, WA

Telephone number of the data controller: +1 (206) 266-4064

Data Controller Email : copyright@amazon.com

Controller's website : https://www.amazon.com/

Activities of data controllers relating to the operation of the CRM system

Name of the controller: Pepita Group Zrt.

Registered office of the data controller: 5520 Szeghalom, belterület hrsz 2619/58

Telephone number of the data controller: +36 1 510 07 60

Email of the controller: segitunk@pepita.hu

Controller's website: https://pepita.hu/

Processing of data relating to online payment

Name of the data controller: Worldline SA

Registered office of the data controller: Tour Voltaire, 1 Place des Degrés, CS 81162, 92059 Paris la Défense Cedex Telephone number of the data controller:

Data controller's email:

Website of the data controller : https://www.six-payment-services.com/

The online payment service provider participates in the processing of online payments by virtue of a written contract with the Data Controller, for the purposes of which the data is transferred to the online payment service provider during the purchase process. As part of this participation, the online payment service provider processes the name and billing address of the data subject, as well as the order number and date, in accordance with its privacy policy.

Purpose of data transfer: To provide the online payment service provider with the transaction data necessary for the payment transaction initiated at the online payment service provider and related to the purchase.

Legal basis: execution of the contract stipulated between the user and the Data Controller pursuant to Article 6, paragraph 1, letter b), of the Regulation, which provides for payment by the buyer and for which, in the case of online payment, the transfer of data pursuant to this section is necessary.

Name of the data controller: Stripe

Registered office of the data controller : 354 Oyster Point Boulevard. South San Francisco, CA 94080 Telephone number of the data controller: 888-926-2289 Email of the data controller:

Website of the data controller : https://stripe.com/

Program "Reliable Store" (Megbízható bolt)

For the purpose of the operation of the Megbízható Bolt program of www.arukereso.hu (Online Comparison Shopping Kft. 1074 Budapest, Rákóczi út 70-72., tax code: 24868291-2-42, company registration number: 01-09-186759), the buyer's e-mail address and the name of the purchased product will be transmitted to arukereso.hu . The purpose of data transfer: requesting and displaying customer feedback. Online Comparison Shopping Kft. processes the personal data thus transferred in accordance with the Data Processing and Privacy Policy of www.arukereso.hu. With regard to the data transferred in this context, Online Comparison Shopping Kft. qualifies as the controller.

Transfer of data to third countries

FansBRANDS® - Official Motorsport Store

The following processor is based outside the European Union and processes data outside the European Union. The

The data controller is a member of the Privacy Shield List, which means that it guarantees that data is processed with the guarantees provided in the European Union. More information is available here: www.privacyshild.gov The Rocket Science Group LLC (MailChimp)

Cím: 1 North Dearborn Street, 5th Floor Chicago, IL 60602 https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active

Your rights during data processing

During the period of data processing, you are entitled to the following rights pursuant to the provisions of the Regulation:

right to withdraw consent

access to personal data and information relating to data processing right to rectification limitation of data processing, right to erasure right to object right to data portability.

The exercise of your rights requires your identification and the Data Controller must necessarily communicate with you. Therefore, for identification purposes, it will be necessary to provide your personal data (but only your data already processed by the Data Controller can serve as a basis for identification), and your complaints regarding data processing will be available in your email inbox within the period specified in this Complaints Privacy Policy. If you have been our customer and wish to identify yourself for the purposes of complaint handling or warranty management process, please also enter your order ID for identification. This way we can identify you as our customer.

The Data Controller will respond to complaints regarding data processing within and no later than 30 days.

Right to withdraw consent

You have the right to withdraw your consent to data processing at any time, in which case the data provided will be deleted from our system. However, please note that in the case of an order that has not yet been processed, withdrawing your consent may result in the inability to complete the delivery of the order. Furthermore, if the purchase has already been completed, based on accounting rules, we cannot delete the invoice date from our systems and, if there is a residual amount not paid by you to us, we can process your data even if you withdraw your consent based on legitimate interest in debt collection.

Access to personal data

You have the right to obtain from the Data Controller confirmation as to whether or not your personal data is being processed and, where that is the case, you have the right to:

access the personal data processed and receive information from the Data Controller regarding:

the purposes of data processing

the categories of personal data processed

information on the recipients or categories of recipients to whom the personal data have been or will be disclosed;

the envisaged period for the processing of personal data, or, if that is not possible, the criteria used to determine that period;

the existence of the right to request from the Data Controller the rectification or erasure of personal data or the restriction of the processing of personal data.

personal data or the restriction of the processing of personal data concerning you or to object to such processing; the right to lodge a complaint with a supervisory authority;

where the personal data are not collected from the data subject, any available information as to their source;

the existence of automated decision-making, including profiling, and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you.

The exercise of these rights may be aimed at ascertaining and verifying the lawfulness of data processing, therefore, in the event of multiple requests for information, the Data Controller may request fair compensation in exchange for the provision of the information.

Access to your personal data is granted by the Data Controller by sending the processed personal data and information by email after your identification. If you have registered, we provide you with access so that you can view and control your personal data by logging into your user account.

Please indicate in your request that you are requesting access to your personal data or information about data processing.

Right to rectification

You have the right to obtain from the Data Controller without delay the rectification of inaccurate personal data concerning you.

Right to restriction of data processing

You have the right to obtain from the Data Controller the limitation of processing if one of the following cases occurs:

the accuracy of the personal data is contested by the user, for a period enabling the Data Controller to verify the accuracy of the personal data, and if the accuracy of the data can be immediately established, then the restriction will not be carried out

no restrictions will be made;

the data processing is unlawful and the user opposes the erasure of personal data for any reason (for example because the data is necessary for the possible assertion of a right) and requests instead the limitation of their use;

the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims, or

if the data subject has objected to the processing of the data, but the legitimate interest of the Data Controller can also serve as a justification, the processing of the data must be restricted until it is possible to establish whether the legitimate reasons of the Data Controller prevail over the legitimate reasons indicated by him.

In case of restriction of processing, such personal data will be processed, with the exception of storage, only with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. You will be informed by the Data Controller before the restriction of processing is lifted (at least 3 working days before the restriction is lifted).

Right to erasure - right to be forgotten

You have the right to obtain from the Data Controller the erasure of personal data concerning you without undue delay where one of the following grounds applies:

the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed by the Data Controller;

you withdraw the consent on which the processing is based and there is no other legal ground for the processing;

you object to the processing on the basis of legitimate interest and there are no overriding legitimate grounds (i.e. legitimate interest) for the processing,

the personal data have been unlawfully processed by the Controller, where this has been established on the basis of the complaint, the personal data must be erased for compliance with a legal obligation in Union or Member State law to which the Controller is subject.

Where the Controller, on the basis of any legitimate grounds, has made personal data public and is obliged to erase them for one of the above reasons, the Controller, taking into account available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform other Controllers processing the personal data that the user has requested the erasure by such Controllers of any links to, or copy or replication of, those personal data.

Erasure does not apply to the extent that processing is necessary:

for the exercise of the right to freedom of expression and information;

or for compliance with a legal obligation which requires processing under Union or Member State law to which the Controller is subject (the processing of data in the context of invoicing is one of these cases, as the retention of the invoice is required by law), or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller; for the establishment, exercise or defence of legal claims (for example, if the Controller has outstanding claims against you, or if a complaint management procedure is underway).

Right to object

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on legitimate interests. In this case, the Data Controller will no longer process the personal data unless the Data Controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.

Where personal data are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. If you object to processing for direct marketing purposes, the personal data will no longer be processed for such purposes.

Right to data portability

If the data processing is carried out in an automated manner or if the data management is based on your voluntary consent, you have the right to request from the Data Controller the data you have provided to the Data Controller, which the Data Controller will send in xml, JSON or csv format to your disposal and, if this is technically feasible, you can request that the Data Controller forwards the data in this form to another data controller.

Automated decision making

You have the right not to be subject to a decision based solely on automated processing (including profiling) which produces legal effects concerning you or similarly significantly affects you. In such cases, the Data Controller shall implement suitable measures to safeguard the data subject's rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express his or her point of view and to contest the decision.

The above does not apply if the decision

is necessary for the conclusion and performance of the contract between the user and the data controller; is authorised by Union or Member State law to which the data controller is subject and which also provides for suitable measures to safeguard the user's rights and freedoms and legitimate interests; or is based on the user's explicit consent.

Reporting to the data protection registration system

Under the Data Protection Act, the Data Controller must report its data processing activities to the Data Protection Registration System. This reporting obligation expired on 25 May 2018.

Registration number with the NAIH (Hungarian National Authority for Data Protection and Freedom of Information) before 25 May 2018:

Data protection registration number : NAIH-103878/2016

Data security measures

The Data Controller declares to have adopted adequate security measures to protect personal data from unauthorized access, alteration, transmission, disclosure, cancellation or destruction, as well as from accidental destruction and damage, as well as from inaccessibility due to changes in the technology used.

The Data Controller will do everything within its organizational and technical possibilities to ensure that its Data Processors also adopt adequate security measures when working with your personal data.

Remedies

If, in your opinion, the Controller has violated a provision of the law relating to data processing or has not complied with your request, in order to put an end to the alleged unlawful data processing, you can initiate an investigation procedure with the Hungarian National Authority for Data Protection and Freedom of Information (postal address: H-1363 Budapest, Pf. 9., e-mail: ugyfelszolgalat@naih.hu, telephone numbers: +36 (30) 683-5969 +36 (30) 549-6838; +36 (1) 391 1400).

We also wish to inform you that, in the event of a violation of the provisions of law regarding data processing, or in the event that the Data Controller has not fulfilled any of its obligations.

The Data Controller has not followed up on one of your requests, you can file a civil lawsuit against the Data Controller in court.

Changes to the Privacy Policy

The Data Controller reserves the right to change this data management policy so as not to affect the purposes and legal basis of data processing. By using the website after the change comes into force, you agree to the modified Privacy Policy.

If the Data Controller wishes to carry out further processing of the collected data for a purpose other than that of their collection, he will inform you, before starting any further data processing, of the purpose of the data processing and information on the following:

the envisaged period for the processing of personal data, or, if that is not possible, the criteria used to determine that period;

the existence of your right to ask the Data Controller for access to personal data, rectification or erasure of the same or restriction of processing of personal data concerning you, or to object to such processing in the case of processing for reasons of legitimate interest, or to request the guarantee of data portability in the case of processing for reasons of consent or contractual relationship;

in the case of data processing based on consent, the possibility to withdraw consent at any time, the right to lodge a complaint with a supervisory authority;

whether the provision of personal data is based on legislation or a contractual obligation or is a prerequisite for the conclusion of a contract, as well as whether you are obliged to provide the personal data and what possible consequences failure to provide the data may have;

Data processing may only be started subsequently and, in the case of data processing on the basis of consent, your consent to data processing will also be required in addition to the provision of the information above.

Privacy Policy

Privacy Policy

Data controller

Your cart

F1™ Store

Information

Extra

Choose options