Data privacy statement

Bizkit International Ltd., the operator of the wowell.hu website, declares that it will do its utmost to ensure the lawful and secure processing of its customers' data in accordance with the GDPR regulation that will enter into force on 25 May 2018.

In this regard, we inform our Customers of the following:

1) Data controller's data

Data of the website operator (hereinafter referred to as the Data Controller):
Bizkit International Consulting Services Informatikai Tanácsadó és Szolgáltató Korlátolt Felelősségű Társaság
Address.
Tax number: 24888581-2-13
Community tax number: HU24888581
Company registration number: 13-09-193604
European Unique Identifier: HUOCCSZ.13-09-193604
Statistical reference number: 24888581-6202-113-13
Principal activity: Information technology consultancy
Managing directors: László Mészáros and Zsuzsanna Mészáros-Szikriszt
Bank account number: OTP Bank 11707031-20002224-00000000

2) Our customer service

We are at the disposal of our customers electronically.
By e-mail to info@bizkit.hu.
(Additional information: Our company is not obliged to appoint a data protection officer under Article 37 of the GDPR, so you can also contact our central contact details for data protection enquiries.)
If you have any questions about this notice or any other matter, please do not hesitate to contact us, we will be happy to answer any questions.

3) Our principles

Our Company follows the following principles in the processing of your data:
a) we process personal data lawfully and fairly and in a transparent manner for Data Subjects;
b) personal data are collected only for specified, explicit and legitimate purposes and are not processed in a way incompatible with those purposes;
(c) the personal data we collect and process are adequate, relevant and limited to what is necessary for the purposes for which they are processed;
(d) our Company takes all reasonable steps to ensure that the data we process is accurate and kept up to date where necessary. We will promptly delete or correct inaccurate personal data;
(e) personal data are kept in a form which permits identification for no longer than is necessary for the purposes for which the personal data are processed;
(f) we ensure the security of personal data against unauthorised or unlawful processing, accidental loss, destruction or damage by implementing appropriate technical and organisational measures.
We will therefore do our utmost to ensure that your data is processed securely and lawfully in order to comply with the law and to earn your trust.
Legal references
Our data processing principles comply with applicable data protection legislation, in particular the following:
Act CXII of 2011 - on the Right to Informational Self-Determination and Freedom of Information (Infotv.);
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Regulation (EC) No 95/46/EC (General Data Protection Regulation, GDPR);
Act V of 2013 - on the Civil Code (Civil Code);
Act C of 2000 - on Accounting (Accounting Act);
Act LIII of 2017 on the Prevention of Money Laundering and Terrorist Financing
and prevention of money laundering and terrorist financing (Pmt.);
Act CCXXXVII of 2013 - on Credit Institutions and Financial Undertakings
(Hpt.).
e-commerce services and information society services
Act CVIII of 2001 on certain aspects of electronic commerce and information society services - (Eker tv.)
Act C of 2003 on electronic communications - (Ehtv)
Act CLV of 1997 on Consumer Protection (Fogyv tv.)
Act CLXV of 2013 on complaints and notifications of public interest (Pktv.)
the Act on the Basic Conditions and Certain Restrictions of Commercial Advertising Activities of 2008.
évi XLVIII.(Grtv.)

4) The physical storage of the data

The Data Controller stores all personal data in the high-security cloud systems of the following Data Processors.

Our Company will use its best efforts to monitor and request information about the processing of the Data by the Data Processors connected to it.

We do not store any personal data on our own computers, mobile phones or mobile storage devices (e.g. thumb drives). This greatly reduces the risk of data loss or theft.

We use strong passwords on our computers and different passwords for each of our accounts with our Data Processor, greatly reducing the risk of hacking, and we use up-to-date and powerful anti-virus software.

5) Data processor(s)

Details of the service provider:

INTRONET Szoftverfejlesztő és Informatikai Szolgáltató Korlátolt Felelősségű Társaság
Registered office. 10105 Kenyet, Kenyetner Street, Kenyet 1. door 1.
Company registration number: 01-09-720082
Tax number: 13127600-2-41

Details of our partner providing electronic forms:

Smartsheet Inc.
Bellevue
500 108th Ave NE, #200
Bellevue, WA 98004 USA
(Primary data center: Frankfurt, Germany; secondary data center: Dublin, Ireland)

6) Scope and legal basis of personal data processed

The legal basis, purpose, nature of the data processed, duration of the processing and the data subjects concerned.
When you visit our website
Legal basis: legitimate interest of our company
Data processed.
Purpose of data processing: to provide statistical analysis to monitor and improve the quality of our service
Duration: 2 years
Data subject: Google Analytics (Google is the data processor)
Note: The data evaluated in the statistical analysis will not be identified with specific individuals. (That is, the data will only be analysed in bulk, in this sense completely anonymously.)
Detailed information on how Google Analytics works can be found at: https://developers.google.com/analytics/devguides/collection/analyticsjs/ cookie-usage
Profiling
The Data Controller does not profile visitors/registrants on the basis of their behaviour, interests or other data they provide, nor does it use automated offer generation, classification or decision-making.
We do not aim to identify our visitors, nor do we take any steps to do so.
You can, of course, unsubscribe from our list at any time with a single click - in which case we will also physically delete the data we hold about you from all our systems.
Alternatively, you can use any of our services without subscribing to our promotional emails.

7) Cookies (cookies)

What are cookies and how do we handle them?
Cookies are small data files (hereinafter "cookies") that are transferred to your computer through the use of the website by your website by being saved and stored by your internet browser.
General functions of cookies:
Collect information about visitors and their devices;
They remember visitors' individual preferences, which are used, for example, to determine the type of information that is stored on your computer and your devices.
They store information about visitors' preferences, e.g. when using online transactions, so that they do not need to be re-entered;
facilitate the use of the website;
provide a quality user experience.
In order to provide a personalised service, a small piece of data, called a cookie, is placed on the user's computer and read back during a subsequent visit. If the browser returns a previously saved cookie, the cookie provider has the possibility to link the user's current visit to previous visits, but only in relation to its own content.
Most of the most commonly used web browsers (Chrome, Firefox, Edge, Explorer, Opera, Safari, etc.) accept and allow the download and use of cookies by default, but it is up to you to modify your browser settings to refuse or block them, or to delete cookies already stored on your computer.
For more information on the use of cookies, please see the "help" section of each browser.
We have compiled information on how to turn off cookies in each browser at system level. Here is the list:
How to turn off cookies:
Chrome: https://support.google.com/accounts/answer/61416?hl=hu
Firefox: https://support.mozilla.org/hu/kb/sutik-informacio-amelyet-weboldalak-

Internet Explorer: https://support.microsoft.com/hu-hu/help/17442/windows-internet-
explorer-delete-manage-cookies#ie=ie-11
Safari: https://support.apple.com/kb/PH21411?viewlocale=en_US&locale=en_US
Edge: https://support.microsoft.com/hu-hu/help/10607/microsoft-edge-view-delete- browser-history
Opera: https://help.opera.com/Windows/10.20/hu/cookies.html
Some cookies do not require your prior consent. These include authentication cookies, multimedia player cookies, load balancing cookies, session cookies to help you customise the user interface, and user-centric security cookies.
Cookies that require your consent, where the processing starts as soon as you visit the site, will be notified to you and your consent will be requested at the start of your first visit.
Our Company does not use or allow cookies that enable third parties to collect data without your consent.
Acceptance of cookies is not mandatory, but our Company will not be liable if our website does not function as expected without the acceptance of cookies.
But of course, we strive to provide you with the best user experience without accepting cookies!
What cookies do we use?
System cookies
Legal basis: does not require consent
Description. The validity period of this type of cookie lasts until the end of the session (browsing), when the browser is closed, this type of cookie is automatically deleted from the computer or other device used for browsing.
Purpose of data processing.
Duration: browser session
Tracking cookies (third-party)
Legal basis: explicit consent
Description: The Data Controller also uses third party cookies from Google Analytics, Google Remarketing, Facebook Remarketing on its website. Google Analytics collects information about how visitors use the websites by using Google Analytics for statistical purposes. The data is used to improve the website and the user experience. These cookies will remain on the visitor's computer or other browsing device and browser until they expire or until they are deleted by the visitor.
Google Analytics, Google Remarketing, Facebook Remarketing
Purpose of data processing.
Duration: up to 180 days
Affected parties: Google, Facebook
For more information on third party cookies, please visit https://www.google.com/policies/technologies/types/ and for more information on data protection, please visit https://www.google.com/analytics/learn/privacy.html?hl=hu.
All our websites intentionally use cookie warnings where they are only triggered after explicit consent, e.g. remarketing cookies. So we won't bother you with remarketing ads without your request - respecting your needs!

8) Receiving messages containing advertising

What do you need to know about our processing for direct marketing and newsletter purposes?
You can give your consent to us using your personal data for marketing purposes by making a declaration during registration or by subsequently modifying your personal data stored in the newsletter and/or direct marketing registration interface (i.e. by clearly indicating your intention to consent). In this case, we will also process your data for the purposes of direct marketing and/or sending you newsletters and will send you advertising and other mailings, information and offers and/or newsletters (§ 6 of the Grtv) until your consent is withdrawn.
You may give your consent to direct marketing and newsletter together or separately or withdraw it/these free of charge and at any time.
In any case, the cancellation of the registration will be considered as a withdrawal of consent. Withdrawal of consent to data processing for direct marketing and/or newsletter purposes will not be construed as withdrawal of consent to data processing in relation to our website.
Other data processing issues
We may only transfer your data to the extent permitted by law and, in the case of our data processors, we will ensure that they cannot use your personal data for purposes other than those for which you have given your consent by imposing contractual conditions.
The courts, public prosecutors and other authorities (e.g. police, tax authorities, National Authority for Data Protection and Freedom of Information) may contact our Company to obtain information, data or documents. In such cases, we must comply with our obligation to provide information, but only to the extent strictly necessary to achieve the purpose of the request.
Our agents and employees who are involved in the processing of your personal data and/or the processing of your personal data are entitled to access your personal data to the extent provided in advance and subject to confidentiality obligations.
We will take appropriate technical and other measures to protect your personal data and to ensure its security, availability and to protect it from unauthorised access, alteration, damage or disclosure and any other unauthorised use.
We have organisational measures in place to control physical access, provide ongoing training to our employees and keep paper documents locked away with appropriate protection. Technical measures include encryption, password protection and anti-virus software. Please note, however, that data transmission via the Internet cannot be considered a fully secure transmission.
While we make every effort to ensure that our processes are as secure as possible, we cannot accept full responsibility for the transmission of data via our website, but we do maintain strict standards for the security of your data and the prevention of unlawful access to data received by us.
In relation to security issues, we ask for your help in carefully remembering your password to access our website and not to share this password with anyone.

9) Rights of Interest

The data subject may request information about the processing of his or her personal data, and may request the rectification, erasure or withdrawal of his or her personal data, except for mandatory data processing, and may exercise his or her right to data portability and objection in the manner indicated when the data were collected, or at the above contact details of the Data Controller, or:
The registered visitor may request information about the scope of personal data processed about him/her, the legal basis and the purposes of the processing, by sending a request to the following e-mail address: barathandras at gerillaoneletrajz.hu.
Upon request, the controller shall provide the requested information within a reasonable period of time, but no later than 30 days from the date of the request. In the event of a repeated request for information on the same subject within one year, the controller shall be entitled to reimbursement of the costs of the information.
To unsubscribe : at any time by sending an unsubscribe message to barathandras at the email address barathandras kukac gerillaoneletrajz.hu or by clicking on the unsubscribe link at the bottom of the outgoing emails.
To modify or clarify the information provided during registration: by clicking on the link at the bottom of the outgoing emails.
When you cancel your registration, the data you entered when you registered will be deleted from the live database. The following data will be retained by the Data Controller after termination of registration in order to comply with the legal obligation to prove the legal basis for the processing:
- registration email address- date of registration- date of termination of registration
right to information
The Data Controller shall take appropriate measures to provide data subjects with all the information referred to in Articles 13 and 14 of the GDPR and all the information referred to in Articles 15 to 22 and 34 of the GDPR concerning the processing of personal data in a concise, transparent, intelligible and easily accessible form, in clear and plain language.
We will provide the information within 14 days (but not more than 1 month) of the date of the request. The information will be provided free of charge unless you have already submitted a request for information in the current year for the same set of data. We will reimburse you for any charges you have already paid if we have processed the data unlawfully or if the request for information has led to a correction. We may only refuse to provide information in cases provided for by law, by indicating the legal position and by informing you of the possibility of judicial remedy or recourse to the Authority.
Our Company will notify you and all those to whom it has previously disclosed the data for processing purposes of the rectification, blocking, marking and erasure of personal data, unless the non-notification is not in your legitimate interest.
Right of access
The data subject shall have the right to obtain from the controller feedback as to whether or not his or her personal data are being processed and, if such processing is taking place, the right to access the personal data and the following information:
the purposes of the processing;
the purposes for which the personal data are being processed; the categories of personal data concerned;
the recipients or categories of recipients to whom or with whom the personal data have been or will be disclosed, including in particular recipients in third countries or international organisations;
the envisaged period of storage of the personal data;
the right to rectification, erasure or restriction of processing and the right to object;
the right to lodge a complaint with a supervisory authority;
information on the data sources;
the fact of automated decision-making, including profiling, and clear information on the logic used and the significance of such processing and its likely consequences for the data subject.
The controller shall provide the information within a maximum of one month from the date of the request.
Right to rectification of data
The data subject may request the correction of inaccurate personal data relating to him or her processed by the controller and the completion of incomplete data.
In most of our emails, we include a link to a data amendment form, which you can use to make the necessary changes yourself immediately.
Right to erasure
If one of the following grounds applies, the data subject has the right to obtain, at his or her request, the erasure of personal data relating to him or her by the Controller without undue delay:
the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
the data subject withdraws the consent on the basis of which the processing was carried out and there is no other legal basis for the processing;
the data subject objects to the processing and there is no overriding legitimate ground for the processing;
the personal data have been unlawfully processed;
the personal data have been processed in breach of a legal obligation under Union or Member State law applicable to the controller
deleted in order to comply with a legal obligation to which the controller is subject under EU law or Union law;
the collection of personal data is based on information society

Amendments to the Privacy Notice

Our Company reserves the right to unilaterally amend this Privacy Notice and will inform the data subjects accordingly.
Information on data processing is published on the following website: https://wowell.hu/adatvedelmi-nyilatkozat/
László Mészáros
Managing Director, Bizkit International Ltd.