Privacy Policy
THE DATA MANAGER
Service provider name: MAG Instruments Kft.
Service Provider’s registered office: 9022 Győr, Új kapu utca 5/A. 1. emelet 3.
Address for correspondence: 9022 Győr, Új kapu utca 5/A. 1. emelet 3.
Company registration number: 08 09 030794
Phone number: +36-20-995-0520
E-mail address: maghandpan@gmail.com
CONTACT DETAILS OF THE DATA PROTECTION OFFICER
Data Protection Officer of MAG Instruments Kft.: CEO
PURPOSES AND LEGAL GROUNDS FOR PROCESSING
Facebook page.
Billing. To do this, we ask for your billing name and address, and email address.
Contacting us by phone. You will probably introduce yourself, so we will also get your name. We will process this information on the basis of your consent, so that we can call you back if we are unable to answer the phone. If we do not have a business relationship, we will not store your phone number and associated name.
Cookies: A cookie is a bundle of information consisting of letters and numbers that websites usually send to your browser in order to save certain settings, facilitate the use of the website and help us collect some relevant, statistical information about visitors. Cookies do not contain any personal information and are not used to identify an individual user. Cookies often contain a unique identifier – a secret, randomly generated sequence of numbers – that is stored on your device. Some cookies are deleted after you close the website, and some are stored on your computer for a longer period of time.
You can prevent all activity related to cookies, you can delete data files placed during your previous visits, the exact way to do this is explained in your browser’s instructions, which can be found on the following pages:
Managing cookies and website data in Chrome,
Information about cookies for Firefox,
Managing cookies in Internet Explorer and Edge.
Some browsers also allow you to automatically delete your browsing data each time you close them. You can read about this here.
When you download certain parts of this website, the visit analysis software we use (Google Analytics, operated by Google Inc. (“Google”)) automatically places small data files on your computer, which in some cases may contain your personal data. You will also be notified of this when you first visit the site, in accordance with current legislation, and we will ask for your consent to do so. The data files are necessary for the operation of certain functions of the website, and information obtained from previous data files during your visits will be transferred to the operator. The exact names of these data files (_ga, _gat, _gid) and their functions are described on this page. Google Analytics stores the IP address received via the browser anonymously and cannot link it to the user. The data is kept for 26 months, which period starts again if a new event occurs in relation to the user (e.g. starts a new session).
If you want to prevent Google Analytics from adding your visits to any website to its analytics, use this extension (available for any browser).
Google also uses cookies (“DSID”, “IDE”, “NID”) which are used to link a user’s activities on different devices if they have previously logged into their Google account on them. This is done in order to align the ads that are displayed to the user across devices and to measure conversion events. If you don’t want Google ads to be displayed to you in a coordinated cross-device way, you can turn off ad personalisation in Ads Settings.
If you’ve previously received a cookie from Facebook – either because you have an account or because you’ve visited facebook.com – your browser will send information about that cookie when you visit a site with a “Like” button or other social plug-in (like this website). More information about this can be found here.
We also use a Facebook conversion pixel on our website for marketing purposes, and we ask for your consent to accept this pixel when you first visit the site. The data relating to this will also be sent to Facebook. You can find more information about Facebook cookies on this page.
If you comment on the blog, your consent will be stored in my website cookie with your name and email address so that you don’t have to type it again on a subsequent visit (you must tick the checkbox to do this).
Our newsletter software uses multiple cookies to store language data, accelerate performance, and transmit analytics.
Share buttons and embedded content (e.g. YouTube videos) on the site may also place a cookie on your device.
LIST OF COOKIES USED ON THE SITE
This website uses cookies. This website, like many other sites, uses HTTP cookies to work better. If you do not accept all cookies, some parts of the site may not function properly.
Cookies are small text files that make websites work more efficiently.
Cookies are stored in your browser. Some cookies are necessary for the site to work. We need your permission to send cookies.
Some cookies are provided by third parties.
If you wish to change your preferences later, you can do so here, after opening the detailed list of cookies.
Your consent is valid for the following domains: maginstruments.com
WITHDRAWAL OF CONSENT
Our processing is based on consent (see above) for the following activities:
sending newsletters containing advertising
contacting interested parties via the contact form on the website
operation of a Facebook page
Provision of visitor statistics
contact by telephone
Consent can be withdrawn at any time, in the same simple way as it was given.
You can withdraw your consent by clicking on the unsubscribe link at the end of the newsletter.
For Facebook pages, you can withdraw your consent by unliking the page, and for private messages and comments, by deleting them.
For other data processing operations based on consent, please send a short message to maghandpan@gmail.com.
Processing prior to withdrawal of consent is considered lawful.
CONTRACT AND LEGAL OBLIGATION
We have a legal obligation to keep billing records and issue invoices. If the requested data is not provided by our client, it is impossible for us to provide the service.
Once our products/services have been ordered, a contract is established with the customer, either in writing or verbally. Our contracts include personal data such as the name, address or telephone number of the Customer. To conclude a contract, we need to know this information, we need to know who the other party is and where we can reach them. Without knowing this information, the contract is not considered concluded and the service cannot be provided.
IDENTIFICATION OF LEGITIMATE INTEREST
We process the contact details and names of our business partners’ contact persons on the basis of legitimate interest. We have received this personal data from the data subjects themselves in the course of our previous correspondence and meetings over many years, and the data subjects have already been informed of the confidentiality of the data.
DURATION OF DATA STORAGE
Contact form (name, email address, telephone number) – until the end of the business relationship, but reviewed every six months
Newsletter subscription (name, email address) – until unsubscribed
Facebook page (name, post) – until page deletion, until revocation of page by the data subject, until data subject’s deletion action
Billing name and address – for the period required by law
Business partner details (name, email address, phone number) – until business relationship is established, until request for cancellation
cookies from maginstruments.com website – until the cookies expire or until the user deletes them from his/her browser
GA Site Statistics – 26 months – 26 months
SECURITY MEASURES
We have appropriate security measures in place to protect personal data against, among other things, unauthorized access, disclosure or alteration.
In designing appropriate security measures, we have taken into account the state of the art, the nature, scope, context and purposes of the processing, and the varying likelihood and severity of the risk to the rights and freedoms of natural persons.
ADDRESSES
Our company uses data processors to carry out certain tasks.
Remote services:
Elin.hu Ltd.
Elin.Hu.HU. 4
(Access to the full content of the website, forwarding of emails to your own domain email address.)
Receiving and sending emails:
Gmail – Google Inc., Mountain View, California, USA
(Access to the mailing and all its data.)
Subscribe to the newsletter:
The Rocket Science Group, LLC
675 Ponce de Leon Ave NE
Suite 5000
Atlanta, GA 30308 USA
Privacy Policy: https://mailchimp.com/legal/privacy
(Access to subscriber name, email address.)
Facebook page:
Meta Platforms, Inc.Menlo Park, California, USA
Privacy Policy: https://www.facebook.com/about/privacy/update
(Access to user name, comment.)
Facebook pixel:
Meta Platforms, Inc.
Menlo Park, California, USA
(Access to HTTP header [IP address, page location, redirect, user agent], pixel ID, Facebook cookie.)
Google Analytics:
Google Inc., Mountain View, California, USA
(Access to anonymised, non-personally identifiable IP address of website visitors.)
TRANSFER TO A THIRD COUNTRY
The only third country to which data is transferred is the United States of America. An adequacy decision with the US was issued on 12 July 2016 (https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/eu-us-privacy-shield_en).
On the basis of the above, the Data Controller declares that the transfer is based on the European Commission’s adequacy decision for the USA, the relevant European Commission decision is available here:
https://ec.europa.eu/info/law/law-topic/data-protection_en
The Data Controller further declares that the transfers are made to companies that are parties to the EU-U.S. Privacy Shield Framework, and thus ensure compliance with EU data protection standards. Certificates to this effect can be found here:
The Rocket Science Group, LLC
https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG
Google LLC., Mountain View, California, USA
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
Meta Platforms, Inc.
https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active
THE RIGHTS OF THE DATA SUBJECT
Access to personal data
Visitors to our website, our customers, our partners have the right to request feedback on whether their personal data is being processed and, if so, to have access to the following information:
the purposes of the processing
the categories of personal data concerned
recipients to whom/which the personal data have been or will be disclosed, including third country recipients and international organizations,
the envisaged duration of the storage of the data and, if this is not possible, the criteria for determining this duration,
the right of the data subject to obtain from the controller the rectification, erasure or restriction of the processing of personal data relating to him or her and to object to the processing of such personal data
We will provide you with a copy of the personal data that are the subject of the processing. For additional copies, we will charge a reasonable fee for administrative costs. If the request is made electronically, the information will be provided in a commonly used electronic format (.doc, .pdf, .xls, .jpg, etc.) unless the data subject requests otherwise.
The right to request a copy must not adversely affect the rights and freedoms of others. Right to rectification
Visitors to our website, our customers, our partners have the right to have inaccurate personal data relating to them corrected upon request. Taking into account the purpose of the processing, the incomplete personal data may be requested to be completed. We must inform any recipient to whom we have disclosed the personal data of the rectification, unless this is impossible or involves a disproportionate effort. The data subject will be informed of the recipients upon request.
Right to erasure
We are obliged to delete personal data relating to a customer, client or website visitor without undue delay, at his or her request or without request, if
the personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
the client/customer/visitor withdraws the consent on which the processing is based and there is no other legal basis for the processing;
the client/customer/visitor objects to the processing and there is no overriding legitimate ground for the processing;
the personal data have been unlawfully processed;
the personal data must be erased in order to comply with a legal obligation under EU or Member State law applicable to the controller;
the personal data were collected in connection with the provision of information society services.
Where we have disclosed personal data that we need to delete, we will take reasonable steps, taking into account the available technology and the cost of implementation, to inform the data controllers that have processed the data that our customer/client/website visitor has requested the deletion of the links to or copies or duplicates of the personal data in question.
We do not need to delete personal data if the processing is necessary for the establishment, exercise or defence of legal claims. If we receive a request to delete such data, we will consider it and respond in writing to our decision.
We will inform all recipients to whom we have disclosed the personal data of the erasure, unless this is impossible or involves a disproportionate effort. We will inform our customer/client/user of the recipients upon request.
Right to restriction of processing
Our client/customer/visitor to the website has the right to request restriction of processing if:
contest the accuracy of the personal data, pending clarification
the processing is unlawful and requests the restriction of the use of the data instead of its deletion;
We no longer need the personal data for the purposes of processing, but the user/customer/client requires it for the establishment, exercise or defence of legal claims;
the user/customer/client has objected to the processing for legitimate interests; in this case, the restriction applies for a period of time until it is established whether the legitimate grounds of the controller prevail over the legitimate grounds of the data subject.
Where processing is subject to restriction, personal data other than storage may only be processed with the consent of the user/customer/client or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for important public interests of the Union or of a Member State.
We will inform the user/customer/client of the lifting of the restriction in advance.
We must inform all recipients to whom we have disclosed the personal data of the restriction, unless this is impossible or involves a disproportionate effort. Our client/customer/user will be informed of the recipients upon request.
Right to data retention
In the case of automated processing of data, where the legal basis for processing is consent or a contractual legal basis, our customer/client/site visitor has the right to receive the personal data concerning him/her that he/she has provided to us in a structured, commonly used, machine-readable format and to transmit this data to another controller, where technically feasible.
The right to data portability must not adversely affect the rights and freedoms of others.
Right to object
Our client/customer may object to the processing of his/her personal data on grounds relating to his/her particular situation at any time, provided that the legal basis for the processing is a legitimate interest. In such a case, we may no longer process the personal data unless we can demonstrate compelling legitimate grounds which override the interests, rights and freedoms of our client/customer or for the establishment, exercise or defence of legal claims.
Automated decision-making in individual cases, including profiling
As we do not carry out automated decision-making and profiling, we cannot provide this fundamental right.
IN THE CASE OF COMPLAINS
Your personal data will be treated with the utmost care. However, if you feel that we have not taken all reasonable steps to protect your personal data, or if you simply have a question, please contact us at maghandpan@gmail.com
In the event of a breach of our data processing principles, data subjects may exercise their rights of redress before a court of law by bringing a civil action. The court of law will have jurisdiction to decide on the action.
The lawsuit may also be brought before the court of the place of residence of the data subject (for a list of courts and their contact details, click here).
In addition, you can contact the National Authority for Data Protection and Freedom of Information (1125 Budapest, Szilágyi Erzsébet fasor 22/C., postal address: 1530 Budapest, PO Box 5, email: ugyfelszolgalat@naih.hu, website: http://www.naih.hu) with any complaints or questions regarding your personal data.
AUTOMATED DECISION-MAKING
We do not operate automated decision-making.
IN DETERMINING THE LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA, WE HAVE TAKEN INTO ACCOUNT THESE LEGAL PROVISIONS
The sending of newsletters including advertising is only possible with consent, which is required by Article 6 (1) (a) of Regulation (EU) 2016/679 of the European Parliament and of the Council and Article 6 (1) – (3) of Act XLVIII of 2008 on the basic conditions and certain restrictions of economic advertising activities.
I have taken into account Article 6(1)(a) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 22 December 2016 on GDPR (EU) No.
The basis for the processing of invoicing data is Article 6 (1) (c) of Regulation (EU) 2016/679 of the European Parliament and of the Council and Article 78 (3) of Act CL of 2017 on the Rules of Taxation (retention period for supporting documents) and Article 169 (e) of Act CXXVII of 2007 on Value Added Tax (mandatory elements of invoices).
– Act CXII of 2011 on the Right to Information Self-Determination and Freedom of Information;
– The provisions of Chapter XVII of Act C of 2003 on electronic communications (Eht.);
– Act CXIX of 1995 on the processing of name and address data for the purposes of research and direct marketing (DM Act);
– Act CVIII of 2001 on certain aspects of electronic commerce services and information society services (Eker Act);
– Act XLVIII of 2008 – on the Basic Conditions and Certain Restrictions of Economic Advertising Activities (Act XLVIII of 2008)
OTHER PROVISIONS
This notice will enter into force on 1 March 2023 and will be revised as soon as new guidelines, positions and detailed rules become known which require us to amend it. If the scope of our business changes or we introduce new marketing tools, we will also revise it.