1 Purpose of the data processing notice
Wellmed Beauty Kft. (1022 Budapest, Ribáry u. 11., hereinafter referred to as service provider, data controller) as a data controller, recognizes the content of this legal notice as binding on itself. It undertakes to ensure that all data processing related to its activities complies with the requirements set out in this regulation and in the applicable national legislation and in the legal acts of the European Union.
The data protection guidelines related to the data processing of Wellmed Beauty Kft. are continuously available at www.wellmedstudio.hu/adatvedelem/.
Wellmed Beauty Kft. reserves the right to change this notice at any time. Of course, it will notify its audience of any possible changes in due time.
If you have any questions related to this notice, please write to us and our colleague will answer your question.
Wellmed Beauty Kft. is committed to protecting the personal data of its customers and partners and considers it of utmost importance to respect the right of informational self-determination of its customers. Wellmed Beauty Kft. treats personal data confidentially and takes all security, technical and organizational measures that guarantee the security of the data.
Wellmed Beauty Kft. describes its data management practices below.
2 Data controller’s data
If you would like to contact our Company, you can contact the data controller by phone at +36 30 516 0011 and by e-mail at: info@wellmedstudio.hu.
We inform you that the personal data you provide will be processed until you withdraw your declaration or request for deletion. We inform you that a video camera surveillance system is in operation at our branches for property protection reasons, the recordings of which will be deleted by the Data Controller after 24 hours.
Name: Wellmed Beauty Kft.
Head office: 1022 Budapest, Ribáry u. 11.
Company registration number: 0109-206950
Name of the court of registration: Court of Commerce
Tax number: 25298615-2-41
Phone number: +36 30 516 0011
E-mail: info@wellmedstudio.hu
2.1 Data Protection Officer
Name: Moncz Henriette
Phone number: +36 30 516 0011
3 Scope of personal data processed
3.1 Personal data to be provided during registration
Mandatory: name, phone number
Other data: date of birth, e-mail
3.2 Technical dataWellmed Beauty Kft. selects and operates the IT tools used to process personal data during the provision of the service in such a way that the processed data:
• is accessible to those authorized to do so (availability);
• its authenticity and authentication are ensured (authentication of data processing);
• its unchangeability can be verified (data integrity);
• it is protected against unauthorized access (data confidentiality).
Wellmed Beauty Kft. protects data with appropriate measures against unauthorized access, alteration, transmission, disclosure, deletion or destruction, as well as accidental destruction.
Wellmed Beauty Kft. ensures the security of data processing with technical, organizational and organisational measures that provide a level of protection appropriate to the risks associated with data processing.
During data processing, Wellmed Beauty Kft. preserves
• confidentiality: protects the information so that only those who are authorized to do so can access it;
• integrity: protects the accuracy and completeness of the information and the processing method;
• availability: ensures that when the authorized user needs it, they can actually access the desired information and that the related tools are available.
3.3 Cookies
3.3.1 The purpose of cookies
they collect information about visitors and their devices;
they remember the visitors’ individual settings, which can be used, for example, when making online transactions, so that they do not have to be re-entered;
they make it easier to use the website;
they provide a quality user experience.
In order to provide customized service, a small data package, called a cookie, is placed on the user’s computer and read back during a subsequent visit. If the browser sends back a previously saved cookie, the cookie management service provider has the opportunity to connect the user’s current visit with previous ones, but only with regard to its own content.
3.3.2 Strictly necessary, session cookies
The purpose of these cookies is to allow visitors to browse the data controller’s website fully and smoothly, use its functions and the services available there. The validity period of this type of cookie lasts until the end of the session (browsing), and when the browser is closed, this type of cookie is automatically deleted from the computer or other device used for browsing.
3.3.3 Third-party cookies (analytics)
The service provider also uses Google Analytics as a third-party cookie on its website. Using the Google Analytics statistical service, the service provider collects information about how visitors use its website. The data is used to develop the website and improve the user experience. These cookies also remain on the visitor’s computer or other device used for browsing, in its browser, until their expiration date, or until the visitor deletes them.
3.4 Newsletter-related data
The fact of data collection and the purpose of data processing: When registering in the web store available at www.wellmedstudio.hu, the user may consent in advance to receive the service provider’s current offers in an electronic newsletter at the contact details provided during registration. The registered user may unsubscribe from the newsletter electronically.
4 Planned use and retention period of the processed data
Name of data processing Use Legal basis Retention period
5 Purpose, method and legal basis of data processing
5.1 General data processing guidelines
The data processing activities of Wellmed Beauty Kft. are based on voluntary consent or legal authorization. In the case of data processing based on voluntary consent, the data subjects may withdraw this consent at any stage of data processing.
In certain cases, the processing, storage and transmission of a range of data provided is mandatory by law, of which we separately notify our customers.
We draw the attention of data providers to Wellmed Beauty Kft. that if they do not provide their own personal data, the data provider is obliged to obtain the consent of the data subject.
Its data processing principles are in line with the applicable data protection legislation, in particular the following:
Act CXII of 2011 – on the right to informational self-determination and freedom of information (Infotv.);
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Regulation 95/46/EC (General Data Protection Regulation, GDPR);
Act V of 2013 on the Civil Code (Civil Code);
Act C of 2000 on accounting (Accounting Act);
Act LIII of 2017 on the prevention and suppression of money laundering and terrorist financing (AML/CFT);
Act CCXXXVII of 2013 on credit institutions and financial undertakings (Finance Act).
6 Physical storage locations of data
Your personal data (i.e. data that can be linked to your person) may be processed by us in the following way: on the one hand, technical data related to the computer you use, browser program, internet address, and the pages you visit are automatically generated in our computer system in connection with maintaining an internet connection, on the other hand, you can also provide your name, contact information or other data if you wish to contact us personally while using the website.
7 Data transfer, data processing, circle of persons who become aware of the data
The data processed by Wellmed Beauty Kft. may only be accessed by its employees. Pursuant to Act CXII of 2011, data may be transferred and different data processing may be linked if the data subject has consented to it or if the law permits it, and if the conditions for data processing are met for each individual piece of personal data.
8 Rights of the data subject and their right to exercise their rights
The data subject may request information about the processing of their personal data, as well as request the correction of their personal data, or – with the exception of mandatory data processing – their deletion, withdrawal, and exercise their right to data portability and objection in the manner indicated when collecting the data, or at the above contact details of the data controller.
8.1 Right to information
Wellmed Beauty Kft. shall take appropriate measures to provide the data subjects with all information referred to in Articles 13 and 14 of the GDPR regarding the processing of personal data and all information pursuant to Articles 15–22 and 34 in a concise, transparent, understandable and easily accessible form, in clear and plain language.
8.2 Right of access of the data subject
The data subject has the right to obtain from the controller information as to whether or not personal data concerning him or her are being processed and, where such processing is taking place, access to the personal data and the following information: the purposes of the processing; the categories of personal data concerned; the recipients or categories of recipients to whom the personal data have been or will be disclosed, including in particular recipients in third countries or international organisations; the planned storage period of the personal data; the right to rectification, erasure or restriction of processing and to object; the right to lodge a complaint with a supervisory authority; information on the sources of the data; the fact that automated decision-making, including profiling, is being carried out, as well as intelligible information on the logic involved and the significance and the foreseeable consequences of such processing for the data subject. The controller shall provide the information within one month of the submission of the request.
8.3 Right to rectification
The data subject may request that Wellmed Beauty Kft. process inaccurate personal data concerning him or her and complete incomplete data.
8.4 Right to erasure
The data subject shall have the right to request that Wellmed Beauty Kft. erase personal data concerning him or her without undue delay where one of the following reasons exists:
• the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
• the data subject withdraws his or her consent which is the basis for the processing and there is no other legal basis for the processing;
• the data subject objects to the processing and there are no overriding legitimate grounds for the processing;
• the personal data have been processed unlawfully;
• the personal data must be erased for compliance with a legal obligation to which the controller is subject under Union or Member State law;
• the personal data were collected in connection with the provision of information society services.
The erasure of data cannot be initiated if the processing is necessary: for the exercise of the right to freedom of expression and information; for compliance with an obligation under Union or Member State law to which the controller is subject to processing of personal data, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller; for the purposes of public health, archiving, scientific and historical research or statistical purposes in the public interest; or for the establishment, exercise or defence of legal claims.
8.5 Right to restriction of processing
At the request of the data subject, Wellmed Beauty Kft. shall restrict the processing of data if one of the following conditions is met:
• the data subject contests the accuracy of the personal data, in which case the restriction shall apply for a period that allows the accuracy of the personal data to be verified;
• the processing is unlawful and the data subject opposes the erasure of the data and requests the restriction of their use instead;
• the controller no longer needs the personal data for the purposes of the processing, but the data subject requires them for the establishment, exercise or defence of legal claims;
• or the data subject has objected to the processing; in such a case, the restriction shall apply for a period of time until it is established whether the legitimate grounds of the controller override those of the data subject.
If processing is subject to restriction, personal data may be processed, with the exception of storage, only with the data subject’s consent, or for the establishment, exercise or defence of legal claims, or for the protection of the rights of another natural or legal person, or for important reasons of public interest of the Union or of a Member State.
8.6 Right to data portability
The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to the controller, in a structured, commonly used and machine-readable format and to transmit those data to another controller.
8.7 Right to object
The data subject shall have the right, on grounds relating to his or her particular situation, to object at any time to processing of personal data concerning him or her, which is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller, or which is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, including profiling based on those provisions. In the event of an objection, the controller shall no longer process the personal data unless there are compelling legitimate grounds for doing so which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defence of legal claims.
8.8 Automated decision-making in individual cases, including profiling
The data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her.
8.9 Right of withdrawal
The data subject has the right to withdraw his or her consent at any time.
8.10 Right to appeal to court
The data subject may appeal to the court against the data controller in the event of a violation of his or her rights. The court shall proceed with the case ex officio.
8.11 Data protection authority procedure
A complaint may be lodged with the National Data Protection and Freedom of Information Authority:
Name: National Data Protection and Freedom of Information Authority
Registered office: 1125 Budapest, Szilágyi Erzsébet fasor 22/C.
Mailing address: 1530 Budapest, Pf.: 5.
Telephone: 0613911400
Fax: 0613911410
E-mail: ugyfelszolgalat@naih.hu
Website: http://www.naih.hu
9 Other provisions
We will provide information on data processing not listed in this information when the data is collected.
We inform our clients that the court, the prosecutor, the investigating authority, the misdemeanor authority, the administrative authority, the National Data Protection and Freedom of Information Authority, the Hungarian National Bank, or other bodies authorized by law may contact the data controller to provide information, communicate or transfer data, or make documents available.
Wellmed Beauty Kft. will only provide personal data to the authorities – if the authority has specified the exact purpose and scope of the data – to the extent and insofar as it is absolutely necessary to achieve the purpose of the request.