Privacy policy
BIG MILL PROJECT Limited Liability Company
9027 Győr, Tompa utca 1.
TAX NUMBER: 25158894-2-08
COMPANY REGISTRATION NUMBER: 08-09-027040
(hereinafter referred to as the Data Controller) processes the data of visitors to the website www.bigmill.hu
(hereinafter referred to as the Website), registered users who use the Website and utilize the services available on the Website (hereinafter collectively referred to as the Data Subject).
In connection with data processing, the Data Controller hereby informs the Data Subjects about the personal data processed on the Website, the principles and practices followed in the processing of personal data, and the ways and possibilities of exercising the rights of the Data Subjects. By using the Website, the Data Subject accepts the provisions of this Privacy Policy and consents to the data processing described below.
1. Definitions
- Data Subject: any identified or identifiable natural person based on personal data, either directly or indirectly;
- Personal data: any information relating to the Data Subject – in particular the Data Subject’s name, identification number, and any information relating to one or more physical, physiological, mental, economic, cultural or social characteristics – as well as any conclusions drawn from such data concerning the Data Subject;
- Consent: the voluntary and explicit expression of the Data Subject’s will, based on adequate information, by which the Data Subject gives clear consent to the processing of personal data relating to them, either fully or for specific operations;
- Objection: a declaration by the Data Subject objecting to the processing of their personal data and requesting the termination of the processing or the deletion of the processed data;
- Data Controller: the natural or legal person, or organization without legal personality, which alone or jointly with others determines the purpose of data processing, makes and implements decisions concerning the processing of data (including the tools used), or has them implemented by a data processor entrusted by it;
- Data processing: any operation or set of operations performed on data, regardless of the procedure used, including collection, recording, storage, organization, modification, use, querying, transmission, disclosure, alignment or combination, blocking, deletion, and destruction of data, as well as preventing further use of the data;
- Data processing (technical): the performance of technical tasks related to data processing operations, regardless of the method and means used or the location of application, provided that the technical task is carried out on the data;
- Data processor: the natural or legal person, or organization without legal personality, which processes data on the basis of a contract concluded with the Data Controller – including contracts concluded pursuant to legal requirements;
- Data transfer: making data accessible to a specific third party;
- Disclosure: making data accessible to anyone;
- Data deletion: rendering data unrecognizable in such a way that their restoration is no longer possible;
- Data blocking: marking data with an identifier in order to restrict their further processing permanently or for a specified period;
- Data destruction: the complete physical destruction of the data carrier containing the data;
- Third party: any natural or legal person, or organization without legal personality, that is not identical to the Data Subject, the Data Controller, or the Data Processor.
2. Purpose of data processing
The Data Controller stores and processes the data provided by the Data Subject during registration exclusively for specific purposes: providing services available on the Website, maintaining contact, identifying the user, and sending newsletters if the Data Subject subscribes to them.
Automatically recorded data are used for statistical purposes and for the technical development of the IT system.
The Data Controller will not use the provided personal data for purposes other than those specified above.
Personal data may only be disclosed to third parties or authorities with the prior explicit consent of the Data Subject unless otherwise required by law. If the Data Controller intends to use the provided data for purposes other than the original purpose of collection, the Data Subject will be informed in advance and their explicit consent will be obtained, or they will be given the opportunity to prohibit such use.
3. Legal basis for data processing
The processing of personal data by the Data Controller is based on the voluntary consent of the Data Subject pursuant to Section 5 (1) a) of Act CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information (Info Act), and the provisions of Act CVIII of 2001 on Electronic Commerce Services and Information Society Services.
The Data Controller does not verify the accuracy of the personal data provided. The person providing the data, i.e. the Data Subject, is solely responsible for their correctness.
By providing an email address, the Data Subject also assumes responsibility for ensuring that only they use the services from the specified email address. Any liability related to logins performed using a given email address lies solely with the Data Subject who provided the email address.
4. Data Controller details
BIG MILL PROJECT Limited Liability Company
9027 Győr, Tompa utca 1.
TAX NUMBER: 25158894-2-08
COMPANY REGISTRATION NUMBER: 08-09-027040
5. Duration of data processing
5.1 Registration data
The processing of personal data provided during registration continues until the Data Subject requests the deletion of their registration. Deletion can be requested at any time by submitting a deletion request (by post or email). The deadline for deleting the data is 5 working days after receiving the request.
5.2 Newsletter data
The Data Controller processes the data provided during newsletter subscription until the Data Subject unsubscribes by clicking the “Unsubscribe” link in the newsletter or requests removal from the mailing list by email or post. Otherwise, the data processing lasts for 2 years.
5.3 Technical data
Logged data are stored by the system for 2 years from the date of logging, except for the date of the last visit, which is automatically overwritten.
5.4 Data provided through the electronic contact form
The processing of personal data provided in the contact form continues until the Data Subject requests their deletion. Data are deleted within 5 working days after receiving the request.
6. Scope of processed personal data
6.1 Mandatory data during registration
To use the services available on the Website, the Data Subject must provide the following data:
Name, Phone number, Email address, Company name, Billing address, Shipping address
6.2 Newsletter
When subscribing to the newsletter, the Data Subject must provide their email address and full name.
6.3 Technical data
Certain data generated by the Data Subject’s computer during the use of the service are automatically recorded by the Data Controller’s system. These include the date and time of the visit, the IP address of the Data Subject’s computer, browser type, and the addresses of visited and previously visited web pages.
These data are logged automatically upon entering and leaving the Website without any separate statement or action from the Data Subject.
These data cannot be linked with other personal user data except where required by law. Only the Data Controller has access to these data.
The Data Controller may collect information about user activity which cannot be linked to other data provided during registration or data generated during the use of other websites or services.
The HTML code of the Website may contain references from external servers independent of the Data Controller. Due to the direct connection with these servers, the providers of these services may collect user data.
External servers assist in the independent measurement and auditing of website traffic and other web analytics data (Google Analytics). Detailed information about the handling of measurement data can be obtained from the data controllers. Their website: www.google.com/analytics/
If the Data Subject does not wish Google Analytics to measure the above data, they may install a browser add-on that blocks this function.
6.4 Cookies
The Data Controller and the indicated external service providers place small data packages called cookies on the Data Subject’s computer and read them back in order to provide personalized services.
The following types of cookies are used:
– Session cookies: automatically deleted after the visit and necessary for the secure and efficient functioning of the Website.
– Persistent cookies: stored for a longer period in the browser in order to improve the user experience (e.g., optimized navigation).
– Cookies used for password-protected sessions.
– Security cookies.
Most browsers provide information in the “Help” section about how to disable cookies, accept new cookies, or configure cookie settings.
The Website uses Google Adwords remarketing tracking codes, which allow visitors to be targeted later with remarketing ads on websites in the Google Display Network.
More information about cookies:
https://silktide.com/tools/cookie-consent/docs/
More information about Google Analytics:
https://www.google.hu/intl/hu/analytics/
7. Persons authorized to access the data
The personal data are primarily accessible to the Data Controller and its internal employees. They are not published or transferred to third parties.
The Service Provider may use a data processor (e.g., system operator). The Service Provider is not responsible for the data processing practices of such external parties.
DATA PROCESSOR DETAILS:
Currently none.
Apart from the above, personal data relating to the User may only be transferred in cases required by law or with the User’s consent.
Hosting provider:
KTS Online Kft
Tax number: 29152106-2-08
Company registration number: 08-09-032885
Registered by the Company Registry of the Győr Regional Court
Statistical number: 29152106-6311-113-08
EU VAT number: HU29152106
REGISTERED OFFICE: 9024 Győr, Bartók Béla utca 26/B ground floor 2.
PHONE: +36-20/316-2431
EMAIL: info@kts.hu
8. User rights and legal remedies
8.1 Right to information
The Data Subject may request information at any time about personal data concerning them processed by the Data Controller.
The Data Controller will provide written information within 30 days regarding the data processed, the purpose, legal basis, duration of processing, and the recipients of the data.
8.2 Right to deletion, correction, or blocking of data
The Data Subject may request the correction or deletion of incorrectly recorded data at any time. The Data Controller deletes the data within 5 working days after receiving the request.
The Data Subject may also request the blocking of their data if deletion would harm their legitimate interests.
8.3 Right to object
The Data Subject may object to the processing of their personal data. The Data Controller will examine the objection within 15 days.
8.4 Legal enforcement
Based on the Info Act and the Hungarian Civil Code (Act V of 2013), the Data Subject may:
- contact the National Authority for Data Protection and Freedom of Information (1125 Budapest, Szilágyi Erzsébet fasor 22/c.; www.naih.hu), or
- enforce their rights before a court.
9. Use of email addresses
The Data Controller pays special attention to the lawful use of email addresses and uses them primarily for identification and communication related to the service.
10. Data security
The Data Controller ensures the security of data and takes all technical measures necessary to protect collected, stored, and processed data from destruction, unauthorized use, or unauthorized modification.
11. Other provisions
The Data Controller reserves the right to unilaterally modify this Privacy Policy with prior notice to Data Subjects via the Website. By continuing to use the Website after the modification enters into force, the Data Subject accepts the updated Privacy Policy.
