ESD study
Privacy policy
| Company name: | D és Tsa. Bt. |
| Invoice address: | 2600 Vác, Dr. Csányi László Krt. 83. |
| Office and warehouse: | 2600 Vác, Galcsek u. 8-10. |
| Opening hours: | Workdays from 08:00 – 16:00 |
| Phone: | +36 27 502 555, +36 27 502 556 |
| Fax: | +36 27 200 835 |
| E-mail: | esdmail@esdstudy.com |
| VAT number: | 24585006-2-13 |
| Registering authority: | Budapest Környéki Törvényszék Cégbírósága |
| Company registration number: | 13-06-023645 |
| Chamber membership: | Pest Megyei és Érd Megyei Jogú Városi Kereskedelmi és Iparkamara |
| FAR nr.: | B/2021/002311 |
1. Definitions
processing: any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure, transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
processor: a natural or legal person, public authority, agency or any other body which processes personal data on behalf of the controller;
personal data: any information relating to an identified or identifiable natural person (data subject); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
data controller: the natural or legal person, public authority, agency or any other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of the processing are determined by Union or Member State law, the controller or the specific criteria for the controller’s designation may also be determined by Union or Member State law;
data subject’s consent: a freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she signifies, by a statement or by an act expressing his or her unambiguous consent, that he or she signifies his or her agreement to the processing of personal data concerning him or her;
recipient: a natural or legal person, public authority, agency or any other body to whom or with which personal data are disclosed, whether or not a third party.
2. Order/Invoicing
The purpose of data processing is to provide additional services, contact, send confirmation e-mails, issue and send invoices. We will only be able to fulfil your order if you provide us with your contact and billing details, which are strictly necessary for the purposes of contact and billing
The legal basis for processing is mandatory processing based on law.
The data subjects concerned by the data processing are the persons placing an order on the website, the service provider’s customer partners, customer partners opting for payment by credit card
3. Duration of data processing
It will last until the order is fulfilled. Except in the case of accounting records, since according to Article 169 (2) of Act C of 2000 on Accounting, these records must be kept for 8 years.
| Scope of data processed | Specific purposes for which the data are processed |
| Delivery/Billing Name | Identification, contact, billing |
| Company Name | Identification, contact, billing |
| Tax number | Identification, contact, billing |
| Delivery/Billing Address | Identification, contact, billing |
| Identification, contact, billing | |
| Phone | Identification, contact, billing |
| Ordered service | Identification of the product |
| Date of registration | Technical information operation |
| Billing | Identification of the bill |
| Invoice issue date | Technical information operation |
| IP address | Technical information operation |
The Service Provider does not verify the personal data provided to it. The person providing the data is solely responsible for the correctness of the data. By providing an e-mail address, any Data Subject also accepts responsibility for the fact that he or she is the only person who will use the service from the e-mail address provided. With regard to this assumption of responsibility, any liability in connection with access to an e-mail address provided shall be borne solely by the Data Subject who registered the e-mail address.
The data will be deleted when consent to data processing is withdrawn. You can withdraw your consent to data processing at any time by clicking on the “unsubscribe” link in the confirmation invoice letters or by sending an e-mail to esdmail@esdstudy.com.
The deletion of billing data may be required by law.
How the data is stored: electronic.
The modification or deletion of personal data can be initiated by sending an e-mail to esdmail@esdstudy.com.
Data transfer declaration
I acknowledge the following personal data stored in the user account of D és Tsa Bt. (2600, Vác, Dr. Csányi László krt. 83.) in the user database of www.esdstudy.com will be handed over to OTP Mobil Ltd. and is trusted as data processor.
The data transferred by the data controller are the following:
- Payment method
- First name
- Second name
- Billing address
- Phone number
For companies
- Company name
- TAX number
The nature and purpose of the data processing activity performed by the data processor in the SimplePay Privacy Policy can be found at the following link: http://simplepay.hu/vasarlo-aff
Purpose of the transfer: issuing an electronic request for payment, invoice to the Data Subject, which is sent electronically by the Service Provider to the email address provided by the Data Subject, and payment for the product or service by credit card.
4. Newsletter, DM activity
As the operator of this website, we declare that the information and descriptions published by us fully comply with the relevant legal provisions. We also declare that when subscribing to eDM mailings, we are not in a position to verify the authenticity of the contact details or to establish whether the details provided relate to an individual or a company. Companies that contact us will be treated as a customer partner.
The Service Provider will not send unsolicited commercial communications and you may unsubscribe from receiving such communications free of charge, without restriction and without giving any reason. In this case, the Service Provider will delete all personal data necessary for sending the advertising messages from its records and will not contact the Data Subject with further advertising offers. You can unsubscribe by clicking on the “Unsubscribe” link in the newsletter.
The legal basis for processing is your consent.
Please be informed that the User may give his/her prior and explicit consent to be contacted by the Service Provider with promotional offers, information and other mailings at the e-mail address provided at the time of registration. As a consequence, the user may consent to the processing of the necessary personal data by the service provider for this purpose.
Please be informed that if you wish to receive eDM mails from us, you are obliged to provide the necessary data.
We will not be able to send you this type of correspondence if you do not provide this information.
Purpose of data processing: Sending electronic direct marketing messages, such as newsletters, advertising using direct marketing methods
Duration of processing. Data processing lasts until consent is withdrawn, i.e. until unsubscription.
Modification or deletion of personal data can be initiated by sending an e-mail to esdmail@esdstudy.com.
How the data is stored: electronic.
| Scope of data processed | Specific purposes for which the data are processed |
| Name | Identification, contact, newsletter subscription |
| Identification, contact, newsletter subscription | |
| Phone | Identification, contact, newsletter subscription |
| Date of subscription | Technical information operation. |
| IP address | Technical information operation. |
Data processor:
Company name: SalesAutoPilot kft. website: http://salesautopilot.hu/
5. Data security measures
I will take appropriate security measures to protect personal data against, inter alia, unauthorised access, disclosure or alteration. We use SSL encryption on our website to ensure a higher level of protection.
In designing appropriate security measures, I have taken into account the state of the art, the nature, scope, context and purposes of the processing, and the varying degrees of probability and severity of the risk to the rights and freedoms of natural persons.
6. Cookies
Cookies are placed on the user’s computer by the websites visited and contain information such as the page settings or login status. Cookies are therefore small text files created by the websites visited. They improve the user experience by saving browsing data. Cookies help the website to remember your site settings, offer you locally relevant content and save other statistics to track the fact and time of your visit. The provider will inform the website visitor of this.
The data subjects concerned by the processing are the visitors to the website.
Legal basis for data processing. The consent of the user is not required if the use of cookies is strictly necessary for the provider.
Scope of the data: unique ID number, time, preferences, visitor behaviour
Data controller entitled to access the data. By using cookies, no personal data is processed by the data controller.
How the data is stored: electronic.
Purpose of data processing
website development
information collection- How site visitors use our website – by measuring which parts of our website you visit or use most, we can find out how to provide you with an even better experience when you visit our site again,
distinguishing and identifying browser users,
tracking activities on the website so that we can send you more relevant offers that are of interest or interest to you.
Strictly necessary, session cookies
These cookies are necessary to enable users to browse our website, use its features, such as, among others, to note your actions on particular pages during a visit. The validity period of these cookies is limited to your current visit, and this type of cookie is automatically deleted from your computer at the end of your session or when you close your browser. Remember, without the use of these cookies we cannot guarantee you the use of our website.
Targeting and advertising cookies
These cookies cannot identify you personally, they collect information such as which pages our visitor has visited, which part of the website the user clicked on, how many pages they visited, all in order to learn about the content that interests you.
If you have given us your prior consent, we may use the information we collect when tracking your use of the website together with your personal data to tailor our marketing communications to your needs and to provide you with more personalised offers.
Performance cookies
We also use cookies that allow us to collect information about how our visitors use our website. These cookies do not identify you personally, but collect information such as which page our visitor viewed, which part of the website the user clicked on, how many pages they visited, the length of time spent on each session, and any error messages.
Such performance cookies are also Google Analytics cookies. Our website uses Google Analytics. The data is stored by Google’s servers in encrypted format to make it more difficult and prevent misuse.
You can disable Google Analytics by. Quote from the page:
Site users who do not want Google Analytics to generate JavaScript reports about their data can install the Google Analytics browser add-on to disable it. The extension will prevent Google Analytics JavaScript (ga.js, analytics.js, and dc.js) from sending information to Google Analytics. The browser extension can be used in most recent browsers. The Google Analytics browser add-on does not prevent data from being sent to the website itself and other web analytics services.
https://support.google.com/analytics/answer/6004245?hl=hu
Google Privacy Policy: https://policies.google.com/privacy?hl=hu
More detailed information on the use and protection of data is available at the links above.
Data protection in detail:
https://static.googleusercontent.com/media/www.google.com/en//intl/hu/policies/privacy/google_privacy_policy_eng.pdf
How can you check and turn off cookies?
All modern browsers allow you to change your cookie settings. Most browsers automatically accept cookies by default, but these can usually be changed to prevent automatic acceptance and offer you the choice of whether or not to allow cookies each time.
Please note that, as cookies are intended to facilitate or enable the usability and processes of our website, by preventing or deleting the use of cookies, our users may not be able to fully use the features of our website or the website may not function as intended in their browsers.
7. Data processors
The data may be accessed primarily by the Service Provider or its internal employees, but will not be disclosed or transferred to third parties.
The Service Provider may use a data processor (e.g. system operator, transport company, accountant) for the operation of the underlying IT system, the fulfilment of orders and the settlement of accounts.
Name of data processors:
| Company name |
Address | Activity |
| D és Tsa. Bt. | 2600 Vác, Galcsek u. 8-10. | Invoicing, administrative tasks |
| Deninet Kft. | 1132 Budapest, Victor Hugo u. 18-22. | Hosting service |
| SalesAutoPilot Kft. | 1024 Budapest, Margit krt. 31-33. félemelet 4. | Newsletter marketing software |
| OTP Mobil Kft | 1093 Budapest, Közraktár utca 30-32. | Making a payment by credit card |
8. Rights of the Data Subject in relation to data processing
Right of access
You can request information from us about what data our company processes, on what legal basis, for what purpose, from what source and for how long, using the contact details provided. Upon your request, we will send you information without delay, but within 30 days at the latest, to the e-mail address you have provided.
Right to rectification
You can ask us to correct any of your data using the contact details provided. Upon your request, we will do so without delay, but within 30 days at the latest, by sending you an e-mail to the e-mail address you have provided.
Right to erasure
You can ask us to delete your data using the contact details provided. At your request, we will do so without delay, but within 30 days at the latest, by sending you an e-mail to the e-mail address you have provided.
Right to be forgotten
If the controller has disclosed the personal data and is required to delete it, it will take reasonable steps, including technical measures, taking into account the available technology and the cost of implementation, to inform the controllers that have processed the data that you have requested the deletion of the links to or copies of the personal data in question.
Right to restriction
You have the right to have the controller restrict processing at your request if one of the following conditions is met:
You contest the accuracy of the personal data, in which case the restriction shall apply for a period of time which allows the controller to verify the accuracy of the personal data;
the processing is unlawful and you oppose the erasure of the data and instead request the restriction of their use;
the controller no longer needs the personal data for the purposes of processing, but you require them for the establishment, exercise or defence of legal claims;
you have objected to the processing; in this case, the restriction shall apply for a period of time until it is established whether the controller’s legitimate grounds override your legitimate grounds.
The right to object
You may object to processing using the contact details provided. The objection will be examined within the shortest possible time from the date of the request, but not later than 15 days, and a decision will be taken on the merits of the objection, and you will be informed of the decision by e-mail.
The right to data portability
The data subject has the right to receive personal data relating to him or her which he or she has provided to a controller in a structured, commonly used, machine-readable format and the right to request the transfer of such data to another controller.
Enforcement possibilities in relation to data processing
If you experience unlawful processing, you should notify us so that we can remedy the unlawful situation within a short period of time.
The law on which the processing is based
REGULATION (EU) No 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Regulation (EC) No 95/46/EC (General Data Protection Regulation).
Act CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information.
Act LXVI of 1995 on public records, public archives and the protection of private archival material.
Government Decree No 335/2005 (XII. 29.) on the general requirements for the management of records by public bodies.
Act CVIII of 2001 on certain aspects of electronic commerce services and information society services.
Act C of 2003 on Electronic Communications.
Possibility to amend the privacy policy
The Service Provider reserves the right to unilaterally modify this Privacy Policy with prior notice to users. By using the Service after the effective date of the amendment, you accept the amended Privacy Policy. In the event of any material change in the way we process your personal data, we will provide you with prior notice and, where required by law, we will seek your consent before implementing such changes.
