PRIVACY POLICY
Thank You for choosing us! Our company protects privacy and respects Your rights related to Your personal data.
In accordance with the above and with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter as: “GDPR”) present privacy policy (hereinafter as: „Policy”) contains all information regarding the processing of personal data by
Business name: Dora Goodman Projekt Korlátolt Felelősségű Társaság (LLC)
Registered seat address: 1036 Budapest, Perc utca 2. III. em., Hungary
Company registration number: 01-09-347557
Registered at: Fővárosi Törvényszék Cégbírósága (Metropolitan Court of Budapest as Court of Registration)
Tax number: 27066481-2-41
Representative: András Szabó as managing director
Email address: info@doragoodman.com
(hereinafter as: “Dora Goodman”)
regarding the customers (hereinafter as: „Customer”) purchasing products from Dora Goodman and visitors of the website (hereinafter as: „Website”) under the domain https://www.doragoodman.com/ and regarding people contacting Dora Goodman through various digital channels and those who subscribe to our newsletter (hereinafter together as: „Data subject”).
The aim of this Policy is to give a clear picture on why, how and how long we process the personal data we receive through our Website or data we receive through other channels.
I. Some privacy related definitions in order to better understand this Policy
Personal data
means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
Processing
means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
Controller
means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by EU or Member State law;
The Controller of Your personal data is Dora Goodman.
Processor
means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;
Third party
means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorized to process personal data;
Data forwarding
Means the disclosure of personal data to specific third parties;
Data subject
Everybody who shares his/her personal data with the Dora Goodman through the Website or via other channels or whose personal data is processed by the Dora Goodman otherwise. For example, You who reads this Policy;
Consent of the data subject
means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;
Sensitive data
personal data referring to racial origin, nationality, political opinions or membership in any political party, religious or other beliefs, membership of an advocacy organization, sex life, personal data concerning health, pathological data;
Genetic data
means personal data relating to the inherited or acquired genetic characteristics of a natural person which give unique information about the physiology or the health of that natural person and which result, in particular, from an analysis of a biological sample from the natural person in question;
Biometric data
means personal data resulting from specific technical processing relating to the physical, physiological or behavioral characteristics of a natural person, which allow or confirm the unique identification of that natural person, such as facial images or dactyloscopy data;
Personal data breach
means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data transmitted, stored or otherwise processed;
Most of the above definitions are the definitions used by the GDPR. The text of the GDPR is available at https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:32016R0679&from=HU The list is not full, should You have any questions, do not hesitate to contact us.
We inform You that during our processing we do not process neither sensitive nor genetic or biometric data and we will never request such data from You.
II. In what cases do the Employer process personal data
In accordance with the principles laid down by Article 5 Section (1) of the GDPR the personal data of the data subject is processed in the following cases:
- Browsing the Website
- Registration, creating a profile
- Ordering products
- Commenting
- Contacting by e-mail or through the Website
- Invoicing
- Newsletter subscription
- Cookies
III. Which data, for which purpose and for how long do we process?
In the cases detailed above the legal ground for processing shall be the following:
- In accordance with article 6 Section (1) Point a) of the GDPR the freely given, specific, informed and unambiguous consent of the Customer or the Data subject (hereinafter as: „Consent”);
- In accordance with article 6 Section (1) Point b) of the GDPR processing is necessary for the performance of a contract to which the Customer is party (hereinafter as: „Performance of Contract”);
- In accordance with article 6 Section (1) Point c) of the GDPR processing is necessary for compliance with a legal obligation to which the controller is subject (hereinafter as: „Compliance”);
- In accordance with article 6 Section (1) Point f) of the GDPR processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party (hereinafter as: „Legitimate Interest”);
III.1. Browsing
| Scope of data processed | Purpose of processing | Legal ground for processing | Naming of the legitimate interest | Duration of processing |
| IP address of the Data subject | Protection of the IT systems of Dora Goodman and securing the Website | Legitimate interest | Securing the Website | 30 days from visiting the Website as latest |
The Website may be freely visited and browsed by anyone without expressively providing any personal data to Dora Goodman. However, when visiting the Website at any time, the Data subject’s computer or mobile device sends a request to the Dora Goodman. It is like sending a letter to which You wish to get the content of the Website as an answer. Dora Goodman can only answer this request if the Data subject provides his / her address. This address is the Data subject’s internet identifier address, or IP address for short. Dora Goodman sends the requested Website to this IP address. This is an automatic process, by typing the domain of the Website to the web browser or by clicking to a link published anywhere that is directing to the Website the Data subject gives his / her consent to provide the IP address for this purpose and to be processed by Dora Goodman. To make this „correspondence” smooth the servers of Dora Goodman store the IP address of the Data subject in log files.
The identification and storing of IP addresses is necessary to protect the IT systems of Dora Goodman and the Website as well. Protection against possible malicious activities against the Website is partly ensured by that Dora Goodman is logging the operation of the Website and in this log, it lists the IP addresses from which requests to its servers were made. If Dora Goodman detects an activity from an IP address that interferes with the secure operation of the Website, the address will be blacklisted. Any malicious activity is prevented and resolved through legal action. If nothing unordinary occurs, Dora Goodman deletes the log files and the IP addresses. IP addresses stored in log files will not be used by Dora Goodman for any other purpose and will be automatically deleted within 30 days and we keep it only if the Data subject has performed any prohibited activity from that IP address. These activities are either listed above or other activities that violate local, state, national or international law.
III.2. Registration, creating / customizing a profile
III.2.1. Registration
However, it is not mandatory to register on the Website to place an order the Customer has the chance to do so. However, if the Customer intends to get the 3D printing design of a product then registration is a must. Registration may done three ways which are the following:
III.2.1.1. Registration with Facebook profile
If the Customer has a registered Facebook profile, then he / she can make the registration simply by clicking on the „Sign up with Facebook” button. In case of registering with Facebook the following data will be processed
| Scope of data processed | Purpose of processing | Legal ground for processing | Duration of processing |
| First and last name of the Customer | Identifying the Customer, creating a profile | Performance of contract | Until deletion of the user profile |
| E-mail address of the Customer | Identifying the Customer, creating a profile | Performance of contract | Until deletion of the user profile |
| Facebook profile picture of the Customer | Identifying the Customer, creating a profile | Performance of contract | Until deletion of the user profile |
III.2.1.2. Registration with Google account
If the Customer has a Google account, then he / she can make the registration simply by clicking on the „Sign up with Google” button. In case of registering with Facebook the following data will be processed
| Scope of data processed | Purpose of processing | Legal ground for processing | Duration of processing |
| First and last name of the Customer | Identifying the Customer, creating a profile | Performance of contract | Until deletion of the user profile |
| E-mail address of the Customer | Identifying the Customer, creating a profile | Performance of contract | Until deletion of the user profile |
III.2.1.3. Registration with e-mail
If the Customer does not have or does not intend to use his /her Facebook profile or Google account for the registration the Customer may also make it by simply providing the following data:
| Scope of data processed | Purpose of processing | Legal ground for processing | Duration of processing |
| E-mail address of the Customer | Identifying the Customer, creating a profile | Performance of contract | Until deletion of the user profile |
| Password set by the Customer | Identifying the Customer, creating a profile | Performance of contract | Until deletion of the user profile |
III.2.2. Customizing profile
The Customer may customize his / her profile by providing additional data indicated hereunder. Customization is not mandatory therefore Dora Goodman processes the below data only if the Customer provides them and under the consent given by the Customer.
| Scope of data processed | Purpose of processing | Legal ground for processing | Duration of processing |
| Name or nickname set by the Customer | Customizing profile | Consent | Until changing the data, but until deletion of the user profile as latest |
| Profile picture uploaded by the Customer | Customizing profile | Consent | Until changing the data, but until deletion of the user profile as latest |
| Self-description of the Customer | Customizing profile | Consent | Until changing the data, but until deletion of the user profile as latest |
| Video uploaded by the Customer | Customizing profile | Consent | Until changing the data, but until deletion of the user profile as latest |
| Followers of the Customer | Giving updates for users about the Customer for people following the Customer | Consent | Until changing the data, but until deletion of the user profile as latest |
| Users the Customer is following | Providing updates for the Customer of users the Customer is following | Consent | Until changing the data, but until deletion of the user profile as latest |
| Number of likes received | Showing the Customer’s popularity | Consent | Until changing the data, but until deletion of the user profile as latest |
| Number of comments received | Showing the Customer’s popularity | Consent | Until changing the data, but until deletion of the user profile as latest |
III,3, Ordering products
If the Customer would like to purchase an actual product from the Website not just to download its 3D printing design, the processing of the following personal data is required for the purchase and for the performance by the Dora Goodman:
| Scope of data processed | Purpose of processing | Legal ground for processing | Duration of processing |
| First and last name of the Customer | Identifying the Customer, data necessary for delivery and receipt | Performance of contract |
In relation to the purchase for a maximum of 3 years depending the value of the purchased product (in accordance with Article 2 Section (1) Point a)-c) of Government Decree no. 151/2003. (IX. 22.) on mandatory warranty for certain durable goods)
For the purpose of enforcement of a possible claim for 5 years after the delivery of the product (limitation period in accordance with Article 6:22 Section (1) of Act V of 2013 on the Civil Code) |
| Shipping address of the Customer | Identifying the Customer, data necessary for delivery and receipt | Performance of contract |
In relation to the purchase for a maximum of 3 years depending the value of the purchased product (in accordance with Article 2 Section (1) Point a)-c) of Government Decree no. 151/2003. (IX. 22.) on mandatory warranty for certain durable goods)
For the purpose of enforcement of a possible claim for 5 years after the delivery of the product (limitation period in accordance with Article 6:22 Section (1) of Act V of 2013 on the Civil Code) |
| E-mail address of the Customer | Sending feedback and information to the Customer regarding the purchase | Performance of contract | Until receipt of the ordered product |
| Phone number of the Customer | Identifying the Customer, fulfillment of delivery | Performance of contract | Until receipt of the ordered product |
III.4. Commenting
With making a registration of the Website the Customer may – at its sole discretion – become a member of the Dora Goodman community and make comments on or like posts published on the blog that may be reached through the Website. Regarding this activity of the Customer the following personal data is processed:
| Scope of data processed | Purpose of processing | Legal ground for processing | Duration of processing |
| Name or nickname set by the Customer | Identifying the Customer, using the functions of the blog | Consent | Until deletion of the comment, but until deletion of the user profile as latest |
| Profile picture uploaded by the Customer | Identifying the Customer, using the functions of the blog | Consent | Until deletion of the comment, but until deletion of the user profile as latest |
| The comment made by the Customer | Using the functions of the blog | Consent | Until deletion of the comment, but until deletion of the user profile as latest |
| The photo or video the Customer attached to his / her comment (if they contain personal data) | Using the functions of the blog | Consent | Until deletion of the comment, but until deletion of the user profile as latest |
| The date (day and month) the Customer made the comment | Identifying the date, the comment was made | Consent | Until deletion of the comment, but until deletion of the user profile as latest |
However, Dora Goodman believes in free speech please avoid any comments that would harm others or that would be considered as a breach of agreement under our Terms and Conditions. We also kinds request the Customers to not share any personal data in their comments. If despite this warning the Customer provides any personal data about him/herself Dora Goodman cannot take responsibility for personal data shared this way. Also, if the comment or the photo / video attached by the Customer to the comment contains the personal data of any third party it is the Customer’s obligation and responsibility to obtain the consent of such third party to publish the personal data.
III.5. Contacting by e-mail or through the Website
In order to provide assistance for existing or future Customers and for any interested parties, and, in order to provide information and to enable the enforcing rights (warranties, guarantees) Dora Goodman makes it available to make contact by e-mail or through the contact form on the Website.
III.5.1. In case of contacting by e-mail:
If the Customer or the Data subject contacts us by e-mail at info@doragoodman.com then in order to be able to fulfill requests with proper quality assurance, certain personal data must be processed. Without these, we will not be able to fulfill the requests.
| Scope of data processed | Purpose of processing | Legal ground for processing | Duration of processing |
| First and last name of the Customer or the Data subject | Identifying the Customer or the Data subject, fulfillment of requests | Performance of contract | Until objection against processing but for quality assurance by 31st December of the year in which the request was resolved. |
| E-mail address of the Customer or the Data subject | Identifying the Customer or the Data subject, fulfillment of requests | Performance of contract | Until objection against processing but for quality assurance by 31st December of the year in which the request was resolved. |
III.5.2. Contacting through the Website
| Scope of data processed | Purpose of processing | Legal ground for processing | Duration of processing |
| First and last name of the Customer or the Data subject | Identifying the Customer or the Data subject, fulfillment of requests | Performance of contract | Until objection against processing but for quality assurance by 31st December of the year in which the request was resolved. |
| E-mail address of the Customer or the Data subject | Identifying the Customer or the Data subject, fulfillment of requests | Performance of contract | Until objection against processing but for quality assurance by 31st December of the year in which the request was resolved. |
In order make it easier and faster to contact us we made a separate contacting form available on the Website. With respect to that we cannot limit the personal data that the Customer or the Data subject may share with us in the message section of the contact form, we kindly request to only share the most necessary data and information with us, so please do not share any personal data with our company in your message.
III.6. Invoicing
III.6.1. If the invoice regarding the purchased product is issued for a legal entity, then Dora Goodman processes the personal data found below
| Scope of processed data | Purpose of processing | Ground for processing | Naming of Legitimate interest | Duration of processing |
| E-mail address of the contact person designated by the Customer | Keeping contact with the Customer in connection with invoicing | Legitimate Interest | Sending the invoice in accordance with the law to the Customer issued mandatorily by Dora Goodman | Until sending the invoice |
| First and last name of the contact person designated by the Customer | Keeping contact with the Customer in connection with invoicing | Legitimate Interest | Sending the invoice in accordance with the law to the Customer issued mandatorily by Dora Goodman | Until sending the invoice |
Dora Goodman only processes the e-mail address as personal data in the case if the e-mail address of the contact person contains the name of a natural person. If the contact e-mail address is general (e.g., info@example.com orfinance@example.com) then Dora Goodman processes the data, but it shall not be considered as personal data. Dora Goodman draws the Customer’s attention that if the e-mail address contains the name of a natural person the consent of the contact person to provide such data shall be obtained by the Customer.
III.6.2. If the invoice regarding the purchased product is issued for a natural person then Dora Goodman processes the personal data found below
| Scope of processed data | Purpose of processing | Ground for processing | Duration of processing |
| First and last name of the Customer | Data mandatorily to be recorded in the issued invoice | Compliance | 8 years from issuing the invoice in accordance with Section 169 Subsection (2) of Act C of 2000 on Accounting |
| Home / billing address of the Customer | Data mandatorily to be recorded in the issued invoice | Compliance | 8 years from issuing the invoice in accordance with Section 169 Subsection (2) of Act C of 2000 on Accounting |
| E-mail address of the Customer | Keeping contact with the Data subject in connection with invoicing | Compliance | Until sending the invoice |
The mandatory content of the invoice and the duration of processing is prescribed by law therefore Dora Goodman processes these in order to comply with its legal obligation.
Dora Goodman only processes the e-mail address of the Customer in relation to invoicing if the invoice is issued electronically and is sent to the Customer by e-mail.
III.7. Newsletter subscription
The Customer or Data subject may subscribe to our newsletters, while making registration on the Website or in other ways. In connection with this, Dora Goodman processes the Customer’s or the Data subject’s e-mail address under the explicit consent of the Customer or the Data subject until he / she withdraws this consent. There are several ways to withdraw consent, for more details, see Section VI of present Policy.
| Scope of processed data | Purpose of processing | Ground for processing | Duration of processing |
| E-mail address of the Customer or the Data subject | Sending informative and educational messages to the Customer or the Data subject | Consent | Until the withdrawal of consent i.e., unsubscribing from the newsletter |
IV. What are cookies and why we use them?
Cookies are data packages that are sent by our webservers to Your computer automatically, where they are stored – depending on the type of the cookie – for a definite period of time.
Cookies do not hold any security risk to Your computer or not cause any malfunction.
In order to ensure the smooth operation of the Website, certain cookies (known as session cookies) are automatically installed on Your computer when You visit the Website. The purpose of such cookies is to ensure the security of the Website, to preserve the data recorded on our online forms, to display multimedia content and to balance the traffic on the Website. Personal data collected through the use of these cookies (in particular the IP address of Your computer) will be processed for our legitimate interest in the safe and smooth operation of the Website for the duration of Your stay on our Website. Closing Your browser will automatically delete them from Your computer.
With Your consent given on the Website, the following types of cookies may be installed on Your computer for the following purposes:
- Cookies for web analytical measurements and for statistical purposes (e.g., Google Analytics). These are important to us because we are provided with information about the specific characteristics of our visitors (IP address, city, type of device, browser, operating system You are using, and what sub-pages You have visited on our site). We use these data anonymized for statistics and reports to improve the Website our marketing strategy.
- Remarketing cookies (such as Google AdWords) allow us to analyze how You use our site and, consequently, to display personalized content to You, including advertising on online platforms outside our site (e.g., other websites or social media).
In addition, we distinguish between session-specific cookies and persistent cookies. A cookie valid for a single session only survives until the Data subject closes the browser. Permanent cookies continue to live and are not automatically deleted when You close Your browser. Why do they stay there and what’s good about it? Well, such persistent cookies, for example, help to make the site run faster and remembering things that the Data subject has set for himself/herself on the Website.
You can manage cookies in Your browser’s settings. How these settings are set depends on the type of Your browser.
You may find information on cookie settings for the most popular browsers on the following link:
- Google Chrome: https://support.google.com/chrome/answer/95647?hl=hu-hu&p=cpn_cookies
- Firefox: https://support.mozilla.org/hu/kb/sutik-informacio-amelyet-weboldalak-tarolnak-szami
- Internet Explorer: https://support.microsoft.com/hu-hu/help/17442/windows-internet-explorer-delete-manage-cookies
- Safari: https://support.apple.com/hu-hu/HT201265
Dora Goodman uses the following cookies on the Website:
| Name of the cookie | Type of cookie | Function of the cookie |
| Full Barion Pixel | remarketing | Preventing frauds and sending usage data such as viewed product and user cart activity details to Barion and other statistical data regarding the use of the Website by the Data subject. |
| Facebook pixel | remarketing | Preventing frauds and sending usage data such as viewed product and user cart activity details to Facebook and other statistical data regarding the use of the Website by the Data subject. |
| Google Analytics | data analysis | |
| Google Search Consol | data analysis | |
V. Where and how do we process personal data?
Personal data is processed on paper or electronically. If the data is processed on paper (for example, in the case of contractual data), it will be placed in a secluded location. Data is stored electronically on cloud-based servers.
Dora Goodman takes all necessary technical and organizational measures and precautions to protect personal data and the quality thereof and providing continuous physical and procedural protection which complies with the data protection regulations, for example the servers are at a locked place and the computers are protected by passwords and firewalls.
Notwithstanding the above, Dora Goodman shall not be liable for any damage, destruction or unauthorized access to the data in the event of technical error, natural disaster, terrorist or criminal act.
VI. How can one withdraw consent if the ground for processing is based on consent?
If under present Policy the legal ground of processing is the Customer’s or the Data subject’s consent, then the Customer or the Data subject has the right to withdraw this consent. Depending on the purpose of processing there are many ways to do it. You may withdraw Your consent given at browsing at any time, free of charge and without limitation by revisiting the Website and clicking on the pop-up window. In addition, if You do not have the possibility to withdraw Your consent this way, you may withdraw it by sending a message to info@doragoodman.com or in case of newsletter subscription by clicking on the “unsubscribe” button at the bottom of the email or by sending a letter to Dora Goodman’s registered seat address.
Please note that the withdrawal of consent does not affect the legality of the processing prior to the withdrawal.
VII. Your rights related to processing of Your personal data
Request for information (right to access): You may request information about the processing of Your personal data at any time, either in person, at our registered seat address, in writing by sending a registered letter or by email to info@doragoodman.com
Pursuant to Article 15 Section (1) of the GDPR, a request may include information on the data processed, their source, purpose, legal ground, duration, name and address of any processor, processing activities and Your rights in relation to processing. In the case of data transfer, to whom and for what purpose Your data have been or will be transferred.
A request for information is considered authentic by us if You are clearly identified by it. If the request is sent by e-mail or post, only the e-mail sent from Your registered e-mail address will be considered as authentic, and we will only be able to send information to the postal address registered by us. Unless You voluntarily verify Your identity otherwise, we will not be able to send information to an e-mail address or postal address that is not registered in our records in order to protect Your privacy.Rectification: You may at any time request the rectification, modification or amendment of Your data in the same manner described above. We can also do this only on the basis of a request from a credible source presented when submitting the request.
Restriction: You may request that we restrict the processing of our personal information in particular if:
- a) You argue the accuracy of the personal data we process. In this case, the limitation refers to the period during which the accuracy of the data is checked.
- b) Although the legal ground for processing dos does not stand for us, but You are requesting us in writing to keep them for the purpose of filing, asserting or defending any legal claim You may have
Objection: If we process Your personal data on the ground of legitimate interest, You may at any time object to the processing of Your personal data. In such cases, we will review the legality of the objection and, if it is well established, we terminate the processing of data and notify anyone to whom the personal data subject to the objection may have been previously transmitted.
Deletion (“Right to be forgotten”): You may request the deletion of Your personal data at any time for any of the reasons set out in Article 17 Section (1) of the GDPR.
We may refuse deletion if the processing of Your personal data is required by law or if it is necessary to enforce our legal claims. We will always inform You about the refusal of the request for deletion. Once it is deleted, the data cannot be recovered.
Transfer of Personal Data (Portability): You may at any time request us to transfer the data processed in connection with You in a structured, widely used, machine-readable format to You or to another controller.
We kindly ask You to not exercise the above rights improperly, but only if it has a real ground or if any of the conditions set out in the GDPR actually exist.
VIII. To whom we transfer personal data and who has right to access them?
Except as provided below, your personal data will be kept confidential and will not be disclosed to any third party.
VIII.1. Data forwarding in connection with contractual relationships
VIII.1.1. If Dora Goodman processes personal data electronically it uses an external server host provider, which contact details are the following:
- Company name: Umbrella Kreatív Műhely Kft.
- Registered seat: 1036, Budapest, Perc utca 2., Hungary
- Company registration number: 01-09-994695
- Tax number: HU13474799
- Represented by: Hídvégi Zoltán Balázs
- E-mail: privacy@umbrella.tv
VIII.2. Data forwarding related to contacting us / making a purchase through the Website
The engine that runs the Website and the contact form placed therein is provided by an external service provider named WordPress whose contact details are the following:
- Company name: Aut O’Mattic A8C Ireland Ltd. d.b.a. WordPress
- Registered seat: Business Centre, No.1 Lower Mayor Street, International Financial Services Centre, Dublin 1, Ireland
- Registration number: 538982
- Represented by: David Lenehan, Stuart West and Paul Sieminski directors
- E-mail: help@wordpress.com, privacypolicyupdates@automattic.com
- Phone: +1 877 273 3049
- Server location: Dublin, Ireland
(hereinafter as: “WordPress”)
WordPress published its privacy policy at: https://automattic.com/privacy/#how-and-why-we-use-information
VIII.3. Correspondence (e-mail)
Dora Goodman uses Gmail a product of Google Inc. to manage correspondence by e-mail.
- Company name: Google Ireland Ltd
- Registered seat: Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
- Registration number: 368047
- Represented by Elizabeth Margaret Cunningham director
- Phone: +353 1 436 1000
- Location of servers: Dublin, Ireland
(hereinafter as: “Google”)
Google processes EU related data within the territory of the European Union through its servers located in Dublin, Ireland. Google may not access, modify, delete, use or otherwise manipulate the User related data stored on the server provided by Google. If, for any reason, Google processes personal data outside the European Union, it will provide adequate protection in accordance with the provisions of the GDPR as a result of being subject to the SCC code of conduct. Learn more athttps://policies.google.com/privacy/frameworks
Google provides the protection of data on multiple levels, such as physically protecting data storage servers, which are secured and supervised by security guards and technicians, it restricts access to server rooms by its employees and by providing uninterruptible power supply and other state-of-the-art infrastructure, restricting access to data, continuously monitoring its system, encryption and firewall protection. The Google Privacy Policy is available at https://policies.google.com/privacy
VIII.4. Data forwarding related to payments
The payments made in connection with purchases made through the Website is processed by a third-party payment solution provider, which is:
- Company name: Barion Payment Zrt.
- Registered seat: 1117 Budapest, Infopark sétány 1. I. ép. 5. em. 5., Hungary
- Company registration number: 01-10-048552
- Tax number: 25353192-2-43
- Represented by: Sándor Kiss member of the board
- E-mail: adatvedelem@barion.com,
- Phone: +36 1 464 70 99
- Web: https://www.barion.com/en/
- DPO: Bálint Noszlopi (address: 1117 Budapest, Infopark sétány 1. I. ép. 5. em. 5., Hungary)
(hereinafter as: „Barion”)
The payment details are provided by the Customer directly to Barion, Dora Goodman does not receive any of these.
The privacy policy of Barion is available at: https://www.barion.com/en/privacy-notice/
VIII.5. Data forwarding related to invoicing
Dora Goodman issues its invoices with one of Hungary’s largest online billing system, szamlazz.hu. If the Customer provides his / her own data as billing data, then as described above, since it is considered as personal data it is subject to processing by Dora Goodman. Operator of szamlazz.hu website as our processing partner is:
- Company name: KBOSS.hu Kereskedelmi és Szolgáltató Korlátolt Felelősségű Társaság
- Registered seat: 1031 Budapest, Záhony utca 7., Hungary
- Company registration number: 01-09-303201
- Tax number: 13421739-2-41
- E-mail: info@szamlazz.hu
- Represented by: Balázs Ángyán as managing director
(hereinafter as: „KBOSS”)
KBOSS has a privacy policy complying with the GDPR which is available at: https://www.szamlazz.hu/adatvedelem/
VIII.6. Data forwarding related to accounting
To the below company performing accounting services for the Dora Goodman:
- Company name: Meyer & Levinson Korlátolt Felelősségű Társaság
- Registered seat: 1052 Budapest, Deák Ferenc tér 3. (MEYER & LEVINSON emelet), Hungary
- Company registration number: 01-09-902076
- Tax number: 14398209-2-41
- Represented by: Zoltán István Kristó managing director
- E-mail address: info@meyerlevinson.com
The subcontractor of the accountant is:
- Company name: Meyer & Levinson Accounting Korlátolt Felelősségű Társaság
- Registered seat: 1052 Budapest, Deák Ferenc tér 3. (MEYER & LEVINSON emelet), Hungary
- Company registration number: 01-09-928027
- Tax number: 14964303-2-41
- Represented by: Zoltán István Kristó managing director
- E-mail: info@meyerlevinson.com
VIII.7. Data forwarding for the purpose of enforcing claims
If Dora Goodman wishes to enforce a legitimate claim, it may transmit documents containing personal data. Dora Goodman is entitled to transfer personal data to a legal representative, authority or court for the purpose of raising and / or enforcing a claim.
VIII.8. Data forwarding related to newsletter subscriptions
The Dora Goodman uses the service named [_________________] to send its newsletters, the provider of which may be contacted at:
- Company name: __________________
- Registered seat: __________________
- Company registration number: __________________
- Tax number: __________________
- Represented by: __________________
- E-mail: __________________
IX.8.What third-party social media plug-ins may be found on our Website?
To receive feedback on the contents we share on the Website and to share them we use social media sites meaning we use the services (plugins) of third-party providers. The plugins are only active when You specifically click on the button to allow them to contact social media sites. The plugins of the following two social media sites can be found on our website: Facebook, Instagram, YouTube
If You are logged in to any of these sites it may occur that Your visit on the site will be attached to Your personal profile. If you click on the specific button, your browser will forward the relevant information directly to that social media site and store them there.
Information about the scope and purpose of the data collected, further processing of Your data and use of Your data by the social media provider, and Your rights regarding personal data can be found in privacy statements of the social media providers, which are available at:
Facebook: https://www.facebook.com/policy.php
Instagram: https://help.instagram.com/519522125107875
YouTube: https://www.youtube.com/static?template=terms
IX. To whom and in what cases are we required to disclose personal data?
We may be requested to disclose personal data we process to authorities upon request. Our company cannot be held liable for any such transfer or any resulting consequences. We will always inform You about the transfer.
X. What are the responsibilities with regard to the personal data You provide?
When You provide us Your personal data, you are responsible for ensuring that the information and contributions You make are true and correct.
We ask You to provide us third-party data only if specifically authorized to do so by the third party. Our company assumes no liability for any resulting claims.
If a third-party object the processing of personal data by credibly verifying his / her identity, we will immediately delete third-party data without notifying You. Please only provide third-party personal data only if you have informed the third party of the availability of this Policy.
Please do not provide any additional personal data other than the ones requested by the Service Provider under Section III. above. Should You provide any additional personal data to which was requested, then the Dora Goodman immediately makes them unrecognizable and irrevocably deletes them, furthermore the Dora Goodman excludes all liability for unsolicited personal data which was provided without the Dora Goodman’s request.
XI. Managing personal data breach
Any personal data breach that may occur will be reported to the supervisory authority within 72 hours from becoming known to us in accordance with the law, and we will also maintain records of any breach that may occur. In the cases specified by law, we also inform the Customers / Data subject’s concerned.
XII. Data Protection Officer (DPO)
Pursuant to Article 37 of the GDPR appointment of a DPO is mandatory if:
- a) the processing is carried out by a public authority or body, except for courts acting in their judicial capacity;
- b) the core activities of the controller or the processor consist of processing operations which, by virtue of their nature, their scope and/or their purposes, require regular and systematic monitoring of data subjects on a large scale; or
- c) the core activities of the controller or the processor consist of processing on a large scale of special categories of data pursuant to Article 9 and personal data relating to criminal convictions and offences referred to in Article 10.
With respect to that Dora Goodman is not subject to any of the clauses above and because there is no other compelling reason to appoint a DPO we are not appointing anyone for this position.
XIII. Amendment of the Privacy Policy
If the scope of the processed data, the legal ground of the processing or other circumstances change, this Policy will be amended and published in accordance with the provisions of the GDPR within 30 days from the amendment. Please be sure to read the Privacy Policy changes carefully as they contain important information about the processing of Your personal data.
XIV. Whom can You turn to for information in connection with Your personal data or to exercise Your rights against?
With Your questions related to personal data processing and the rights related thereto contact us at info@doragoodman.com by e-mail or by post at 1036 Budapest, Perc utca 2. III. em., Hungary.
The Customer / Data subject is entitled to exercise his / her rights related to the processing of personal data against Dora Goodman as controller. If the Customer / Data subject wishes to exercise his / her rights, he / she must notify Dora Goodman first.
If You feel that Your rights have been violated, you may make a complaint at the National Authority for Privacy and Freedom of Information:
Name: National Authority for Privacy and Freedom of Information
Address: 1055 Budapest, Falk Miksa utca 9-11., Hungary
Mailing address: 1363 Budapest, PO box: 9., Hungary
Phone: +36 1 391 1400
E-mail: ugyfelszolgalat@naih.hu
Website: http://www.naih.hu
