GDPR Privacy Notice / Saffy Marketplace

PRIVACY STATEMENT

1, INTRODUCTION

It is very important to us that we comply with the current data protection regulations and laws, so below we will discuss in detail the data protection steps and data collection processes of saffy.eu and the website operator Judit Válóczy EPU .

The data is processed by Válóczy Judit EPU, and this company is responsible for the processing of personal data.

Contact details:
Full legal name: Válóczy Judit EPU
E-mail address: info@saffy.eu
Postal address: 2040 Budaörs, Szabadság út 24.

2, WHAT PERSONAL DATA DO WE PROCESS AND WHY?

Personal data are those that clearly allow an individual to be identified accurately.

On the saffy.eu site, we process the following personal data, specifying the legal basis:

COMMUNICATION DATA
This includes any message you send to us via the website, email, social media or any other form of communication.

This data is processed and retained in order to fulfil orders and to provide a basis for a decision in the event of legal claims.

Our legal basis for processing this data is the user’s verifiable interest in our activities, as evidenced by the messages sent to us.

CUSTOMER DATA
This includes all information related to the purchase of products and services, such as the customer’s name, shipping and billing address, email address, telephone number, and product purchased.

This data is processed to ensure the successful fulfilment of orders and to keep a legally correct record of purchases.

The legal basis for the storage of data is the performance of the contract between the customer and Saffy Marketplace.

USER DATA
This includes data that is generated when you use the website, to enable the technical operation of the site, to maintain the security of the site, to keep a record of users’ activity and to ensure that you always have access to the most relevant content.

The legal basis for the processing of data is the clear interest of the user in our activities, which is necessary to ensure the technical functioning of the site and the storage of these data.

TECHNICAL DATA
This includes information generated when you use the site, such as your IP address, login information, browser information, time spent on each page, page views and navigation paths, the number and time of visits to the site, time zones, and the device you are using to view the site.

The data source is our analytics software.

We process this data to analyse users’ habits on the site, to keep our site secure and to understand the usefulness of our marketing decisions.

The legal basis for processing the data is the user’s clear interest in our activities, which allows us to process this data in accordance with security requirements and use it to increase business for more effective operations.

MARKETING DATA
Which includes the visitor’s preferences, what marketing content they like to receive from us. We process this data to enable participation in sweepstakes and to send advertising related to our products/services in which the user has expressed an interest.

The legal basis for processing the data is the user’s clear interest in our activities, which allows us to process this data in accordance with security requirements and use it to increase business for more effective operations.

From time to time, we may use the information collected for purposes such as providing targeted, relevant ads on the Facebook™ platform and various dynamic advertising platforms, and to measure the effectiveness of the ads.

The legal basis for processing the data is the user’s clear interest in our activities, which allows us to process this data in accordance with security requirements and use it to increase business for more effective operations.

We do not collect sensitive data such as ethnicity, religious beliefs, sexuality and orientation, political opinions and trade union membership, or health background, genetic or biometric information.

3, HOW DO WE COLLECT DATA?

We may collect personal information in ways that the user provides directly to us (for example, by placing an order or sending a message).

Furthermore, certain data is collected automatically when you use the site, for example. “cookies” and similar technologies. These are only activated with the user’s consent.

For more information, please see our Cookie Statement.

We receive certain information from external partners, such as analytics providers like Google (a partner outside the EU), advertising networks like Facebook™ (a partner outside the EU), and payment gateway partners like PayLike (a partner outside the EU).

4, OUR PRACTICAL STEPS ON DATA PROTECTION

It is of the utmost importance for saffy.eu to protect the privacy of its users and to comply with the applicable regulations. Therefore, after conducting a privacy impact assessment on this site, we have compiled a list of the data collected, its necessity and legal basis, and its legal compliance.

  • In order to protect the data entered on the forms and generated on the site, we use SSL certification throughout the website (Let’s Encrypt Authority X3 certification).
  • To protect the site against attack, we use premium security software (iThemes Security Pro) to protect your data from. “brute force” and virus attacks against the stored data.
  • The purchase and user data are stored in the site’s databases in encrypted form (pseudonymised), so they cannot be read by third parties.
  • In this privacy statement, we provide users with forms to request information about the processing of their personal data, to modify or delete their personal data.

From time to time, in the course of our business, we may need to provide data to our service partners (for example, hosting providers, courier companies, mailing software).

In such cases, we will always choose to comply with the GDPR regulation and, in the case of a US-based partner, participate in the EU-US Privacy Shield initiative and sign a data management contract with them, ensuring responsible data handling.

5, MARKETING COMMUNICATIONS

Marketing communication is essential to the business. The legal basis for the processing of data in this context is the expression of interest in our services or the explicit consent of users.

Under the European Union’s Privacy and Electronic Communications Regulations (PECR), we send marketing messages to our users if they have made a purchase from us or have expressly consented to receive marketing messages.

In all cases, we will provide a prominent means of opting out and unsubscribing from messages. A link to unsubscribe can be found at the bottom of each email, or you can request to be removed from the database by emailing info@saffy.eu.

We may also send you messages if you unsubscribe from marketing communications, but only in relation to the fulfilment of orders.

6, NOTE ON PERSONAL DATA

From time to time, it is necessary to share certain personal information with certain partners in order to maintain normal business operations:

-IT service providers and service providers that troubleshoot and maintain computer systems

-Specialist partners such as lawyers, accountants, bankers, insurers

-Governmental bodies that ask for reports on our activities

-Payment service providers who securely handle your credit card details

-Delivery services that fulfil incoming orders to the specified delivery address

International data transfers

We may need to share user data with partners outside the European Economic Area (EEA) from time to time in order to maintain our business.

In many cases, countries outside the EEA do not provide the same level of protection for data, and European laws prohibit the export of data unless the right conditions are met.

Whenever personal data is transferred outside the EEA we will do the following 4. in addition to the steps discussed in point (a), the following to ensure the secure processing of your data:

-We only transfer data to countries that the European Commission considers appropriate from a data security perspective.

-We only use US-based services that are part of the EU-US Privacy Shield data security initiative.

If the above conditions are not met, we will ask for the explicit consent of the users to transfer the data. Consent may be withdrawn at any time.

Links to external sites

This site may occasionally contain links to external sites, or may contain code snippets embedded in the site to provide external services.

Clicking on these links or using embedded solutions may allow external partners to collect data about users.

While we do our best to screen our partners properly, we have no control over their privacy practices and are not responsible for their privacy practices.

7, DURATION OF PROCESSING

We will only ever store users’ data for as long as we are required to do so by our legal/accounting/data reporting obligations or as necessary for the operation of the service.

When deciding on the length of storage, we take into account the volume, nature and sensitivity of the data and the potential impact of a data leak in the event of a data breach.

For tax reasons, we need to keep your customers’ billing and purchase information for at least 8 years to comply with our legal obligations.

In certain circumstances, we may use the data in an anonymised form for statistical purposes, in which case we will store the data without notice for an unlimited period of time.

8, VISITOR RIGHTS

As a citizen of the European Union, the General Data Protection Regulation (GDPR) gives users of this site the following rights:

a, Access to personal data

Site users have the right to request a copy of the personal data stored by Saffy Marketplace. The request will normally be fulfilled free of charge within 14 days of the request.

In the event of repeated, abusive, unjustified requests for data, Saffy Marketplace may charge a moderate fee to secure the data and may require additional time to secure the data.

In addition, Judit Válóczy EPU requests proof of identity before releasing the data to prevent misuse. To request personal data, please use the contact form below:

Data request / Data deletion / Data restriction

Full name

Email

Purpose of claim:

Delete data / Modify data / Restrict data collection / Request collected data / Data protection

I consent to the collection of my data so that I can receive the information requested. For more information, please visit our Privacy Policy page.

SEND THE APPLICATION

The bottom of the form

b, Changes to personal data

If personal data have been modified or incorrectly provided, users have the right to request that the data be amended. To change your personal data, please contact us at info@saffy.eu.

c, Requesting the erasure of personal data

Users have the right to request the deletion of all their personal data. Your request will be fulfilled free of charge within 14 days of the request. After deletion of personal data, the user account will no longer be accessible, and any materials purchased will also become inaccessible, as the personal data associated with the user account is essential to access the service.

Judit Válóczy EPU requests proof of identity before deleting personal data to prevent misuse. To delete your personal data, please use the contact form above.

d, Request restriction of processing of personal data

Users have the right to restrict the provision of their data to third parties (service partners) upon request. When submitting a request, you can also specify the service partners you wish to restrict.

It is important to note that cooperation with certain service providers is essential for the operation of the site (e.g. Barion as a payment service provider), so in case of their restriction, the services of the site will be inaccessible to the user.

Judit Válóczy EPU requests proof of identity before restricting the transfer of personal data to prevent misuse. To restrict the transfer of personal data, please use the contact form above:

In Austria, the official data protection authority can be found at:
https://www.dsb.gv.at/

9, ANONYMISED DATA AND “COOKIES”

On the saffy.eu site, in e-mail messages and advertisements, you use so-called. “cookies” and similar technologies such as tracking codes, re-marketing tags, pixels, which are activated after the user’s consent.

These technologies help us better understand user behaviour and interests, helping us to operate more efficiently and effectively.

Our aim is to make the use of Saffy Marketplace as user-friendly and personal as possible. If the user wishes to opt-out of the collection of non-personal data by these technologies, they can do so in the following ways:

-you can disable the loading of cookies by using the cookie warnings on the website

-by disabling “cookies” in your browser

For more information about additional cookies and tracking codes on saffy.eu, please see our Cookie Statement.

Shopping Cart