Privacy policy

Data processing information

Date of acceptance: 23/10/2021

Data Controller

Name: S.C. Musher SRL.

Registered office: Sanmartin nr. 309A, jud. Harghita, Romania

Mailing Address, complaint management: Miercurea-Ciuc, strada grâului, nr. 5, jud. Harghita, Romania

E-mail: [email protected]

Telephone: +40 740 021 856

Website: https://musherdog.com

Hosting provider

Name: Acws Bt.

Mailing Address: 8097 Nadap Kenderföldi út 32.

E-mail address: [email protected]

Telephone: +36302107552.

A description of the data processing carried out during the operation of the web shop

Information about the use of cookies

What is a cookie?

The data controller uses cookies when you visit the website. A cookie is a collection of letters and numbers that our website sends to your browser to save certain settings, to make it easier to use our website and to help us collect some relevant statistical information about our visitors.

Some cookies do not contain any personal information and are not designed to identify your individual user, but some of them contain a unique identifier – a secret set of numbers that are accidentally generated – that is stored on your device, for the purpose of you being able to identify yourself. The duration each cookie lasts is described in the respective sections.

Legal background and legal basis for cookies:

Under Article 6(1)(a) of the Regulation. The legal basis for the processing of data is your consent.

The main features of cookies used by this website are:

Google AdWords cookie

When someone visits our site, the cookie ID of the visitor is added to the remarketing list. Google uses cookies, such as NID and SID cookies, to customize advertisements in Google products, such as Google Search ads. For example, you use such cookies to record your recent searches, previous interactions with advertisements or search results for certain advertisers, and visits to the advertisers’ websites. The AdWords’s conversion tracking feature uses cookies. To track sales and other conversions from this advertisement, cookies are saved on your computer when you click an advertisement. Some common ways to use cookies are to select advertisements based on what is relevant for a particular user, improve campaign performance reports and avoid displaying advertisements that you have already viewed.

Google Analytics cookie

Google Analytics is a Google analysis tool that helps website and application owners to gain a more accurate picture of their visitors’ activities. The service can use cookies to collect information and report statistical data on the use of the website without personally identifying visitors to Google. The main cookie used by Google Analytics is ‘ga’. In addition to reporting about website usage statistics, Google Analytics, together with some of the advertising cookies described above, can also be used to display more relevant advertisements in Google products (such as Google Search) and across the Internet.

Remarketing cookies:

It may be displayed to former visitors or users when visiting other web sites on the Google Display network, or when searching for terms related to products or services.

Cookies that are essential for operation: These cookies are essential for using the web site and enabling you to use the basic features of the web site. Without these, many of the features of this page will not be available to you. These types of cookies are limited to the duration of your session.

Cookies to improve user experience: These cookies collect information about how you uses the web site, such as which sites you visit most often or what error message you receive from the web site. These cookies do not collect information that identifies you, so they work with completely generic anonymous information. The information derived is used to improve the performance of the website. These types of cookies are limited to the duration of your session.

Session cookie:

These cookies store the visitor’s location, the browser language, the payment currency, and they are deleted when the browser is closed or up to 2 hours.

Facebook pixel (Facebook cookie)

Facebook pixels are a code that allow you to report on conversions on the website, to set up target audiences, and to provide the site owner with detailed analysis of the use of the visitors’ website. Facebook pixels allow visitors to display personalized offers and advertisements on Facebook. Refer to Facebook for their data processing policy: https://www.facebook.com/privacy/explanation

 

Data processed for the purposes of contract conclusion and performance

A number of data may be processed in order to conclude and perform the contract. Please be informed that data processing complaints and warranty claims will only be carried out if you exercise one of these rights.

If you do not purchase through the web site, only visit the web site, then you are only subject to data processing for marketing purposes if you give us your consent thereof.

More details on the processing of data for the purposes of contracting and performance:

Registering on the web site

By storing the information provided during the registration, the controller can provide a more convenient service (e.g. data from the data subject need not be provided again when a new purchase is made). Registration is not a condition for contracting.

Processed data

During processing, the controller manages your name, address, telephone number, e-mail address, the characteristics of the product purchased and the time of purchase.

Duration of the processing of data

Until your consent is withdrawn.

Legal basis for the processing of data

Your voluntary consent, provided to the controller by registering (data processing pursuant to Article 6(1)(a) of the Decree).

Processing the order

Data processing related to the processing of orders is necessary for the performance of the contract. Processed data

During processing, the controller manages your name, address, telephone number, e-mail address, the characteristics of the product purchased, the order No. and the time of purchase.

If you place an order in the web site, data processing and providing your information are essential for the performance of the contract.

Duration of the processing of data

The data will be processed for 5 years as per the civil law limitation period.

Legal basis for the processing of data

Performance of the Contract (data processing pursuant to Article 6(1)(b) of the Decree).

Issuing the invoice

Data processing shall be carried out in order to issue an invoice pursuant to laws and regulations and to comply with the obligation to keep an accounting document. Pursuant to Article 2(1) of the Accounting Act, companies must keep accounting documents supporting the accounts directly and indirectly.

Processed data

Name, address, e-mail address, telephone number, items purchased.

Duration of the processing of data

Pursuant to Article (2) of the Accounting Act, all invoices shall be kept for a period of 8 years from the date of issue.

Legal basis for the processing of data

Pursuant to Article (1) of the Act CXXVII of 2007 on value added tax (hereinafter VAT Act),   issuing an invoice is compulsory and must be stored for 8 years pursuant to Article (2) Act C of 2000 on Accounting (data processing pursuant to Article6(1)c) of the Decree).

Data processing related to the delivery of goods

Data is processed for the purposes of delivering the product.

Processed data

Name, address, e-mail address, telephone number.

Duration of the processing of data

The controller shall process the data until the time of delivery of the goods ordered.

Legal basis for the processing of data

Performance of the contract (data processing pursuant to Article 6(1)(b) of the Decree).

The courier service shall be involved in the delivery of the order on the basis of a contract with the data controller. The courier service shall handle the personal information received as specified in the data processing policy available on its website.

Warranty and guarantee claims

Warranty and guarantee claims shall be treated pursuant to Decree No. 19/2014 (IV.29.) NGM, which also specifies how such claims are to be handled.

Processed data

Warranty and guarantee claims shall be treated pursuant to Decree No. 19/2014 (IV.29.) NGM.

In compliance with the Decree, we are obliged to prepare a record of the warranty or guarantee claim you submitted to us, in which we will record:

1. your name, address and statement that you agree to the processing of your data in the records as specified in the Decree,
2. the description and purchase price of the movable property sold under a contract between you and us,
3. the date of performance of the contract,
4. date of notification of the fault,
5. description of the fault,
6. the right you wish to exercise by filing your claim for warranty or guarantee, and
7. the manner in which the claim for warranty or guarantee is settled or the grounds for rejecting the claim or the exercise of the right thereof.

If we take over the purchased product from you, we must issue a receipt thereof, indicating the following:

1. your name and address,
2. the particulars necessary to identify the item,
3. the date of receipt of the item, and
4. the time at which you can take over the repaired item.

Duration of the processing of data

The enterprise shall keep a record of the consumer’s warranty or guarantee claim for a period of three years from the date on which it was raised and provide it at the request of the supervisory authority.

Legal basis for the processing of data

The legal basis for data processing is our compliance with [Article 4(1) and 6(1)] Decree No. 19/2014 (IV.29.) NGM, (data processing pursuant to Article6(1)c) of the Decree).

Processing other consumer complaints

Data is processed for the purposes of processing consumer complaints. If you have lodged a complaint with us, it is unavoidable that we process your data and that you provide us your data.

Processed data

Customer name, telephone number, email address, contents of complaint.

Duration of the processing of data

We will keep warranty claims for 3 years under the Consumer Protection Act.

Legal basis for the processing of data

Whether you are lodging a complaint with us or not is your voluntary decision, but if you do choose us,  we are obliged to store the complaint for 5 years pursuant to Act CLV of 1997 on Consumer Protection (data processing pursuant to Article6(1)c) of the Decree).

Data processing for marketing purposes

Data processing for the purposes of newsletters

Data is processed for the purposes of sending newsletters.

Processed data

Name, address, e-mail address, telephone number.

Duration of the processing of data

Until the data subject’s consent is withdrawn.

Legal basis for the processing of data

Your voluntary consent, provided to the controller by subscribing to the newsletter (data processing pursuant to Article 6(1)(a) of the Decree).

Data processing for the purposes of sending and displaying personalized ads

Data processing is used to send advertising content that is appropriate to the interests of the data subject.

Processed data

Name, address, e-mail address, telephone number.

Duration of the processing of data

Until your consent is withdrawn.

Legal basis for the processing of data

Your voluntary consent, provided to the controller by submitting your data (data processing pursuant to Article 6(1)(a) of the Decree).

Remarketing

Data processing as remarketing is carried out by using cookies.

Processed data

Information processed by the cookies specified in the cookie information.

Duration of the processing of data

Regarding the storage period of the cookie, for more information, please visit:

General cookie information of Google:
https://www.google.com/policies/technologies/types/

Google Analytics brochure:

https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage?hl=hu

Facebook information:

https://www.facebook.com/ads/preferences/?entry product=ad settings screen

Regarding the storage period of the cookie, for more information, please visit:

General cookie information of Google: https://www.google.com/policies/technologies/types/

Google Analytics brochure: https://developers.google.com/analytics/devguides/collection/analvticsjs/cookie- usage?hl=hu

Legal basis for the processing of data

Your voluntary consent, provided to the controller by choosing to use the website (data processing pursuant to Article 6(1)(a) of the Decree).

Further processing of data

Where the controller intends to carry out further processing, the controller shall provide prior information on the relevant circumstances of the processing (legal background and legal basis of the processing, purpose of the processing, scope of the data processed, duration of the processing).

Please be informed that written requests by the authorities for information, on the basis of a law, must be met by the controller. The controller shall keep records of the data transfers pursuant to Article 15(2-3)   of the Act CXII of 2011 (“Privacy Act”) (to which authority, on what legal basis, when the data was transferred), the content of which the controller shall provide information about upon request, unless such information is legally excluded.

Recipients of personal data

The processing of personal data

Name of the processor: Acws Bt.

Data processor contact details:

Telephone: +36302107552.

E-mail address: [email protected]

Registered office: 8097 Nadap Kenderföldi út 32.

Website: www.directhosting.hu

The processor shall store personal data on the basis of a contract with the controller. They are not entitled to know your personal information.

Data processing activities related to the newsletters

Name of the company that operates the newsletter system:

The Rocket Science Group LLC.

Seat of the company that operates the newsletter system:

675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308 USA

Phone number of the company that operates the newsletter system:

E-mail address of the company that operates the newsletter system: [email protected]

Website of the company that operates the newsletter system: mailchimp.com

The processor shall cooperate in the sending of newsletters on the basis of a contract with the controller. In doing so, the processor shall manage the data subject’s name and e-mail address to the extent necessary for the purposes of the sending of the newsletter.

Data processing for the purposes of accounting

Name of the processor: SPITZ Számviteli és Szolg. Bt.

Seat of the processor: 1039 Budapest, Lukács György u. 9 4/13

Phone number of the processor: +36204549293

E-mail address of the processor: [email protected]

Website of the processor:

The processor shall cooperate in the bookkeeping of accounts on the basis of a contract with the controller. In doing so, the processor shall manage the data subject’s name and address to the extent necessary for the purposes of accounting records   for the duration specified in Article 169(2) of the Accounting Act, after which these shall be deleted without delay.

 

Website of the processor:

The processor shall cooperate in the administration of accounts on the basis of a contract with the controller. In doing so, the processor shall manage the data subject’s name and address to the extent necessary for the purposes of accounting records  for the duration specified in Article 169(2) of the Accounting Act, after which these shall be deleted.

 

The right to withdraw consent

You have the right to withdraw your consent to data processing at any time, in which case the data entered is deleted from our systems. Please note, however, that for any uncompleted orders, the withdrawal may result in cancellation and we will not be able to deliver the orders to you. In addition, if the purchase has already been completed, we cannot delete the billing information from our systems due to accounting regulations, and if you owe us, we can process your data for the legitimate interest of recovering our claim from you even if your consent is withdrawn.

Access to personal data

You have the right to receive feedback from the controller on whether your personal data are being processed and, if data is being processed, you have the right to:

• access the personal data processed and
  • receive the following information by the controller
    • the purposes of data processing,
    • categories of your processed personal data,
    • information about the recipients or categories of recipients to whom the personal data have been or will be disclosed by the controller;
    • the planned duration of the storage of personal data or, where this is not possible, the criteria for determining that duration,
    • your right to apply to the controller for rectification, erasure or restriction of the processing of personal data relating to you, and to object to the processing of such personal data in the event of data processing of a legitimate interest;
    • the right to lodge a complaint addressed to the supervisory authority;
    • if the data have not been collected from you, any available information on their source
    • the existence of automated decision-making (if any), including profiling, and at least in such cases the logic employed and information about the significance of such data management and the likely consequences for the data subject.

The purpose of the exercise of the right may be to establish and verify the lawfulness of the processing and, therefore, if multiple requests are made, the controller is entitled to request reasonable compensation in exchange for providing the information.

The controller shall ensure your access to the personal data and information pon your identification, by sending you the processed personal data and information in email. If you are registered, we provide access by allowing you to enter your account to view and verify your personal information.

Please indicate in your request that you are requesting access to personal data or information about the processing of data.

Right to rectification

You shall have the right to rectify any inaccurate personal data that you are entitled upon request by the Data Controller without undue delay.

Right to restrict processing

You have the right to have the Data Controller restrict the processing of data at your request if one of the following conditions is met:

• You contest the accuracy of the personal data, in which case the restriction shall apply for a period of time that allows the controller to verify the accuracy of the personal data, and if the precise data can be established immediately, then the restriction shall not be imposed;
  • Data processing is unlawful, but you are opposed to the deletion of data for any reason (for example, because the data is important to you because of a legal need) and therefore do not ask for the deletion of the data but instead request the restriction of their use;
  • the Controller no longer needs the personal data for the referenced purposes of processing, but you require it for bringing, exercising or defending legal claims; or
  • You have objected to the processing, but the legitimate interest of the controller may be grounds for processing; in this case, until it is established whether the legitimate grounds of the controller prevail over your legitimate grounds, the processing should be restricted.

In the case of restricting of data processing, such personal data may only be managed with the consent of the person concerned, with the exception of storage, with the submission, validation or protection of legal claims or in the protection of the rights of a natural or legal person, or in the public interest of the Union or of a Member State.

The controller shall inform you in advance (at least 3 working days before the restriction is lifted) of the lifting of the restriction.

Right to erasure, right to be forgotten

You are entitled to have the personal data relating to you deleted without undue delay if any of the following reasons apply:

• the personal data is no longer required for the purpose from which the data controller have collected or otherwise handled them;
  • You withdraw your consent and there are no other legal basis for data management;
  • You object to data processing based on legitimate interests and there is no overriding legitimate reason (i.e. legitimate interest) for the processing of data,
  • the personal data have been unlawfully processed by the controller and this has been established on the basis of the complaint,
  • the personal data are to be deleted in order to comply with the legal obligation imposed on the data controller in the Union or Member States’ law;

Where, for any legitimate reason, the controller has made the personal data processed from you publicly available and is obliged to delete it for any reason stated above, he shall take reasonable steps, including technical measures, taking into account the technology available and the costs of implementation, to inform other controllers handling the data that you have requested the links to the personal data in question or a copy or a copy of those personal data be deleted.

Where the processing is necessary, the deletion shall not apply:

• to exercise the right to freedom of expression and information;
  • the personal data are processed in order to comply with the legal obligation imposed on the data controller in the Union or Member States’ law (such cases are data processing for the purposes of invoicing, as storing invoices is required by law), an to carry out a task carried out in the exercise of public authority exercised in the public interest or on the data controller;
  • submission, validation or protection of legal claims (e.g. if the controller has a claim towards you and has not yet fulfilled it, or if a consumer or data processing complaint is pending).

Right to object

You have the right to object at any time to the processing of your personal data on grounds relating to your situation. In this case, the data controller may not process the personal data unless the data controller proves that the data processing is justified by compelling reasons of lawfulness that prevail over the interests, rights and freedoms of the data subject, or for the purpose of submitting, enforcing or protecting legal claims related.

If your personal data is handled for direct business, you are entitled to object at any time to the handling of personal data relating to that purpose, including profiling, if it is related to direct business acquisition. If you object against the personal data processing for direct business purposes, personal data may no longer be handled for that purpose.

Right to data portability

If the processing is carried out by automated means, or if the processing is based on your voluntary consent, you have the right to ask the controller to give you the data you provided to the controller, which you shall receive in xml, JSON or csv format, if technically feasible, and you may request that the controller transfer the data to another controller in this format.

Automated decision-making

You have the right not to be subject to any decision (including profiling) based solely on automated data management that would have a legal effect on you or would similarly significantly affect you. In these cases, the data controller shall take appropriate measures to protect the rights, freedoms and legitimate interests of the data subject, including at least the right of the data subject to request human intervention, submit an objection.

The above shall not apply if the decision is:

• Necessary for the conclusion or performance of a contract between you and the controller;
  • be made available to the data controller by means of Union or Member State law which also lays down appropriate measures to protect your rights and freedoms and legitimate interests; or
  • is based on your explicit consent.

Logging in to the data protection register

Pursuant to the provisions of the Privacy Act, the controller may have obligations to register certain data processing activities to the data protection register. This notification obligation ceased on 25 May 2018.

Data security measures

The controller States that he has taken appropriate security measures to protect personal data against unauthorized access, alteration, transmission, disclosure, erasure or destruction, and against accidental destruction and damage and loss of access as a result of changes in the technique used.

The controller shall, as far as organizational and technical possibilities are concerned, make every effort to ensure that the data processors also take appropriate security measures when processing your personal data.

Remedies

We also inform you that, in the event of a breach of the legal provisions on data processing, or if the controller has failed to comply with an application, you may initiate a civil action before a court against the controller.

Amending the data processing information

The controller shall have the right to amend this information notice in a manner that does not affect the purpose and legal basis of the data processing. if you use the website after the amendment has entered into force, you accept the revised data processing information.

Where the controller intends to carry out further processing of data concerning the data collected for purposes other than those for which they were collected, the controller shall inform you of the purpose of the processing and of the following information before further processing:

• the planned duration of the storage of personal data or, where this is not possible, the criteria for determining that duration,
  • your right to request access to, rectification, erasure or restriction of the personal data relating to you, and in the case of data processing for a legitimate interest, to object to the processing of personal data and, in the case of data processing based on consent or contractual relationship, to the exercise of the right to data portability

• in the case of consent-based data processing, that consent may be revoked at any time by you,
  • the right to lodge a complaint addressed to the supervisory authority;
  • whether the provision of personal data is based on a legal or contractual obligation or is a prerequisite for the conclusion of a contract and whether the data subject is obliged to provide personal data and the possible consequences of the lack of data provision;
  • the existence of automated decision-making (if any), including profiling, and at least in such cases the logic employed and information about the significance of such data management and the likely consequences for the data subject.

If the legal basis is consent, data processing may only be initiated after it is given, and besides being notified, you also have to give your consent.

This document contains all relevant information about the functioning of the web shop pursuant to the General Data Protection Regulation (EU) No 2016/679 (GDPR) and Act CXII of 2011(“Privacy Act”).