Privacy Policy

Acceptance Date: 2024-04-23

Data Controller

Name: Pit Box Kft.

Head office: 2600 Vác, Rózsa utca 3/A 1em. 2adt.

Postal address, complaints handling: 2600 Vác, Rózsa utca 3/A 1em. 2adt.

Email: sales@fansbrands.com

Phone: +1 (213) 454-09-57, +44 20 4525 6774

Website : https://fansbrands.fr/

Hosting service provider

Name: UNAS Online Kft.

Postal address: 9400 Sopron, Kőszegi út 14.

Email: unas@unas.hu

Phone number:

Name: Shopify Commerce Singapore Pte. Ltd.

Postal address: 77 Robinson Road, #13-00 Robinson 77, Singapore 068896

Email:

Phone number

Description of data processing activities carried out in connection with the operation of the online store

This document contains all relevant information on data processing regarding the operation of the online store in accordance with the General Data Protection Regulation (2016/679) of the European Union (hereinafter: Regulation or GDPR) and Act CXII of 2011 (hereinafter: Privacy Act).

Information on the use of cookies

What is a cookie?

When visiting the website, the data controller uses cookies. A cookie is a piece of information consisting of letters and numbers that is sent to your browser by our website in order to save certain settings, make our website easier to use, and help us collect relevant statistical information about our visitors.

Some cookies do not contain personal information and do not allow individual users to be identified, but other cookies contain a unique identifier, i.e. a randomly generated secret sequence of numbers, which will be stored by your device and will therefore allow you to be identified. The duration of operation of each cookie is indicated in the corresponding description.

Legal context and legal bases of cookies:

The legal basis for the processing is your consent in accordance with Article 6(1)(a) of the Regulation.

Main characteristics of the cookies used by the website:

Strictly necessary cookies:

If you do not accept the use of cookies, some functions will not be available to you.

Cookies strictly necessary for operation: These cookies are essential for the use of the website and enable the use of basic functions of the site. Without these cookies, certain functions of the site will not be available. The lifespan of these cookies is limited exclusively to the duration of the session.

Session cookies: These cookies store the user's location, browser language, and payment currency. Their lifespan extends until the browser is closed or a maximum of 2 hours.

Age-restricted content cookies: These cookies record the fact of approval of age-restricted content and that the data subject is over 18 years of age, their lifespan lasts until the browser is closed.

Recommended product cookies: These cookies store the list of products to be recommended, using the "Recommend to a friend" function. They last for 60 days.

Mobile version, design cookies: These cookies detect the device used by the visitor and switch to full display on mobile. They last for 365 days.

Acceptance cookies: By accessing the website, you accept the cookie storage statement in the appropriate window. Their lifespan is 365 days.

Exit Cookies #2: Logs the visitor out after 90 days as per option #2. Their lifespan is 90 days.

Backend ID cookies: Identifier of the backend server serving the site. Their lifespan extends until the browser is closed.

Statistical cookies:

Google Analytics Cookies: Google Analytics is Google's analytics tool that allows website and app owners to get a more accurate picture of their visitors' activities. The service may use cookies to collect information and report statistical data on website usage without identifying individual visitors to Google. Google Analytics primarily uses "__ga" cookies. In addition to providing statistical data on website usage, Google Analytics, along with the advertising cookies described above, may also be used to display more relevant ads within Google products (e.g., in Google Search) and across the web.

Cookies to improve the user experience: These cookies collect information about how the user uses the website, for example, which pages the user visits most often or what error messages they receive from the website. These cookies do not collect information that identifies the visitor, i.e. they work with completely general and anonymous information. They use the data extracted from this information to improve the performance of the website. The lifespan of these cookies is limited exclusively to the duration of the session.

Reference cookies: These cookies record the external websites from which the visitor arrived at the site. Their lifespan is limited to the time the browser is closed.

Last viewed product cookies: These cookies record the last product viewed by the visitor. They last for 60 days.

Last viewed category cookies: These cookies record the last viewed category. They last for 60 days.

Shopping cart cookies: These cookies store the products added to the shopping cart. They last for 365 days.

Smart Offer Cookies: These store the conditions under which smart offers were displayed (e.g., whether the visitor has previously visited the site or placed an order). They last for 30 days.

Marketing cookies:

Google Adwords Cookies When someone visits our website, the visitor's cookie ID is added to the remarketing list. Google uses cookies—for example, NID and SID cookies—in Google products, for example, to personalize the ads shown in Google Search. Google uses these cookies to remember your past searches, your interactions with certain advertisers' ads or search results, or your visits to advertisers' websites. AdWords conversion tracking uses cookies. To track sales and other conversions resulting from advertising, cookies are stored on the user's computer when the user clicks on the ad. Cookies are commonly used to select ads based on their relevance to the user, to improve campaign performance reports, and to avoid showing ads that the user has already seen.

Remarketing cookies: These cookies may appear to previous visitors or users when they browse other websites within the Google Display Network or when they search for terms related to its products or services.

Facebook Pixel (Facebook cookies) The Facebook pixel is a code that allows website conversion reporting, compiles target audiences, and provides the website owner with detailed analysis of website visitor usage. The Facebook pixel allows personalized ads to be displayed to website visitors on the Facebook platform. You can view Facebook's privacy policy here: https://www.facebook.com/privacy/explanation

You can find further information on deleting cookies at the following links:

Internet Explorer : http://windows.microsoft.com/en-us/internet-explorer/delete-manage-cookies#ie=ie-11

Firefox : https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer

Mozilla : https://support.mozilla.org/hu/kb/weboldalak-altal-elhelyezett-sutik-torlese-szamito

Safari : https://support.apple.com/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Chrome : https://support.google.com/chrome/answer/95647

Edge : https://support.microsoft.com/hu-hu/help/4027947/microsoft-edge-delete-cookies

Data processed for the purposes of concluding and performing the contract

In order to conclude and execute the contract, several cases of data processing may occur. We inform you that the processing of data relating to the management of complaints and the administration of warranty rights will only be carried out if you exercise one of these rights.

If you do not make a purchase through the online store, but are only a visitor, the provisions regarding data processing for marketing purposes may apply to you if you give us your consent to this.

The data processing activities for the purpose of concluding and executing the contract in detail are as follows:

Contact

If, for example, you contact us by email, contact form, or telephone with a product inquiry, prior contact is not required; you can order from the online shop at any time without contact.

Data processed

The data you provide to us when you contact us.

Duration of data processing

We only process data until the contact is completed.

Legal basis for data processing

Your voluntary consent given to the data controller by contacting us. [Data processing pursuant to Article 6(1)(a) of the Regulation.

Registration on the website

By storing the data provided during registration, the controller can provide a more convenient service (for example, the data subject will not have to provide their data each time they make purchases on the website). Registration is not a necessary condition for concluding a contract.

Data processed

FansBRANDS® - Official Motorsport Fan Shop

When processing data, the controller processes your name, address, telephone number, email address, characteristics of the purchased products and the date of purchase.

Data processing period

FansBRANDS® - Official Motorsport Fan Shop Until you withdraw your consent.

Legal basis for data processing

Your voluntary consent given to the data controller by registration. [Data processing pursuant to Article 6(1)(a) of the Regulation.

Order processing

Data processing activities in the context of order management, necessary for the execution of the contract.

Data processed

FansBRANDS® - Official Motorsport Fan Shop

When processing data, the controller processes your name, address, email address, characteristics of the purchased products, order number and date of purchase.

If you place an order in the online shop, data processing and provision of data are unavoidable for the execution of the contract.

Data processing period

FansBRANDS® - Official Motorsport Fan Shop

We process data for 5 years, in accordance with the limitation period under civil law.

Legal basis for data processing

Performance of the contract. [Data processing pursuant to Article 6(1)(b) of the Regulation.

Issuance of the invoice

Data processing is carried out for the purpose of issuing an invoice in accordance with the law and fulfilling the obligation to retain accounting documents. In accordance with Article 169, paragraphs 1 and 2 of the Accounting Act, economic organizations must retain accounting documents that directly and indirectly support the accounting records.

Data processed

FansBRANDS® - Official Motorsport Fan Shop Name, address, email address, phone number.

Data processing period

In accordance with Article 169, paragraph 2 of the Accounting Act, issued invoices must be kept for 8 years from their issue.

Legal basis for data processing

Pursuant to Article 159(1) of Act CXXVII of 2007 on Value Added Tax, the issuance of an invoice is mandatory and, pursuant to Article 169(2) of the Accounting Act, issued invoices must be kept for eight years. [Data processing pursuant to Article 6(1)(c) of the Regulation].

Processing of data relating to the delivery of products

Data processing is carried out for the purpose of delivering the ordered product.

Data processed

FansBRANDS® - Official Motorsport Fan Shop Name, address, email address, phone number.

Data processing period

FansBRANDS® - Official Motorsport Fan Shop

Data processing is carried out for the purpose of delivering the ordered product.

Legal basis for data processing

Execution of the contract. [ Recipients and data controllers for the delivery of goods

Name of recipient: GLS General Logistics Systems Hungary Csomag-Logisztikai Kft.

Recipient's registered office: 2351 Alsónémedi, GLS Európa u. 2.

Telephone number of the recipient: 06-29-88-67-00

Email address of the recipient: info@gls-hungary.com

Recipient's website : https://gls-group.eu/HU/hu/home

The courier service participates in the delivery of the ordered product on the basis of the contract concluded with the data controller. The courier service processes the data provided to it in accordance with the privacy policy available on its website.

Recipient Name: UPS

Recipient's registered office: Atlanta, Egyesült Államok

Recipient's phone number: +36 1 877 0000

Recipient's email address : https://www.ups.com/upsemail/input?loc=hu_HU

Recipient website : https://www.ups.com/

Warranty Claims Management

Regarding warranty rights, we must proceed in accordance with Decree 19/2014. (IV. 29.) of the Minister of National Economy, which determines the procedures for managing these claims.

Data processed

FansBRANDS® - Official Motorsport Fan Shop

Regarding warranty rights, we must proceed in accordance with Decree 19/2014. (IV. 29.) of the Minister of National Economy.

In accordance with this decree, we must record the guarantee request notified to us, in which we record

your name, address and a declaration that you consent to the processing of your data indicated in the registration in accordance with the decree,
the name and purchase price of the material object sold under the contract concluded between us, c. the date of execution of the contract,
date of reporting of the defect,
the description of the defect,
the right you wish to assert on the basis of your warranty right, and
the manner in which the warranty claim was handled or the justification for rejecting the right you wish to assert on the basis of the claim.

If we take back the purchased product, we must issue an acknowledgment of receipt which must include the following elements:

your name and address
the data necessary for the identification of the object,
the date of receipt of the item, and
the date you can accept the repaired item.

Duration of data processing

FansBRANDS® - Official Motorsport Fan Shop

The company is obliged to keep the record of the warranty claim submitted by the consumer for three years from the date of registration, and to present it to the supervisory authority at the request of the supervisory authority in this regard.

Legal basis for data processing

The legal basis for data processing is compliance with the legal obligations prescribed by Decree 19/2014 (IV.

29.) of the Minister of National Economy [paragraph (1) section 4. and paragraph (1) section 6] [Data processing pursuant to Article 6, paragraph 1, point c), of the Regulation].

Handling other consumer protection complaints

Data processing will be carried out for the purpose of handling consumer protection complaints. If you contact us with a complaint, the processing and provision of data will be unavoidable.

Data processed

FansBRANDS® - Official Motorsport Fan Shop

Buyer's name, telephone number, email address, content of the complaint.

Data processing period

FansBRANDS® - Official Motorsport Fan Shop

Consumer complaints are kept for 3 years, in accordance with consumer protection law.

Legal basis for data processing

You may voluntarily decide to submit a complaint to us, but if you do so, we are obliged to retain your complaint for a period of 3 years in accordance with paragraph (7) of Article 17/A of the CLV Act 1997 on Consumer Protection [Data processing pursuant to Article 6(1)(c) of the Regulation].

Data processed as part of the consent verification

When registering, placing an order or subscribing to a newsletter, the computer system stores the consent-related computer data for evidentiary purposes.

Data processed

FansBRANDS® - Official Motorsport Fan Shop

The date of consent and the IP address of the data subject.

Data processing period

FansBRANDS® - Official Motorsport Fan Shop

Due to compliance with legal provisions, consent must be verifiable at a later date. Therefore, the data is stored for the limitation period following the end of data processing.

Legal basis for data processing

This obligation is prescribed by Article 7(1) of the Regulation [Data processing pursuant to Article 6(1)(c) of the Regulation].

Processing of data for marketing purposes Processing of data related to sending newsletters

Data processing is carried out for the purpose of sending newsletters.

Data processed

FansBRANDS® - Official Motorsport Fan Shop Name, address, email address, phone number.

Data processing period

FansBRANDS® - Official Motorsport Fan Shop

Until the withdrawal of consent by the data subject.

Legal basis for data processing

Your voluntary consent given to the data controller by subscribing to the newsletter. [Data processing pursuant to Article 6(1)(a)

Article 6(1)(a) of the Regulation].

Processing of data relating to the sending and display of personalized advertising

The data processing is carried out for the purpose of sending advertising content based on the interests of the data subject.

Data processed

FansBRANDS® - Official Motorsport Fan Shop Name, address, email address, phone number.

Data processing period

FansBRANDS® - Official Motorsport Fan Shop Until you withdraw your consent.

Legal basis for data processing

Your voluntary and separate consent given to the data controller at the time of data collection. [Data processing pursuant to Article 6(1)(a)]

Article 6(1)(a) of the Regulation].

Remarketing

Data processing is carried out as part of a remarketing activity, activated by cookies.

Data processed

FansBRANDS® - Official Motorsport Fan Shop

Data processed by cookies defined in the cookie notice.

Data processing period

The period for which the data is stored by the cookie in question. Further information is available here: General information about Google cookies : https://www.google.com/policies/technologies/types/ Information about Google Analytics : https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage?hl=hu Information about Facebook:

https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen

Legal basis for data processing

Your voluntary consent given to the data controller by using the website. [Data processing in accordance with Article

6, paragraph 1, point (a), of the Regulation].

Competition

Data processing is carried out for the purpose of organizing competitions.

Data processed

FansBRANDS® - Official Motorsport Fan Shop Name, email address, phone number.

Data processing period

FansBRANDS® - Official Motorsport Fan Shop

The data will be deleted after the competition closes, with the exception of the winners' data, which the data controller is required to keep for 8 years in accordance with the Accounting Act.

Legal basis for data processing

Your voluntary consent given to the data controller by using the website. [Data processing in accordance with Article

6, paragraph 1, point (a), of the Regulation].

Additional data processing activities

If the controller intends to carry out further data processing activities, it will provide prior information on the actual circumstances of the data processing (legal context and legal basis for data processing, scope of data processed, duration of data processing).

Recipients of personal data Activities of data controllers for the storage of personal data

Name of the data controller: UNAS Online Kft.

Contact details of the data controller:

Telephone number of the data controller:

Email of the data controller: unas@unas.hu

Head office of the controller: 9400 Sopron, Kőszegi út 14.

Website of the data controller: unas.hu

The data processor stores personal data on the basis of a contract concluded with the data controller. The data controller has no right to access personal data.

Name of the data controller: Shopify Commerce Singapore Pte. Ltd.

Contact details of the data controller:

Telephone number of the data controller:

Email of the data controller:

Registered office of the controller: 77 Robinson Road, #13-00 Robinson 77, Singapore 068896

Website of the data controller: https://www.shopify.com/

The data controller stores personal data on the basis of a contract concluded with the data controller. The data controller does not have the right to access personal data.

Activities of data controllers related to sending newsletters

Name of the company that manages the newsletter system: UNAS Online Kft.

Registered office of the company operating the newsletter system: 9400 Sopron, Kőszegi út 14.

Telephone number of the company managing the newsletter system:

Email address of the company managing the newsletter system: unas@unas.hu

Website of the company managing the newsletter system: unas.hu

The data controller is involved in sending newsletters within the framework of a contract concluded with the data controller. As part of this participation, the controller processes the name and address of the data subject, to the extent necessary for sending the newsletters.

Activities of data controllers related to sending newsletters

Name of the company operating the newsletter system: ActiveCampaign

Headquarters of the company operating the newsletter system: 150 North Michigan Avenue Suite 1230 Chicago, IL 60601 United States

Phone number of the company managing the newsletter system: +1 (773) 904-0945

Email address of the company managing the newsletter system: privacy@activecampaign.com

Website of the company that manages the information system: https://www.activecampaign.com

Activities of data controllers related to sending newsletters

Name of the company that manages the newsletter system: The Marketing Manager

Registered office of the company operating the newsletter system: Romania - Badea Cartan 66, District 2, Bucharest,

Office 3, Zone II, Room 2, Bl. 40, Sc.A, Et.5, Ap.26,

Telephone number of the company that manages the information system: +40724470432

Email address of the company managing the newsletter system: iam@themarketer.com

Website of the company that manages the newsletter system: https://themarketer.com/

Activities of data controllers related to sending newsletters

Name of the company operating the newsletter system: Klavyio

Registered office of the company operating the newsletter system: 49 Southwark Bridge Rd London SE1 9HH, UK Telephone number of the company operating the newsletter system:

Email address of the company managing the newsletter sending system: sales@klaviyo.com

Website of the company that manages the information system: https://www.klaviyo.com/

Processing of accounting data

Name of the data controller: P-Kontroll Bt.

Registered office of the controller: 2600 Vác, Pap Béla u. 10.

Telephone number of the data controller: +36-27/316-210

Email of the data controller: konyveles@pkontroll.hu

Website of the data controller: www.pkontroll.hu

The data controller is involved in the accounting process based on a written agreement with the data controller. As part of this involvement, the data controller processes the name and address of the data subject, insofar as they are necessary for the accounting process, for the period referred to in Section 169(2) of the Accounting Act, and deletes them immediately thereafter.

Activities of data controllers related to invoicing

Name of the data controller: Innovip.hu Kft.

Registered office of the controller: 6723 Szeged, Gát utca 7/B.

Telephone number of the data controller: +36 20 367 6755

Email of the data controller: iroda@innovip.hu

Website of the data controller: https://www.innovip.hu/

The data controller is involved in the recording of accounting documents based on a written contract with the data controller. As part of this involvement, the data controller processes the name and address of the data subject, insofar as they are necessary for the recording of accounting documents, for the period referred to in Section 169(2) of the Accounting Act, and deletes them immediately thereafter.

Activities of data controllers related to invoicing

Name of the data controller: Microsoft Dynamics 365 Business Central

Registered office of the data controller: Microsoft Building 92, NE 36th St, Redmond, WA 98052, USA Telephone number of the data controller: +1 425-882-8080 Email of the data controller:

Website of the data controller: https://www.microsoft.com

Activities of data controllers related to invoicing

Name of the data controller: Odoo SA

Registered office of the data controller: Chaussée de Namur, 40 1367 Grand Rosière Belgium

Telephone number of the data controller: +32 2 616 8002

Data controller email : privacy@odoo.com

Website of the data controller: https://www.odoo.com/

The controller is involved in the recording of accounting documents pursuant to a written contract concluded with the controller. As part of this involvement, the controller processes the name and address of the data subject, insofar as they are necessary for the recording of accounting documents, for the period referred to in Article 169(2) of the Accounting Act, and erases them immediately thereafter.

Activities of data controllers related to invoicing

Name of the data controller: Billingo Technologies Zrt.

Registered office of the controller: 1133 Budapest, Árbóc utca 6. Telephone number of the data controller: +36-1/500-9491

Email of the data controller: hello@billingo.hu

Website of the data controller: https://www.billingo.hu/

Activities of data controllers related to the operation of the customer relationship management system

Name of the data controller: UNAS Online Kft.

Registered office of the data controller: 9400 Sopron, Kőszegi út 14.

Telephone number of the data controller:

Email of the data controller: unas@unas.hu

Website of the controller: unas.hu

The data controller is involved in order processing within the framework of a contract concluded with the data controller. As part of this involvement, the data controller processes the name, address, telephone number, order numbers and dates of the data subject, in compliance with the civil limitation period.

Activities of data controllers related to the operation of the customer relationship management (CRM) system

Name of the data controller: Innovip.hu Kft.

Registered office of the controller: 6723 Szeged, Gát utca 7/B.

Telephone number of the data controller: +36 20 367 6755

Email of the data controller: iroda@innovip.hu

Website of the data controller: https://www.innovip.hu/

Activities of data controllers related to the operation of the customer relationship management (CRM) system

Name of the data controller: easySales

Head office of the data controller: Locotenent Stefan Marinescu 9, emelet 6, Bukarest - Románia

Telephone number of the data controller: +36213007056

Email of the data controller: contact@easy-sales.com

Website of the data controller: https://easy-sales.com/hu

Activities of data controllers related to the operation of the customer relationship management (CRM) system

Name of the data controller: KOMPaaS.tech Kft

Registered office of the controller: 1114 Budapest, Kemenes utca 8. félemelet 3. - Magyarország

Telephone number of the data controller: +36 1 4900999

Email of the data controller: support@mcntele.com Website of the data controller: https://kompaas.hu/ The data controller is involved in order registration within the framework of a contract concluded with the data controller. As part of this participation, the controller processes the name, address, telephone number, order numbers and dates of the data subject, in compliance with the civil limitation period.

Activities of data controllers related to the operation of the customer relationship management (CRM) system

Name of the data controller: VIVnetworks.com sro

Registered office of the data controller: Jungmannovo náměstí 18, 110 00 Prága 1

Telephone number of the data controller: +420 734 447 050

Email of the data controller: podpora@vivnetworks.com

Website of the data controller: https://www.vivnetworks.com/hu/

Activities of data controllers related to the operation of the CRM system

Name of the data controller: SC DECATHLON SRL

Head office of the data controller: Militari Shopping, Bulevardul Iuliu Maniu 546-560, București 060032 Romania

Telephone number of the data controller: +40 21 408 5000

Email of the data controller: contact@decathlon.ro

Website of the data controller: https://www.decathlon.ro/

Activities of data controllers related to the operation of the CRM system

Name of the data controller: Amazon.com

Registered office of the data controller: 410 Terry Ave N, Seattle 98109, WA

Telephone number of the data controller: +1 (206) 266-4064

Email of the data controller: copyright@amazon.com

Website of the data controller: https://www.amazon.com/

Activities of data controllers related to the operation of the CRM system

Name of the data controller: Pepita Group Zrt.

Head office of the data controller: 5520 Szeghalom, belterület hrsz 2619/58

Telephone number of the data controller: +36 1 510 07 60

Email of the data controller: segitunk@pepita.hu

Website of the data controller: https://pepita.hu/

Processing of data relating to online payment

Name of the data controller: Worldline SA

Registered office of the data controller: Tour Voltaire, 1 Place des Degrés, CS 81162, 92059 Paris la Défense Cedex Telephone number of the data controller :

Email of the data controller:

Website of the data controller: https://www.six-payment-services.com/

The online payment service provider is involved in the implementation of online payments within the framework of a contract concluded in writing with the Controller, for the purposes of which a data transfer is carried out to the online payment service provider as part of the purchasing process. As part of this participation, the online payment service provider processes the name and billing address of the data subject, as well as the order number and date, within the framework of its own data protection policy.

Purpose of data transfer: to provide the online payment service provider with the transaction data necessary for the payment transaction initiated with the online payment service provider and linked to the purchase.

Legal basis: performance of the contract concluded between you and the controller in accordance with Article 6(1)(b) of the Regulation, which includes a payment from the buyer and for which, in the case of online payment, the transfer of data under this section is necessary.

Name of the data controller: Stripe

Registered office of the controller: 354 Oyster Point Boulevard, South San Francisco, CA 94080 Telephone number of the controller: 888-926-2289 Email address of the controller:

Website of the data controller: https://stripe.com/

The online payment service provider is involved in the implementation of online payments based on a written contract with the controller, for which purpose a data transfer is carried out to the online payment service provider as part of the purchase process. As part of this involvement, the online payment service provider processes the name and billing address of the data subject, as well as the order number and date, within the framework of its own data protection policy.

Legal basis: performance of the contract concluded between you and the controller in accordance with Article 6(1)(b) of the Regulation, which includes a payment from the buyer and for which, in the case of an online payment, the transfer of data under this section is necessary.

“Reliable Store” Program (Megbízható bolt)

For the purpose of operating the Megbízható Bolt program of www.arukereso.hu (Online Comparison Shopping Kft. 1074 Budapest, Rákóczi út 70-72, Tax ID No.: 24868291-2-42, Company Registration No.: 01-09-186759), the buyer's email address and the name of the purchased product will be transmitted to arukereso.hu. The purpose of the data transfer is to request and display customer reviews. Online Comparison Shopping Kft. processes the personal data thus transferred in accordance with the data processing and privacy policies of www.arukereso.hu. With regard to the data transferred in this context, Online Comparison Shopping Kft. is considered the data controller.

Transfer of data to third countries

FansBRANDS® - Official Motorsport Store

The following subcontractor is located outside the European Union and processes data outside the European Union. The subcontractor

is a member of the Privacy Shield list, which means it guarantees that data is processed with the safeguards provided in the European Union. More information is available here: www.privacyshild.gov The Rocket Science Group LLC (MailChimp)

Address: 1 North Dearborn Street, 5th floor Chicago, IL 60602 https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active

Your rights during data processing

During the period of data processing, you have the following rights in accordance with the provisions of the regulation:

right to withdraw consent

access to personal data and information relating to data processing right of rectification limitation of data processing, right to erasure right of opposition right to data portability.

If you wish to exercise your rights, this implies your identification and the data controller must necessarily communicate with you. Therefore, for the purposes of identification, it will be necessary to provide personal data (but only your data already processed by the data controller can serve as a basis for identification), and your complaints regarding data processing will be available in your email account within the period specified in this privacy notice regarding complaints. If you have been our customer and wish to identify yourself for the purposes of complaints processing or warranty management process, please also provide your order number for identification purposes. This will allow us to identify you as a customer.

The data controller will respond to complaints regarding data processing within 30 days at the latest.

Right to withdraw consent

You have the right to withdraw your consent to data processing at any time, in which case the data provided will be deleted from our system. However, please note that in the case of an order that has not yet been executed, the withdrawal of consent may result in us not being able to complete the delivery of your order. In addition, if the purchase has already been made, based on accounting rules, we cannot delete the date relating to the invoice from our systems, and if there is still an unpaid amount from you, we may process your data even if you withdraw your consent, based on the legitimate interest in recovering the debt.

Access to personal data

You have the right to obtain from the controller confirmation as to whether personal data concerning you are being processed and, where that is the case, you have the right:

to access the personal data processed, and to receive information from the data controller on the following points:

the purposes of data processing

the categories of personal data processed;

information on the recipients or categories of recipients to whom the personal data have been or will be disclosed;

the envisaged duration of the processing of the personal data or, if this is not possible, the criteria used to determine that duration;

the existence of your right to request the data controller to rectify or erase data

the existence of your right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning you, or to object to such processing; the right to lodge a complaint with a supervisory authority;

where the personal data are not collected from the data subject, any available information as to their source;

the existence of automated decision-making, including profiling, and, at least in those cases, meaningful information about the logic used, as well as the significance and envisaged consequences of such processing for you.

The exercise of these rights may be aimed at establishing and verifying the lawfulness of data processing; therefore, in the event of multiple requests for information, the data controller may require a fair fee in exchange for providing the information.

The data controller guarantees access to personal data by sending you the processed personal data and information by email after your identification. If you have registered, we will give you access to your personal data by logging into your user account.

Please indicate in your request whether you are requesting access to personal data or information about data processing.

Right of rectification

You have the right to obtain from the controller without delay the rectification of inaccurate personal data concerning you.

Right to restriction of data processing

You have the right to obtain from the controller restriction of processing where one of the following applies:

you contest the accuracy of the personal data, for a period enabling the controller to verify the accuracy of the personal data, and if the accurate data can be established immediately, then no limitation

will not take place;

the processing of the data is unlawful and you oppose the erasure of the personal data for any reason (for example, because the data is necessary to assert a possible claim) and instead request the restriction of their use;

the controller no longer needs the personal data for the purposes of the processing, but the data subject requires them for the establishment, exercise or defence of legal claims, or

if you have objected to the processing of the data but the legitimate interest of the controller can also justify it, the processing of the data must be restricted until it can be established that the legitimate grounds of the controller override the legitimate grounds you have invoked.

Where processing has been restricted, such personal data, with the exception of storage, shall only be processed with your consent or for the establishment, exercise or defence of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or of a Member State. You will be informed by the data controller before the restriction of processing is lifted (at least 3 working days before the lifting of the restriction).

Right to erasure - right to be forgotten

You have the right to obtain from the controller the erasure of personal data concerning you within a reasonable time if one of the following grounds applies:

the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed by the controller;

you withdraw your consent on which the processing is based and there is no other legal ground for the processing;

you object to processing based on legitimate interest and there are no overriding legitimate grounds (i.e. legitimate interest) for the processing,

the personal data have been unlawfully processed by the controller where this has been established on the basis of the complaint, the personal data must be erased for compliance with a legal obligation under Union or Member State law to which the controller is subject.

Where the controller, on the basis of a legitimate ground, has made the personal data public and is obliged to erase the personal data for one of the aforementioned reasons, the controller, taking into account available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform other controllers processing the personal data that you have requested erasure by such controllers of any links to, or copy or replication of, those personal data.

Erasure does not apply to the extent that the processing is necessary:

to the exercise of the right to freedom of expression and information;

or for compliance with a legal obligation which requires processing under Union or Member State law to which the controller is subject (processing of data in the context of invoicing is one of these cases, as the retention of the invoice is prescribed by law), or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller; for the establishment, exercise or defense of legal claims (for example, if the controller has claims against you which have not yet been satisfied, or if a complaints management procedure is underway).

Right to object

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on legitimate interests. In this case, the controller will no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defense of legal claims.

Where personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing purposes, which includes profiling to the extent that it is related to such direct marketing. Where you object to processing for direct marketing purposes, the personal data will no longer be processed for such purposes.

Right to data portability

If the data processing is carried out in an automated manner or if the data management is based on your voluntary consent, you have the right to request from the data controller the data you have provided to him, which the data controller will send in xml, JSON or csv format at your disposal, and, if technically possible, you can request that the data controller transmit the data in this form to another data controller.

Automated decision-making

You have the right not to be subject to a decision based solely on automated processing (including profiling) and which produces legal effects concerning you or similarly significantly affects you. In such cases, the controller shall implement suitable measures to safeguard the data subject's rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express his or her point of view and to contest the decision.

The above provisions do not apply if the decision

is necessary for entering into and performing the contract between you and the controller; is authorized by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and your legitimate interests; or is based on your explicit consent.

Declaration to the data protection registration system

In accordance with the Privacy Act, the data controller must report certain of its data processing activities to the Data Protection Registration System. This reporting obligation ended on May 25, 2018.

Registration number with the NAIH (Hungarian National Authority for Data Protection and Freedom of Information) before May 25, 2018:

Data Protection Registration Number : NAIH-103878/2016

Data security measures

The Data Controller declares that it has taken appropriate security measures to protect personal data against unauthorized access, modification, transmission, disclosure, deletion or destruction, as well as against accidental destruction and damage, and against any loss of accessibility due to the evolution of the technology used.

The data controller will do everything in its organizational and technical power to ensure that its subcontractors also take appropriate data security measures when working with your personal data.

Appeal

If, in your opinion, the data controller has violated a legal provision relating to data processing or has not responded to one of your requests, you may, in order to stop the alleged unlawful data processing, initiate an investigation procedure with the Hungarian National Authority for Data Protection and Freedom of Information (postal address: H-1363 Budapest, Pf. 9, e-mail: ugyfelszolgalat@naih.hu, telephone numbers: +36 (30) 683-5969 +36 (30) 549-6838; +36 (1) 391 1400).

We also wish to inform you that in the event of a violation of the legal provisions relating to data processing, or if the data controller has not complied with any of your requests, you can contact the European Commission.

We also inform you that in the event of a violation of the legal provisions relating to data processing, or if the data controller has not responded to one of your requests, you may bring a civil action against the data controller before a court.

Modification of the privacy policy

The data controller reserves the right to amend this data processing information in a manner that does not affect the purpose and legal basis of data processing. By using the website after the amendment comes into effect, you agree to the amended privacy notice.

If the data controller wishes to carry out further processing of the collected data for a purpose other than that for which it was collected, it will inform you, before starting any further processing of the data, of the purpose of the data processing and information on the following points:

the envisaged duration of the processing of the personal data or, if this is not possible, the criteria used to determine that duration;

the existence of your right to request from the controller access to, rectification or erasure of personal data, or restriction of processing of personal data concerning you, or to object to such processing in the case of data processing based on legitimate interest grounds, or to request data portability in the case of data processing based on consent or a contractual relationship;

in the case of data processing based on consent, that you can withdraw your consent at any time, the right to lodge a complaint with a supervisory authority;

whether the provision of personal data is based on legislation or a contractual obligation or is a prerequisite for entering into a contract, and whether you are obliged to provide personal data, as well as the possible consequences of failure to provide data;

the existence of automated decision-making, including profiling, and, at least in those cases, meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for you.

Data processing can only then begin and, in the case of consent-based data processing, your consent will also be required for data processing, in addition to providing the above-mentioned information.

Privacy Policy

Privacy Policy

Data Controller

Your cart

Formula 1™ Shop

Information

Choose options

10% extra discount

Privacy Policy

Privacy Policy

Data Controller