LOYALTY CARD - DATA PROCESSING INFORMATION

Dear Customer,

This notice sets out the data processing rules for subscribing to our loyalty programme in accordance with the General Data Protection Regulation of the European Union (GDPR) and Act CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information (Info Act).

Culinaris Retail Kft. attaches the highest priority to the protection of your data and its processing in accordance with the law.

Controller: Culinaris Retail Kft. (registered address: 1036 Budapest, Perc utca 8.).

Data subjects: loyalty programme participants and new loyalty programme registrants.

The purpose of data processing is to enable Culinaris Retail Kft. to

• uniquely identify the persons who have enrolled in the loyalty programme/participants in the loyalty programme, in order to record the loyalty programme benefits and the entitlements you have under the loyalty programme in the appropriate account.
• notify you of the discounts available to eligible customers with a loyalty card.
• send you information about changes to the loyalty programme.

Signing up for the loyalty programme: If you would like to retain your loyalty rights / or would like to participate in the loyalty programme for the first time, you can do so by completing the registration form and handing it to a designated person in the store.

Data processed: name, e-mail address, date of birth, telephone number, address.

Legal basis of processing:

The legal basis for processing is your consent based on Article 6(1)(a) of the GDPR.

Your name, date of birth and address are required for the unique identification of your balance, and your email address is used by Culinaris Kft. to notify you of discounts available with your loyalty card and changes to the loyalty program.

Duration of processing and erasure of data: the controller processes the data provided from the moment of registration in the loyalty programme until the withdrawal of the data subject’s consent, or if the loyalty card or the loyalty right is terminated, the processing of the data also ceases. The data will be erased following the withdrawal of consent or the termination of the right. Your consent is considered continuous by Culinaris Kft. until the moment of withdrawal

You may revoke your consent to the processing by sending an email to the webshop@culinaris.hu email address (mandatory subject of the email: opt-out of the loyalty programme).

If you withdraw your consent, your data will be permanently erased and you will no longer be able to claim the benefits of the loyalty card and you will not be informed of the discounts available with the loyalty card.

Persons authorised to know the data: controller, the processor and their staff.

Processor:

Netlient Kft. (registered address: 2600 Vác, Háló köz 3.), (tax number 24684277-2-13)

Data subjects’ rights

A Data Subject who subscribes to the loyalty programme is entitled to

- access his/her personal data (right of access, Article 15 GDPR).

-request the rectification of inaccurate data or the completion of incomplete data (right to rectification, Article 16 GDPR).

-request the erasure of personal data (right to erasure, Article 17 GDPR).

-request the restriction of the processing of your personal data (right to restriction of processing, Article 18 GDPR).

-receive his/her personal data and transfer them to another controller (right to data portability, Article 20 GDPR).

- withdraw his/her consent to the processing of his/her data (however, such withdrawal shall not affect the lawfulness of the processing carried out based on his/her consent before its withdrawal) (right of withdrawal, Article 7 GDPR).

Data subjects may exercise their right to lodge a complaint with the supervisory authority (right to lodge a complaint, Article 77 GDPR).

The modification or erasure of personal data may be initiated by sending an e-mail to the webshop@culinaris.hu address or by post to the address of the controller’s registered office.

Legal remedies:

In the event of any infringement of his/her rights, the data subject may file for court action against the controller. Hearing such cases falls within the competence of the regional court (Regional Court of Budapest, address: 1055 Budapest, Markó utca 25.). Depending on the data subject’s choice, the action may be brought before the regional in whose jurisdiction the data subject’s home address or temporary residence is located. The court hears such cases in priority proceedings. The controller is liable to compensate any damage caused to the data subject as a result of unlawful processing of his/her data or by any breach of data security requirements.

If the controller infringes the data subject’s right to privacy by unlawfully processing his/her data or by breaching data security requirements, the data subject may claim restitution from the controller. The controller shall also be held liable to the data subject for any damage caused by the processor. The controller may be exempted from liability if he proves that the damage was caused by inevitable reasons beyond the scope of processing. The controller will not pay damages inasmuch as the damage was caused by intentional or negligent conduct on the part of the injured party.

Complaints may be submitted to the National Authority for Data Protection and Freedom of Information: Name: Nemzeti Adatvédelmi és Információszabadság Hatóság (National Authority for Data Protection and Freedom of Information) Address: 1125 Budapest, Szilágyi Erzsébet fasor 22/C. Postal address: 1530 Budapest, Pf.: 5. Telephone: 06.1.391.1400 Fax: 06-1-391-1410).

Due to possible changes in applicable legislation, the above data processing notice may be amended accordingly. In such cases, we will inform you of the changes that have occurred. If the changes affect processing based on your consent, we will ask for your consent again if necessary.

Detailed data protection notice: https://culinaris.hu/adatvedelmi.