Privacy Policy

We hereby inform you, as a visitor of our website and a user of our services, about our company’s data processing and data protection rules.

1. What principles do we follow in our data processing?

Our company processes personal data according to the following principles:

• We process personal data lawfully, fairly, and transparently for you.
• We collect personal data only for specified, explicit, and legitimate purposes and do not process it in a manner incompatible with these purposes.
• The personal data we collect and process is adequate, relevant, and limited to what is necessary concerning the purposes for which it is processed.
• We take all reasonable measures to ensure that the data we process is accurate and, if necessary, kept up to date. Inaccurate personal data is erased or rectified without delay.
• We store personal data in a way that allows identification of the data subject only for as long as necessary for the purposes of processing.
• We ensure appropriate security of personal data using technical and organizational measures to protect against unauthorized or unlawful processing, accidental loss, destruction, or damage.

We process your personal data:

• Based on your prior informed and voluntary consent, to the necessary extent, and always purpose-bound (collecting, recording, organizing, storing, and using);
• In certain cases, based on legal requirements that make processing mandatory (we will inform you when this applies);
• In some cases, based on legitimate interest of our company or a third party (e.g., operation, development, or security of our website).

2. Who are we?

Company Name: Alba Tüzeléstechnika Szervíz és Szolgáltató Kft.
Head Office: 8000 Székesfehérvár, Zrínyi u. 4/A.
Website: www.albaservicekft.eu
Postal Address: 8000 Székesfehérvár, Zrínyi u. 4/A.
Email: albaservicekft@albaservicekft.eu
Tax Number: 11111850-2-07
Company Registration Number: 07-09-003341

According to Article 37 of the GDPR, our company is not required to appoint a Data Protection Officer.

Web Hosting Provider: Webinit SRL

• Address: STR. Aleea BORSEC, Nr. 4, Etaj X, Ap. 129, 40424, Romania
• Website: https://webinit.hu/
• Email: info@webinit.hu

For high-quality customer service, we use the following data processor:

• Data Controller: Alba Tüzeléstechnika Szervíz és Szolgáltató Kft.
• Address: 8000 Székesfehérvár, Zrínyi u. 4/A.
• Responsibilities: All activities

If we change our data processors, we will update this Privacy Policy accordingly.

3. What are cookies and how do we manage them?

Cookies are small data files that are placed on your computer by the website you visit, stored by your web browser. Most commonly used web browsers (such as Chrome, Firefox, etc.) accept cookies by default, but you can change your browser settings to reject or block cookies, or delete stored cookies from your device.

Detailed information about managing cookies is available in your browser’s “Help” section.

Cookies that do not require your prior consent:

Upon your first visit, our website provides brief information about these cookies. Such cookies include:

• authentication cookies,
• multimedia player cookies,
• load balancer cookies,
• user interface customization session cookies,
• user-centric security cookies.

Cookies requiring consent:

If processing starts when you visit the website, we will inform you and request your consent upon your first visit.

Our company does not use or permit third-party cookies that collect personal data without your consent.

Accepting cookies is not mandatory, but without them, the website might not function as intended.

You can find more details about third-party cookies on our website.

4. What else should you know about our website-related data processing?

Providing your personal data during registration or when contacting our Company is voluntary. Therefore, please ensure the accuracy, correctness, and truthfulness of your data, as you are responsible for the information you provide. Incorrect, inaccurate, or incomplete data may hinder the use of our services.

If you provide someone else’s personal data, we assume that you have the necessary authorization to do so.

You may withdraw your consent for data processing at any time free of charge by:

• Deleting your registration,
• Withdrawing your consent to data processing,
• Requesting the withdrawal or blocking of your consent to the use of any required data provided during registration.

We register your withdrawal within 30 days due to technical reasons. Please note that we may continue processing certain data after the withdrawal if required by law or justified by our legitimate interests.

In case of fraudulent use of personal data or if a visitor commits a crime or attacks our system, we will immediately delete their data along with terminating their registration. If necessary, we may retain the data during the period required for establishing civil liability or conducting criminal proceedings.

5. What should you know about our direct marketing and newsletter data processing?

During registration or later through the newsletter/direct marketing subscription interface, you can consent to the use of your personal data for marketing purposes. In this case, we will process your data to send you marketing materials, advertisements, information, offers, and newsletters, until you withdraw your consent.

You may give or withdraw your consent at any time, free of charge, either:

• for both direct marketing and newsletters together,
• or separately for each.

Deleting your registration automatically counts as withdrawing your consent.

Withdrawal of consent for marketing and newsletter purposes does not automatically mean withdrawal of your general consent for data processing on our website. The two consents are handled separately.

We register the withdrawal within 15 days due to technical reasons.

6. What should you know about prize games?

Our company may organize promotional prize games, with specific rules defined separately. The current campaign’s rules will always be available on our homepage via a central link.

7. Other Data Processing Information

We only transfer your data within the limits set by the law. When using data processors, we ensure through contractual terms that they cannot use your data for purposes other than those authorized by you.

Our company does not transfer data abroad.

Courts, prosecutors, authorities (e.g., police, tax office, National Authority for Data Protection and Freedom of Information – NAIH) may request information or access to data from our company. In such cases, we must comply with the request but only to the necessary extent.

Our employees and contributors involved in data processing are subject to strict confidentiality obligations and may only access your data to the extent necessary for their tasks.

We protect your personal data with appropriate technical and organizational measures to ensure data security, availability, and to prevent unauthorized access, alteration, damage, disclosure, or any unlawful use.

Organizational measures include controlling physical access to our buildings, continuous employee training, and securing paper-based documents. Technical measures include encryption, password protection, and antivirus software.

However, please note that data transfer over the internet is not fully secure. We do everything possible to protect your data, but we cannot take full responsibility for data transmission through our website. Once we receive your data, strict regulations apply to prevent unauthorized access.

We kindly ask you to help protect your data by carefully keeping your login password confidential and not sharing it with anyone.

8. Your Rights and Remedies

You have the right to:

• Request information about data processing,
• Request correction, modification, or supplementation of your personal data,
• Object to data processing and request the deletion or blocking of your data (except for mandatory processing),
• Seek legal remedy in court,
• File a complaint with the supervisory authority: https://naih.hu/panaszuegyintezes-rendje.html

Supervisory Authority:

National Authority for Data Protection and Freedom of Information (NAIH)
Address: 1055 Budapest, Falk Miksa utca 9-11.
Mailing address: 1363 Budapest, P.O. Box 9.
Phone: +36 (1) 391-1400
Fax: +36 (1) 391-1410
Email: ugyfelszolgalat@naih.hu
Website: https://naih.hu/

Upon your request, we will provide information about:

• Your processed data,
• Data source,
• Purpose and legal basis of processing,
• Duration of processing or the criteria for determining it,
• Names, addresses, and activities of our data processors,
• Any data protection incidents and actions taken,
• Legal basis and recipient of any data transfers.

We will respond within 15 days (but no later than 1 month). This is free of charge unless you have requested the same information earlier in the year. Fees paid will be refunded if data was unlawfully processed or the request led to correction.

We may only refuse to provide information where permitted by law, citing legal reasons and informing you about your legal remedies.

We notify you and any prior recipients of corrections, blocking, marking, or deletion unless this would not violate your legitimate interest.

If we refuse your request for correction, blocking, or deletion, we will inform you within 15 days (no later than 1 month) in writing, explaining the reasons and your legal remedies.

If you object to the processing of your personal data, we will examine the objection within 15 days (no later than 1 month) and inform you in writing of our decision.

If we agree, we will stop processing your data, including further collection and transfer, block it, and notify any prior recipients so they can enforce the objection.

We will only refuse your request if we can prove that processing is justified by compelling legitimate grounds or necessary for legal claims.

If you disagree with our decision or we miss the deadline, you may go to court within 30 days.

Data protection lawsuits fall under the jurisdiction of the Regional Court. You can choose the court based on your place of residence or stay. Foreign citizens can also file a complaint with their local supervisory authority.

We encourage you to contact us first to resolve any issues quickly and efficiently before filing a complaint or lawsuit.

9. Key Legislation Governing Our Activities

• General Data Protection Regulation (GDPR) – (EU) 2016/679
• Act CXII of 2011 on the Right of Informational Self-Determination and Freedom of Information
• Act V of 2013 on the Civil Code
• Act CVIII of 2001 on Electronic Commerce and Information Society Services
• Act C of 2003 on Electronic Communications
• Act CLV of 1997 on Consumer Protection
• Act CLXV of 2013 on Complaints and Public Interest Disclosures
• Act XLVIII of 2008 on the Basic Requirements and Certain Restrictions of Commercial Advertising Activities

10. Modification of the Privacy Policy

Our company reserves the right to modify this Privacy Policy and will properly inform you of any changes. Updated information will be published on albaservicekft.eu.