Barion Pixel
0 My cart

  • A kosarad üres!
    Your cart is empty!

0

Privacy Policy - GDPR

This Privacy Notice (hereinafter: the “Notice”) sets out the rules governing the processing of personal data on the website, as well as information relating to such data processing. By commencing use of the Service, users accept the terms of this Notice. This Privacy Notice is continuously available under the Privacy Notice - GDPR menu item.

1. The Data Controller:

In respect of the personal data processed in connection with the Service, the Service Provider does not engage a data processor. The personal data processed by the Service Provider may be accessed exclusively by the Service Provider and its employees. Data relating to users of the Service are stored exclusively on the servers of the Hosting Provider.

1.1. Identity of the Data Controller:
  • Name of the Service Provider: MG Records Zrt.
  • Data Controller: Nóra Matyasovszki
  • Registered seat of the Service Provider: 1188 Budapest, Vezér u. 77/b.
  • Business premises of the Service Provider: 1091 Budapest, Üllői út 31.
  • Company registration number: 01-10-048198
  • Tax number: 25019263-2-43
  • Name of the registering authority (Court of Registration): Court of Registration of the Metropolitan Court of Budapest
  • Hereinafter referred to as the “Service Provider”.
1.2. Contact details of the Data Controller:
  • Mailing address: 1091 Budapest, Üllői út 31.
  • Telephone: +36-20 / 971-5023
  • E-mail: [email protected]
  • Customer service is available by telephone from Monday to Friday during business hours, between 1100 - 1900, and on Saturdays between 1000 - 1400.
1.3. Details of the Hosting Provider:

The Data Processor performs the storage of personal data on the basis of a contract concluded with the Data Controller. It is not authorised to access the personal data.

1.4. Data processor related to invoicing and enterprise management:
  • Company name: ERP2U Software Kft.
  • Address: 1052 Budapest, Fehér Hajó utca 8-10. 2em 2.
  • Company registration number: 1-09-861087
  • Tax number: 13550299-2-41
  • E-mail: [email protected]
  • Website: www.erp2u.hu

The Data Processor cooperates, on the basis of a contract concluded with the Data Controller, in maintaining records of accounting documents. In the course thereof, the Data Processor processes the data subject’s name and address to the extent necessary for the accounting records, for the period prescribed by Section 169 (2) of the Accounting Act, and deletes them thereafter.

1.5. Data processor related to accounting:
  • Company name: E&Sz Accounting Kft.
  • Address: 1033 Budapest, Miklós utca 13. 8. em. 42.
  • Company registration number: 01-09-423062
  • Tax number: 22636838-2-43

The Data Processor cooperates, on the basis of a written contract concluded with the Data Controller, in the bookkeeping of accounting documents. In the course thereof, the Data Processor processes the data subject’s name and address to the extent necessary for the accounting records, for the period prescribed by Section 169 (2) of the Accounting Act, and permanently deletes them immediately thereafter.

1.6. Data processor related to delivery:
  • Company name: GLS General Logistic Systems Hungary Kft.
  • Address: 2351 Alsónémedi, GLS Európa u. 2.
  • Company registration number: 13-09-111755
  • Tax number: 12369410-2-44
  • E-mail: [email protected]
  • Website: www.gls-group.eu
  • Company name: FoxPost Zrt.
  • Address: 3300 Eger, Pacsirta utca 35/A.
  • Company registration number: 10-10-020309
  • Tax number: 25034644-2-10
  • E-mail: [email protected]
  • Website: www.foxpost.hu

The courier services cooperate, on the basis of a contract concluded with the Data Controller, in the delivery of the ordered goods. The courier service processes the personal data received in accordance with the privacy notice available on its website.

1.7. Data processor related to card payments:
  • Company name: Barion Payment Zrt.
  • Address: 1117 Budapest, Infopark sétány 1.
  • Company registration number: 01-10-048552
  • Tax number: 22776082-2-13
  • Community tax number: HU11138154
  • Licence number: H-EN-I-1064/2013
  • Institution identifier: 25353192
  • Data processing registration number: NAIH-73794/2014
  • Telephone: +36-1 / 464-7099
  • Website: www.barion.com
  • Company name: PayPal Inc. (the parent company of PayPal (Europe) S.à r.l. et Cie, S.C.A.)
  • Address: Luxembourg L-2449, 22-24 Boulevard Royal.
  • E-mail: [email protected]
  • Website: www.paypal.com/hu
  • Company name: UniCredit Bank Hungary Zrt.
  • Address: 1054 Budapest, Szabadság tér 5-6.
  • Company registration number: 01-10-041348
  • Tax number: 10325737-4-44
  • Telephone: +36-1 / 325-3200
  • Website: www.unicreditbank.hu

The payment service provider cooperates, on the basis of a contract concluded with the Data Controller, in the execution of online payments, for which purpose data are transferred to the online payment service provider during the purchase process. In the course thereof, the online payment service provider processes the data subject’s billing name and address, as well as the order number and the time of the order, in accordance with its own data processing rules.

Purpose of the data transfer: to provide the online payment service provider with the transaction data necessary for the payment operation initiated with it in connection with the purchase.

Legal basis of the data transfer: pursuant to Article 6(1)(b) of the Regulation, performance of the contract concluded between you and the Data Controller, of which payment by the purchaser forms part; in the case of online payment, the data transfer set out in this section is necessary for the payment.

1.8. Data controller related to price comparison activities:
  • Company name: Online Comparison Shopping Kft.
  • Address: 1074 Budapest, Rákóczi út 70-72.
  • Company registration number: 01-09-186759
  • Tax number: 24868291-2-42
  • E-mail: [email protected]
  • Website: www.arukereso.hu

In the course of price comparison activities, it has no access to personal data or purchase data and does not perform profiling.

2. Categories and purposes of processed data:

2.1. Data processed for the purpose of concluding and performing the contract:

Several data processing operations may be implemented for the purpose of concluding and performing the contract. Please note that data processing relating to complaint handling and warranty administration shall only take place if you exercise any of the aforementioned rights.

If you do not make a purchase through the webshop and merely visit the webshop, only the provisions set out under data processing for marketing purposes may apply to you, provided that you give us consent for marketing purposes.

We cannot assume liability for inconveniences arising from incorrectly provided or incomplete data, or for non-performance resulting from such reasons.

2.1.1. Registration

By storing the data provided during registration, the Data Controller is able to provide a more convenient service (e.g. the data subject does not need to provide his or her data again on a subsequent purchase). Registration is not a condition of purchase and, accordingly, not a condition of concluding a contract.

When requesting data, the Operator clearly indicates which data are mandatory and which are optional.

The Data Controller processes the data coming into its possession in accordance with the provisions of Act LXIII of 1992 “on the protection of personal data” and Act CXIX of 1995 “on research and direct marketing”.

  • Categories of processed data: name, residential address, telephone number, e-mail address, characteristics of the purchased product(s), and the time of purchase
  • Legal basis of the data processing: your voluntary consent, which you provide to the Data Controller by registering
  • Duration of the data processing: until withdrawal of consent
2.1.2. Order processing

During the processing of orders, data processing activities are necessary for the performance of the contract.

If you have placed an order in the webshop, data processing and the provision of data are indispensable for the performance of the contract.

  • Categories of processed data: name, residential address, telephone number, e-mail address, order number, characteristics of the purchased product(s), and the time of purchase
  • Legal basis of the data processing: performance of the contract
  • Duration of the data processing: we process the data for 5 years in accordance with the civil law limitation period
2.1.3. Accounting, invoicing

This data processing operation is carried out for the purpose of issuing invoices in compliance with the law and fulfilling the obligation to retain accounting documents. Pursuant to Section 169(1)-(2) of the Accounting Act, business entities must retain accounting documents directly and indirectly supporting the bookkeeping records.

  • Categories of processed data: name, residential address, telephone number, e-mail address, order number, characteristics of the purchased product(s), and the time of purchase
  • Legal basis of the data processing: pursuant to Section 159(1) of Act CXXVII of 2007 on value added tax, issuance of an invoice is mandatory, and pursuant to Section 169(2) of Act C of 2000 on accounting, such invoice must be retained for 8 years
  • Duration of the data processing: the issued invoices must be retained for 8 years from the date of issue pursuant to Section 169(2) of the Accounting Act
2.1.4. Conformity Warranty and Guarantee Claims

In handling conformity warranty and guarantee claims, we act in accordance with the provisions of NGM Decree 19/2014. (IV. 29.).

  • Categories of processed data:
    • name, residential address, and your declaration that you consent to the processing of the data recorded in the minutes in accordance with the provisions of the Decree
    • designation and purchase price of the movable item sold under the contract concluded between you and the Service Provider
    • date of performance of the contract
    • date of notification of the defect
    • description of the defect
    • the right you wish to enforce on the basis of your conformity warranty or guarantee claim
    • the method of settlement of the conformity warranty or guarantee claim, or the reason for rejection of the claim or of the right sought to be enforced on that basis
  • Legal basis of the data processing: compliance with legal obligations under Section 4(1) and Section 6(1) of NGM Decree 19/2014. (IV. 29.)
  • Duration of the data processing: the Service Provider is required to retain the minutes taken on the consumer’s conformity warranty or guarantee claim for three years from the date of taking such minutes and to present them upon request of the supervisory authority
2.1.5. Other consumer protection complaints

This data processing operation is carried out for the purpose of handling consumer protection complaints. If you have contacted us with a complaint, data processing is indispensable.

  • Categories of processed data: name, e-mail address, telephone number, content of the complaint
  • Legal basis of the data processing: whether you contact us with a complaint is your voluntary decision; however, if you do so, pursuant to Section 17/A(7) of Act CLV of 1997 on consumer protection, we are obliged to retain the complaint for 5 years
  • Duration of the data processing: we retain warranty-related complaints for 5 years pursuant to the consumer protection law
2.1.6. Logging of consents; verifiability

During registration, ordering, making contact, and subscribing to the newsletter, the IT system stores IT-related data concerning the consent for the purpose of subsequent proof.

  • Categories of processed data: name, e-mail address, textual content, language of acceptance, IP address, date of acceptance, content of the accepted statements at the time of acceptance
  • Legal basis of the data processing: Article 7(1) of the GDPR
  • Duration of the data processing: due to legal requirements, it must be possible to prove the consent at a later date; accordingly, the storage period shall extend until the expiry of the limitation period following termination of the data processing
2.2. Data processed for marketing purposes:
2.2.1. Sending newsletters

This data processing operation is carried out for the purpose of sending newsletters.

  • Categories of processed data: name, e-mail address
  • Legal basis of the data processing: until withdrawal of consent
  • Duration of the data processing: your voluntary consent, which you provide to the Data Controller by subscribing to the newsletter

The Data Processor cooperates, on the basis of a contract concluded with the Data Controller, in sending newsletters. In the course thereof, the Data Processor processes the data subject’s name and e-mail address to the extent necessary for sending newsletters:

2.2.2. Personalised offers

This data processing operation is carried out for the purpose of sending and displaying advertising content corresponding to the data subject’s field of interest.

  • Categories of processed data: name, e-mail address, residential address, telephone number
  • Legal basis of the data processing: until withdrawal of consent
  • Duration of the data processing: your voluntary and separate consent, which you provide to the Data Controller during data collection
2.2.3. Remarketing

This data processing, as a remarketing activity, is implemented through the use of cookies. Detailed information on cookies is provided in Section 3 of the Privacy Notice.

2.3. Your rights in relation to data processing:

Within the duration of the data processing, pursuant to the provisions of the GDPR, you are entitled to the following rights:

  • the right to withdraw consent
  • access to personal data and information relating to the data processing
  • the right to rectification
  • restriction of processing
  • the right to erasure
  • the right to object
  • the right to data portability

Our webshop has an easy-to-use GDPR management interface through which you may easily exercise the rights to which you are entitled. The system operates fully automatically and does not require intervention by the Data Controller. The interface is available BY CLICKING HERE. If you nevertheless wish to contact us, you may do so through customer service.

If you wish to exercise your rights, this entails your identification, and the Data Controller must necessarily communicate with you. Accordingly, for the purpose of identification, the provision of personal data will be required (identification may only be based on data that the Data Controller already processes about you in any event). If you are our customer and wish to identify yourself for the purpose of complaint handling or warranty administration, please also provide your order identifier. By using this, we are able to identify you as a customer.

The Data Controller shall respond to complaints relating to data processing no later than within 30 days.

2.3.1. The right to withdraw consent

You are entitled at any time to withdraw your consent to the data processing; in such case, the data provided will be deleted from our systems. Please note, however, that if you have already made a purchase from us, we may not delete invoicing-related data from our systems on the basis of accounting regulations; furthermore, if you have an outstanding debt towards us, we may continue to process your data, even after withdrawal of consent, on the basis of our legitimate interest relating to debt collection.

2.3.2. Access to personal data

You are entitled to obtain confirmation from the Data Controller as to whether your personal data are being processed, and if so, you are entitled:

  • to access the personal data processed
  • to request information from the Data Controller on the following:
    • the purposes of the data processing
    • the categories of personal data processed about you
    • information on the persons and companies with whom the Data Controller will communicate the processed data
    • the envisaged period for which the personal data will be stored, or, if this is not possible, the criteria used to determine that period
    • you may request the Data Controller to rectify, erase or restrict processing of personal data relating to you, and in the case of processing based on legitimate interests, you may object to the processing of such personal data
    • the right to lodge a complaint with a supervisory authority
    • where the data were not collected from you, all available information as to their source
    • the fact of automated decision-making, including profiling, and, at least in such cases, meaningful information about the logic involved and the significance and envisaged consequences of such processing for you

The purpose of exercising this right may be to establish and verify the lawfulness of the data processing; therefore, in the event of repeated requests for information, the Data Controller may charge a reasonable fee in exchange for providing such information.

The Data Controller ensures access to personal data by sending the processed personal data and information by e-mail after identification. If you have a registration, you will find all data processed about you under the GDPR menu item in your user account, and it is not necessary to request them separately from the Data Controller.

Please specify in your request whether you are seeking access to personal data or information relating to the data processing.

2.3.3. Access to personal data

You are entitled to request that the Data Controller rectify inaccurate personal data concerning you without undue delay.

2.3.4. Right to restriction of processing

You are entitled to request that the Data Controller restrict processing if one of the following applies:

  • you contest the accuracy of the personal data, in which case the restriction shall apply for a period enabling the Data Controller to verify the accuracy of the personal data; if the correct data can be established immediately, no restriction shall take place
  • the processing is unlawful, but you oppose the erasure of the data for any reason (for example because the data are important to you for the establishment of legal claims), and therefore you do not request erasure of the data but instead request restriction of their use
  • the Data Controller no longer needs the personal data for the specified purpose of processing, but you require them for the establishment, exercise or defence of legal claims
  • you have objected to the processing, but the legitimate interests of the Data Controller may also justify the processing; in that case, pending verification whether the legitimate grounds of the Data Controller override your legitimate grounds, the processing must be restricted

Where processing has been restricted, such personal data may, with the exception of storage, be processed only with the data subject’s consent, or for the establishment, exercise or defence of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or of a Member State.

The Data Controller shall inform the data subjects in advance of the lifting of the restriction of processing at least 3 working days prior to the lifting thereof.

2.3.5. Right to erasure - right to be forgotten

You are entitled to request that the Data Controller erase personal data concerning you without undue delay where one of the following grounds applies:

  • the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed by the Data Controller
  • you withdraw your consent and there is no other legal basis for the processing
  • you object to processing based on legitimate interests, and there are no overriding lawful grounds (i.e. legitimate interests) for the processing
  • the personal data have been unlawfully processed by the Data Controller and this has been established on the basis of the complaint
  • the personal data must be erased for compliance with a legal obligation under Union or Member State law applicable to the Data Controller

Where the Data Controller has made personal data concerning you public for any lawful reason and is obliged to erase them on any of the grounds indicated above, it shall, taking account of available technology and the cost of implementation, take reasonable steps – including technical measures – to inform other controllers processing the data that you have requested the erasure of any links to, or copies or replicas of, such personal data.

Erasure shall not apply where processing is necessary:

  • for exercising the right of freedom of expression and information
  • for compliance with a legal obligation under Union or Member State law applicable to the controller requiring processing of personal data (such is the case in relation to invoicing, as retention of invoices is prescribed by law), or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
  • for the establishment, exercise or defence of legal claims (e.g. if the Data Controller has a claim against you that you have not yet satisfied, or a consumer or data processing complaint is in progress)
2.3.6. Right to object

You are entitled to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on legitimate interests. In such case, the Data Controller may no longer process the personal data unless it demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or which relate to the establishment, exercise or defence of legal claims.

Where personal data are processed for direct marketing purposes, you are entitled to object at any time to the processing of personal data concerning you for such purpose, including profiling insofar as it is related to such direct marketing. If you object to the processing of personal data for direct marketing purposes, the personal data may no longer be processed for such purposes.

2.3.7. Right to data portability

Where the data processing is carried out by automated means, or where the data processing is based on your voluntary consent, you have the right to request from the Data Controller that you receive the data which you have provided to the Data Controller, which the Data Controller shall make available to you in XLS, XLSX or CSV format. If technically feasible, you may request that the Data Controller transmit the data in this format to another controller.

2.4. Data security measures

The Data Controller declares that it has taken appropriate security measures in order to protect personal data against unauthorised access, alteration, transmission, disclosure, deletion or destruction, as well as against accidental destruction and damage, and against becoming inaccessible due to changes in the technology used.

The Data Controller shall do everything within the scope of organisational and technical possibilities to ensure that its data processors also take appropriate data security measures when processing your personal data.

2.5. Available legal remedies

If you consider that the Data Controller has infringed any statutory provision relating to data processing, or has failed to comply with any of your requests, you may initiate an investigation procedure before the National Authority for Data Protection and Freedom of Information in order to terminate the presumed unlawful data processing:

We further inform you that, in the event of infringement of the statutory provisions relating to data processing, or if the Data Controller has failed to comply with any of your requests, you may bring a civil action against the Data Controller before a court of law.

2.6. Automated decision-making

You are entitled not to be subject to a decision based solely on automated processing, including profiling, which would produce legal effects concerning you or similarly significantly affect you. In such cases, the Data Controller shall be obliged to implement suitable measures to safeguard the rights, freedoms and legitimate interests of the data subject, including at least the right to obtain human intervention on the part of the controller, to express his or her point of view, and to contest the decision.

The foregoing shall not apply where the decision:

  • is necessary for entering into, or performance of, a contract between you and the controller
  • is authorised by Union or Member State law applicable to the controller which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests
  • is based on your explicit consent

3. Cookies

3.1. Definition of a cookie:

The Data Controller uses so-called cookies during visits to the website. A cookie is an information package consisting of letters and numbers, which our website sends to your browser for the purpose of saving certain settings, facilitating the use of our website, and contributing to the collection of certain relevant statistical information regarding our visitors.

Some cookies do not contain personal information and are not suitable for identifying an individual user, while some do contain an individual identifier – a secret, randomly generated string of numbers – which is stored on your device and thereby ensures that you can be identified. The duration of operation of each cookie is set out in the relevant description of the given cookie.

Pursuant to Article 6(1)(a) of the GDPR, the legal basis of the data processing is your consent.

3.2. Types of cookies:
3.2.1. Cookies strictly necessary for operation:

These cookies are indispensable for the use of the website and enable the use of the basic functions of the website. Without them, many functions of the website will not be available to you. The lifetime of these types of cookies is limited exclusively to the duration of the session.

These cookies include:

  • Cookie acceptance cookie: when arriving on the site, you accept the statement on the storage of cookies in the warning window. Lifetime: 365 days
  • Cart cookie: records the products placed in the cart. Lifetime: 365 days
  • Backend identifier cookie: identifies the backend server serving the site. Lifetime: until the browser is closed
  • Google ReCaptcha: uses the ReCaptcha function within its services. The use of ReCaptcha is subject to Google’s privacy policy and terms of use. We use the ReCaptcha service only to combat spam and abuse
  • Session cookie: these cookies store the visitor’s location, browser language, and payment currency; their lifetime lasts until the browser is closed or a maximum of 2 hours
  • Mobile version, design cookie: detects the device used by the visitor and switches to full view on mobile. Lifetime: 365 days
  • employee_login_last_email: stores the e-mail address during login until the browser is closed
  • come_from: performs login redirection. Lifetime: 10 minutes
3.2.2. Cookies serving analytics, statistics and enhancement of user experience:

These cookies collect information about the user’s use of the website, for example which pages are visited most frequently or which error messages are received from the website. These cookies do not collect information that identifies the visitor, i.e. they work with fully general and anonymous information. The data obtained from them are used to improve the performance of the website. The lifetime of these types of cookies is limited exclusively to the duration of the session.

These cookies include:

  • Referrer cookies: record from which external site the visitor arrived at the site. Their lifetime lasts until the browser is closed
  • Logout #2 cookie: under option #2, the system logs the visitor out after 90 days. Lifetime: 90 days
  • Ealrm, ealem, ealpw: provide persistent login. Lifetime: 180 days
  • currency: stores the purchaser’s currency. Lifetime: 30 days
3.2.3. Marketing and Remarketing cookies:

Marketing cookies make it possible for us, by analysing purchasers’ behaviour, to create advertising campaigns that reach the appropriate target audience.

These cookies include:

  • Google Adwords cookie: when someone visits our site, the visitor’s cookie identifier is added to the remarketing list. Google uses cookies – such as NID and SID cookies – to personalise ads displayed in Google products, such as Google Search. It uses such cookies, for example, to remember your most recent searches, your previous interactions with individual advertisers’ ads or search results, and your visits to advertisers’ websites. The AdWords conversion tracking feature uses cookies. To track sales and other conversions resulting from ads, cookies are saved on the user’s computer when that person clicks on an ad. Common uses of cookies include: selecting ads based on what is relevant to a given user, improving reports on campaign performance, and avoiding showing ads that the user has already viewed.
  • Google Analytics cookie: Google Analytics is Google’s analytics tool that helps website and application owners obtain a more accurate picture of their visitors’ activities. The service may use cookies to collect information and compile reports on statistical data relating to website usage without individually identifying visitors to Google. The main cookie used by Google Analytics is the “__ga” cookie. In addition to reports generated from website usage statistics, Google Analytics – together with certain advertising cookies described above – may also be used to display more relevant ads in Google products (such as Google Search) and across the internet.
  • Remarketing cookies: may appear to previous visitors or users while they browse other websites in the Google Display Network, or when they search for terms related to your products or services
  • Last viewed product cookie: records the products last viewed by the visitor. Lifetime: 60 days.
  • Last viewed category cookie: records the last viewed category. Lifetime: 60 days.
  • Recommended products cookie: records the list of products to be recommended in the “product recommendation” function. Lifetime: 60 days.
  • predictionio: user identification cookie for recommending personalised advertisements. Lifetime: 3 months.
  • Smart offer cookie: records the conditions for displaying smart offers (e.g. whether the visitor has already been on the site, whether the visitor has an order). Lifetime: 30 days.
  • Facebook pixel (Facebook cookie): the Facebook pixel is code that helps the website generate reports on conversions, create target audiences, and provide the owner of the site with detailed analytical data on visitors’ use of the website. With the help of the Facebook pixel, the website may display personalised offers and advertisements to visitors on the Facebook interface. Facebook’s privacy policy can be reviewed here: Facebook privacy notice
3.3. Deletion of cookies:

You may find more detailed information on deleting cookies at the following links:

4. Amendment

The Operator reserves the right to amend this Privacy Notice, in which case the amended notice shall be made available on the home page of the Service.