Privacy policy

Boldogkő-Fruit Ltd. Privacy Policy

This Privacy Policy describes the personal data that is collected and processed when you use the website bestillo.hu (the "Website"). The Policy also explains how personal data is used, shared, and protected, what choices you have regarding your personal data, and how you can contact us.

GENERAL PROVISIONS
Boldogkő-Fruit Ltd. ensures that the processing of personal data it manages is lawful and purposeful at all times. The purpose of this Policy is to provide appropriate information to our customers and private individuals before providing their personal data about the conditions, guarantees, and duration under which our company processes such data. Our company adheres to the provisions of this Policy for all cases of personal data processing and considers them binding.

We reserve the right to modify this unilateral legal statement; in such cases, affected persons will be notified in advance. If you have any questions regarding this Policy, please contact us. Our data processing activities are based on voluntary consent, or, in certain cases, on legal obligations, contracts, steps requested by the data subject before concluding the contract, or our legitimate interest as data controller.

Our data processing complies with applicable laws, in particular:

• Regulation (EU) 2016/679 of the European Parliament and of the Council (April 27, 2016) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter "GDPR");
• Act CXII of 2011 on the Right of Informational Self-Determination and on Freedom of Information ("Act").

Who is responsible for processing your personal data?
The data controller responsible for your personal data is:

Name: Boldogkő-Fruit Ltd.
Registered Office: 3885 Boldogkőváralja, Béke út 31.
Phone: +36 46 306 628
E-mail: info@bestillo.hu
Tax Number: 13168669-2-05
Company Registration Number: 05 09 010886

Definitions

• “Personal data”: any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person;
• “Processing”: any operation or set of operations performed on personal data or sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction;
• “Data controller”: the natural or legal person, public authority, agency, or other body which alone or jointly with others determines the purposes and means of the processing of personal data;
• “Data processor”: a natural or legal person, public authority, agency, or other body which processes personal data on behalf of the controller;
• “Recipient”: a natural or legal person, public authority, agency, or another body to which personal data are disclosed, whether a third party or not; public authorities which may receive personal data in the framework of a particular inquiry are not considered recipients;
• “Consent of the data subject”: any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;
• “Data breach”: a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to personal data transmitted, stored or otherwise processed.

WHAT PERSONAL DATA DO WE COLLECT AND WHEN?
To provide the services you request, we ask you to provide certain personal data. Such data include but are not limited to:

• Contact information, including your name, email address, phone number, and shipping and billing addresses;
• Personal details, including gender and data related to your previous purchases;
• Individual settings, including your wishlist and your preferences regarding marketing messages and cookies.

Further information regarding these processes is contained in the "Cookies and Web Beacons (Pixel Tags)" section of this Privacy Policy. These include:

Cookies, IP addresses, referrer headers, data identifying your browser and its version, as well as web beacons and tags.

Personal Data of Children
We comply with local laws and do not allow registration on our Website for children who have not reached the legal age required in their country of residence.

It is important to emphasize that this age is 16 years in Hungary. The processing of personal data of children under 16 years is lawful only if consent is given or authorized by the holder of parental responsibility over the child.

Therefore, we request parental consent for children participating in our programs and events.

We are not in a position to verify the authority of the consenting person or to review the content of the legal representative’s statement; therefore, the Data Subject or their legal representative warrants that consent is in accordance with the law. Upon use of the service, we consider valid consent to have been provided by the legal representative.

TOOLS USED FOR PROCESSING PERSONAL DATA
When using our Website, your browser or mobile device platform may provide tools to control when the device collects or shares certain categories of personal data. For example, your mobile device or browser may allow you to control the use of cookies or location sharing. We recommend that you familiarize yourself with and use the available tools on your devices.

WHY AND HOW DO WE USE YOUR PERSONAL DATA?
Your personal data is used as follows:

• To provide the services and functionalities you request on our Website: When you use our Website, your personal data is used to provide the product or service you requested. For example, when you make a purchase or participate in an event or promotion, the contact information you provide is used to communicate about that purchase, event, or promotion. If you contact our customer service, we use relevant information such as shipping, payment, or product/service details to help resolve your inquiry.
• Newsletter subscriptions: Data provided during subscription, such as name, email, and mobile phone number, are used to send you future promotions and marketing offers. Recipients include newsletter subscribers at the time of purchase or registration.
• Contact form submissions: Data such as name and email are used to respond to customer inquiries. The option to subscribe to the newsletter is also available during message submission. Customer service stores inquiry data for technical reasons until requests are fulfilled but does not send marketing messages without explicit consent. Recipients include message senders.
• Certain Website features may require additional data or consent for specific uses, e.g., sharing content on social media platforms like Facebook, Messenger, Twitter, Google+, and WhatsApp. Use of these services requires your consent to their data policies; otherwise, you cannot access these features on our Website.
• To inform you about our products, services, events, and other promotional activities: With your consent, we send marketing communications and news related to our services and promotions. You may revoke your consent at any time. Information you provide, along with purchase and event participation data and other sources, may be used to send personalized messages about products and services of interest to you.
• To conduct business activities and improve our products and services: Personal data you provide is also used to support our business operations. For example, purchase information is used for accounting and other internal purposes. Personal data regarding your use of our products and services helps us improve user experience and identify technical and service issues.
• Other purposes: Your personal data may also be used for other purposes for which you will be separately notified at the time of collection (e.g., satisfaction surveys), and your consent will be sought if necessary.

LEGAL BASIS FOR DATA PROCESSING
The legal basis for processing your personal data depends on how you use our Website.

If you purchase products or services on our Website, we need your personal data to fulfill the contract concluded with you. For example, your payment and contact details are necessary to fulfill your order.

Other legal bases include legitimate interests as a business, such as complying with legal obligations or protecting your vital interests.

OTHER DATA PROCESSING
Information about data processing not listed in this privacy notice will be provided at the time the data is collected. We inform our clients that certain authorities, public duty bodies, and courts may contact our company for the purpose of obtaining personal data. Our company discloses personal data to these bodies only to the extent and in the amount necessary to achieve the specified purpose of the request, provided that the requesting authority has clearly identified the exact purpose and scope of the data, and if the fulfillment of the request is required by law.

METHOD OF STORING PERSONAL DATA, DATA SECURITY
Our company’s IT systems and other data storage locations are located at our headquarters and on servers rented by the data processor. Our company selects and operates the IT tools used during service provision in a way that ensures the managed data is:

• accessible to authorized persons (availability);
• authentic and verifiable (authenticity of data processing);
• verifiable as unaltered (data integrity);
• protected against unauthorized access (data confidentiality).

We pay particular attention to data security and take the necessary technical and organizational measures, as well as establish procedural rules to enforce the guarantees required by the GDPR. We protect the data with appropriate measures especially against unauthorized access, alteration, transmission, disclosure, deletion or destruction, accidental destruction, damage, and inaccessibility caused by changes in the applied technology.

Our company’s and partners’ IT systems and networks are protected against computer-assisted fraud, computer viruses, hacking attempts, and denial-of-service attacks. The operator ensures security with server-level and application-level protective procedures. Daily backups of the data are performed. To avoid data protection incidents, our company takes all possible measures and in the event of such an incident, acts immediately according to our incident management policy to minimize risks and mitigate damages.

PROTECTION AND MANAGEMENT OF YOUR PERSONAL DATA
Encryption and Security
To safeguard your personal data, we apply numerous technical and organizational security measures, including encryption and authentication tools.
Access to the computers and mobile phones we use is protected by a PIN code. This also applies, for example, when returning from the screen saver. On our social media platforms, we use two-factor authentication.

Retention of Your Personal Data
We store your personal data only for as long as necessary to fulfill the purposes specified in this privacy policy (unless applicable laws require a longer retention period). If you have requested marketing information from us, we retain the data until you request the deletion of your account.
Personal data related to product purchases are stored for longer periods in order to comply with legal obligations (such as tax and sales legislation).

YOUR RIGHTS REGARDING YOUR PERSONAL DATA
You are entitled to:

• request information about the processing of your personal data;
• request correction of your personal data;
• request deletion or blocking of your personal data;
• object to the processing of your personal data.

If you have given us your consent to process your personal data, you may withdraw your consent at any time.

If you wish to receive a copy of your personal data or exercise any other rights, please contact us.

This may include information about the data we process, the purpose and legal basis of the processing, duration, the names and addresses of data processors, and data processing activities, as well as which parties receive or have received your data and for what purpose. We will provide this information in writing within 30 (thirty) calendar days.

Your personal data will be deleted if:

• processing is unlawful;
• you request the deletion of the data;
• the data is incomplete or incorrect and cannot be legally corrected, provided that deletion is not prohibited by law;
• the purpose of data processing has ceased;
• the statutory retention period has expired;
• deletion is ordered by a court or the National Authority for Data Protection and Freedom of Information.

COOKIES AND WEB TRACKERS (Pixel Tags)
When using our website, information sent by your internet browser may be collected, which may include personal data. We collect such information using various methods, including cookies and web trackers. The information collected may include your unique cookie identifier, cookie data, information about whether your device has the necessary software to use certain functions; unique device ID and device type; domain, browser type and language; operating system and system settings; country and time zone; data on previously visited websites; information on visits to our website including click habits, purchases, and indicated preferences; as well as access times and referer URL headers.

Third parties may also collect information through cookies, third-party plugins, and widgets on our website. These third parties collect data directly from your internet browser, and their data processing is governed by their own privacy policies. Examples include Google, Facebook, Hotjar, Salesautopilot.

We use cookies and web trackers to monitor customer usage and preferences on our website. This allows us to provide services and improve online user experience. We also use cookies and trackers to collect aggregated data on website traffic and interactions, identify trends, and gather statistics to improve our websites. We generally use three types of cookies on our sites:

• Strictly necessary cookies: Essential for the basic operation of the site and are always enabled. Functional cookies remember your settings on a single visit or every visit if you wish. They support security and compliance with regulations.
• Statistics: These cookies help us improve the operation of our website by tracking usage. Sometimes they speed up processing of your requests and remember settings you selected on the site. Refusing these may hinder personalization and slow site operation.
• Marketing: Social media cookies allow connection to social networks and sharing of content via social media. Advertising cookies (used by third parties) collect information to display ads tailored to your interests both on our website and others. Use of these cookies may involve processing your personal data. Disabling these cookies may result in less relevant ads or limit your ability to connect to Facebook, Twitter, or other social networks and share content.

You have the option to manage and/or delete cookies as you wish. For more information, please visit aboutcookies.org. You can delete all cookies stored on your computer and most browsers allow you to block their installation. However, this may mean you need to manually configure some settings every time you visit a site and some services or functions may not work.

CHANGES TO OUR PRIVACY POLICY
Applicable laws and our procedures may change from time to time. If we decide to update our privacy policy, we will publish the changes on our website.

If there is a significant change in how we handle your personal data, we will notify you in advance and, if required by law, request your consent before implementing such changes.

By using our services, you accept the terms of the updated privacy policy by implication.

REMEDIES
You may object to the processing of your personal data for the reasons specified in Article 21 of the Info Act. In such cases, we are obliged to examine your objection within 15 (fifteen) calendar days from submission and inform you in writing of the outcome.

If you disagree with our decision or if we miss the deadline, you may take your case to court within 30 (thirty) calendar days from the date of decision or deadline.

If you believe your rights have been violated, you may also file a complaint with the court in accordance with Article 22 of the Info Act.

You may also lodge complaints or seek remedies at the National Authority for Data Protection and Freedom of Information:

Name: National Authority for Data Protection and Freedom of Information
Address: 1024 Budapest, Szilágyi Erzsébet fasor 22/C.
Website: www.naih.hu
Phone: +36 (1) 391-1400
E-mail: ugyfelszolgalat@naih.hu