Privacy Statement

This privacy statement (hereinafter referred to as the “Statement”) contains the rules and guidelines for controlling personally identifiable information via the webpages operated by BZ-DT Kft. (hereinafter referred to as the “Operator”) under the domain name https://www.doncarplake.hu and via the use of the services relating to the webpages (hereinafter collectively referred to as the “Services”). While the technical background for the service is provided by a hosting provider named Webdomain Kft., the software programs hosted on the servers are operated by the Operator itself.

By starting the use of the Services, users accept the terms and conditions specified in this Statement. This Privacy Statement is continuously available 24/7 on the splash page of this website.

1. Identification of the data controller

With regards to the personally identifiable information controlled in connection with the Services, the Operator shall act as the data controller without involving any data processor. Personally identifiable information controlled by the Operator is not disclosed to anyone except for the Operator's employees and/or subcontractors. Details of the users of the Services are stored on the Operator's servers.

2. Data controlling guidelines

2.1 Registration, subscription to newsletters and associated data controlling operations

To a certain degree, the Services may be used without registration (i.e. provision of personally identifiable information). However, certain elements of the Services may only be used with registration (i.e. provision of personally identifiable information). When registering or subscribing to newsletters, the Operator unambiguously identifies mandatory and optional information to be provided. Mandatory information is required for the legal and lawful provision and use of the Services. Mandatory information includes in particular the following:

• I. Username,
• II. Password, and
• III. E-mail address.

Users may decide to not provide certain details. However, such decision may result in the user not being able to use certain elements of the Services. Therefore, with regards to registration or subscription to newsletters, provision of information is volunteer and the control of any such information shall be subject to the prior consent of the affected party.

The Operator records certain user-related information which might qualify as personally identifiable information in accordance with Section 2.2 of this Statement even when the Services are used without registration.

The duration of control of personally identifiable information generated in connection with registration or subscription to newsletters shall correspond to the period for which the legal relationship with the particular user exists. After such period, all information provided by the particular user about themselves will be deleted. Nevertheless, the user may request termination of their registration and deletion of their associated data in accordance with Section 6.1 of this Statement.

2.2 Control of website visitor details

Certain details (including the IP address) of the Service users' computers are logged for the purpose of generating website visitor statistics and ensuring proper operation of the Services. Such information sometimes qualifies as personally identifiable information. Log files are processed to create statistics and retained on the Operator's server for a maximum period of 6 (six) months. The Operator does not link user IP addresses to any other information or data which would allow for the identification of the user's identity.

2.3 Use and description of "cookies" and "web beacons"

When users use certain elements of the Services, the Operator installs, on users' computers, small-sized data files not directly related to the users (i.e. cookies) for the purpose of data recording, user identification, facilitation of future visits of users, improving the Services' efficiency, delivering targeted contents and/or advertisements to users or for market research purposes. Information obtained by the Operator through the use of such data files will not be linked by the Operator to the particular user's identification details. Session cookies are automatically removed from computers on the date/time set in the cookies.

Users have the following options in their internet browsers concerning the use of cookies:

• I. Receive notification when the Operator tries to install a cookie on their computer,
• II. Always block installation of cookies.

It is to be emphasized that the rejection of installation of cookies may result in the certain features or pages not functioning properly or the user not being granted access to certain details or information. For more information on cookies, please visit http://www.cookiecentral.com.

In addition to cookies installed by the Operator, third parties may also install data files on users' computers. It might happen, for example, when a user visits a third-party website during the use of the Services.

To this end, the Operator may embed so-called third-party web beacons or web bugs. Web beacon is defined as an image embedded in a website to help trace visits to the website. This information is called “clickstream data”. Such information allows for the analysis of visitor habits which analysis is required for improvements to the website and for displaying advertisements. As for their intended purpose, web beacons are much alike cookies (i.e. used to trace online navigations and operations of users). The main difference between them is that web beacons are not visible on the website. Also, web bugs cannot be rejected by users in the web browser in the same way cookies may be disabled. For more information about web beacons, please visit http://en.wikipedia.org/wiki/Web_beacon.

3. Purpose of data controlling

Below are the objectives of data controlling performed by the Operator in connection with the Services:

• Efficient delivery of the Services,
• Identification of registered users,
• Resolution of disputes arising in connection with the use of the Services,
• Provision of clarification to registered users about the operation of the Services (e.g. technical messages, information about changes to the Services, etc.),
• Troubleshooting Service interruptions,
• Direct marketing. The latter one may performed by the Operator only after obtaining proper consent to such data controlling activity, only during the applicable period and for no longer than until the withdrawal of such consent.

4. Transfer to and control of data by third parties

Unless otherwise set forth in legal regulations, the Operator does not disclose personally identifiable information to third parties without the express consent of the particular user. The same principle applies to data obtained by the Operator through the use of data files. Cases where certain personally identifiable information is disclosed to third parties may include the following:

I. The username of registered users is considered public information and thus visible to anyone. Any and all activities performed by registered users in use of the Services can be traced and retrieved by anyone based on the registered users' usernames. Such activities may lead to consequences that may qualify as personally identifiable information. Moreover, it might happen that the user themselves reveals their identity giving others the chance to personally identify them. Also, users may make their e-mail address and other details available on the website.

Making such information publicly available is at the sole discretion of the user. Therefore, it shall be considered as an act of voluntary public disclosure of personally identifiable information. In case of such public disclosure, users shall be aware of the risk that others may abuse personally identifiable information made publicly available by the users. There is no way for the Operator to eliminate this risk.

II. The Operator shall be entitled to send or publish notices or announcements (including cases where certain user details are used for such purposes) concerning any detected suspicious or unlawful activity performed in use of the Services.

III. The Operator may hire contractual partners (i.e. subcontractors) to perform certain elements of the Services (e.g. displaying advertisement, generating visitor statistics, etc.). In such cases, certain user details may be disclosed to such contractual partners. However, contractual partners shall be bound by the obligation of confidentiality in receiving such information.

Such contractual partners may collect user details based on their own legal grounds and for their own purposes subject to the principle of voluntarism. However, in this case, contractual partners shall obtain the consent of the affected users and comply not only with legal regulations but also with the privacy statements issued by the affected individual or entity.

IV. The Operator fulfils its statutory obligation to disclose information by collaborating with investigating authorities and courts in exploring and sanctioning legal offenses committed in use of the Services (e.g. fraud, violation of intellectual property rights).

5. Data security

Despite of all security efforts considered as industrial standards taken by the Operator, the Operator does not guarantee that personally identifiable information of users (whether relating to activities performed in use of the Services or displayed on Service interfaces) is always and in all cases controlled in accordance with the provisions set forth in this Privacy Statement. Third parties or even other users may be able to unlawfully intercept or access messages, correspondences or other data that fall under the scope of legal regulations concerning the protection of privacy and personal rights. Also, the user may voluntarily decide to disclose their personally identifiable information to third parties who may use such information for unlawful purposes or in unlawful manners.

Users shall assume exclusive and sole responsibility for the use of their personal identifiers and passwords and any activities associated therewith. Consequently, it is recommended that the link/correlation between such identifiers and users and between usernames and passwords be kept in secret. If the user decides to voluntarily reveal such information to third parties, the user might lose their right of disposal over their details controlled by the Operator in use of the Services.

6. Closing provisions

6.1 Exercises of rights, and legal remedy

• Clarification 

Users shall be entitled to obtain information regarding how their personally identifiable information is controlled and used by sending an e-mail to info{at} biato {dot} hu.

• Deletion and correction of data

In use of the Services, users shall be able to change or correct any details they have provided by logging in to their personal user account. Registered users may request the termination of their account or deletion of their data by sending an e-mail to info{kukac} biato {pont} hu. If the user had previously actively contributed to the content of the website, such user's data shall be deleted to the extent so that their previous activities are retained.

• Legal remedy 

Any user who feels that their right to the protection of personal data has been violated by the Operator, may enforce their claim before a civil court or seek assistance from the data protection supervisor. Detailed legal provisions relating hereto and to the obligations of the data controller are set forth in Act LXIII of 1992 on the Protection of Personal Data and the Disclosure of Information of Public Interest.

6.2 Responsibility

The Operator excludes any responsibility or liability for any information stored, made available or published by users through the use of the Services.

If the Operator becomes aware of the fact that the user has violated the rights of a third party or the law by using the Services under the name and personal details of another person, has used personally identifiable information or general data, whether publicly available within the Services or unlawfully obtained, in a way that violates the rights of a third party or the law, has otherwise violated any provision specified hereunder, or has caused any damage in using the Services, then the Operator will initiate appropriate actions for compensation and legal accountability.

6.3 Amendment

The Operator reserves the right to amend this Privacy Statement from time to time. Should this document be amended, the then-current version will be posted by the Operator on the Services splash page.

Last updated: 30/09/2015