1.INTRODUCTION

It is very important for us to comply with the currently valid data protection regulations and laws, so below we discuss and present in detail the data protection steps of wood2smoke.hu and Liget GATTER Kft. and their processes related to data collection. 

The data is processed by Liget GATTER Kft., and this company is responsible for the processing of personal data. 

Contact details: 

Full legal name: Liget GATTER Kft. 
Email address: forest@wood2smoke.hu
Postal address: 2067 Szárliget 

2. WHAT PERSONAL DATA DO WE PROCESS AND FOR WHAT REASON?

Personal data is that which clearly enables the precise identification of an individual. On wood2smoke.hu we process the following personal data, specifying the legal basis: 

COMMUNICATION DATA 

This includes any messages you send to us via the website, email, social media messages or any other form of communication. We process and retain this data to fulfill your orders and to provide a basis for decision-making in the event of any legal claims. Our legal basis for this processing is the user's justified interest in our activities, which is reflected in the messages you send to us. 

CUSTOMER DATA 

This includes all data related to the purchase of products and services, such as the customer's name, shipping and billing address, email address, telephone number, details of the purchased product. We process this data in order to successfully fulfill orders and to have legally adequate records of purchases. The legal basis for storing the data is the fulfillment of the contract concluded with the order between the customer and Liget GATTER Kft. 

USER DATA 

This includes data generated during the use of the website, which enables the technical operation of the site, to maintain the security of the site, to store backups of user activity, and to always have access to the most relevant content. The legal basis for processing the data is the user's clear interest in our activities, for which the storage of this data is necessary for the provision and technical operation of the site. 

TECHNICAL DATA 

This includes data generated during the use of the site, such as IP address, login information, browser data, time of visit to individual pages, page views and navigation paths, number and time of page visits, time zones, and data about the device you use to view the site. The source of the data is our analytics software. We process this data to analyze user habits on the site, maintain the secure operation of our site, and understand the usefulness of our individual marketing decisions. The legal basis for processing the data is the user's clear interest in our activities, which allows us to process this data in accordance with security requirements and use it to increase business in order to operate more effectively. 

MARKETING DATA 

This includes the visitor's preferences for what kind of marketing content they would like to receive from us. We process this data to enable participation in prize draws and to send advertising related to our products/services in which the user has expressed interest. The legal basis for processing the data is the user's clear interest in our activities, which allows us to process this data in accordance with security requirements and use it to grow our business in order to operate more effectively. We may occasionally use the collected data for purposes such as providing targeted, relevant advertisements on the Facebook™ platform and various dynamic advertising platforms, and to measure the effectiveness of the advertisements. The legal basis for processing the data is the user's clear interest in our activities, which allows us to process this data in accordance with security requirements and use it to grow our business in order to operate more effectively. In the course of our activities, we do not collect sensitive data such as ethnicity, religious beliefs, sexual life and orientation, political opinions and trade union membership or health background, and genetic or biometric information. 

3.HOW DO WE COLLECT DATA?

We may collect personal data in ways that the user provides to us directly (for example, by placing an order or sending a message). In addition, certain data is collected automatically when you use the site, for example, through so-called “cookies” and similar technologies. These only come into operation after the user has given their consent. 

For more information, please see our Cookie Statement. 

We receive certain data from third-party partners, such as analytics providers such as Google (non-EU partner), advertising networks such as Facebook™ (non-EU partner), and payment processing partners such as PayPal (non-EU partner) and Barion. 

4. OUR PRACTICAL STEPS RELATED TO DATA PROTECTION

The protection of users' data and compliance with applicable regulations is extremely important to Liget GATTER Kft. Therefore, after conducting a data protection impact assessment on the site, we have prepared a list of the data collected, their necessity and legal basis, and their legal compliance. 

To protect the data entered in forms and generated on the site, we use SSL certification on the entire website (Let's Encrypt Authority X3 certification). 
To protect the site from attacks, we use premium security software (Solid Security Pro) to protect stored data against so-called "brute force" and virus attacks. 
In the site's databases, purchase and user data are stored in encrypted form (pseudonymized), so they are not readable by third parties. 
In this privacy statement, we provide users with forms to request information about the processing of their personal data, and to modify or delete their personal data. 

Sometimes, in the interests of our business, it is necessary to provide data to our service partners (e.g. hosting service provider, courier company, newsletter sending software). 

In such cases, we always choose to comply with the requirements of the GDPR regulation, and in the case of a US-based partner, to participate in the EU-US Privacy Shield data protection initiative, and we sign a data management agreement with them, ensuring responsible data management. 

5.MARKETING COMMUNICATION

Marketing communication is essential for the business. The legal basis for data processing in this regard is the interest shown in our services or the express consent of the users. In accordance with the European Union Privacy and Electronic Communications Regulations (PECR), we send marketing messages to our users if they have purchased from us or have expressly consented to receive marketing messages. We always make it possible to suspend consent and unsubscribe from messages in a clearly visible way. The link to unsubscribe can be found at the bottom of each e-mail, or removal from the database can be requested at the e-mail address forest@wood2smoke.hu. 

We may also send messages if you unsubscribe from marketing communications, but only for order fulfillment purposes. 

6.NOTE REGARDING PERSONAL DATA

Sometimes it is necessary to share certain personal data with certain of our partners in order to maintain normal business operations: 

IT service providers, and service providers that perform troubleshooting and maintenance on computer systems 
Expert partners such as lawyers, accountants, bankers, insurers 
Government agencies that request reports on our activities 
Payment service providers that securely handle bank card details 
Courier services that fulfill incoming orders to the specified delivery address 

International data transfers 

We sometimes need to share user data with service partners outside the European Economic Area (EEA) in order to operate our business. Countries outside the EEA often do not provide the same level of data protection, and European laws prohibit the export of data unless certain conditions are met. 

Whenever personal data is transferred outside the EEA, we will take the following steps in addition to the steps discussed in Section 4 to ensure the secure handling of the data: 

We only transfer data to countries that the European Commission considers adequate in terms of data security. 
We only use US-based services that are part of the EU-US Privacy Shield data security initiative. 

If the above is not met, we ask for the users' express consent to the data transfer. Consent can be withdrawn at any time. 

Links to external sites 

This site occasionally contains links to external sites or embedded code snippets that enable the operation of external services. Clicking on these links or using embedded solutions may allow third-party partners to collect data about users. While we do our best to properly screen our partners, we have no control over their privacy practices and are not responsible for their data practices. 

7.Duration of data processing

We only store user data for as long as we are required to do so by our legal/accounting/data reporting obligations or for as long as is necessary to operate the service. When deciding on the storage period, we take into account the amount, nature and sensitivity of the data and the potential impact of its leakage in the event of a data breach. For tax reasons, we need to retain customer billing and purchase data for at least 8 years to comply with our legal obligations. Under certain circumstances, we may use the data in an anonymized form for statistical purposes, in which case we will store the data indefinitely without further notice. 

8. VISITOR'S RIGHTS

As a citizen of the European Union, the General Data Protection Regulation (GDPR) gives users of this site the following rights: 

a.Access to personal data

Users of the site have the right to request a copy of the personal data stored by Liget GATTER Kft. The request will generally be fulfilled free of charge, within 14 days of the request. In the event of repeated, abusive, unjustified data requests, Liget GATTER Kft. may charge a moderate amount for providing the data, and additional time may be required to provide the data. 

Furthermore, Liget GATTER Kft. requests proof of identity before releasing the data, in order to prevent misuse. To request personal data, please use the contact form on the contact page and in the text, please write which topic you are contacting us about, from the following: 

Data request / Data deletion / Data restriction 

b.Modify personal data

If personal data has been changed or has been provided incorrectly, users have the right to request the modification of the data. To modify personal data, please contact us at forest@wood2smoke.hu. 

c. Request for deletion of personal data

Users have the right to request the deletion of all their personal data. We will fulfill the request free of charge within 14 days of the request. After the deletion of personal data, the user account will not be accessible, so any purchased materials will also become inaccessible, as the personal data associated with the user account is essential to access the service. 

Liget GATTER Kft. requests proof of identity before deleting personal data to prevent misuse. To delete personal data, please use the contact form above. 

dRequest restriction of processing of personal data

Users have the right to request that their data be restricted from being made available to third parties (service providers). When submitting the request, the service providers to be restricted can also be named. It is important to note that cooperation with certain service providers is essential for the operation of the site (e.g. Barion as a payment provider), so in the event of their restriction, the site's services will become unavailable to the user. Liget GATTER Kft. requests proof of identity before restricting the transfer of personal data, in order to prevent abusive use. To restrict the transfer of personal data, please use the contact form above: 

In Hungary, the official body dealing with data protection is the National Authority for Data Protection and Freedom of Information (NAIH). Users can find out more about their data protection rights on the NAIH website. 

National Data Protection and Freedom of Information Authority, 
1125 Budapest, Szilágyi Erzsébet fasor 22/C., Mailing address: 1530 Budapest, P.O. Box: 5., 
Phone: 06.1.391.1400, 
Fax: 06.1.391.1410, 
E-mail: ugyfelszolgalat@naih.hu 
Website: http://www.naih.hu 

9.ANONYMIZED DATA AND “COOKIES”

On the wood2smoke.hu website, in e-mail messages and advertisements, we use so-called “cookies” and similar technologies, such as tracking codes, re-marketing tags, pixels, which are activated after the user’s consent. These technologies help us better understand the behavior and interests of users, thus helping us to operate at a higher level and more efficiently. Our goal is to make the use of wood2smoke.hu as user-friendly and personal as possible. If the user wishes to prohibit the recording of non-personal data by these technologies, this can be done in the following ways: 

You can block their loading using the cookie warnings displayed on the website. 
by disabling “cookies” in your browser 

You can find more information about other cookies and tracking codes on wood2smoke.hu in our Cookie Statement. 

Privacy Statement regarding Facebook ads 

This privacy statement (hereinafter referred to as the „Statement”) applies to Facebook ads operated by Liget GATTER Kft. (hereinafter referred to as „we”, „us”, „our” or „our company”). Please read this Statement carefully to become informed about our practices regarding the collection, processing and protection of personal data. 

1.Collection and use of data 

We, Liget GATTER Kft., use the personal data you provide through Facebook ads exclusively for the given project. The personal data we collect may include: name, e-mail address, telephone number, etc., which you knowingly and voluntarily provide to us. We use this data exclusively to facilitate contact with the customer. We only provide the data to third parties at the request of the customer. We do not use the data for other projects or customers, and we do not transfer it to third parties for other purposes, unless required by law or legitimate interest. 

2. Data protection 

The protection of your personal information is of utmost importance to us. We will take all reasonable and necessary steps to maintain data security and prevent unauthorized access, use, modification or other unauthorized activities. 

3. Cookies and tracking 

We may use cookies and tracking technologies related to our ads to analyze and improve the effectiveness of our ads. These cookies are small data files that we place on your device when you visit or interact with our Facebook ads. Cookies help us collect information such as the number of visitors, clicks, and unique user activity to better understand interests and the effectiveness of our ads. 

4. Rights and access 

Privacy is important to us and we respect your rights to access, rectify, delete and object to your data. If you would like to exercise these rights or would like more information about our privacy practices, please contact us using the contact details below. 

5.Third-party websites and services 

Our Facebook ads may redirect you to third-party websites or services. Please note that these websites and services may have their own privacy practices that are not covered by this Statement. We encourage you to review the privacy policies of those websites or services before providing them with any personal information.