Thank you for your interest in MEDOMEGA LLC. and its products! 

The trust of our visitors is of paramount importance to us, and we take special care to protect the personal data of our visitors. Accordingly, we inform our Visitors about our data management practices in relation to the use of our website in the following privacy notice.

In preparing this privacy notice, we have taken particular account of the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Regulation (EC) No 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the GDPR), the 2011 GDPR and the 2011 Act on the Right to Information Self-Determination and Freedom of Information. CXII of 2013 (hereinafter referred to as the “Info Act”) and Act V of 2013 on the Civil Code (hereinafter referred to as the “Civil Code”). MedOmega Trade and Service Company Limited Liability is therefore particularly mindful of the GDPR requirements for all data processing.

Data controller and contact details:
MedOmega LLC.

Tel: +36 30 6334526

Email: [email protected]

Concepts:

(1) “personal data” means any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;

(2) “processing” means any operation or set of operations which is performed upon personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;

3. “restriction of processing”: the marking of stored personal data for the purpose of restricting their future processing;

(4) ‘controller’ means a natural or legal person, public authority, agency or any other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of the processing are determined by Union or Member State law, the controller or the specific criteria for the designation of the controller may also be determined by Union or Member State law;

(5) “processor” means a natural or legal person, public authority, agency or any other body which processes personal data on behalf of the controller;

(6) ‘recipient’ means a natural or legal person, public authority, agency or any other body to whom or with which personal data are disclosed, whether or not a third party. Public authorities which may have access to personal data in the context of an individual investigation in accordance with Union or Member State law are not recipients; the processing of those data by those public authorities must comply with the applicable data protection rules in accordance with the purposes of the processing;

(7) “third party” means a natural or legal person, public authority, agency or any other body other than the data subject, the controller, the processor or the persons who, under the direct authority of the controller or processor, are authorised to process personal data;

8. “data subject’s consent” means the freely given, specific, informed and unambiguous indication of his or her wishes by which the data subject signifies, by a statement or by an act expressing his or her unambiguous consent, that he or she signifies his or her agreement to the processing of personal data concerning him or her;

(9) “data breach” means a breach of security that results in the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed;

(10) “terminal device” means the computing or telecommunication device (including, but not limited to, laptop, desktop computer, tablet, smartphone) from which the Website is visited and/or accessed.

General information

We inform our Visitors that in the course of their activities on https://www.medomega.hu/ (hereinafter also referred to as: Website), in particular, but not exclusively, when visiting and using the Website, registering on the Website, contacting us on the Website, ordering products on the Website, subscribing to our newsletter, personal data is processed, processed and used.

It is a fundamental principle of our company that personal data are processed only lawfully, on an appropriate legal basis, in compliance with data protection principles, in a manner that respects the rights of data subjects, in a transparent manner for data subjects, and only for the purposes for which the data are processed, in accordance with the principles of data security and data economy. In our data management practices, we only process personal data that is necessary for the purposes of the processing, compatible with the purposes of the processing and adequate for the purposes of the processing. Accordingly, in our Company’s processing practices, we process personal data only to the extent and for the duration necessary to achieve the purpose.

We inform our Visitors that in all our data management practices we comply with the applicable laws. Accordingly, in our data management practices, we pay particular attention to the provisions of the following laws:

1, REGULATION (EU) No 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Regulation (EC) No 95/46/EC (General Data Protection Regulation) (hereinafter referred to as GDPR),

2. the Act CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information (hereinafter referred to as the “Infotv.”),

3. the Act V of 2013 on the Civil Code (hereinafter: Civil Code),

4. the Act C of 2000 on Accounting (hereinafter: Accounting Act),

5. the Act C of 2003 on Electronic Communications (hereinafter referred to as the “Act”),

6. the Act CLV of 1997 on Consumer Protection (hereinafter referred to as the “Consumer Protection Act”),

7. the Act XLVIII of 2008 on the Basic Conditions and Certain Restrictions of Economic Advertising Activities (hereinafter: Grt.),

8. the Act CVIII of 2001 on certain aspects of electronic commerce services and information society services (hereinafter: E-kertv.)

9. the Act CXXVII of 2007 on Value Added Tax (hereinafter: VAT Act)

10. the Act CL of 2017 on the Rules of Taxation (hereinafter: Art.)

Visit the website

When you visit our website, for security reasons, we record the IP address, operating system and software environment, browser, time of visit and pages visited of the Visitor’s terminal device. In addition to network, server and data security, this data is recorded in order to optimise and improve online services. Accordingly, the legal basis for data processing is based on Article 6 (1) (f) GDPR and Article 6 (1) (b) of the Info Act.

Purpose of data processing: data security and optimisation of services

Legal basis for data processing:GDPR Article 6 (1) (f); Info tv. § 6 (1) (b)

Data processed: IP address, operating system and software environment, browser, time of visit, pages visited

Contact

Our visitors can contact us by email at [[email protected]]. The personal data provided when contacting us will only be processed for the purpose of and in connection with contacting you or for the purpose of and in connection with replying to your contact. By contacting us, you give your explicit consent to the processing of your personal data. Accordingly, the legal basis for the processing is Article 6 (1) (a) GDPR and Article 6 (1) (a) of the Info tv. Article 5 (1) (a) of the GDPR. 

Purpose of processing: to reply to a contact

Legal basis for data processing: article 6 (1) (a) GDPR; Info tv. Art. 5 (1) (a) (data subject’s consent) Art.

Data processed: user name, user email address, date of request, other personal data provided by the data subject

Duration of processing: until the data subject requests erasure, but for a maximum of 5 (five) years

Facebook

Our visitors can interact with us through Facebook activity on our Company’s Facebook page, send us messages, post comments, follow our page and comment on our products, posts and page by “liking” our page. You may provide personal data during Facebook activity. Personal data provided during Facebook activity will be processed solely in accordance with and in connection with the purpose of the activity, in particular but not limited to responding to contact, monitoring and managing customer reactions, sharing our services, products, page and promotions. By becoming active on Facebook, you give your explicit consent to the processing of your personal data. Accordingly, the legal basis for the processing is Article 6 (1) a) GDPR and Article 6 (1) a) of the Info tv. Article 5 (1) (a) of the GDPR. 

Purpose of data processing: to respond to your contact, to monitor and manage customer reactions, to share our services, products, site and promotions

Legal basis for data processing: article 6 (1) (a) GDPR; Info tv. Art. 5 (1) (a) (data subject’s consent) Art.

Processed data: personal data voluntarily provided by the data subject, and publicly available profile data if the data subject follows or has liked the Company’s Facebook page

Duration of processing: until the data subject requests erasure, but for a maximum of 5 (five) years

Please also note that your data will also be processed by Facebook Ireland Ltd. and Facebook, Inc. when you use Facebook. To learn more about Facebook’s processing of your data, please read the Facebook Privacy Policy (https://www.facebook.com/privacy/explanation).

Instagram

Our visitors can interact with us, send us messages, post comments, follow our page, and comment on our products, posts and page through Instagram activity on our Company’s Instagram page. During the Instagram activity, you may provide or disclose personal data. The personal data provided during the Instagram activity will be processed solely in accordance with and in relation to the purpose of the activity , in particular but not limited to responding to contact, monitoring and managing customer reactions, sharing our services, products, site and promotions. By becoming active on Instagram, you give your explicit consent to the processing of your personal data. Accordingly, the legal basis for the processing is Article 6 (1) a) GDPR and Article 6 (1) a) of the Info tv. Article 5 (1) (a) of the GDPR. 

Purpose of processing: to respond to your contact, to inform you of events, to monitor and manage customer reactions, to share our services, products, site and promotions

Legal basis for data processing: article 6 (1) (a) GDPR; Info tv. Art. 5 (1) (a) (data subject’s consent) Art.

Processed data: personal data voluntarily provided by the data subject, and publicly available profile data if the data subject follows or has liked the Company’s Instagram page

Duration of processing: until the data subject requests erasure, but for a maximum of 5 (five) years

Please also note that your data will also be processed by Facebook Ireland Ltd, the owner of Instagram, when you use Instagram. To learn more about Instagram’s processing of your data, please read Instagram’s privacy policy at (https://hu-hu.facebook.com/help/instagram/155833707900388/) and (https://help.instagram.com/196883487377501?ref=dp).



Registration on the website

Our visitors can create a customer account on our Website. The personal data provided for the purpose of successful registration will be processed solely in accordance with and in connection with the purpose of registration on the Website, in particular, but not limited to, for the purpose of providing purchases as a registered customer, for the purpose of receiving and processing discounts related to a customer account. By registering, you give your explicit consent to the processing of your personal data. Accordingly, the legal basis for the processing is Article 6 (1) a) GDPR and Article 6 (1) a) of the Info tv. Article 5 (1) (a) of the GDPR. 

Purpose of data processing: creating a customer account on the website, ensuring purchases as a registered customer, providing and managing discounts related to the customer account

Legal basis for data processing: article 6 (1) (a) GDPR; Info tv. Art. 5 (1) (a) (data subject’s consent) Art.

Data processed: personal data required for registration, such as name, e-mail address, password

Duration of processing: until the withdrawal of the data subject’s consent

Product order

Our visitors can order products from our Company on our Website, whereby we will enter into a sales contract with you. When entering into the contract, you provide us with the data necessary for the conclusion, performance and accounting of the contract. In order to comply with the law, in particular with the provisions of the commercial, consumer protection and tax legislation in force, we will process the data in accordance with the scope of the legal authorisation. Accordingly, the legal basis for data processing is Article 6(1)(b) GDPR, Article 6(1)(c) GDPR in the case of statutory processing and Article 6(1)(b) of the Info tv. Article 5 (1) (b) of the Info Privacy Act. We further inform you with reference to Article 13 (2) (e) GDPR that the provision of personal data is a prerequisite for the conclusion of the contract. If you do not wish to provide the personal data, we will not be able to conclude a contract with you for the ordering of products.

Purpose of data processing: conclusion of contract, performance of contract, invoicing, claims management and enforcement of claims related to the contract, customer relationship management

Legal basis for processing: article 6 (1) (b) GDPR (performance of contract)

Data processed: personal data necessary for the conclusion of the contract, in particular but not limited to: name, delivery and billing address, telephone number, email address

Duration of data processing: until the service has been provided, until the expiry of the related consumer and warranty claims, and until the deadline prescribed by law, in the case of a concluded contract, 8 (eight) years pursuant to Section 169 (2) of the Act on Payment and Payment Services (Rechnungvtv.)

Complaints handlin

Our visitors have the right to complain about products or services purchased on our Website. We inform our Visitors that the personal data provided in connection with the handling of customer complaints will be processed solely for the purposes of and in connection with the handling of complaints, in particular, but not limited to, the purpose of and in connection with the response to, handling and follow-up of complaints. By making a complaint, you give your explicit consent to the processing of your personal data. Accordingly, the legal basis for the processing is Article 6 (1) (a) GDPR and Article 6 (1) (a) of the Info tv. Article 5 (1) (a) of the GDPR. In the case of complaint handling, the legal basis for processing may be Article 6 (1) (b) GDPR (performance of a contract) and Article 6 (1) (c) GDPR (compliance with a legal requirement) in addition to the data subject’s consent.

Purpose of data management: responding to and handling complaints received, follow-up of complaint handling 

Legal basis for data processing: article 6 (1) (a) GDPR; Info tv. Article 5(1)(a) (data subject’s consent), Article 6(1)(b) GDPR (performance of a contract), Article 6(1)(c) GDPR (performance of a legal obligation)

Data processed: name, address, signature, date of conclusion/acceptance of contract, name of service/product purchased, other personal data provided by the data subject

Duration of data processing: until the expiry of consumer and warranty claims related to the product/service and until the statutory deadline, in case of a concluded contract, 8 years pursuant to Section 169 (2) of the Act on Payment and Payment Services.

Data processors

We inform our Visitors that the entities listed below process certain personal data of the data subject on behalf of our Company (data processors). The processing includes the performance of certain specified technical tasks related to the processing of the personal data of the data subject:

NameAddressActivityScope of data processed
OTP Mobil Szolgáltató Korlátolt Felelősségű Társaság1143 Budapest, Hungária krt. 17-19.credit card transaction authenticationtransaction number, identifiers, time, amount
Pénzadó Kft.7625 Pécs, Antal street 13.accounting service providerall personal data under this notice
GLS Hungary 2351 Alsónémedi,
GLS Európa utca 2.
courier service providerthe name, delivery address, telephone number and other contact details of the data subject
ECO Magyrország Ltd.2220 Vecsés,Lőrinci út 59-61 “B” buildingwarehouse logistics providerin the event of a claim, any and all personal data under this notice

Cookies (“cookies”)

In order to provide a better user experience and a more personalised service, the Data Controller places small data packets, so-called cookies, on the Visitor’s (User’s) terminal device, which enable our Website to recognise the terminal device used by the data subject when a connection is established between the data subject’s terminal device and our Website. The Visitor may delete cookies from his terminal device and disable the use of cookies in his browser settings. If cookies are rejected and/or deleted, the usability of the Website may be limited, which the Visitor acknowledges.

Our Website uses both temporary and permanent cookies. Temporary cookies are placed on the terminal device of the user only during a particular session, after which they are automatically deleted. Permanent cookies used on our Site will remain on the terminal device of the data subject until the data subject deletes the cookies. Our Tomorrow also uses cookies that collect information about the internet browsing habits of the data subject. The purpose of such data collection is to enable us to display personalised advertising to the data subject on the data subject’s terminal device.

Please note that we use the following cookies on our Website:

Strictly necessary cookies: these cookies are essential for the use of the website and allow you to use its essential functions. Without them, many of the site’s features will not be available to you. The lifetime of these types of cookies is limited to the duration of the session.

Cookies to improve your user experience: these cookies collect information about your use of the website, such as which pages you visit most often or what error messages you receive from the website. These cookies do not collect any information that identifies the visitor, i.e. they are completely generic and anonymous. We use the information they provide to improve the performance of the website. The lifetime of these types of cookies is limited to the duration of the session.

Shopping cart cookie: records the products placed in your shopping cart. It is used to store cookies.

wp_woocommerce_session Contains a unique code for each customer to know where the shopping cart data is located in each customer’s database. It has a lifetime of 2 days.

woocommerce_items_in_cart Helps WooCommerce to determine when the cart content/items change. The lifetime of these types of cookies is limited to the session time only.

woocommerce_cart_hash Helps WooCommerce determine when the cart content/data changes. The lifetime of these types of cookies is limited to the session time only.

Google Analytics cookie description: Google Analytics is Google’s analytics tool that helps website and app owners to get a more accurate picture of their visitors’ activities. The service may use additional cookies to collect information and report statistics about website usage without identifying visitors individually to Google. The main cookie used by Google Analytics is the “__ga” cookie. In addition to generating reports from website usage statistics, Google Analytics, together with some of the advertising cookies described above, may also be used to display more relevant ads in Google products (for example, in a search using the Google search engine) and across the web.

Cookie name: Google Analytics

Purpose of the cookie: to collect composite statistics

Nature of the cookie: behavioural

Cookie shelf life: 1 year

Legal basis for data processing: article 6 (1) (a) GDPR; Info tv. Article 5(1)(a) (data subject’s consent), Article 13/A(4) of the E-kertv.

If you do not accept the use of cookies, certain features will not be available to you. For more information on how to delete cookies, please click on the links below:

We inform our Visitors that plug-ins, links, banners and hyperlinks on our site may direct our Visitors to other websites. Neither the editorial staff of our Site, nor the operator of our Site, nor our Company accepts any responsibility for the content of other websites. These websites should be visited or used by our Visitors (Users) at their own risk.

Rights concerned

If you, as a data subject, wish to exercise your rights under the GDPR and the Info law, please contact our Data Protection Officer at any time using the contact details above. Our visitors have the following rights:

  1. The right to information about the processing and the data processed (right of access, Article 15 GDPR),
  2. Right to rectification of inaccurate data or completion of incomplete data (right to rectification, Article 16 GDPR),
  3. The right to request the erasure of personal data and, where personal data have been disclosed, the right to inform other controllers processing the data of the request for erasure (right to erasure, Article 17 GDPR),
  4. Right to request restriction of processing (right to restriction of processing, Article 18 GDPR),
  5. The right to receive personal data relating to him or her in a structured, commonly used, machine-readable format and to request the transfer of these data to another controller (right to data portability, Article 20 GDPR),
  6. The right to object to processing in order to stop processing (right to object, Article 21 GDPR),
  7. The right to withdraw your consent at any time in order to stop processing based on your consent. Withdrawal of consent does not affect the lawfulness of the processing carried out prior to the withdrawal (right to withdraw consent, Article 7 GDPR).
  8. The right to lodge a complaint with a supervisory authority if you consider that the processing infringes the provisions of the GDPR (right to lodge a complaint with a supervisory authority, Article 77 GDPR).

If you have a complaint, you can contact the supervisory authority using the following contact details:

National Authority for Data Protection and Freedom of Information

1055 Budapest, Falk Miksa utca 9-11.

Postal address: 1363 Budapest, PO Box 9.

E-mail: [email protected]