Privacy Notice

1 Introduction

1.1 Purpose of the Privacy Policy

The purpose of this Privacy Policy of the Hologenx.hu Online Store (hereinafter: Online Store) is to ensure transparency of the data processing operations carried out by the Online Store, as well as the protection of data subjects’ personal data and the accessibility of information relating to processing, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation or GDPR) and the Hungarian data protection legislation.

1.2 Scope and applicability

This Privacy Policy applies to all personal data processed by the Online Store in the course of operating the webshop, selling dietary supplements, and providing related services. The provisions of this Privacy Policy apply throughout the entire lifecycle of the personal data processed by the Online Store, from collection to deletion.

2 Data Controller and contact details

2.1 Name and details of the Data Controller

Name: HologenX s.r.o.
Registered office: Hlavná 22, Štúrovo 943 01, Slovakia
Company registration number: 56 089 279
Tax number: SK2122199024
Email address: [email protected]

3 Principles of processing

3.1 Lawfulness, fairness and transparency

The Online Store carries out its processing activities lawfully, fairly, and in a manner transparent to data subjects. We provide information relating to processing in an easily accessible form, using clear and plain language.

3.2 Purpose limitation

Personal data may be collected only for specified, explicit, and lawful purposes. The Online Store ensures that the purposes of processing are clearly defined and that the data are not further processed in a manner incompatible with those purposes.

3.3 Data minimisation

The Online Store processes personal data only to the extent and for the period necessary, limiting processing to the minimum required to achieve the purposes of processing.

3.4 Accuracy

The Online Store strives to ensure that the personal data it processes are accurate and up to date, and takes all reasonable steps to erase or rectify inaccurate personal data without delay.

3.5 Storage limitation

Personal data must be stored in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed. The Online Store ensures that personal data are not stored for longer than this, unless the data are processed for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes.

3.6 Integrity and confidentiality

Personal data must be processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction, or damage, using appropriate technical or organisational measures.

3.7 Accountability

The Online Store is responsible for compliance with the data protection principles and must be able to demonstrate such compliance.

4 Legal bases for processing

Where processing is based on the data subject’s consent, the Online Store ensures that consent is freely given, specific, informed, and unambiguous. The data subject has the right to withdraw consent at any time; however, withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

4.2 Performance of a contract

Processing of personal data is lawful if it is necessary for the performance of a contract to which the data subject is party, or in order to take steps at the request of the data subject prior to entering into a contract.

4.3 Compliance with a legal obligation

Processing may be based on compliance with a legal obligation applicable to the Online Store. In this case, the purpose and conditions of processing are determined by law.

4.4 Protection of vital interests

Processing of personal data is lawful if it is necessary to protect the vital interests of the data subject or of another natural person.

4.5 Performance of a task carried out in the public interest or exercise of official authority

Processing is lawful if it is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Online Store.

4.6 Legitimate interests

Processing of personal data is lawful if it is necessary for the purposes of the legitimate interests pursued by the Online Store or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data.

5 Categories of personal data processed and purposes of processing

5.1 Data of website visitors

When visiting the website, the Online Store logs users’ IP address, the time of the visit, the pages viewed, and the type of browser used. The purpose of processing these data is to ensure the operation of the website, improve the user experience, and for statistical purposes.

5.2 Data of registered users

Registration is required to purchase in the Online Store. During registration, users provide the following personal data: name, email address, phone number, billing address and shipping address. The purpose of processing is to handle purchases, fulfil orders, communicate with users, and manage the customer account.

If users contact the Online Store’s customer service, the Online Store processes the personal data provided during communication (name, email address, phone number, message content). The purpose of processing is to respond to customers’ requests and questions and to handle complaints.

The Online Store processes the email address of users who subscribe to the newsletter in order to send them marketing content, promotions, and information related to the services of the Online Store. Newsletter subscription is voluntary, and users can unsubscribe at any time.

5.5 Other processing activities

In addition to the above, the Online Store may carry out other processing activities, about which it will always inform data subjects in advance. Such processing may include, for example, processing in connection with organising prize games or promotions.

6 Data transfers and processing

6.1 Transfer of data to third parties

The Online Store transfers personal data it processes to third parties only if the data subject has consented, or if the transfer is necessary to comply with a legal obligation. The Online Store ensures that an appropriate level of protection of personal data is maintained during the transfer.

6.2 Use of data processors

In the course of its processing activities, the Online Store may use data processors who process personal data on behalf of the Online Store and in accordance with its instructions. The Online Store cooperates only with data processors who provide appropriate guarantees for GDPR-compliant processing and for implementing appropriate technical and organisational measures to protect the rights of data subjects. The list of data processors is published on the Online Store’s website.