Privacy Policy

for visitors and registered users of the website: www.pacapime.hu

Introduction

The data controller processes the personal data of individuals registered on the website in order to provide them with appropriate services.

The data controller seeks to fully comply with the legal provisions governing the processing of personal data, particularly the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council.

This privacy notice has been prepared based on Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, with regard to the provisions of Act CXII of 2011 on the right to informational self‑determination and freedom of information.

Identification of the data controller

Name / company name: Pacapime Kft.
Registered office: 6782 Mórahalom, Papírgyári út 4.
Tax number: 14141272-2-06
Name and address of the website: Pacapime Kft. – www.pacapime.hu
Availability of the privacy notice: https://www.pacapime.hu/privacy-policy

Contact details of the data controller

Name / company name: Pacapime Kft.
Registered office: 6782 Mórahalom, Papírgyári út 4.
Mailing address: 6782 Mórahalom, Papírgyári út 4.
E-mail: info@pacapime.hu

Definitions

  • GDPR (General Data Protection Regulation): the data protection Regulation of the European Union.
  • Data processing: any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
  • Processor: a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
  • Personal data: any information relating to an identified or identifiable natural person (data subject); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
  • Controller: a natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.
  • Data subject’s consent: any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
  • Data breach: a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.
  • Recipient: a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing.
  • Third party: a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.

Principles of data processing

The controller declares that it processes personal data in accordance with this privacy notice and complies with the relevant legislation, in particular with the following principles:

Personal data must be processed lawfully, fairly and in a transparent manner in relation to the data subject.

Personal data must be collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes.

The processing of personal data must be adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.

Personal data must be accurate and kept up to date; every reasonable step must be taken to ensure that personal data that are inaccurate are erased or rectified without delay.

Personal data must be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed. Personal data may be stored for longer periods insofar as the personal data will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes.

Personal data must be processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.

The principles of data protection must be applied to any information concerning an identified or identifiable natural person.

Important information on data processing

The purpose of the processing is to enable the controller to provide additional services to persons registered on the website while operating the website.

Duration of processing and deletion of data: The duration of the processing always depends on the specific purpose, but data must be deleted without delay once the originally intended purpose has been achieved. The data subject may withdraw his or her consent to the processing at any time by sending a letter to the contact e‑mail address. Where there is no legal obstacle to deletion, the data will be deleted.

The persons authorised to know the data are the controller and its employees.

The data subject may request access to, rectification or erasure of personal data concerning him or her, or restriction of processing, and may object to the processing of such personal data, as well as exercise the right to data portability.

The data subject may withdraw consent at any time, but the withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.

The data subject has the right to lodge a complaint with the supervisory authority.

If the data subject wishes to take advantage of the benefits of registration, i.e. wishes to use the relevant service of the website, he or she must provide the requested personal data. The data subject is not obliged to provide personal data; failure to do so will not have any adverse consequences for him or her. However, certain functions of the website cannot be used without registration.

The data subject is entitled to have inaccurate personal data concerning him or her rectified or supplemented without undue delay at his or her request.

The data subject is entitled to have personal data concerning him or her erased without undue delay at his or her request, and the controller is obliged to erase personal data concerning the data subject without undue delay where there is no other legal basis for the processing.

The modification or deletion of personal data can be initiated by e‑mail, by telephone or by letter at the contact details provided above.

Personal data must be processed lawfully, fairly and in a transparent manner in relation to the data subject.

Personal data must be collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes.

The processing of personal data must be adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.

Personal data must be accurate and kept up to date; every reasonable step must be taken to ensure that personal data that are inaccurate are erased or rectified without delay.

Personal data must be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed. Personal data may be stored for longer periods insofar as the personal data will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes.

Personal data must be processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.

The principles of data protection must be applied to any information concerning an identified or identifiable natural person.

Registration on the website

The purpose of processing is to provide additional services and enable contact.

The legal basis for processing registration data is your consent (Article 6(1)(a) of the GDPR).

The scope of data subjects is the registered users of the website.

Duration of processing: Processing continues until consent is withdrawn. You may withdraw your consent to data processing at any time by sending a letter to the contact e‑mail address.

Data are deleted when consent to processing is withdrawn. You may withdraw your consent to processing at any time by sending a letter to the contact e‑mail address.

The persons authorised to know the data are the controller and its employees.

Mode of storage: electronic.

Modification or deletion of personal data can be initiated by e‑mail, by telephone or by letter at the contact details provided above.

The provision of personal data is essential for identification in databases and for maintaining contact. The exact company name and address are required for invoicing, which is a legal obligation.

Scope of data processed

Specific purpose of data processing

Name
Identification, contact, invoicing
Company name
Identification, contact, invoicing
Address
Identification, contact, invoicing
E-mail
Identification, contact
Telephone
Identification, contact
Date of registration
Technical information operation
IP address
Technical information operation

The user may give consent to data processing by deliberately ticking an empty checkbox provided on the website for this purpose.

You, as the data subject, may object to the processing of your personal data; in this regard you are entitled to the procedures described in the data processing information detailed above and, in this notice, and in the legislation referred to in this notice

Placing an order

The purpose of processing is to provide additional services, contact and sending confirmation e‑mails. We can only fulfil your order if you provide contact and invoicing information that is indispensable for contacting and invoicing.

The legal basis for processing is your consent (Article 6(1)(a) of the GDPR). In the case of invoicing, processing is based on a legal obligation (Article 6(1)(c) of the GDPR).

The scope of data subjects is the registered users of the website.

Duration of processing. Processing is based on legal requirements and continues until consent is withdrawn. You may withdraw your consent to data processing at any time by sending a letter to the contact e‑mail address.

Data are deleted when consent to processing is withdrawn. You may withdraw your consent to processing at any time by sending a letter to the contact e‑mail address. Deletion of billing data is possible in accordance with legal requirements.

The persons authorised to know the data are the controller and its employees.

Mode of storage: electronic.

Modification or deletion of personal data can be initiated by e‑mail, by telephone or by letter at the contact details provided above.

Scope of data processed

Specific purpose of data processing

Name
Identification, contact, invoicing
Company name
Identification, contact, invoicing
Address
Identification, contact, invoicing
E-mail
Identification, contact
Telephone
Identification, contact
Date of the product ordered
Identification of the product
Date of registration
Technical information operation
IP address
Technical information operation

The user may give consent to data processing by deliberately ticking an empty checkbox provided on the website for this purpose.

The data subject may object to the processing of his or her personal data; in this regard the data processing information detailed above and in this notice and the legislation referred to in this notice apply.

Issuing invoices

The purpose of processing is to issue and send electronic invoices as an e‑mail attachment.

The legal basis for processing is a legal obligation (Article 6(1)(c) of the GDPR).
The scope of data subjects is the customers of the service provider.

Duration of processing. Processing is based on legal requirements and continues until consent is withdrawn. You may withdraw your consent to data processing at any time by sending a letter to the contact e‑mail address.

Data are deleted when consent to processing is withdrawn. You may withdraw your consent to processing at any time by sending a letter to the contact e‑mail address. Deletion of billing data is possible in accordance with legal requirements.

The persons authorised to know the data are the controller and its employees.

Mode of storage: electronic.

Modification or deletion of invoice data can be initiated by e‑mail, by telephone or by letter at the contact details provided above.

Scope of data processed

Specific purpose of data processing

Name
Identification, contact, invoicing
Company name
Identification, contact, invoicing
Address
Identification, contact, invoicing
E-mail
Identification, contact
Telephone
Identification, contact
Tax number / tax identification
Identification of the customer
Invoice data
Identification of the invoice
Date of issue of the invoice
Technical information operation.

Sending newsletters

As the operator of the website, we declare that we fully comply with the relevant legal provisions in the information and explanations we publish. We also declare that, when subscribing to the newsletter, we are not in a position to verify the authenticity of the contact details and cannot determine whether the data provided relate to a private individual or a company. We treat companies that contact us as clients.

The purpose of processing is to send electronic messages containing professional information, advertisements, information and newsletters, which you may unsubscribe from at any time without consequences. You may also unsubscribe without consequences if your company has ceased to exist, you have left the company, or someone has provided us with your contact details.

The legal basis for processing is your consent (Article 6(1)(a) of the GDPR). We inform you that the user may give his or her prior and express consent for the service provider to contact him or her at the e‑mail address provided at registration with advertising offers, information and other mailings. Consequently, the user may consent to the service provider processing the necessary personal data for this purpose.

We inform you that if you wish to receive newsletters from us, you are obliged to provide the necessary data. If the data are not provided, we cannot send you newsletters.

Duration of processing. Processing continues until consent is withdrawn. You may withdraw your consent to data processing at any time by sending a letter to the contact e‑mail address.

Data are deleted when consent to processing is withdrawn. You may withdraw your consent to processing at any time by sending a letter to the contact e‑mail address.

Consent may also be withdrawn using the link that appears in the newsletters sent out.

The persons authorised to know the data are the controller and its employees.

Mode of storage: electronic.

Modification or deletion of data can be initiated by e‑mail, by telephone or by letter at the contact details provided above.

Data processor used:

www.webflow.com

www.google.com

Scope of data processed

Specific purpose of data processing

Name
Identification, contact
E-mail
Identification, contact
Date of subscription
Technical information operation
IP address
Technical information operation

We inform you that neither the username nor the e‑mail address needs to contain information referring to you personally. For example, the username or e‑mail address does not need to contain your name. You are completely free to decide whether to use a username or e‑mail address that contains information referring to your identity. The e‑mail address-which serves contact purposes, is necessary for the newsletter or professional information we send to reach you.

Cookies

Cookies are small files created by websites you visit. They improve the user experience by saving browsing data. A cookie may store, for example, the settings for a site or the login state.

The website you visit places a small file (cookie) on the visitor’s computer in order to determine the date and time of the visit. The service provider informs visitors of this.
The scope of data subjects is visitors to the website.

The purpose of processing is to provide additional services, identification and tracking of visitors.

The legal basis for processing is the visitor’s consent (Article 6(1)(a) of the GDPR).

The scope of data: unique identifier, date/time, settings.

The user may delete cookies at any time from the browser using the settings menu.
Mode of storage: electronic.

Social media

A social media site is a media platform through which messages are disseminated via social users. Social media uses the Internet and online opportunities to allow users to become content editors rather than content consumers.

The term social media refers to internet applications that contain user‑generated content, such as Meta (Facebook), Instagram, X (formerly Twitter), Pinterest, etc.

Forms of social media appearances may include public speeches, presentations, demonstrations, descriptions of products or services.

The forms of information appearing in social media can be forums, blog posts, images, videos, audio materials, message boards, e‑mail messages, etc.

Accordingly, beyond personal data, the range of data processed may include the user’s public profile picture.

The scope of data subjects: all registered users.

The purpose of data collection is to promote the website or related pages.

The legal basis for processing is the data subject’s voluntary consent (Article 6(1)(a) of the GDPR).

The duration of processing is governed by the rules available on the social media site in question.

The deadline for deletion of the data is governed by the rules available on the social media site in question.

The persons authorised to know the data are specified in the rules available on the social media site in question.

The rights related to data processing are specified in the rules available on the social media site in question.

Mode of storage: electronic.

It is important to consider that when a user uploads or submits personal data, he or she grants the operator of the social media site worldwide permission to store and use such content. It is therefore very important to ensure that the user is fully entitled to disclose the information published.

Facebook privacy notice: https://www.facebook.com/business/gdpr

Instagram privacy notice: https://privacycenter.instagram.com/policy

Google Analytics

Our website uses Google Analytics.

Google Analytics uses first‑party cookies to compile reports for its clients on the habits of the users of the website.

On behalf of the operator of the website, Google uses the information to evaluate how users use the website. As an additional service, it compiles reports on the activity related to the website for the operator of the website so that it can provide further services.

The data are stored on Google’s servers in an encrypted form to make it more difficult and to prevent the misuse of the data.

Disabling Google Analytics: users who do not want Google Analytics JavaScript to report their data can install the Google Analytics opt‑out browser add‑on. The add‑on prevents the Google Analytics JavaScript (ga.js, analytics.js and dc.js) running on websites from sharing information with Google Analytics about visit activity. The browser add‑on is available for most modern browsers. The Google Analytics opt‑out browser add‑on does not prevent data from being sent to the website itself or to other internet analytics services.

https://support.google.com/analytics/answer/6004245?hl=en

Google’s privacy policies: https://policies.google.com/privacy?hl=en

Detailed information on the use and protection of data can be found at the links above.

Data Processors

Hosting provider:

Specific purpose of data processing

Name / Company name:
Webflow, Inc
Registered office:
398 11th Street, Floor 2, San Francisco, CA 94103, United States
Phone:
(415) 975-1409

The data you provide are stored on the server operated by the hosting provider. Staff operating the server may have access to the data, but they are all responsible for handling the data securely.

Description of the activity: hosting service, server service.

Processing lasts until the end of the operation of the website or in accordance with the contractual agreement between the operator of the website and the hosting provider. In case of need, the data subject may also contact the hosting provider to request deletion of his or her data.

Acountant:

Specific purpose of data processing

Name / Company name:
Pacapime Kft.
Registered office:
6782 Mórahalom, Papírgyári út 4.
Phone:
6782 Mórahalom, Papírgyári út 4.
E-mail:
accounting@pacapime.hu

Rights related to data processing

Right of access

You may request information from us through the contact details provided about what data our company processes about you, on what legal basis, for what processing purpose, from what source, and for how long. At your request we will send you information to the e‑mail address you provide without delay, but within no more than 30 days.

Right to rectification

You may ask us through the contact details provided to modify any of your data. At your request we will take action without delay, but within no more than 30 days, and we will send you information to the e‑mail address you provide.

Right to erasure

You may ask us through the contact details provided to delete your data. At your request we will do so without delay, but within no more than 30 days, and we will send you information to the e‑mail address you provide.

Right to restriction of processing

You may ask us through the contact details provided to block your data. Blocking lasts for as long as the reason indicated by you requires us to store the data. At your request we will do so without delay, but within no more than 30 days, and we will send you information to the e‑mail address you provide.

Right to object

You may object to the processing through the contact details provided. We will examine the objection without delay, but within no more than 15 days of the submission of the request, decide on its merits and notify you of the decision by e‑mail.

Legal remedies related to data processing

If you experience unlawful data processing, please notify our company so that the lawful situation can be restored in a short time. We will do our utmost to resolve the problem you have outlined.

If, in your view, the lawful situation cannot be restored, notify the authority at the contact details below:

National Authority for Data Protection and Freedom of Information (NAIH)

Mailing address: 1363 Budapest, Pf. 9.
Address: 1055 Budapest, Falk Miksa utca 9‑11.
Telephone: +36 (1) 391‑1400
Fax: +36 (1) 391‑1410
E‑mail: ugyfelszolgalat@naih.hu
URL: https://naih.hu

Right to judicial remedy

We inform you that you have the possibility to apply to the courts for the protection of your personal data, and that the court will deal with the matter out of turn. In this case you are free to decide whether to bring the case before the competent court according to your place of residence or stay, or according to the registered office of the company.

You can find the court competent for your place of residence or stay at: https://birosag.hu/birosagkereso

Legislation underlying the processing

  • Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
  • Act CXII of 2011 on the right to informational self‑determination and freedom of information.
  • Act LXVI of 1995 on public documents, public archives and the protection of private archival material.
  • Government Decree 335/2005 (XII. 29.) on the general requirements for document management by public authorities.
  • Act CVIII of 2001 on certain issues related to electronic commerce services and information society services.
  • Act C of 2003 on electronic communications.
  • Act CXXXVII of 2003 on the protection of personal data.
By clicking “Accept all cookies”, you agree to the storage of cookies on your device to enhance site navigation, analyze site usage, and support our marketing efforts. For more information, please see our  Privacy Policy