A GOOD PHOTO DESERVES TO BE PRINTED
1.
NETPRINTER PRINTING SERVICE LTD.
PRIVACY AND DATA SECURITY POLICY
2020.
Netprinter Kft., as the data controller, informs data subjects, before commencing data processing, of the facts relating to the processing of their data, in particular the purposes and legal bases of the processing and the duration of data processing.
This Privacy Notice also covers the rights of data subjects in relation to data processing and the available legal remedies
Data Controller: Netprinter Kft.
Registered office: 1095 Budapest, Soroksári út 48., Malomudvar üzletház 10–11, ground floor
Tax number: 27053135-2-43
EU VAT number: HU23771688
Company registration number: 01-09-346902
Managing Director: Kremmer Péter
hereinafter: “Data Controller” or “our Company”
For enquiries concerning data protection matters, Netprinter Kft. can be contacted at info@netprinter.hu.
If you have any questions, requests or problems concerning the processing of your data, please contact us.
The websites owned by Netprinter Kft. and covered by this Policy are:
Netprinter: http://www.netprinter.hu
Netprintershop: http://www.netprintershop.hu
In addition, this Privacy Notice applies, for specific processing purposes, to the persons and organisations designated as data controllers in the relevant processing descriptions in this Notice.
An important objective of Netprinter Kft. is to protect the personal data provided by customers and business partners and to ensure the right of the persons concerned to informational self-determination.
The Company treats personal data confidentially and takes all necessary security, technical and organisational measures to ensure data security. Accordingly, in order to respect the privacy of natural persons, comply with applicable data protection legislation and ensure an appropriate level of processing and protection, the Company sets out, in this Privacy and Data Security Policy (“Policy”), the requirements and tasks relating to data protection and data security, which are mandatory and must be applied, observed and enforced.
The following processors have a contractual relationship with the Data Controller:
Server provider: Hostonic Online Szolgáltató és Fejlesztő Betéti Társaság
Activity: provision of storage capacity for storing IT programs and operating websites
Registered office: 1077 Budapest, Rottenbiller u. 34. I/7.
Contact: http://www.hostonic.hu/
Company registration no.: 01-06-769824; Tax no.: 22179155-2-42; EU VAT no.: HU22179155; Chamber registration no.: BU22179155; Tel.: +36 30 232-5459
Chatbot provider: Intercom Inc. (www.intercom.com)
https://www.intercom.com/legal/privacy
I. PURPOSE AND SCOPE OF THE POLICY
1. The purpose of the Policy is to:
a) ensure the lawful management of records maintained by the Company by defining and implementing the basic rules applicable to data processing, and to ensure compliance with the constitutional principles of data protection and the requirements of data security;
b) prevent unauthorised access to data, unlawful alteration of data and unauthorised disclosure by defining data-security rules and applying organisational and technical measures to protect the data.
2. The material scope of the Policy covers all data processing and data-processing activities carried out or commissioned by the Company in Hungary concerning the personal data of natural persons who come into contact with the Company (“Data Subjects”), regardless of whether the processing is performed manually or by fully or partially automated means.
3. The personal scope of the Policy covers the organisational units of the Company and persons employed or commissioned by the Company who process data on behalf of or in the interests of the Company, or whose duties are connected with such processing. It also covers commissioned processors and their employees and agents who process data under a contract with the Company, including technical tasks connected with data-processing operations, regardless of the method, means or place of processing, provided that the technical task is performed on the data.
4. On the date this Policy enters into force, all previous policies, rules and instructions concerning data protection and/or data processing shall cease to apply.
5. The Company reserves the right to supplement or repeal this Policy.
II. GENERAL DEFINITIONS
1. Data Subject: any identified or identifiable natural person who can be identified, directly or indirectly, on the basis of personal data.
2. Personal Data: any information relating to an identified or identifiable natural person (“Data Subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifier, or one or more factors specific to their physical, physiological, genetic, mental, economic, cultural or social identity.
3. Processing: any operation or set of operations performed on personal data or sets of personal data, whether by automated or non-automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
4. Restriction of processing: the marking of stored personal data with the aim of limiting their processing in the future.
5. Filing system: any structured set of personal data which is accessible according to specific criteria, whether centralised, decentralised or distributed on a functional or geographical basis.
6. Data Controller: the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means are determined by EU or Member State law, the controller or the specific criteria applicable to its designation may also be determined by EU or Member State law.
7. Data Processor: a natural or legal person, public authority, agency or other body which processes personal data on behalf of the Data Controller.
8. Recipient: a natural or legal person, public authority, agency or other body to whom personal data are disclosed, whether a third party or not.
9. Third party: a natural or legal person, public authority, agency or other body other than the Data Subject, the Data Controller, the Data Processor and persons who, under the direct authority of the Data Controller or Data Processor, are authorised to process personal data.
10. Consent of the Data Subject: any freely given, specific, informed and unambiguous indication of the Data Subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
11. Personal data breach: a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.
12. Ptk.: Act V of 2013 on the Civil Code.
13. Sztv.: Act C of 2000 on Accounting.
14. Grt.: Act XLVIII of 2008 on the Basic Conditions and Certain Limitations of Economic Advertising Activity.
15. Távért. tv.: Act XXV of 2005 on Contracts for Financial Services Concluded at a Distance.
16. Eker. tv.: Act CVIII of 2001 on Certain Issues of Electronic Commerce Services and Information Society Services.
17. Infotv.: Act CXII of 2011 on Informational Self-Determination and Freedom of Information.
18. GDPR: Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation).
III. PRINCIPLES OF DATA PROCESSING
The Company shall always comply with, and ensure that all employees and agents involved in data processing comply with, the following principles in connection with their work and/or duties. Personal data shall:
1. be processed lawfully, fairly and in a transparent manner in relation to the Data Subject (“lawfulness, fairness and transparency”);
2. be collected for specified, explicit and legitimate purposes and not further processed in a manner incompatible with those purposes (“purpose limitation”);
3. be adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed (“data minimisation”);
4. be accurate and, where necessary, kept up to date; every reasonable step shall be taken to ensure that inaccurate personal data are erased or rectified without delay (“accuracy”);
5. be kept in a form which permits identification of Data Subjects for no longer than is necessary for the purposes for which the personal data are processed; longer storage is permitted where data are processed for archiving in the public interest, scientific or historical research or statistical purposes, subject to appropriate technical and organisational measures (“storage limitation”);
6. be processed in a manner ensuring appropriate security, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures (“integrity and confidentiality”).
7. The Data Controller shall be responsible for, and be able to demonstrate, compliance with the above principles (“accountability”).
IV. PROCESSING ACTIVITIES OF NETPRINTER KFT. AND THEIR PURPOSES
1. Processing related to visiting the website
1.1. No personal data are required to view information publicly available on www.netprinter.hu and www.netprintershop.hu.
1.2. The Company automatically receives the following data about website visitors: a) the visitor’s IP address; b) the time of the visit; c) the subpages and content viewed. The Company uses these data exclusively to analyse the website and monitor its secure operation.
1.3. The Company uses cookies on its website:
a) HTTP and Flash cookies store information concerning use of the website, e.g. which pages have been viewed.
b) The purpose of processing data stored in cookies is to improve the user experience, develop online services, perform web-analytics measurements and prevent data loss.
c) The cookies used on the website do not store information capable of identifying an individual.
d) Users may prohibit the use and storage of cookies in their browser.
e) Legal basis: the consent of the Data Subject.
f) Duration: 30 minutes.
g) Categories of data: identification number, date, time and the previously visited page.
h) Possible consequence of not providing the data: the website services may not be fully available and analytical measurements may be inaccurate.
1.4. Customer correspondence: If you contact our Company using the contact details provided in this Notice or on the website, the Company deletes all incoming e-mails and/or chatbot messages, unless they concern another legal relationship, together with the sender’s name, e-mail address, date and time and other personal data included in the message, no later than five years after receipt.
2. Processing related to visiting Netprinter’s Facebook page
2.1. No personal data are required to view information publicly available on the Company’s Facebook page.
2.2. The Company automatically receives the following data about visitors to its Facebook page: a) visitor profile data; b) time of visit; c) content viewed on the Facebook page. These data are used exclusively to analyse and monitor the secure operation of the Company’s Facebook page.
2.3. Facebook users can find information about the processing of their data in Facebook’s privacy policy at https://www.facebook.com/full_data_use_policy.
2.4. If a customer contacts us through the Messenger service associated with Facebook, processing is governed by Facebook’s data-processing rules, this Privacy Notice and the data-processing provisions relating to the contract between the parties.
3. Processing related to possible price calculations and quotations on the website
Data entered in the fields used to request a quotation or price calculation through the website are processed by the Company for the purpose of preparing the calculation, but are not saved.
4. Processing related to registering and performing contracts with customers and providing services
4.1. The Company is entitled to process, on a contractual legal basis, those personal data of customers which are related to the contract, its conclusion, registration or the service. The purpose may only be what is necessary for concluding, amending or maintaining the contract, assessing claims arising from the contract, or another purpose specified by law.
4.2. Online contracts concluded electronically through www.netprinter.hu are subject to the Távért. tv. and Eker. tv. Accordingly, additional purposes include demonstrating compliance with statutory consumer-information obligations, proving conclusion of the contract, creating and defining the content of contracts for information-society services, monitoring performance, invoicing fees and enforcing claims arising from the contract.
4.3. Processing in connection with conclusion of a contract is based on the contract; in the case of data provided when submitting a service request or requesting information concerning a contract, processing is based on the voluntary consent deemed to have been given by sending the request.
5. Processing for customer-service purposes
5.1. In response to customer questions concerning concluded contracts, or on its own initiative, the Company provides information and assistance by telephone, e-mail or chatbot and receives service requests and requests arising from or related to contracts. Communications conducted for this purpose are not recorded as voice recordings.
5.2. In response to customer questions concerning concluded insurance contracts, or on its own initiative, the Company also provides information and assistance through the Messenger chat service associated with Facebook and receives service requests and requests arising from or related to contracts. Communications conducted for this purpose are recorded.
5.3. The Company analyses recorded Messenger “chat” conversations and electronic correspondence using computer equipment in order to: a) monitor compliance with quality requirements applicable to customer-service activities, including increasing customer satisfaction; b) handle notifications, complaints and comments concerning services in a favourable and reassuring manner, particularly by resolving objections, questions and comments raised during conversations to the satisfaction of both parties and avoiding termination of the customer’s contract at the customer’s initiative; c) use customer feedback and comments concerning contracts and services to develop products and improve service quality; and d) identify suspected cases of misuse related to contracts and prevent such acts.
6. Processing for direct marketing purposes
6.1. The Company’s direct marketing activities comprise all information activities carried out by means of direct communication whose purpose is to transmit economic advertising, as defined in Section 3(d) of the Grt., directly related to the sale, provision or promotion of products or services to consumers or business partners.
6.2. The Company carries out such processing in particular in connection with: a) preliminary demand surveys concerning products and services among customers and natural persons who are not customers; b) sending electronic newsletters; c) sending addressed advertising mailings.
6.3. The data processed for direct marketing purposes include, in particular, name and e-mail address.
6.4. Purpose: to send economic advertising and/or information to Data Subjects by e-mail or another equivalent individual communication method.
6.5. Source: the Data Subject or third parties from whom the Company receives personal data free of charge or under contracts for the purpose of using the data for direct marketing.
6.6. The scope of processed data and information is specified in the written and electronic declarations used for the relevant direct-marketing activity.
6.7. Processing is based on the voluntary consent of the Data Subject. Consent is given when the data are collected.
7. Electronic surveillance system
7.1. A surveillance and recording system operates in Netprinter office areas. It includes colour cameras equipped with infrared technology, capable of zooming and producing recognisable images in darkness.
7.2. Legal basis: for customers, consent is given by entering the premises of Netprinter; for employees, Section 11 of Act I of 2012 on the Labour Code.
7.3. Categories of data: the facial image of persons entering the Data Controller’s premises as visible in recordings and other personal data recorded by the surveillance system.
7.5. Duration: 3 months.
7.6. Storage: recordings are stored on servers located at ................ under enhanced security measures, ensuring that unauthorised persons cannot view and/or copy the recordings.
7.7. Access: only the Company’s managing director is authorised to view the live camera image and recordings, and, where justified (e.g. suspected criminal activity), to access recordings for the purposes specified in this Privacy Notice.
7.8. Possible consequence of not providing the data: personal administration at the Company’s registered office will not be available.
7.9. Rights of the Data Subject:
a) A person whose rights or legitimate interests are affected by a recording may, by proving that right or legitimate interest, request that the Data Controller not destroy or erase the recording until a court or authority requests it, but for no more than 30 days.
b) A person appearing in a recording may also request written information from the Data Controller about exactly what can be seen in the recording containing them.
c) A person may receive a copy only of a recording in which no other person appears, or in which other persons appear only in an unrecognisable form. If this cannot be ensured, the Data Controller shall allow the Data Subject to view the recording containing them.
d) The Data Subject may request deletion of the recording concerning them, modification of data relating to the recording, or may object to the processing.
8. Other processing activities
With the prior consent of the Data Subject, the Company may process personal data for other purposes as well. The Company shall provide information about such processing when the data are collected for the relevant purpose.
V. DURATION OF DATA PROCESSING
1. Cookies placed on the user’s computer while visiting the website may be removed by the user at any time, and the use of cookies may be disabled in the browser.
2. The duration of processing data provided on the website or in Facebook applications for communications and opinions that do not constitute complaints is 365 days. The Company may use the number of opinions communicated, grouped by the relevant operational process, product or service, for the purpose of preparing anonymous statistics for an unlimited period.
3. For data covered by contracts, the Company may process personal data during the term of the legal relationship and for as long as a claim may be enforced in connection with that relationship. Personal data relating to a contract that was not concluded may be processed for as long as a claim may be enforced in connection with the failure to conclude the contract.
4. Where documents constituting accounting records arise in connection with conclusion, registration or performance of a contract or provision of services, the Company retains them for 8 years pursuant to Section 169 of the Sztv.
5. For customer-service processing, recorded Messenger conversations and e-mails are stored for the same period as data processed in connection with performance. Information derived from them is stored for the same period as the material analysed.
6. Data collected for direct marketing are processed until the Data Subject withdraws consent. The Data Subject may withdraw consent and prohibit the sending of advertising by direct communication at any time, without giving reasons and free of charge, using the e-mail address specified in this Policy or by post to the Company’s correspondence address, providing the information strictly necessary for identification.
7. The Company shall delete personal data relating to customers, former customers or contracts that were not concluded where the purpose of processing has ceased, where the Data Subject’s consent is no longer available, or where there is no statutory legal basis for processing.
VI. LEGAL BASIS OF DATA PROCESSING
1. The legal basis for processing quotations, price calculations and communications or opinions submitted through the website, Facebook and Messenger is the consent of the Data Subjects.
2. The legal basis for processing and registering contracts and for customer-service purposes is the consent of the Data Subjects, the provisions of the Civil Code, Section 169 of the Sztv., and, for electronic orders, Section 11(2) of the Távért. tv. and Section 13/A of the Eker. tv.
3. The legal basis for direct-marketing processing is the consent of the Data Subjects and Section 6 of the Grt.
VII. PERSONS AUTHORISED TO ACCESS THE DATA
1. Personal data and information may be accessed by employees of the Company who have access rights related to the relevant processing purpose, and by persons and organisations performing processing or outsourced activities for the Company under service contracts, solely within the scope determined by the Company and to the extent necessary for performing their activities.
2. In the case of joint controllership, information concerning the other controllers is provided in the description of the relevant processing purposes.
3. In the course of processing, the Company uses, in particular, the processors specified in this Privacy Policy and service providers performing outsourced activities for the Company under relevant service contracts.
VIII. SECURITY OF DATA PROCESSING
1. The Company’s IT systems and other data-storage locations are located at its registered office, office premises and at its processors.
2. The Company selects and operates the IT tools used to process personal data in the provision of services so that the processed data are: a) accessible to authorised persons: availability; b) authentic and authenticated: authenticity of processing; c) demonstrably unchanged: data integrity; d) protected against unauthorised access: data confidentiality.
3. The Company protects data by appropriate measures, in particular against unauthorised access, alteration, transmission, disclosure, erasure or destruction, accidental destruction or damage, and becoming inaccessible due to changes in the technology used.
4. To protect data files processed electronically in its various records, the Company ensures through appropriate technical solutions that stored data cannot be directly linked and attributed to the Data Subject, except where permitted by law.
5. Taking into account the current state of technology, the Company protects the security of processing through technical, organisational and structural measures providing a level of protection appropriate to the risks arising in connection with processing.
6. During processing, the Company preserves: a) confidentiality: protecting information so that only authorised persons can access it; b) integrity: protecting the accuracy and completeness of information and processing methods; c) availability: ensuring that an authorised user can access the required information and the related resources when needed.
7. The IT systems and networks of the Company and its partners are protected against computer-assisted fraud, espionage, sabotage, vandalism, fire and flood, computer viruses, computer intrusions and attacks resulting in denial of service. The operator ensures security through server-level and application-level protection procedures.
8. Users are informed that electronic messages transmitted over the Internet may, despite all precautions taken by the Data Controller, be vulnerable to network threats that may result in dishonest activity, contractual disputes, or disclosure or modification of information.
IX. RIGHTS RELATING TO DATA PROCESSING AND THEIR ENFORCEMENT
1. The Data Subject may request information about the processing of their personal data and may request rectification or, except where processing is mandatory, erasure or withdrawal of consent, and may exercise the rights to data portability and objection in the manner indicated when the data were collected or through the contact details of the Data Controller above.
2. Right to information: upon the request of the Data Subject, the Company shall provide information in an understandable form, and in writing if requested, as soon as possible and no later than 25 days after submission of the request, concerning: a) personal data processed by the Company or by a processor commissioned by it; b) the source of such data; c) the purpose, legal basis and duration of processing; d) the name and address of the processor and its activities relating to processing; e) in the event of a personal data breach, the circumstances and effects of the breach and the measures taken to remedy it; and f) where the Data Subject’s personal data are transferred, the legal basis and recipient of the transfer.
3. Information is provided free of charge if the requesting natural person has not submitted a request concerning the same category of data during the current year. In other cases, a cost reimbursement may be charged. Any cost already paid shall be refunded if the data were processed unlawfully or the request for information resulted in rectification.
4. Right to rectification: the Data Subject may request rectification of personal data and, except in cases of processing ordered for a public-interest purpose by law or, where authorised by law, by local-government regulation, may request restriction or erasure. The Company shall update rectifications initiated by the Data Subject in its records.
5. Right of access: the Data Subject has the right to obtain confirmation from the Data Controller as to whether personal data concerning them are being processed and, if so, access to the personal data and the following information: a) purposes of processing; b) categories of personal data; c) recipients to whom the personal data have been or will be disclosed, particularly recipients in third countries or international organisations and information about appropriate safeguards; d) envisaged storage period; e) right to object; f) right to rectification, erasure or restriction; g) right to lodge a complaint with a supervisory authority; h) information about data sources; i) existence of automated decision-making, including profiling.
6. Right to erasure: the Data Subject is entitled to request that the Company erase personal data without undue delay where: a) the data are no longer necessary for the purposes for which they were collected or otherwise processed; b) consent is withdrawn and there is no other legal basis; c) the Data Subject objects and there are no overriding legitimate grounds; d) the data were unlawfully processed; e) erasure is necessary to comply with a legal obligation under EU or Member State law; or f) the data were collected in relation to information-society services.
7. Erasure may not be requested where processing is necessary: a) for exercising freedom of expression and the right to information; b) for compliance with a legal obligation under EU or national law; c) for the performance of a task carried out in the public interest or in the exercise of official authority; d) for public-health purposes; e) for archiving or scientific or historical research purposes; f) for statistical purposes; g) in the public interest; or h) for the establishment, exercise or defence of legal claims.
8. Right to restriction of processing: at the request of the Data Subject, the Company shall restrict processing where: a) the accuracy of the personal data is contested, for the period necessary to verify accuracy; b) processing is unlawful and the Data Subject opposes erasure and requests restriction instead; c) the Company no longer needs the data but the Data Subject requires them for the establishment, exercise or defence of legal claims; or d) the Data Subject has objected to processing, pending verification of whether the legitimate grounds of the Data Controller override those of the Data Subject.
9. Where processing is restricted, personal data may, except for storage, be processed only with the consent of the Data Subject, for the establishment, exercise or defence of legal claims, for the protection of the rights of another natural or legal person, or for important public-interest reasons of the EU or a Member State.
10. The Company shall inform the Data Subject in advance when the restriction of processing is lifted.
11. Right to data portability: the Data Subject has the right to receive personal data concerning them which they have provided to the Company in a structured, commonly used and machine-readable format and to transmit those data to another controller.
12. Right to object: the Data Subject has the right, on grounds relating to their particular situation, to object at any time to processing of personal data which is necessary for a task carried out in the exercise of official authority, based on the legitimate interests of the Data Controller or a third party, or to profiling based on such grounds.
13. Where the Data Subject objects, the Data Controller shall no longer process the personal data unless it demonstrates compelling legitimate grounds which override the interests, rights and freedoms of the Data Subject or the processing is necessary for the establishment, exercise or defence of legal claims.
14. Where personal data are processed for direct marketing purposes, the Data Subject has the right to object at any time, including to profiling related to such direct marketing; in such cases the data may no longer be processed for those purposes.
15. Profiling: the Data Subject has the right not to be subject to automated processing, including profiling, except where it is necessary for entering into or performing a contract, based on the Data Subject’s explicit consent, or authorised by EU or Member State law which also protects the Data Subject’s rights and legitimate interests.
16. Right to withdraw consent: the Data Subject may withdraw consent at any time; withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.
17. Data Subjects may submit objections and requests concerning the processing of their personal data to the Company orally (in person) or in writing (in person, through a document delivered by another person, by post or by e-mail) using the contact details provided in this Policy.
18. Information and supporting guidance are also available at www.netprinter.hu.
19. Right to compensation: where the Data Subject has demonstrably suffered material or non-material damage as a result of an infringement, they may claim compensation from the Data Controller or Data Processor: a) a processor is liable where, through negligence or intent, it failed to comply with lawful instructions of the controller or acted unlawfully, particularly with regard to provisions applicable to processors; b) where several processors and/or controllers are involved, they are jointly and severally liable for the entire damage; c) a processor and/or controller may demonstrate that it is not in any way responsible for the event giving rise to the damage.
20. If the Data Subject cannot resolve an objection, complaint or request concerning personal data with the Company satisfactorily, or believes that their rights have been infringed or are directly threatened, they may bring proceedings against the Data Controller before a court, which shall deal with the matter as a priority, and may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH). NAIH contact details: Registered office: 1125 Budapest, Szilágyi Erzsébet fasor 22/c.; postal address: 1530 Budapest, Pf. 5; telephone: +36 1 391 1400; fax: +36 1 391 1410; e-mail: ugyfelszolgalat@naih.hu; website: www.naih.hu.
21. In the event of infringement of your rights relating to the protection of personal data, you are also entitled to bring proceedings before a court. The action falls within the jurisdiction of the regional court. At your choice, proceedings may also be initiated before the court having jurisdiction over your place of residence or stay.
X. OTHER INFORMATION
1. The statutory provisions applicable to the processing of personal data also govern the processing of data relating to deceased persons.
2. In relation to data connected with a deceased person, the rights of the Data Subject may also be exercised by the deceased person’s heir or by the beneficiary named in the insurance contract.
SIMPLEPAY / OTP MOBIL ACKNOWLEDGEMENT
I acknowledge that the following personal data stored in the user database of Netprinter Digitális Nyomdai Szolgáltató Korlátolt Felelősségű Társaság (1095 Budapest, Soroksári út 48. Malomudvar Üzletház 10. ép. Fsz. F-20-25.), as Data Controller, at https://netprinter.hu/ will be transferred to OTP Mobil Kft. as Data Processor. The categories of data transferred by the Data Controller are: e-mail address, name, country, city, postal code, address, telephone number and company name. The nature and purpose of the processing carried out by the Data Processor are described in the SimplePay Privacy Notice available at: http://simplepay.hu/vasarlo-aff
Budapest, 15 August 2020
Netprinter Kft.
