1. Purpose of the Code

The Luce di Bianca online store considers it a fundamental obligation to fully respect the right to the protection of personal data in the course of its operations, and therefore we will use all means at our disposal and in all possible ways to process your data in full compliance with the EU Regulation 2016/679 ("General Data Protection Regulation") and other applicable laws. Given that one of the main purposes of the underlying legislation is to ensure transparency, we intend to inform you in this document about the collection, use, transfer and, not least, protection of your personal data - in particular, when you interact with us through our products and/or services via our website or other mobile applications.

We reserve the right to update and amend this Privacy Policy from time to time to ensure that the terms and conditions set out herein always reflect the current way in which personal data are processed and comply with all applicable legal obligations. In the event that any of the provisions of this Privacy Policy should change as described above, we will post an amended version of this Privacy Policy on our website and therefore please check this Privacy Policy from time to time for the most up-to-date content.

2. Legal basis for processing

Personal data may be processed if the data subject voluntarily consents to it or if it is formally ordered by law or, on the basis of a law, by a local government decree within the scope specified therein, for reasons of public interest. By placing an order in the online shop, the customer accepts the terms of delivery and payment and thereby gives his/her voluntary consent to the processing of his/her data related to the purchase.

3. Privacy statement

The operator of the Luce di Bianca online store respects your privacy and keeps your personal data secure. As a user, you acknowledge that the provision of your data is voluntary and that you have given your consent voluntarily and for an indefinite period of time, with the right to withdraw it in writing at any time.

During your visit to the website, certain content is automatically generated on the web server running the website (e.g. visitor's IP address, time of visit, browser and operating system type). We use this data solely to monitor the traffic on the website and to learn about our Users' visiting habits in order to improve our services. We do not use this data for any purpose other than the purposes stated.

If you have any further questions or comments, please contact us at info@bbdekorshop.hu.

4. Operator, data controller, data processor and company data

Company name: Geresdi Dávid individual entrepreneur

Office: 2119 Pécel, Erdei utca 6.

Postal address, mailing address: 9740 Bükfürdő, Termál körút 2.

Tax number: 69413041-1-33.

Registration number: 53148328.

Registering authority: National Tax and Customs Office

Electronic contact: info@lucedibianca.com

Website address: https://www.lucedibianca.com

Contact by phone: +36 1 300 9596.

5. Purpose of processing and scope of data processed

The Luce di Bianca online store processes the data provided by the customer solely for the purpose of fulfilling the customer's order, as well as for the purposes of determining the content of the order, modifying it, monitoring its fulfilment, invoicing the resulting fees and enforcing claims in connection therewith, and for other operations requested by the customer (e.g. sending a newsletter). In particular: the e-mail address is used for contacting, the e-mail address and the password for identifying the user when logging in, other data are used for the performance of the service provided, delivery and billing.

6. Duration of processing

The Luce di Bianca online store will no longer store the data if the reason for or purpose of the data processing ceases to exist and will inform the customer accordingly. The data processing shall cease upon the deletion of the data by the data controller or upon the customer's initiative (e.g. deletion of his/her registration). Deadline for deletion of the data: immediately upon deletion of the registration, except for accounting records, since pursuant to Article 169 (2) of Act C of 2000 on Accounting, these data must be kept for 8 years.

7. Definitions

7.1. User (the webshop user/customer):

A person who has used the services of the site operated by the data controller and who has made a purchase on the site.

7.2. Personal data:

Any data that can be associated with a specific (identified or identifiable) natural person, including Users, and any inference that can be drawn from the data concerning Users. The personal data will retain this quality during processing as long as its link with Users can be re-established. In particular, a person is identifiable if he or she can be identified, directly or indirectly, by name, an identifier or one or more factors specific to his or her physical, physiological, mental, economic, cultural or social identity.

7.3 Contribution:

A voluntary and explicit expression of the Users' wishes, based on appropriate information, by which they give their unambiguous consent to the processing of their personal data, either in full or for specific operations.

7.4. Objection:

Users' statements objecting to the processing of their personal data and requesting the cessation of the processing or the deletion of the processed data.

7.5. Data Controller:

The natural or legal person or unincorporated body that determines the purposes for which the data are to be processed, takes and implements the decisions concerning the processing (including the means used) or has the processing carried out by a processor on its behalf.

7.6. Data Management:

Regardless of the process used, any operation or set of operations which is performed on the data, such as collection, recording, recording, organisation, storage, alteration, use, disclosure, transmission, alignment or combination, blocking, erasure and destruction, and prevention of further use of the data.

7.7. Data transmission:

Where the data controller or another person makes the data available to a specified third party.

7.8 Third party:

A natural or legal person or unincorporated entity other than the User, the controller or the processor. For the purposes of this Policy, a third party is a courier service that, on the basis of a valid and effective contract between the Service Provider and the courier service, performs logistics tasks on behalf of the Service Provider for the delivery of ordered products in relation to products sold on the https://bbdekorshop.hu/ webshop.

7.9:

Natural person having an employment or other legal relationship with Dávid Geresdi.

7.10. Data processing:

Carrying out technical tasks related to data processing operations, regardless of the method and means used to carry out the operations and the place of application.

7.11. Data Processor:

The natural or legal person or unincorporated body that processes personal data on behalf of the controller.

7.12. Data deletion:

Making data unrecognisable in such a way that it is no longer possible to recover it.

8. Circumstances of data processing

The Luce di Bianca online store, as the data controller, handles the data provided during registration and purchase securely. The data may only be accessed by the data controller and its employees, and is made available to the courier service, with the sole purpose of transmitting Users' personal data to it, for the purposes of fulfilling the order as defined in point 8 of this Privacy Policy. In connection with the transfer of Users' data to the courier service, the Service Provider declares and guarantees that, on the basis of the valid and effective contracts between the Service Provider and the courier service, the courier service has undertaken to process the data transferred only in compliance with the provisions of this Policy and the above-mentioned legislation on which this Policy is based. The Service Provider shall not be held liable for the conduct of ...... in relation to personal data. If the legal relationship between the Service Provider and the courier service is terminated for any reason during the period of data processing, the Service Provider shall notify Users of this fact by electronic mail. In addition to the above, the Luce di Bianca online store shall disclose the data provided in the event of compliance with a legal obligation and in response to a request from a public authority, while informing the customer concerned.

9. Data processing, data transfer

The Luce di Bianca online store does not use a separate external data processor, it processes the personal data it processes itself. The data may only be accessed by the data controller and its employees, and is made available to courier services. The scope of the data transmitted is for the purpose of carrying out the delivery: name, delivery address, telephone number, e-mail address, amount to be paid (in case of cash on delivery), voluntarily provided. The supplier or his agent will treat the data strictly confidentially, and the personal data provided by our company may not be retained, used or passed on to any other person in any way after the order has been fulfilled.

Packaging and dispatch of orders

Company name: Geresdi Dávid individual entrepreneur
Office: 2119 Pécel, Erdei utca 6.

Postal address, mailing address: 9740 Bükfürdő, Termál körút 2.

Tax number: 69413041-1-33

Registration number: 53148328

Delivery of orders/ Courier service:

GLS General Logistics Systems Hungary Csomag-Logisztikai Kft. (2351 Alsónémedi, GLS Európa u. 2., Email: info@gls-hungary.com, Company registration number: 13-09-111755, Tax number: 12369410-2-44, Community tax number: HU12369410)

or

Magyar Posta Zártkörűűen Működő Részvénytársaság (Registered office: Budapest, 1138 Budapest, Dunavirág utca 2-6. Postal address: Budapest 1540, Email: ugyfelszolgalat@posta.hu, Company registration number: 01-10-042463)

10. Cookies, or "cookies" in Internet parlance

In the course of operating the webshop system, certain data are technically recorded, namely the data of the User's computer logging in, which are generated during the use of the service and which are recorded by the Data Controller's system as an automatic result of technical processes. No specific consent is required from the data subject where the sole purpose of the use of cookies is to communicate on the Internet network or where the service provider strictly needs the cookies to provide an information society service expressly requested by the subscriber or user. This data may not be linked to other Personal Data of the user, except in cases required by law. The data may only be accessed by the Data Controller.

11. Security of personal data

The Luce di Bianca online store commits itself to ensure the security of personal data, to take technical and organisational measures and to establish procedures to ensure that the personal data collected, stored and processed are protected and to prevent their destruction, unauthorised use and unauthorised alteration. It also undertakes to require any third parties to whom it may transfer or disclose personal data to comply with its obligations in this regard.

12. Payment by bank card

Credit card information is not stored by Luce di Bianca during or after the transaction. The purchase process and the credit card payment transaction are carried out in two separate systems. Accordingly, Geresdi Dávid e.v. does not obtain the customer's credit card information, nor does the bank carrying out the transaction receive the customer's data provided to BB Dekor Shop during registration.

Online credit card payments are made through the myPOS system. Website of the service provider: https://www.mypos.com

13. Rights of data subjects

Data subjects can modify or delete their data at any time. The following data can be modified on the websites. The data subject may request the deletion or modification of personal data and the cancellation of the registration by post to 9740 Bükfürdő, Termál körút 2. info@lucedibianca.com by e-mail.

The User may request information about the processing of his/her personal data at any time. Upon the User's request, the Data Controller shall provide information on the data processed, the purpose, legal basis and duration of the processing, the name, address (registered office) and activity of the data processor, as well as the persons who receive or have received the data and the purposes for which the data are received or have been received. The information shall be provided in writing within the shortest possible time from the date of the request, but not later than 30 days. The request shall be sent to the Controller's customer service e-mail address.

14. Enforcement options

Users may contact the data controller directly with complaints or objections regarding data management or the use of the site, and the data controller will do its utmost to eliminate and remedy any possible infringements. The User may assert his/her rights in relation to data processing before a court of law pursuant to Act CXII of 2011 on the Right of Informational Self-Determination and Freedom of Information and the Civil Code, and may also request the assistance of the National Authority for Data Protection and Freedom of Information in any matter relating to personal data (1125 Budapest, Szilágyi Erzsébet fasor 22/C; postal address: 1530 Budapest, Pf. 5.) Any person may initiate an investigation by the NAIH on the grounds that he or she has suffered or is at imminent risk of suffering damage to his or her personal data, unless the matter is the subject of legal proceedings. No one should suffer prejudice as a result of reporting to the NAIH. A complaint can be made to the NAIH without any formalities or formalities.

This Privacy Notice shall enter into force on the date of its publication on the Website. The Service Provider shall be entitled to amend this Privacy Notice at any time, provided that such amendments shall take effect upon publication, i.e. upon posting on the Website. The Service Provider shall ensure that a consolidated text of the Prospectus with the amendments is always available to Users on the Website. This Policy shall remain in force until revoked by the Service Provider.