Privacy Policy

I., Introduction

During the operation of the website, the service provider / data controller manages the data of the persons registered on the website in order to provide them with a suitable service.

The service provider wishes to comply fully with the legal requirements for the processing of personal data, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council.

This data management notice is based on Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of individuals’ personal data and the free movement of data, subject to Annex CXII. the law on the right to information self-determination and freedom of information.

Name of service provider, data controller:

Name / Company Name:	Hun Medical Kft.
Headquarters:	1136 Budapest, Pannónia u 42. Fszt 3.
Tax number:	HU26670490
Company registration number:	01 09 338339
Website name, address:	www.cbdbase.eu
Availability of the data management information:	https://cbdbase.eu

Contact details of the data controller:

Name / Company Name:	Hun Medical Kft.
Headquarters:	1136 Budapest, Pannónia u 42. Fszt 3.
Mailing address:	1136 Budapest, Pannónia u 42. Fszt 3.
E-mail:	info@cbdbase.eu
Phone:	+36 30 4564384

Definitions

the General Data Protection Regulation (GDPR) is the new Data Protection Regulation of the European Union;
data management: any set of operations or operations on personal data or files, whether automated or non-automated, such as collecting, recording, organizing, segmenting, storing, transforming or altering, retrieving, accessing, using, communicating, transmitting or otherwise by making available, harmonizing or linking, restricting, deleting or destroying;
data processor: any natural or legal person, public authority, agency or any other body which processes personal data on behalf of the controller;
personal data: any information relating to an identified or identifiable natural person (data subject); identify a natural person who, directly or indirectly, in particular by reference to one or more factors such as name, number, location, online identifier or physical, physiological, genetic, mental, economic, cultural or social identity of the natural person identifiable;
“controller” means the natural or legal person, public authority, agency or any other body which alone or jointly with others determines the purposes and means of the processing of personal data; where the purposes and means of the processing are defined by Union or Member State law, the controller or the specific criteria for the designation of the controller may be determined by Union or Member State law;
the data subject’s consent: a voluntary, specific and well-informed and unambiguous statement of the data subject’s consent to the processing of personal data concerning him or her by means of a statement or unambiguous statement of consent;
data protection incident: a breach of security resulting in the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or unauthorized access to, personal data transmitted, stored or otherwise handled.
recipient: any natural or legal person, public authority, agency or any other body to whom personal data are disclosed, whether a third party or not. Public authorities that may have access to personal data in the framework of an individual investigation in accordance with Union or Member State law shall not be considered as recipients; the processing of such data by those public authorities must comply with the applicable data protection rules in accordance with the purposes of the processing;
third party: a natural or legal person, public authority, agency or any other body other than the data subject, the controller, the processor or persons who have been authorized to process personal data under the direct control of the controller or processor.

II., Privacy Policy

The data controller declares that he / she handles the processing of personal data in accordance with the provisions of the data management information and complies with the requirements of the relevant legislation, paying particular attention to the following:

The processing of personal data must be carried out lawfully and fairly and in a way that is transparent to the data subject.
Personal data may only be collected for specified, explicit and legitimate purposes.
The purpose of the processing of personal data must be appropriate and relevant and only to the extent necessary.
Personal information must be accurate and up to date. Inaccurate personal data must be deleted immediately.
Personal data must be stored in a form which permits identification of data subjects for no longer than is necessary. Personal data may be stored for a longer period only if the storage is for the purpose of archiving in the public interest, for scientific and historical research purposes or for statistical purposes.
The processing of personal data must be carried out in such a way as to ensure adequate security of the personal data, including protection against unauthorized or unlawful processing, accidental loss, destruction or damage, by means of appropriate technical or organizational measures.
The principles of data protection shall apply to all information concerning an identified or identifiable natural person.

III., Important data management information

The purpose of data management is to enable the service provider / data controller to provide appropriate additional services to the persons registered on the website during the operation of the website.

The legal basis for data processing is the consent of the data subject.

The persons involved in data management are the registered users of the website.

Duration of data management and deletion of data. The duration of data management always depends on the specific user purpose, but the data must be deleted immediately if the original purpose has already been achieved. The data subject’s consent to the processing may be revoked at any time by sending a letter to the contact e-mail address. If there is no legal impediment to the deletion, your data will be deleted.

The data controller and its employees have the right to access the data.

The data subject may request the controller to access, rectify, delete or restrict the processing of personal data concerning him or her and to object to the processing of such personal data and to the data subject’s right to data portability.

The data subject may withdraw his or her consent to the processing at any time, but this shall not affect the lawfulness of the data processing carried out on the basis of the consent prior to the withdrawal.

The person concerned may exercise the right to lodge a complaint with the supervisory authority.

If the person concerned wishes to take advantage of the benefits of registration, ie to use the services of the website for this purpose, it is necessary to provide the requested personal data. The data subject is not obliged to provide personal data, and there are no adverse consequences for non-disclosure. However, it is not possible to use certain functions of the website without registration.

The data subject shall have the right, at the request of the controller, to correct or supplement inaccurate personal data concerning him or her without undue delay.

The data subject shall have the right, at the request of the controller, to delete inaccurate personal data concerning him or her without undue delay, and the controller shall delete the personal data concerning him or her without undue delay, unless there are other legal bases for the processing.

Modification or deletion of personal data may be initiated by e-mail, telephone or letter using the contact details provided above.

IV., Cookies:

If you post on your website, you can stay logged in by storing your name, email and web address in a cookie. Storage is for your convenience so that you do not have to fill in these fields the next time you post. These cookies have an expiration date of 1 year.

If you have a user account and are logged in to this website, we will set temporary cookies in order to determine whether your browser accepts cookies. These cookies do not contain any personal information and are deleted as we close your browser.

When you log in to the website, we create several cookies that save your login information and display options for the editing interface. The login cookies are valid for two days, and the cookie that stores the display options for the editing interface is valid for one year. If the “Remember me” option is checked, the login will continue for two weeks. When you log out, the login cookies will be removed.

If you edit an entry or page, another cookie will be stored in your browser. This cookie does not contain any personal information, it simply stores the ID number of the post we edited. It will expire in one day.

V., Registration on the website

The purpose of data management is to provide additional services and contact.

The legal basis for the processing of registration data is your consent.

The persons involved in data management are the registered users of the website. Duration of data management. The data will be processed until the consent is withdrawn.

You can withdraw your consent to data management at any time by sending an e-mail to the contact e-mail address. Data will be deleted either after the expiration of the 10-day redemption guarantee or upon withdrawal of your consent to data processing.

You may withdraw your consent to data processing at any time by sending an email to your contact email address.

The data controller and its employees have the right to access the data. Method of data storage: electronic.

Modification or deletion of personal data may be initiated by e-mail, telephone or letter using the contact details provided above. The provision of personal data is absolutely necessary for identification and communication in the databases.

The exact company name and address are required for invoicing, which is a legal obligation.

Scope of data managed	The specific purpose of the data management data
Name:	Identification, contact, invoicing.
Company Name:	Identification, contact, invoicing.
Address:	Identification, contact, invoicing.
E-mail	Identification, communication.
Phone:	Identification, communication.
Date of registration:	Account identification.
IP Address:	Account identification.

You can give your consent to the data management by intentionally checking the empty checkbox on the website and specifically for this purpose.

As a data subject, you may object to the processing of your personal data in this regard in accordance with the data management information detailed above and this prospectus and the legislation described in this prospectus.

VI., Place an order

The purpose of data management is to provide additional services, contact us and send a confirmation e-mail. We will only be able to fulfill your order if you provide your contact and billing information, which is absolutely necessary for contact and billing.

The legal basis for data processing is your consent. In the case of invoicing, the data management is based on a legal requirement.

The persons involved in data management are the registered users of the website.

Duration of data management. The data will be processed until the legal regulation or the withdrawal of the consent. You can withdraw your consent to data management at any time by sending an e-mail to the contact e-mail address.

VII., Deleting Order Data

The data will be deleted when the consent to the data processing is revoked. You can withdraw your consent to data management at any time by sending an email to the contact email address. Billing information may be deleted in accordance with legal requirements.

The data controller and its employees have the right to access the data.

Method of data storage: electronic.

Modification or deletion of personal data may be initiated by e-mail, telephone or letter using the contact details provided above.

Scope of data managed	The specific purpose of the data management data
Name:	Identification, contact, invoicing.
Company Name:	Identification, contact, invoicing.
Address:	Identification, contact, invoicing.
E-mail	Identification, communication.
Phone:	Identification, communication.
Ordered product details:	Product identification.
Date of registration:	Technical information operation.
IP Address:	Technical information operation.

You can give your consent to the data management by intentionally checking the empty checkbox on the website and specifically for this purpose.

The data subject may object to the processing of his or her personal data in this respect and is entitled to proceed in accordance with the data processing information detailed above and this prospectus and the legislation described in the prospectus.

VIII., Invoicing process

The purpose of data management is to issue and send an electronic invoice as an e-mail attachment.

The legal basis for data management is mandatory data management based on legislation.

The parties involved in data management are the customer partners of the service provider.

IX., Delete billing information

The data controller and its employees have the right to access the data.

Method of data storage: electronic.

Modification or deletion of account information can be initiated by e-mail, telephone or letter using the contact options provided above.

Scope of data managed:	The specific purpose of the data management data
Name:	Identification, contact, invoicing.
Company Name:	Identification, contact, invoicing.
Address:	Identification, contact, invoicing.
E-mail:	Identification, communication.
Phone:	Identification, communication.
Tax number / tax ID	Customer identification.
Account data	Account identification.
Date of issue of the invoice	Technical information operation.

You can give your consent to the data management by intentionally checking the empty checkbox on the website and specifically for this purpose.

X., Personal information processed for the purpose of sending a newsletter

In order to provide you with up-to-date information on our products, current information and promotions, the Data Controller will send you online newsletters in accordance with recital (47) of the GDPR. As part of this, we will process your personal information as follows:

– Scope of personal data processed: surname and first name, e-mail address.

– Adatkezelés célja: gazdasági reklámot is tartalmazó e-mail hírlevelek küldése.

– Legal basis for data processing: consent (Article 6 (1) (f) GDPR).

– Duration of data processing: withdrawal of consent or execution of a request for deletion.

The personal data processed for the purpose of sending the newsletter is primarily accessed by the Data Controller. If proceedings are instituted before a court or other authority in which it is necessary to transfer personal data to a competent and competent body, the court or authority may also have access to the personal data.

With respect to the personal data processed for the purpose of sending the newsletter, you may exercise the rights to withdraw consent, access, rectification, erasure, restriction of data processing, data portability and protest.

XI., Delete newsletter data

The data controller and its employees have the right to access the data.

Method of data storage: electronic.

Modification or deletion of account information can be initiated by e-mail, telephone or letter using the contact options provided above.

Scope of data managed:	The specific purpose of the data management data
Name	Identification, contact, invoicing.
Company Name:	Identification, contact, invoicing.
Address	Identification, contact, invoicing.
E-mail	Identification, communication.
Phone	Identification, communication.
Tax number:	Customer identification.
Account data	Account identification.
Date of issue of the invoice	Technical information operation.

You can give your consent to the data management by intentionally checking the empty checkbox on the website and specifically for this purpose.

XII., Cookies

Cookies are placed on the user’s computer by the websites they visit and contain information such as the page’s settings or login status.

Cookies are therefore small files created by the websites you visit. Saving your browsing data improves the user experience. With the help of cookies, the website remembers the settings of the website and offers locally relevant content.

The website of the service provider sends a small file (cookie) to the computer of the visitors of the website in order to determine the fact and time of the visit. The service provider informs the visitor of the website about this.

The people involved in data management are the visitors of the website.

The purpose of data management is additional services, identification and tracking of visitors.

Legal basis for data management. The consent of the user is not required if the use of cookies is absolutely necessary for the service provider.

The scope of the data: unique identification number, time, setting data.

The user has the option to delete cookies from their browsers at any time in the Settings menu.

Data controllers are entitled to access the data. The use of cookies does not process personal data by the data controller.

Method of data storage: electronic.

XIII., Community sites, social media

A social site is a media device where a message is disseminated through social users. Social media uses the Internet and online publishing opportunities to move users from content recipients to content editors.

Social media is an interface for web applications that contain user-generated content, such as Facebook, Google+, Twitter, and more.

Social media can take the form of public speaking, presentations, presentations, products, or services.

Social media information can take the form of forums, blog posts, images, videos, and audio, message boards, e-mail messages, and more.

In addition to the personal data, the scope of the data processed in accordance with the above may also be the public profile image of the user.

Stakeholders: all registered users.

The purpose of data collection is to promote the website or a related website.

The legal basis for data processing is the voluntary consent of the data subject.

Duration of data management: according to the regulations that can be viewed on the given social site.

Deadline for deleting data: according to the regulations that can be viewed on the given social network.

They have the right to access the data: according to the regulations that can be viewed on the given social site.

Rights related to data management: according to the regulations that can be viewed on the given social site.

Method of data storage: electronic.

It is important to note that when a user uploads or submits any personal information, they grant the social network operator permission to store and use such content worldwide. Therefore, it is very important to make sure that the user has full authority to disclose the published information.

XIV., Google Analytics

Our website uses Google Analytics.

Data processors:

Hosting provider:

Name / Company Name:	Noname Domain Kft
Headquarters:	1085 Bp. József Krt.69
Company registration number:	01-09-990960
Tax number:	24111410-2-42

The information you provide is stored on a server operated by your hosting provider. The data can only be accessed by our employees and the employees operating the server, but they are all responsible for the secure handling of the data.

Name of the activity: hosting service, server service.

The purpose of data management is to ensure the operation of the website.

Data processed: personal data provided by the data subject

Duration of data processing and deadline for deletion of data. Data management until the end of the operation of the website or in accordance with the contractual agreement between the operator of the website and the hosting provider. If necessary, the person concerned may also request the deletion of his data by contacting the hosting provider.

The legal basis for data processing is the consent of the person concerned and data processing based on law.

XV., Rights related to data management

Right to request information:

You can request information from us through the contact details provided, what data our company handles, on what legal basis, for what data processing purpose, from what source, for how long. Upon your request, we will send you information about the e-mail address you provided immediately, but no later than within 30 days.

Right to rectification

You can ask us to change any of your details via the contact details provided. We will take action on your request immediately, but within a maximum of 30 days, and we will send you information by e-mail.

Right of cancellation

You can request us to delete your data via the contact details provided. At your request, we will do this immediately, but within 30 days, and we will send you the contact details provided by you.

Right to lock

You can ask us to block your data via the contact details provided. The lock lasts for as long as the reason you specify requires the data to be stored. At your request, we will do this immediately, but within 30 days, and we will send you the contact details provided by you.

Right to protest

You can object to the data processing via the contact details provided. We will investigate the protest as soon as possible, but no later than 15 days from the submission of the application, we will make a decision on the merits of it and we will inform you about its decision by e-mail.

Possibility of data management enforcement

In the event of any unlawful data processing that you experience, please notify our company so that the legal status can be restored in a short time. We will do our best to solve the problem outlined.

If you consider that the legal status cannot be restored, please contact the authority at the following contact details:

Nemzeti Adatvédelmi és Információszabadság Hatóság / National Authority for Data Protection and Freedom of Information

Postal address: 1530 Budapest, Pf.: 5.

Address:: 1125 Budapest, Szilágyi Erzsébet fasor 22/c
Pgone: +36 (1) 391-1400
Fax: +36 (1) 391-1410
E-mail: ugyfelszolgalat (kukac) naih.hu
Url: https://naih.hu
coordinates: É 47°30’56”; K 18°59’57”

Legislation underlying data managemen

REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Regulation (EC) No 95/46 Data Protection Regulation).
2011 CXII. LAW ON FREEDOM OF INFORMATION AND FREEDOM OF INFORMATION.
Act LXVI of 1995 on Public Documents, Public Archives and the Protection of Private Archival Material. law.
335/2005 on the general requirements for the records management of bodies performing public tasks. (XII. 29.) Government Decree.
Act. CVIII. on Certain Issues in Electronic Commerce Services and Information Society Services.
Act C of 2006 on Electronic Communications.

Knowledge base

Partner program

Products

Information

Knowledge base

Partner program

Products

Information

Privacy Policy

Informations

To our partners

CbdBase Knowledge Base

Knowledge base

Partner program

Products

Information

Knowledge base

Partner program

Products

Information

Knowledge base

Partner program

Products

Information

Informations

To our partners

CbdBase Knowledge Base

Subscribe to the CbdBase Notifier

Knowledge base

Partner program

Products

Information