Data Protection Information
​
It is of utmost importance for us to adhere to the currently valid data protection regulations and laws; thus, below, we detail the steps towards data protection and the processes related to data collection by apzconsulting.com and APZ Assets Consulting Ltd.
​
When formulating the provisions of this Information, APZ Assets Consulting Ltd. considered the regulations of the European Parliament and Council's Regulation 2016/679 ("General Data Protection Regulation" or "GDPR"), the 2011 Act CXII on Informational Self-Determination and Freedom of Information ("Info Act"), the Civil Code Act V of 2013, and the Act XLVIII of 2008 on the Basic Conditions and Certain Limitations of Economic Advertising Activity.
DATA CONTROLLER
The data is managed and the personal data are handled by APZ Assets Consulting Ltd.
Contact details:
Full legal name: APZ Assets Consulting Ltd.
Email address: info@apzconsulting.com
Postal address: 8900 Zalaegerszeg, Botfa Street 47.
Tax number: 23863846-2-20
DATA STORAGE AND PROCESSING
Apzconsulting.com operates on the Wix.com platform, which provides us with the online platform that allows us to sell our products and services to you. Your data are stored through Wix.com's data storage, databases, and the general Wix.com applications. They are stored on secure servers behind a firewall.
All direct payment gateways offered by Wix.com and used by APZ Assets Consulting Ltd. adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, a joint effort of brands like Visa, MasterCard, American Express, and Discover. PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers.
You can find Wix.com's privacy policy on their website.
WHAT PERSONAL DATA WE PROCESS AND FOR WHAT PURPOSE?
Personal data allow for the precise identification of an individual on our website. On the apzconsulting.com website, we process the following personal data with the precise legal basis specified:
COMMUNICATION DATA
This includes all messages that you send to us through the website, email, social media messaging, or any other communication that you send us. We process this data to fulfill your orders and to provide a basis for making decisions in case of legal claims. Our legal basis for processing this data is the user's verifiable interest in our activities, as evidenced by the messages sent to us.
CUSTOMER DATA
This includes data related to the purchase of our products and services, such as the customer's name, billing address, email address, phone number, product/service details. We process this data to successfully complete orders and to have legally appropriate records of the purchases. The legal basis for storing this data is the fulfillment of the contract formed by the order between the customer and APZ Assets Consulting Ltd.
USER DATA
This includes data generated from the use of the apzconsulting.com website, enabling its technical operation:
- Ensuring the security of the website,
- Storing backups of users' activities,
- Ensuring that visitors always access the most relevant content.
The legal basis for processing this data is the user's clear interest in our activities, for which storing these data is necessary to ensure and technically operate the site.
TECHNICAL DATA
This includes data generated from using the site, such as IP address, login information, browser data, visit duration to specific pages, views and navigation paths, times and numbers of page views, time zones, and device information used to view the site. The source of this data is our analytics software. We process this data to analyze user habits on the site, ensure the secure operation of our site, and understand the effectiveness of our advertising decisions. The legal basis for processing this data is the user's clear interest in our activities, which allows us to process these data in compliance with security expectations and use them to develop our business for more efficient operation.
ADVERTISING-MARKETING DATA
This includes visitor preferences about what marketing content they are willing to receive from us. We process this data to enable participation in competitions and send advertisements related to our products/services that the user has shown interest in. The legal basis for processing this data is the user's clear interest in our activities, which allows us to process these data in compliance with security expectations and use them for business development for more efficient operation. We occasionally use the collected data for purposes such as providing targeted relevant ads on Facebook, Instagram platforms, various dynamic advertising surfaces, and measuring the effectiveness of advertisements. The legal basis for processing this data is the user's clear interest in our activities, which allows us to process these data in compliance with security expectations and use them for increasing business through more effective operation.
We do not collect sensitive data such as ethnicity, religious beliefs, sexual orientation, political opinions, trade union membership, health background, and genetic or biometric information.
HOW DO WE COLLECT DATA?
Personal data can be collected actively provided
by the user (for example, by sending a message). Additionally, some data are automatically collected through the use of the site, for example, through cookies and similar technologies, which are activated only after the user's consent.
Data are also received from external partners such as analytics providers like Google (non-EU partner), advertising networks like Facebook, Instagram (non-EU partner), and payment providers like PayPal (non-EU partner).
PRACTICAL STEPS IN DATA PROTECTION
For APZ Assets Consulting Ltd., protecting users' data and compliance with applicable regulations are extremely important. Therefore, on the apzconsulting.com website, we ensure through forms in this privacy statement that users can request information about the handling of their personal data, modify or delete their data.
Occasionally, for business purposes, it becomes necessary to provide data to our service partners (e.g., hosting, newsletter sending software). In such cases, we always choose partners that meet the GDPR's expectations and sign a data processing agreement with them to ensure responsible data handling.
MARKETING COMMUNICATION
Conducting marketing communication is essential to our business activities. The legal basis for data processing related to this is showing interest in our services or the explicit consent of users.
Under the European Union's Privacy and Electronic Communications Regulations (PECR), we send marketing messages to our users if they have purchased from us or explicitly consented to receive marketing messages.
We make it clearly possible to suspend consent and unsubscribe from messages. A link for unsubscribing is found at the bottom of every email, or removal from the database can be requested at info (at) apzconsulting.com. Even after unsubscribing from marketing communications, we may send messages related only to the fulfillment of orders.
NOTE ON PERSONAL DATA
Occasionally, it is necessary to share certain personal data with certain partners to maintain normal business operations:
- IT providers and service providers troubleshooting and maintaining our computer systems,
- Expert partners like lawyers, accountants, bankers, insurers,
- Government bodies requesting reports on our activities,
- Payment providers who securely handle bank card details.
International Data Transfers
To maintain business operations, it is occasionally necessary to share user data with service partners outside the European Economic Area (EEA).
Many countries outside the EEA do not offer the same level of data protection, hence European laws prohibit data export without meeting appropriate conditions.
Whenever personal data are transferred outside the EEA, in addition to the steps discussed in section 4, the following are done to ensure the safe handling of data:
- Data are transferred only to countries deemed adequate by the European Commission from a data security perspective.
- Only services based in the USA/UK that are part of the EU-US Privacy Shield data security initiative are used.
- If the above conditions are not met, explicit consent is sought from users for the data transfer. Consent can be withdrawn at any time.
LINKS TO EXTERNAL WEBSITES
This site occasionally contains links to external websites or embedded code snippets that enable the operation of external services.
Clicking these links or using embedded solutions may enable external partners to collect data about users.
Although we do our best to thoroughly vet our partners, we have no control over their privacy policies and are not responsible for their data handling practices.
DATA RETENTION PERIOD
User data are always stored only as long as our legal/accounting/data provision obligations require or as necessary for the service's operation.
When deciding on the retention period, we consider the amount, nature, and sensitivity of the data and the potential impact of a data breach. For tax reasons, we need to keep customers' billing and purchase data for at least 8 years to meet our legal obligations.
Under certain circumstances, we may use the data anonymously for statistical purposes, in which case we store the data indefinitely without notification.
THE VISITOR'S RIGHTS
As a citizen of the European Union, the General Data Protection Regulation (GDPR) provides the following rights to the site's users:
1. Access to Personal Data
Users have the right to request a copy of the personal data stored by APZ Assets Consulting Ltd. The request is generally fulfilled free of charge within 14 days of the request.
2. Modification of Personal Data
If personal data have changed or were incorrectly provided, users have the right to request modification of their data. Please contact us at info (at) apzconsulting.com for modification of personal data.
3. Request for Deletion of Personal Data
Users have the right to request the deletion of all their personal data. The request is fulfilled free of charge within 14 days of the request. After the deletion of personal data, the user account will no longer be accessible, thus any purchased materials will also become inaccessible as the personal data associated with the user account are essential for accessing the service.
APZ Assets Consulting Ltd. requests proof of identity before deleting personal data to prevent fraudulent use. Please use the contact email provided above for the deletion of personal data.
4. Request to Restrict Processing of Personal Data
Users have the right to translate their personal data processing to third parties (service partners). When submitting a request, the specific service partners to be restricted can also be named.
It is important to note that cooperation with certain service providers is essential for the site's operation (e.g., Stripe, PayPal as payment providers), and restricting them may render the site's services inaccessible to the user.
APZ Assets Consulting Ltd. requests proof of identity before restricting the transfer of personal data to prevent fraudulent use. Please use the above contact email for restricting the transfer of personal data.
In Hungary, the official body dealing with data protection is the National Authority for Data Protection and Freedom of Information (NAIH).
Users can find more information about their data protection rights on the NAIH website.
National Authority for Data Protection and Freedom of Information
1125 Budapest, Szilágyi Erzsébet fasor 22/C.
Mailing address: 1530 Budapest, Pf.: 5.
Phone: 06.1.391.1400
Fax: 06.1.391.1410
Email: ugyfelszolgalat@naih.hu
Website: http://www.naih.hu
ANONYMIZED DATA AND "COOKIES"
The apzconsulting.com website, email messages, and advertisements use so-called "cookies" and similar technologies such as tracking codes, remarketing tags, pixels, which are activated after the user's consent.
These technologies help us better understand user behavior and interest, thereby helping us operate at a higher quality and more effectively.
Our goal is to make the use of the apzconsulting.com website as user-friendly and personal as possible. If the user wishes to prohibit the recording of non-personal data by these technologies, it can be done in the following ways:
- Disabling their loading through the cookie warnings appearing on the website.
- Disabling "cookies" in the browser.