privacy notice

Any processing of personal data on the Website is carried out by Coffee Concept Kft. (company registration number: 01-09-991597; tax number: 24124704-2-43; registered office: 1115 Budapest, Bartók Béla út 96, Hungary) in accordance with the applicable legal requirements.

Coffee Concept Kft. operates the Website and, in that capacity, also processes data relating to enquiries and orders. It also sells the following types of products featured on the Website: home and professional espresso machines, coffee makers, coffee grinders and other barista accessories.

Contact details of Coffee Concept Kft.:

Registered office: 1115 Budapest, Bartók Béla út 96, Hungary

Showroom: 1097 Budapest, Vágóhíd utca 18, Hungary

Email: info@nopressure.hu

2.1. Data processed for enquiries

Description of the processing, its purpose and the categories of data processed

The following information is required to contact us through the Website:

• name;
• email address;
• password.

Registration is not required to make a purchase.

Legal basis for processing

The legal basis for processing is your consent under Article 6(1)(a) of the Regulation.

Retention period

We process the data from the time you complete and voluntarily submit the contact form until the expiry of the general limitation period (five years) or until we receive a request for erasure.

2.3. Data processed to fulfil orders

Description of the processing, its purpose and the categories of data processed

If you place an order for a product through the Website, by email or by telephone, we need to process your name, billing and delivery details, telephone number and email address in order to perform the resulting contract.

During the ordering process, we send information about your order to your email address, contact you by telephone to arrange delivery and fulfilment, and issue your invoice using the details you provide.

2.4. Data processed in connection with complaint handling

Description of the processing, its purpose and the categories of data processed

When we handle any matter relating to an enquiry or purchase, or deal with your complaint, we also process personal data in the course of that work.

For complaint handling, we process your name, contact details (email address, telephone number and postal address) and any other information you provide in your complaint.

The purpose of the processing is to handle complaints in accordance with legal requirements.

If your complaint concerns a product, we may forward it to the product's manufacturer.

The seller must draw up a record of any reported claim under a statutory warranty for defects or a guarantee. This record contains the buyer's name and address, together with a declaration consenting to the processing of the data recorded in accordance with Decree 19/2014 (IV. 29.) of the Minister for National Economy. It also records the name and purchase price of the item sold, the date of performance, a description of the defect or complaint and the date it was reported, and the right the buyer wishes to exercise.

Legal basis for processing

Whether you submit a complaint to us is your voluntary decision. However, if you do so, we are required to retain the complaint for three years under section 17/A(7) of Act CLV of 1997 on Consumer Protection. The processing is therefore based on a legal obligation under Article 6(1)(c) of the Regulation. In addition to Article 6(1)(c), the processing of special categories of personal data is based on Article 9(2)(a), namely the data subject's explicit consent.

Processing in connection with a record of defective performance is required by Decree 19/2014 (IV. 29.) of the Minister for National Economy. It is therefore based on a legal obligation under Article 6(1)(c) of the Regulation. In addition to Article 6(1)(c), the processing of special categories of personal data is based on Article 9(2)(a), namely the data subject's explicit consent.

Retention period

Under the Consumer Protection Act, we must retain the data for three years after handling the complaint.

Certain parts of the Website use small data files (cookies) to identify you. By visiting the Website and using certain functions, the data subject consents to these cookies being stored on their computer and to the controller accessing them.

You can use your browser settings to control and prevent cookie-related activity. Please note, however, that without cookies you may be unable to use all of the Website's services.

You can also delete cookies from your computer or configure your browser to block them. Google additionally allows users to disable cookies placed by Google through its page for opting out of Google advertising (http://www.google.hu/policies/technologies/ads/). Blocking or deleting cookies may make websites less convenient to use.

What are cookies and how do we use them?

Cookies are small data files placed on your computer through the Website when you use it, and saved and stored by your internet browser.

Cookies generally perform the following functions:

• collect information about visitors and their devices;
• remember visitors' individual preferences, which may be used, for example, in online transactions so that they do not have to enter them again;
• make the Website easier to use;
• provide a high-quality user experience.

We use the following cookies on the Website:

Strictly necessary cookies:

Strictly necessary cookies help make the Website usable by enabling basic functions such as page navigation and access to secure areas of the Website.

Functional cookies:

Functional cookies help certain functions work fully, such as sharing content on social media or collecting feedback.

Statistical cookies:

Statistical cookies are used to understand how visitors use the website. These cookies provide information on matters such as visitor numbers (anonymously), bounce rates and traffic sources.

Performance cookies:

Performance cookies are used to understand and analyse the website's key performance indicators, helping to improve the user experience.

Marketing cookies:

By accepting marketing cookies, you consent to receiving relevant advertisements based on pages previously visited and help improve the effectiveness of advertising.

For strictly necessary and functional cookies, the legal basis for processing is the controller's legitimate interest under Article 6(1)(f) of the Regulation.

For statistical, performance and marketing cookies, the legal basis for processing is the data subject's consent under Article 6(1)(a) of the Regulation.

During the processing period, you have the following rights under the Regulation:

• access to personal data and information about the processing;
• the right to rectification;
• restriction of processing;
• the right to erasure;
• the right to data portability;
• the right to object;
• the right to withdraw consent.

If you wish to exercise your rights, we will need to identify you and communicate with you. You will therefore need to provide personal data for identification, although identification may only be based on data we already process about you. Your complaint concerning the processing will also remain available in our email account for the period specified for complaints in this notice.

We respond to complaints concerning the processing within no more than 30 days. Taking into account the complexity and number of requests, we may extend this period by a further two months.

We will inform the data subject of any extension, together with the reasons for the delay, within one month of receiving the request. If the request was submitted electronically, the information should, where possible, be provided electronically unless the data subject requests otherwise.

You may exercise your rights against any controller using one of the contact methods listed at the beginning of this notice.

4.1. Right to withdraw consent

You may withdraw your consent to processing at any time. In that event, we will delete the data provided from our systems.

Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

4.2. Access to personal data and information

You have the right to obtain confirmation as to whether your personal data are being processed. If they are, you have the right to:

• obtain access to the personal data being processed; and
• receive information about the following:
• the purposes of the processing;
• the categories of personal data we process about you;
• the recipients or categories of recipients to whom the personal data have been or will be disclosed;
• the envisaged retention period for the personal data or, where this cannot be specified, the criteria used to determine that period;
• your right to request rectification, erasure or restriction of processing of your personal data and, where processing is based on legitimate interests, to object to that processing;
• the right to lodge a complaint with a supervisory authority;
• where the data were not collected from you, any available information about their source;
• the existence of automated decision-making, including profiling, if such a procedure is used, and, at least in those cases, meaningful information about the logic involved and the significance and envisaged consequences of that processing for you.

The purpose of exercising this right may be to establish and verify the lawfulness of the processing. We may therefore charge a reasonable fee for providing information in response to repeated requests.

We provide access to personal data by sending you the data we process and the relevant information by email after verifying your identity.

Please specify in your request whether you seek access to the personal data or information about the processing.

4.3. Right to rectification

You have the right to request that we rectify inaccurate personal data concerning you without delay.

4.4. Right to restriction of processing

You have the right to request restriction of processing where any of the following applies:

• you contest the accuracy of the personal data, in which case processing is restricted for a period that allows us to verify their accuracy; if verification is unnecessary, we do not impose a restriction either;
• the processing is unlawful and you oppose erasure of the data, requesting restriction of their use instead;
• we no longer need the personal data for the stated processing purpose, but you require them to establish, exercise or defend legal claims; or
• you have objected to the processing, but our legitimate interest may also provide a basis for it; in that case, processing must be restricted until it is established whether our legitimate grounds override yours.

Where processing has been restricted, the personal data may, apart from storage, be processed only with your consent, to establish, exercise or defend legal claims, to protect the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.

We will inform you before lifting the restriction of processing, at least three working days in advance.

4.5. Right to erasure — right to be forgotten

You have the right to have your personal data erased without undue delay where any of the following grounds applies:

• the personal data are no longer necessary for the purpose for which they were collected or processed;
• you withdraw your consent and there is no other legal basis for the processing;
• you object to processing based on legitimate interests and there are no overriding legitimate grounds for the processing;
• we have processed the personal data unlawfully and this has been established following a complaint;
• the personal data must be erased to comply with a legal obligation under European Union or Member State law that applies to us.

If, for any lawful reason, we have made your personal data public and must erase them for any of the reasons above, we will take reasonable steps, including technical measures, taking account of available technology and implementation costs, to inform other controllers processing those data that you have requested the erasure of links to, or copies or replications of, those personal data. As a general rule, we do not make your personal data public.

Erasure does not apply where the processing is necessary:

• to exercise the right to freedom of expression and information;
• to comply with an obligation requiring processing under European Union or Member State law that applies to us (including processing for invoicing, as the retention of invoices is required by law), or to perform a task carried out in the public interest or in the exercise of official authority vested in the controller;
• to establish, exercise or defend legal claims, for example, where you have not yet satisfied a claim we have against you, or a consumer or data-protection complaint is being handled.

4.6. Right to object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on legitimate interests. In that case, we may no longer process the personal data unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or grounds relating to the establishment, exercise or defence of legal claims.

4.7. Right to data portability

Where processing is necessary to perform a contract or is based on your voluntary consent, you have the right to request the data you provided to us in a machine-readable format. We will provide the data in XML, JSON or CSV format. Where technically feasible, you may request that we transmit the data in that format to another controller, provided that the processing was carried out by automated means.

The controllers are not responsible for the recipient's processing of the data.

4.8. Remedies

If you believe that we have infringed a legal provision concerning the processing of personal data or have failed to fulfil one of your requests, you may initiate an investigation by the Hungarian National Authority for Data Protection and Freedom of Information (NAIH) to bring the suspected unlawful processing to an end (postal address: 1363 Budapest, PO Box 9, Hungary; email: ugyfelszolgalat@naih.hu).

You may also bring civil proceedings before a court.

In operating our IT systems, we use the necessary access controls and internal organisational and technical measures to prevent unauthorised persons from obtaining your data, deleting them, extracting them from the system or modifying them. We also require our processors to comply with data-protection and data-security requirements.

We maintain records of any personal data breaches and, where necessary, inform you about them.

We reserve the right to amend this Privacy Notice without changing the purposes or legal basis of the processing.

If we intend to further process the data collected for a purpose other than the one for which they were collected, we will, before that further processing, inform you of its purpose and provide the following information:

• the retention period for the personal data or, where this cannot be specified, the criteria used to determine that period;
• your right to request access to, rectification or erasure of your personal data, or restriction of processing; your right to object where processing is based on legitimate interests; and your right to data portability where processing is based on consent or a contractual relationship;
• where processing is based on consent, your right to withdraw that consent at any time;
• the right to lodge a complaint with a supervisory authority;
• whether providing the personal data is a statutory or contractual requirement or a prerequisite for entering into a contract, whether you are obliged to provide the data, and the possible consequences of not doing so;
• the existence of automated decision-making, including profiling, if such a procedure is used, and, at least in those cases, meaningful information about the logic involved and the significance and envisaged consequences of that processing for you.

Processing may begin only after this information has been provided. Where consent is the legal basis, you must also consent to the processing in addition to receiving the information.