Privacy and data protection
Unless otherwise stated below, the provision of your personal data is neither required by law or contract nor required for the conclusion of a contract. You are not obliged to provide the data. Non-provisioning has no consequences. This only applies if no other information is provided during subsequent processing. "Personal data" means any information relating to an identified or identifiable natural person.
Person(s) in charge
Company: Masada GRS Kft.
CEO: Rony Soltzman
1) Server log files
You can visit our website without providing any personal information. Each time you access our website, usage data is transmitted through your Internet browser and stored in log data (server log files). This stored data includes the name of the page accessed, the date and time of access, the amount of data transferred, the browser you use, the operating system you use, the IP address you use in anonymised form and the source or reference from which you accessed the page. The processing is carried out in accordance with art. 6 par. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files subsequently if there are any concrete indications of illegal use.
2) Customer account
When opening a customer account, we collect your personal data to the extent stated there. The purpose of data processing is to improve your shopping experience and simplify order processing. The processing takes place on the basis of Art. 6 (1) lit. a GDPR with your consent. You can revoke your consent at any time by notifying us without affecting the legality of the processing carried out on the basis of the consent until revocation. Your customer account will then be deleted.
3) Collection, processing and use of personal data for orders
When placing an order, we collect and use your personal data only insofar as this is necessary to fulfil and process your order and to process your enquiries. The provision of the data is necessary for the conclusion of the contract. Failure to make it available means that no contract can be concluded. The processing is carried out on the basis of Art. 6 (1) b GDPR and is necessary for the fulfilment of a contract with you. Your data will not be passed on to third parties without your express consent. Excluded from this are only our service partners, which we need to process the contractual relationship or service providers, whom we use in the context of order processing. In addition to the recipients named in the respective clauses of this data protection declaration, these are, for example, recipients of the following categories: shipping service providers, payment service providers, merchandise management service providers, service providers for order processing, web hosters, IT service providers and dropshipping dealers. In all cases we strictly observe the legal requirements. The scope of data transmission is limited to a minimum.
When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "payment by instalments" via PayPal, we pass your payment data on to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"). The transfer takes place in accordance with Art. 6 Para. 1 lit. b GDPR and exclusively within the framework required for payment processing. PayPal reserves the right to carry out credit checks for the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "payment by instalments" via PayPal. For this purpose, your payment data may be passed on to credit agencies on the basis of PayPal's legitimate interest in determining your solvency pursuant to Art. 6 Para. 1 letter f GDPR. PayPal uses the result of the credit assessment in relation to the statistical probability of non-payment for the purpose of deciding on the provision of the respective payment method. The credit report can contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognised mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data.
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.
6) Use of e-mail address for sending newsletters
We will use your e-mail address exclusively for our own advertising purposes for sending out newsletters, irrespective of the execution of the contract, provided that you have expressly agreed to this. The processing takes place on the basis of Art. 6 (1) lit. a GDPR with your consent. You may revoke your consent at any time without prejudice to the legality of the processing carried out on the basis of the consent until revocation. You can unsubscribe from the newsletter at any time by using the corresponding link in the newsletter or by notifying us. Your e-mail address will then be removed from the mailing list.
The newsletter is sent via "MailChimp", a newsletter distribution platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA.
The e-mail addresses of our newsletter recipients, as well as their further data described in the context of these notes, are stored on the servers of MailChimp in the USA. MailChimp uses this information to send and evaluate the newsletter on our behalf. Furthermore, MailChimp can use this data according to its own information to optimise or improve its own services, e.g. to technically optimise the sending and presentation of newsletters or for economic purposes, in order to determine from which countries the recipients come. However, MailChimp does not use the data of our newsletter recipients to write them down or pass them on to third parties.
MailChimp is certified under the US-EU data protection agreement Privacy Shield and thus commits itself to comply with EU data protection regulations. We have concluded a "Data Processing Agreement" with MailChimp. This is a contract in which MailChimp undertakes to protect the data of our users, to process them in accordance with their data protection regulations on our behalf and in particular not to pass them on to third parties. The data protection regulations of MailChimp can be viewed here.
4) Passing on the e-mail address to shipping companies for information about the shipping status
We will pass on your e-mail address to the transport company as part of the contract processing, provided that you have expressly agreed to this in the order process. The purpose of the transfer is to inform you by e-mail about the shipping status. The processing takes place on the basis of Art. 6 (1) lit. a GDPR with your consent. You may revoke your consent at any time by notifying us or the transport company, without prejudice to the legality of the processing carried out on the basis of the consent until revocation.
6) Use of Google Analytics
You can set an opt-out cookie to prevent collection by Google Analytics across devices. Opt-out cookies prevent the future collection of your data when you visit this website. You need to opt-out on all systems and devices in use for this to work comprehensively. If you click here, the opt-out cookie will be set: disable Google Analytics.
7) Use of Google Adwords Conversion Tracking
8) Duration of storage
After complete contract processing, the data will first be stored for the duration of the warranty period, then under consideration of statutory, in particular tax and commercial law storage periods and then deleted after expiry of the period if you have not agreed to further processing and use.
9) Rights of the person concerned
If the legal requirements are met, you have the following rights under Articles 15 to 20 GDPR: right to information, to correction, to deletion, to restriction of processing, to data transferability. Furthermore, according to Art. 21 (1) GDPR, you have the right to object to processing based on Art. 6 (1) f GDPR and to processing for the purpose of direct advertising.