Data Protection Notice
In this document, we inform you, as a visitor to our website and a user of our services, about our company’s data processing and data protection rules.
- What principles do we follow in data processing?
Our company adheres to the following principles in data processing:
a. We process personal data lawfully and fairly, and in a transparent manner for you. b. We collect personal data only for specified, legitimate, and clearly defined purposes and do not process them in a way incompatible with those purposes. c. The personal data we collect and process are adequate, relevant, and limited to what is necessary for the purposes of data processing. d. Our company takes all reasonable measures to ensure that the data we process are accurate and, if necessary, up-to-date. Inaccurate personal data will be promptly deleted or corrected. e. We store personal data in a form which permits identification of the data subjects only for as long as necessary to achieve the purposes for which the data are processed. f. We ensure appropriate technical and organizational measures to provide adequate security of personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage.
Our company processes your personal data:
a. Based on your prior information and voluntary consent, and only to the extent necessary and for specified purposes. This means we collect, record, organize, store, and use data as required. b. In some cases, processing of your data is based on legal obligations and is mandatory. In such cases, we will specifically inform you of this fact. c. In certain cases, the processing of your personal data is based on our company’s or a third party’s legitimate interests, such as the operation, development, and security of our website.
- Name of the Data Controller
Company Name: Top World Ltd.
Company Headquarters: 1132 Budapest, Visegrádi u. 15.
Company Mailing Address: 1132 Budapest, Visegrádi u. 15.
Company Website: www.coolcoffeebar.com
Phone Number: +36 20 927-91-91
Email Address: info@topchoko.eu
Tax Number: 14116191-2-41
Website Operator:
Name: Top World Ltd.
Headquarters: 1132 Budapest, Visegrádi u. 15.
Phone Number: +36 20 927-91-91
Email: info@topchoko.eu
Our company is not required to appoint a Data Protection Officer under GDPR Article 37.
Our hosting service provider’s name, address, and contact details: Tárhelypark Ltd., 1122 Gaál József út 24.
In the data processing activities, for the purpose of providing high-quality service to our clients, we use the following data processors:
Tárhelypark Ltd., 1122 Gaál József út 24.
If we change our data processors, we will update this notice accordingly.
Processed Data:
Activity Description and Purpose | Legal Basis | Data Processed | Duration |
---|---|---|---|
Website Visits | Ensuring the proper and high-quality operation of the website, monitoring and improving service quality, identifying malicious or attacking visitors, measuring visitor traffic, and for statistical purposes | Legitimate interest | IP address, visit time, visited subpages data, operating system and browser type |
Administration, Complaints | Responding to feedback or complaints, legal obligation | Full name, email address, phone number, mailing address, other personal messages | 5 years |
We only request personal data from visitors when they wish to register, log in, or participate in a contest.
The personal data provided during registration or use of our marketing services cannot be linked, and identifying our visitors is not our primary goal.
We process your personal data only for purposes to which you have previously consented. This may include sending information and invitations on requested topics and ensuring a user-friendly experience on our website. We do not transfer your personal data to third parties in any form.
Processed Personal Data:
IP Address: Needed to diagnose potential issues with website loading, administer the website, and for demographic data. IP addresses are numerical sequences that identify internet users’ computers or mobile devices. IP addresses can even indicate the geographical location of the user. The addresses of visited pages, as well as date and time data, alone are not sufficient to identify the user but can be used to make inferences when combined with other data (e.g., provided during registration).
Email Address and Name: We only access these data if you provide them directly via a form or email.
Data Processing Duration
Data processing begins on the day of newsletter subscription and continues until your deletion request or withdrawal of consent.
Legal Basis for Processing Personal Data
The legal basis for processing the specified personal data is the user’s voluntary, informed consent.
For questions regarding data processing, you can request further information at info@topchoko.eu or at our mailing address: 1132 Budapest, Visegrádi u. 15/2/1. We will send our response within 20 days (but no more than 28 days) to the contact information you provided.
- What are cookies and how do we handle them?
Cookies are small data files that are placed on your computer through the website you visit, and are stored by your internet browser. Most popular browsers (Chrome, Firefox, etc.) accept and allow cookies by default. However, it is up to you to reject or disable them by changing your browser settings, or you can delete cookies already stored on your computer. Detailed information on cookies is provided in the “help” section of individual browsers.
Some cookies do not require your prior consent. Our website provides brief information about these cookies when you first visit, such as authentication, multimedia player, load balancing, session cookies for user interface customization, and security cookies.
For cookies requiring consent – if data processing starts with visiting the site – our company will inform you at the beginning of your first visit and request your consent.
Our company does not use or allow cookies that enable third parties to collect data without your consent.
Accepting cookies is not mandatory, but we are not responsible if the website does not work as expected without cookies.
Cookies We Use:
Type | Consent Required | Description | Purpose | Validity |
---|---|---|---|---|
System Cookies | Not Required | Session cookie for the web application firewall to prevent cross-site request forgery | Ensure website functionality | End of browser session |
Tracking Cookie (Third-Party) | Not Required | Used to identify new sessions and visitors, saved by Google Analytics | Related to third-party services during website visits (e.g., Google) | Until deletion |
For detailed information about third-party cookies, please visit Google’s cookie types and Google Analytics privacy.
- Additional Information on Our Website’s Data Processing
You voluntarily provide your personal data during registration or interaction with our company. Therefore, please ensure the accuracy, correctness, and completeness of the data you provide, as you are responsible for it. Incorrect, inaccurate, or incomplete data may hinder your use of our services.
If you provide personal data of another person, we assume you have the necessary authorization for this.
You may withdraw your consent to data processing at any time free of charge:
- By deleting your registration,
- By withdrawing your consent to data processing, or
- By withdrawing or requesting the blocking of any consent given during registration for data processing or use.
We aim to process consent withdrawal registrations within 10 days for technical reasons, but please note that we may continue processing certain data after withdrawal if required to meet legal obligations or to pursue our legitimate interests.
In cases of misleading use of personal data or if a visitor commits a crime or attacks our system, we will promptly delete the data upon terminating the visitor’s registration and may retain it for the duration necessary for determining civil liability or criminal proceedings.
- Direct Marketing and Newsletter Data Processing
You may consent to use your personal data for marketing purposes by stating so during registration or later on the newsletter and/or direct marketing registration form (i.e., by clearly indicating your consent). In this case, until withdrawal of consent, we will process your data for direct marketing and/or sending newsletters, and send you advertisements, informational materials, and offers. (Grtv. 6 §)
You can provide or withdraw consent for direct marketing and newsletters together or separately, and do so free of charge at any time.
Deleting your registration is considered as withdrawing consent. Withdrawal of consent for direct marketing and/or newsletter purposes does not also imply withdrawal of consent for website data processing. Each consent is for a specific purpose; therefore, registration and newsletter subscriptions are separate purposes and databases, and should not be interconnected.
We aim to process consent withdrawal and cancellations within 10 days for technical reasons.
- Other Data Processing Issues
We may only transmit your data within the legal framework specified by law, and ensure, through contractual terms with our data processors, that your personal data cannot be used for purposes contrary to your consent. Further information can be found in point 2.
Our company does not transfer data abroad.
Courts, public prosecutors, and other authorities (e.g., police, tax office, National Authority for Data Protection and Freedom of Information) may request information, data disclosure, or document provision from our company. In these cases, we must comply with our data provision obligations, but only to the extent necessary to achieve the purpose of the request.
Our company’s data processors and employees involved in data processing and/or handling are authorized to access your personal data to the extent determined in advance, under confidentiality obligations.
We protect your personal data with appropriate technical and organizational measures to prevent unauthorized access, disclosure, alteration, or destruction. We ensure, through our data processors, that adequate security measures are in place to protect your data.
In case of a data breach posing a risk to your rights and freedoms, we will inform you about the breach and the measures taken or proposed to address the situation.
Data Protection Rights
As a data subject, you have the following rights:
a. The right to access your personal data b. The right to rectification of inaccurate or incomplete data c. The right to erasure of personal data d. The right to restrict the processing of personal data e. The right to data portability f. The right to object to the processing of personal data g. The right to withdraw consent
If you exercise any of these rights and we do not comply or you disagree with our decision, you have the right to file a complaint with the National Authority for Data Protection and Freedom of Information (NAIH).
Changes to this Notice
Our company reserves the right to update this notice at any time. We will provide updates on our website. The changes will be communicated to you, and your continued use of our services after changes indicates your acceptance of the updated notice.
For questions and requests related to data protection, please contact us at info@topchoko.eu.
Budapest, 16.09.2024.
Top World Ltd.