Machine translation. This English version was produced by machine translation and is provided for information only. The Hungarian original is authoritative; in the event of any discrepancy, the Hungarian text prevails.

Privacy Notice

1. Purpose of this privacy notice

Vegan Health Kft. (Telkes Mária krt 33., 2100 Gödöllö, Hungary), as data controller (hereinafter: the service provider or data controller), regards the content of this legal notice as binding on itself. It undertakes that all data processing related to its activities complies with the requirements set out in this policy, in the applicable national legislation and in the legal acts of the European Union.

Vegan Health Kft. is committed to protecting the personal data of its customers and partners and considers respect for its customers’ right to informational self-determination to be of particular importance.

You can find the information on the data processing of Vegan Health Kft. at www.allin-naturalfood.hu/adatkezelesi-tajekoztato/. Vegan Health Kft. reserves the right to change this notice at any time. Naturally, it will inform its audience of any changes in good time. If you have any questions about this notice, please write to us at hello@allin-naturalfood.hu . 

Vegan Health Kft. handles personal data confidentially and takes all security, technical and organisational measures that guarantee the security of the data.

Our data processing practices are described below.

2. Details of the data controller

If you wish to contact our Company, you can reach the data controller at hello@allin-naturalfood.hu. Vegan Health Kft. deletes every e-mail received, together with the personal data, no later than 1 year after the data was provided.

• Company name: Vegan Health Kft.
• Registered office: Telkes Mária krt 33., 2100 Gödöllő
• Place of business: Vegan Health Kft., Telkes Mária krt 33., 2100 Gödöllő
• Tax number: 26088158213
• Company registration number: 13 09 188392
• Language of the contract: Hungarian
• Electronic contact: hello@allin-naturalfood.hu
• Telephone number: 06 70 386 5836
• Bank account number: 65100211-11416825
• Registering court: Company Registry Court of the Budapest Környéki Regional Court
• Hosting provider’s registered office, premises and e-mail address: DiMa.hu Kft., 4032 Debrecen, Békessy Béla u. 9. Building C, 3rd floor, door 10, e-mail: info@dima.hu

2.1 Data protection officer

Name: Enikő Kiss
Telephone number: 06 70 386 5836

3. Scope of the personal data processed

3.1 Personal data to be provided during registration

When registering voluntarily, providing your name and e-mail address is mandatory. The data requested is necessary for contacting you.

3.2 Technical data

Vegan Health Kft. selects and operates the IT tools used in providing the service for the processing of personal data in such a way that the data processed is:

• accessible to those authorised to access it (availability);
• authentic and its authentication is ensured (authenticity of data processing);
• verifiable as unchanged (data integrity);
• protected against unauthorised access (confidentiality of data).

Vegan Health Kft. protects the data with appropriate measures against unauthorised access, alteration, transmission, disclosure, deletion or destruction, as well as against accidental destruction.

Vegan Health Kft. ensures the security of data processing with technical, organisational and institutional measures that provide an adequate level of protection.

During data processing Vegan Health Kft. preserves

• confidentiality: it protects the information so that only those who are authorised can access it;
• integrity: it protects the accuracy and completeness of the information and of the processing method;
• availability: it ensures that when the authorised user needs it, they can actually access the information they need, and that the related tools are available.

3.3 HTTP cookies

3.3.1 The role of cookies

In order to provide tailored service, the website places a small data package, a so-called cookie, on the user’s computer and reads it back during later visits. If the browser returns a previously saved cookie, the service provider managing the cookie can link the user’s current visit with previous ones, but only with regard to its own content. Cookies serve the following purposes:

• they remember visitors’ individual settings, which may be used, for example, when using online transactions, so that they do not have to be typed in again;
• they make the use of the website easier;
• they provide a quality user experience;
• they collect information about visitors and their devices, which we use to develop and optimise the site;
• they allow visitors to see advertisements matching their interests while browsing.

You can remove cookies from your browser or other browsing device at any time. You can find more information about this in the help or user guide of your browser or device. Please note that removing cookies may cause problems when using some websites. Whenever you remove data from your computer, always act with care and make a backup before making changes.

3.3.2 Strictly necessary and session cookies

The purpose of these cookies is to enable visitors to browse the www.allin-naturalfood.hu website fully and smoothly, and to use its functions and the services available there.

The validity period of session-type cookies lasts until the end of the session (browsing); when the browser is closed, this type of cookie is automatically deleted from the computer or other device used for browsing. Some other cookies are not deleted immediately at the end of browsing. Their deletion times can be found in the list below.

List of cookies:

• Cookie name: _geo_ip
  Domain: allin-naturalfood.hu
  Description: This cookie is necessary to determine the visitor’s geographic location (country), which makes it possible to serve appropriate content.
  Default storage period: Until the end of the session
  Further information: https://github.com/apilayer/freegeoip
• Cookie name: qtrans_front_language
  Domain: allin-naturalfood.hu
  Description: This cookie stores the visitor’s language setting (Hungarian or English display).
  Default storage period: 1 year
• Cookie name: ginger-cookie
  Domain: allin-naturalfood.hu
  Description: This cookie stores the visitor’s decision about the use of optional cookies. If the cookie is deleted, the site will ask for consent again.
  Default storage period: 1 year
• Cookie name: ginger-policy
  Domain: allin-naturalfood.hu
  Description: This cookie stores which version of the Privacy Notice was in force when cookies were accepted. This is needed so that, in case of significant changes, visitors can override their earlier consent. If the cookie is deleted, the site may ask for consent again.
  Default storage period: 1 year
• Cookie name: wordpress_sec_*, wordpress_logged_in_*
  Domain: allin-naturalfood.hu
  Description: This cookie enables registered users to log in to the site.
  Default storage period: 14.5 days (348 hours)
• Cookie name: wp_woocommerce_session*
  Domain: allin-naturalfood.hu
  Description: This cookie stores the session identifier of the webshop.
  Default storage period: 48 hours
• Cookie name: woocommerce_items_in_cart, woocommerce_cart_hash
  Domain: allin-naturalfood.hu
  Description: This cookie stores the products placed in the cart in the webshop.
  Default storage period: Until the end of the session
• Cookie name: wfwaf-authcookie-*
  Domain: allin-naturalfood.hu
  Description: As part of the website’s security system, this cookie serves to ward off possible attacks by checking the authorisation level of logged-in users.
  Default storage period: 12 hours
• Cookie name: wfvt_*
  Domain: allin-naturalfood.hu
  Description: As part of the website’s security system, this cookie serves to ward off possible attacks.
  Default storage period: 30 minutes
• Cookie name: wordfence_verifiedHuman
  Domain: allin-naturalfood.hu
  Description: As part of the website’s security system, this cookie serves to ward off possible attacks.
  Default storage period: 24 hours

Since these cookies are essential for the proper functioning of the website, your separate consent is not required for their use.

3.3.3 Optional cookies

The allin-naturalfood.hu website also uses cookies placed by some service providers as third parties.

By using the Facebook advertising service, information is collected about the fact that you have visited our website. We use the data to display targeted, interest-based advertising. This means that while using Facebook you may see a higher proportion of advertisements matching your interests. The service, however, does not result in more advertisements being displayed. You will not see more ads; the service only affects the content of the advertisements.

These cookies also remain on the visitor’s computer or other browsing device, in its browser, until they expire or until the visitor deletes them.

cookies storing data entered by the user (“user-input cookies”): these are session cookies based on a session identifier, which expire at the latest at the end of the session, when the browser is closed. They provide for the user’s data input and thereby are tied to the user’s activity during the exchange of messages with the service provider (e.g. when filling in a form or clicking a button).

List of cookies:

• Cookie name: fr
  Domain: facebook.com
  Description: This cookie serves the advertising functions of Facebook.
  Default storage period: 90 days
  Further information: https://facebook.com/

With the buttons below you can accept or reject the use of these cookies. By visiting this page you can change your earlier decision at any time later.

[ginger_enable_cookie class=”ginger_btn ginger-accept inline” text=”Accept optional cookies” redirect_url=””] [ginger_disable_cookie class=”ginger_btn ginger-disable inline” text=”Disable optional cookies” redirect_url=””]

Important note:

Article 7(1) of the GDPR requires that “the controller shall be able to demonstrate that the data subject has consented to processing of his or her personal data”. For this reason, in connection with consent, the IP address of the user giving consent and the client application’s identity (user agent) are logged. Vegan Health Kft. does not use this data, either alone or combined with other data, to identify visitors personally. The sole purpose of logging is compliance with the above GDPR provision. The IP addresses of users who do not give consent are stored using a one-way procedure that prevents the original IP address from being reconstructed (salted sha256), so the user’s IP address cannot later be determined from it, but in a dispute it can be established unambiguously for a given IP address whether its user rejected the use of optional cookies. The user can avoid being entered into this log by selecting neither acceptance nor rejection. In this case the website works as if the user had not consented to the use of optional cookies. Please note, however, that some functions of the website work incompletely or not at all without these cookies.

3.3.4 Other non-optional cookies

The Google Analytics statistical service collects aggregated information about how visitors use our website. We use the data to develop the website and improve the user experience.

• Cookie names: _gat, _gid, _ga
  Domain: allin-naturalfood.hu
  Description: These cookies are necessary for the data collection functions of Google Analytics for statistical purposes.
  Default storage period: _gat: 1 minute, _gid: 24 hours, _ga: 2 years
  Further information: https://developers.google.com/

Since data collection takes place in an anonymised manner (no personal data relating to the user is stored), your separate consent is not required for the use of these cookies.

3.4 Data related to online orders

During an online order, surname, first name, billing and delivery (postal) address and telephone number are mandatory fields. The data requested is fully necessary for processing and delivering online orders.

3.5 Data related to online customer service

During online customer service, the e-mail address, name, telephone number and order number of the person initiating the request are recorded. Name and e-mail address are mandatory. The data requested is fully necessary for online customer service. 

4. Planned use and retention period of the data processed

The Data Controller processes the data for the duration of the delivery of the ordered goods.

Legal basis of the data processing

Performance of a contract [data processing under Article 6(1)(b) of the Regulation].

Recipients and data processors of data processing related to the delivery of goods

Name of the recipient: GLS General Logistics Systems Hungary Csomag-Logisztikai Kft.

Registered office of the recipient: 2351 Alsónémedi, GLS Európa u. 2.

Telephone number of the recipient: 06-29-88-67-00

E-mail address of the recipient: info@gls-hungary.com

Website of the recipient: https://gls-group.eu/HU/hu/home

The courier service participates in delivering the ordered goods on the basis of its contract with the Data Controller. The courier service processes the personal data it receives in accordance with the privacy notice available on its website.

The Data Processor participates in keeping records of orders on the basis of its contract with the Data Controller. In doing so, the Data Processor processes the data subject’s name, address, telephone number, and the number and time of orders within the civil-law limitation period.

Data processing related to online payment

Name of the data processor: OTP Mobil Szolgáltató Kft. (SIMPLEPAY)

Registered office of the data processor: 1093 Budapest, Közraktár u. 30-32.

Telephone number of the data processor: +3615100374

E-mail address of the data processor: ugyfelszolgalat@simple.hu

Website of the data processor:

The Data Processor participates in carrying out online payment on the basis of its contract with the Data Controller. In doing so, the Data Processor processes the data subject’s billing name and address, and the number and time of the order within the civil-law limitation period.

5 Purpose, method and legal basis of data processing

5.1 General data processing guidelines

The data processing of the activities of Vegan Health Kft. is based on voluntary consent or statutory authorisation. In the case of data processing based on voluntary consent, data subjects may withdraw their consent at any stage of the data processing. In certain cases, the processing, storage and transmission of a scope of the data provided is made mandatory by law, of which we inform our customers separately.

We draw the attention of those providing data to Vegan Health Kft. that if they do not provide their own personal data, it is the duty of the person providing the data to obtain the consent of the data subject. Our data processing principles are in line with the applicable legislation on data protection, in particular the following:

• Act CXII of 2011 on the Right of Informational Self-Determination and on Freedom of Information (Infotv.);
• Act V of 2013 on the Civil Code (Ptk.);
• Act C of 2000 on Accounting (Számv. tv.);
• Act CCXXXVII of 2013 on Credit Institutions and Financial Enterprises (Hpt.);
• Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).

6. Physical storage locations of the data

Your personal data (that is, data that can be linked to your person) may come into our handling in the following ways: on the one hand, in connection with maintaining the internet connection, technical data relating to the computer, browser, internet address and pages visited that you use are generated automatically in our computer system; on the other hand, you may also provide your name, contact details or other data if you wish to contact us personally while using the website.

Data recorded technically during the operation of the system: data of the data subject’s logging-in computer that is generated during the visit and that the allin-naturalfood.hu system records as an automatic result of technical processes. The automatically recorded data is logged by the system automatically on entry and exit, without a separate statement or action by the data subject. Except in cases made mandatory by law, this data cannot be linked with other personal user data.

7. Data transfer, data processing, scope of those who learn of the data

In addition to the above data processors, we transfer your personal data to the following recipients on the basis of contracts concluded with them:

Shipping, transport: GLS General Logistics Systems Hungary Csomag-Logisztikai Kft.

Online payment interface: OTP Mobil Szolgáltató Kft. (SIMPLEPAY)

Invoicing software: KBOSS.hu Kft (Számlázz.hu)

With regard to the data transferred to them, the above recipients of the data transfer qualify as independent data controllers.

8. Rights of the data subject and means of enforcing them

The data subject may request information about the processing of their personal data, and may request the rectification of their personal data or – with the exception of mandatory processing – its erasure or withdrawal, and may exercise their right to data portability and to object in the manner indicated when the data was collected, or at the data controller’s contact details above. 

8.1 Right to information

Vegan Health Kft. takes appropriate measures to provide the data subjects with all the information referred to in Articles 13 and 14 of the GDPR and every communication under Articles 15–22 and 34 relating to the processing of personal data in a concise, transparent, intelligible and easily accessible form, using clear and plain language.

8.2 The data subject’s right of access

The data subject is entitled to obtain from the data controller confirmation as to whether or not their personal data is being processed, and, where that is the case, access to such personal data and to the following information: the purposes of the processing; the categories of personal data concerned; the recipients or categories of recipients to whom the personal data has been or will be disclosed, including in particular recipients in third countries or international organisations; the envisaged period for which the personal data will be stored; the right to rectification, erasure or restriction of processing and the right to object; the right to lodge a complaint with a supervisory authority; information about the sources of the data; the existence of automated decision-making, including profiling, and meaningful information about the logic involved and the significance and envisaged consequences of such processing for the data subject. The data controller receives the information no later than one month after the submission of the request.

8.3 Right to rectification

The data subject may request the rectification of inaccurate personal data concerning them, or the completion of incomplete data.

8.4 Right to erasure

The data subject is entitled to have the personal data concerning them erased without undue delay at their request where one of the following grounds applies: the personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed; the data subject withdraws the consent on which the processing is based and there is no other legal basis for the processing; the personal data has been unlawfully processed; the data subject objects to the processing and there are no overriding legitimate grounds for the processing; the personal data has to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject; the personal data has been collected in relation to the offer of information society services.

Erasure of data cannot be initiated where processing is necessary: for exercising the right of freedom of expression and information; for compliance with a legal obligation under Union or Member State law to which the controller is subject which requires processing, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller; on grounds of public interest in the area of public health, or for archiving, scientific and historical research purposes or statistical purposes; or for the establishment, exercise or defence of legal claims.

8.5 Right to restriction of processing

At the request of the data subject, Vegan Health Kft. restricts processing where one of the following conditions is met:

• the accuracy of the personal data is contested by the data subject, in which case the restriction applies for a period enabling the accuracy of the personal data to be verified;
• the processing is unlawful and the data subject opposes the erasure of the data and requests the restriction of their use instead;
• the controller no longer needs the personal data for the purposes of the processing, but the data subject requires it for the establishment, exercise or defence of legal claims; or
• the data subject has objected to processing; in this case the restriction applies for the period until it is verified whether the legitimate grounds of the controller override those of the data subject.

Where processing is restricted, the personal data may, with the exception of storage, only be processed with the data subject’s consent, or for the establishment, exercise or defence of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or of a Member State.

8.6 Right to data portability

The data subject is entitled to receive the personal data concerning them, which they have provided to the data controller, in a structured, commonly used and machine-readable format, and to transmit this data to another data controller.

8.7 Right to object

The data subject is entitled to object at any time, on grounds relating to their particular situation, to the processing of their personal data which is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller, or for the purposes of the legitimate interests pursued by the controller or by a third party, including profiling based on those provisions. In the event of an objection, the data controller may no longer process the personal data unless it demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or which relate to the establishment, exercise or defence of legal claims.

8.8 Automated individual decision-making, including profiling

The data subject is entitled not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them.

8.9 Right to withdraw consent

The data subject is entitled to withdraw their consent at any time.

8.10 Right to apply to a court

The data subject may apply to a court in connection with the protection of their data.

8.11 Data protection authority proceedings

A complaint can be lodged with the Hungarian National Authority for Data Protection and Freedom of Information: Name: Hungarian National Authority for Data Protection and Freedom of Information (Nemzeti Adatvédelmi és Információszabadság Hatóság)

Registered office: 1125 Budapest, Szilágyi Erzsébet fasor 22/C.

Postal address: 1530 Budapest, P.O. Box 5.

Telephone: 0613911400

Fax: 0613911410

E-mail: ugyfelszolgalat@naih.hu

Website: http://www.naih.hu

9. Other provisions

We provide information about data processing not listed in this notice when the data is collected. We inform our customers that courts, prosecutors, investigating authorities, minor offence authorities, administrative authorities, the Hungarian National Authority for Data Protection and Freedom of Information, the Hungarian National Bank and, on the basis of statutory authorisation, other bodies may contact the data controller in order to request information, communication or transfer of data, or the provision of documents.

Vegan Health Kft. discloses personal data to the authorities – provided that the authority has specified the exact purpose and the scope of data – only to the extent and in the measure that is indispensable for achieving the purpose of the request.

In force from 8 February 2021.