Privacy policy, data sharing and data management information

12. Remarketing
Remarketing allows the Service Provider to display advertisements to people who have previously visited the website or provided their email address.
Personal handling data: e-mail address, purchase data.
The purpose of handling data: displayind ads to previous users on Facebook and Google.
Legal basis of handling data: legitimate interest of the Service Provider (direct acquisition of business). The user's e-mail address will be sent to the Service Provider during the subscription to the newsletter, based on the subscriber's consent. In other words, the Data Manager also handles the given e-mail address for a different purpose (remarketing) than the purpose of data collection (sending a newsletter).
Duration of handling data: the user has the right to protest at any time to the processing of personal data concerning him or her for remarketing purposes. If the user withdraws his / her consent to the sending of newsletters (to which he / she is entitled at any time), the processing of his / her data for remarketing purposes will also cease. In order to ensure that the storage of personal data is limited to the required period, the data controller will delete the personal data after 1 year from the opening of the last newsletter without submitting a withdrawal of consent.
Recipients: the competent employees of the Service Provider, as data processors Facebook Ireland Ltd. (Address: 4 Grand Canal square, Grand Canal Harbour, D2 Dublin, Ireland; Facebook Ads), and Google Inc. (Address: 1600 Amphitheatre Pkwy, Mountain View, California 94043, USA) (Google AdWords), who display the ads to visitors who have visited the site and have allowed personalized ads to appear on Facebook or Google. the European Union has a compliance decision with the USA.

13. Sign up for newsletters
The personal handling data: name, email address.
The purpose of handling datat: to provide the subscriber with information about the products and promotions on the website www.antibacvir.hu.
Legal basis for data processing: voluntary consent of the data subject.
Duration of handling data: until withdrawal of consent.
Recipients: the competent employers of the Service Provider and as a data processor
The Rocket Science Group, LLC (675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308 USA), privace policy: https://mailchimp.com/legal/privacy/
UAB “MailerLite” (Jono Basanaviciaus str. 15, LT-03108, Vilnius, Lithuania), privacy policy:
https://www.mailerlite.com/legal/terms-of-service

14. Other
We inform the visitors of the Website that the court, the prosecutor's office, the investigating authority, the administrative authority, the National Data Protection and Freedom of Information Authority, or other authorities by law may contact the Data manager to provide information, disclose data, transfer documents.
The Data manager shall issue personal data to the authorities, provided that the authority has indicated the exact purpose and scope of the data, only to the extent and to the extent strictly necessary to achieve the purpose of the request.

15. Rights of visitors and users of the Website related to data management
You can request free information about the details of the processing of your personal data, as well as request the correction, deletion, restriction of the processing of your data and protest to the processing of such personal data. The Data Controller shall inform all recipients (data processors) of the rectification, erasure or restriction of data processing with whom or with whom the personal data have been communicated, unless this proves impossible or requires a disproportionate effort. We will inform you of these recipients upon request.
The Data Controller shall, without undue delay, but in any case within one month from the arrival of the request, inform about the measures. If necessary, taking into account the complexity of the application and the number of applications, this time limit may be extended by a further two months. The Data manager shall inform about the extension of the deadline within one month from the arrival of the request, indicating the reasons for the delay.
If the Data manager does not take action on your request, it will inform you without delay, but no later than within one month of arrival of the request, of the reasons for the non-action and of the possibility to lodge a complaint with a supervisory authority and to seek judicial redress.

16. Acces right: you have the right to request feedback from the Data manager on whether your personal data is being processed and, if such data processing is in progress, you have the right to access personal data and the following information: purpose of data processing, categories of personal data concerned, data processors , duration of data processing, if the data was not collected from you by the Data Controller, all available information about their source.

17. Right to rectification: you have the right, at the request of the Data Controller, to correct inaccurate personal data concerning you without undue delay. Taking into account the purpose of the data processing, you have the right to request that the incomplete personal data be supplemented.

18. Right to cancellation you have the right, at the request of the Data manager, to delete your personal data without undue delay, and the Data manager is obliged to delete your personal data without undue delay if the personal data are no longer needed for the purpose for which they were collected or treated differently; may withdraw its consent if there is no other legal basis for the processing; may object to the processing of personal data if the personal data have been processed unlawfully; personal data must be deleted in order to fulfill a legal obligation under Union or Member State law applicable to the Data manager.

19. Right ot protest you have the right to object at any time to the processing of your personal data in the legitimate interest of the Data manager. In this case, the Data Controller may not further process the personal data unless you prove that the processing is justified by overriding legitimate reasons which take precedence over your interests, rights and freedoms or which relate to the submission, enforcement or protection of legal claims. If your personal data is processed for the purpose of direct business acquisition, you have the right to object at any time to the processing of personal data concerning you for this purpose, including profiling, insofar as it relates to direct business acquisition.

20. Right to restrict data management: you have the right, at the request of the Data manager, to restrict the data processing if:
- you dispute the accuracy of personal data
- the data processing is illegal
- Data Controller no longer needs the personal data for the purpose of data processing, but you request them to submit, enforce or protect legal claims
- you protested against the data processing.
If data processing is restricted, such personal data may be processed, with the exception of storage, only with your consent or for the purpose of asserting, enforcing or protecting legal claims or protecting the rights of another natural or legal person or in the important public interest of the Union or a Member State.

21. The methode of storing personal data, the security of data management
The data controller's servers are operated by an authorized company and mainstance in case of a problem:

• Center Webhost Kft. (1173 Budapest, Borsó utca 12-32. C. lház. 1. em. 2.), privacy policy: https://cweb.hu/adatkezelesi-tajekoztato/
• QUIC Cloud Inc., 150 Allen Rd. Suite 204, Basking Ridge, NJ 07920, USA.  (továbbiakban „QUIC Cloud”).
  QUIC Cloud provides an extensive worldwide Content Delivery Network (CDN) with DNS service. This technically involves the transmission of information (data) between your browser and our website via the QUIC Cloud network. This allows QUIC Cloud to analyse the traffic between your browser and our website and to act as a filter between our servers and potentially malicious traffic on the Internet. In doing so, it may use cookies or other technological means to recognize Internet users repeatedly, but only for the purposes described here.
  A QUIC Cloud szolgáltatás alkalmazása weboldalunk hibamentes és biztonságos rendelkezésre állásán alapul.
  A QUIC Cloud vállalatnál fennálló biztonság és adatvédelem témaköréhez kapcsolódó további információkat itt találja: https://quic.cloud/privacy-policy/.

Taking all this into account (the state of the art and the costs of implementation, as well as the nature, scope, circumstances and purposes of the data processing and the variable probability and severity of the risk to the rights and freedoms of natural persons), the Data manager implements measures in order to guarantee a level of data security commensurate with the degree of risk.
The Data Manager shall protect the data by appropriate measures, in particular against unauthorized access, alteration, transmission, disclosure, deletion or destruction, as well as against accidental destruction, damage or inaccessibility due to changes in the technology used.
The Data manager's IT system and network are all protected against computer-assisted fraud, espionage, sabotage, vandalism, fire and flood, as well as computer viruses, computer hacking and denial of service attacks. The data controller ensures security with server-level and application-level protection procedures.
Electronic messages transmitted over the Internet, regardless of protocol (e-mail, web, ftp, etc.), are vulnerable to network threats that lead to unfair activity, contract disputes, or the disclosure or modification of information. To protect against such threats, the Data Controller will take all precautionary measures expected of it. Data manager monitors systems to record any security incidents and provide evidence for each security incident. System monitoring also makes it possible to check the effectiveness of the precautions taken.
Data Manager shall keep a record of any data protection incidents, indicating the facts related to the data protection incident, its effects and the measures taken to remedy it.

22. Making a complaint
If, in your opinion, the processing of your personal data violates the legal provisions on data protection, you have the right to take legal action against the Data Manager and to lodge a complaint with the supervisory authority.
Supervisory authority: National Data Protection and Freedom of Information Authority
Residental address: Szilágyi Erzsébet fasor 22/C. Budapest, 1125, Hungary
Postal address: Pf.: 5., Budapest, 1530, Hungary.
phone: +36-1-3911400
fax: 36 1 391-1410
e-mail: ugyfelszolgalat@naih.hu
website: https://naih.hu/