Privacy Policy - Bunzl Magyarország Kft.
Rólunk

Privacy Policy

Rólunk

Contents

  1. Introduction
  2. Who are we?
  3. Companies and websites covered by the Policy
  4. Collection of personal data
  5. Legal basis for the processing of personal data
  6. Do we share your personal data with others?
  7. International data transfer
  8. For how long do we store your personal data?
  9. Security measures
  10. Your rights as a data subject
  11. Are you obliged to provide us with your personal data?
  12. Do we use automated decision-making?
  13. Do we use your personal data for marketing purposes?
  14. Cookies
  15. Contact
  16. Complaints
  17. Changes regarding this Policy
  18. Introduction

Thank you for trusting us by sharing your personal data with us. The security of such data is of priority importance to us.

This Policy describes how we collect and use your personal data, whom we share it with, and gives you information about your rights in relation to your personal data and how you can exercise them.

  1. Who are we?

Bunzl Magyarország Kft.,

Bunzl Magyarország Kft. is considered a data controller within the context of the General Data Protection Regulation. This means that Bunzl Magyarország Kft. determines what data are collected, how they are used and protected.

Our registered office:

Bunzl Magyarország Kft.

2051 Biatorbágy

Vendel Park

Erdőalja út 3.

If you have any questions about our use of your personal data or wish to exercise your rights as a data subject, please send us an email to: info.bunzl@bunzl.hu, or contact us by mail at the postal address indicated above.

  1. Companies and websites covered by this Policy

This Privacy Policy applies to the following companies and websites:

Bunzl Magyarország Kft. – https://www.bunzl.hu/ and https://webshop.bunzl.hu/

This also includes data collected through our websites, via telephone, LiveChat function and all related social media applications.

  1. Collection of personal data

Your personal data are collected for one or more of the following purposes:

  • Performance of a contract concluded with you or the legal entity (or organisation) you represent. In such circumstances, it may not be you, but the legal entity you represent, who provided your personal data for us.
  • Initiating and conducting business transactions with you or the legal entity (or organisation) you represent in order to purchase specific products and/or services.
  • Shipping of products that you purchased from us, directly or indirectly.
  • Communication with suppliers of goods and services.
  • Management of account statements and other business records.
  • Conducting marketing activities through electronic or other means.
  • Compliance with legal and regulatory obligations.
  • Management of existing and former employees.
  • Management of job applicants.
  • Handling requests from current employees, former employees and job applicants.
  • Handling complaints or inquiries from our customers and suppliers.
  • Handling requests from shareholders and other interested parties.
  • Generating data analysis to monitor and improve website performance.
  • Ensuring the secure operation of our websites and the underlying business infrastructure.

Technical data

In addition, in order to ensure that visitors to our websites can use and browse the pages efficiently, we also collect the following data:

  • Technical data, including the IP (Internet Protocol) address through which your device connects to the Internet
  • Your login details, browser type and version, time zone setting, browser plug-ins type and version
  • Operating system and platform
  • Data relating to visiting the website, including the URL (Uniform Resource Locators) clickstream to, through and from our site.

Section 10 specifies your rights in relation to the personal data we collect and describes how you can exercise such rights.

  1. Legal basis for processing personal data

We believe that it is our legitimate interests, or necessary for the performance of the contract, to collect and use your personal data in order to operate our business and provide the services you request. In certain cases, we may be subject to a legal obligation to use or disclose personal data (for example, to comply with a request from a public authority).

Where we have a legitimate interest as the legal basis for data processing, we will use the following test to determine whether the processing can be performed:

Testing the purpose – is there a legitimate interest underlying the data processing?

Testing the necessity – is the data processing necessary for the given purpose?

Testing the balance – do the interests, rights or freedoms of the individual take precedence over our legitimate interests?

  1. Sharing your personal data

We may share your personal data with others, but only within the scope and to the extent that it is “strictly necessary”, and only when sharing data is necessary or required. This includes, for example, our professional advisors or service providers, including:

  • accountants
  • legal advisors
  • consultants
  • payment service providers
  • payroll service providers
  • pension providers
  • insurance companies
  • information technology (IT) and communication service providers
  • suppliers
  • logistics and transport services

We may also disclose personal data in the following cases:

  • To any competent law enforcement or regulatory body where required by law
  • When buying or selling companies or assets

Our aim is to ensure that personal data under the legal responsibility of the company are adequately protected by applying the necessary safeguards and, in the event of access by third parties, that such data are used in an appropriate manner.

  1. International data transfer

As a global organisation, we use third parties based in foreign countries to support our operations. These include countries outside the European Union (“EU”) and countries that do not have specific laws for the protection of personal data. We have taken steps to ensure that all personal data are adequately protected and that transfers of personal data to countries outside the EU are performed lawfully. Where personal data are transferred to a country outside the EU that has not been determined by the European Commission to provide an adequate level of protection for personal data, the transfer will be made under an agreement that imposes EU requirements for transfers outside the EU.

  1. For how long do we store your personal data?

We take steps to ensure that we retain your data only for the time necessary to meet our business needs and in accordance with any legal or regulatory requirements relating to the retention period of personal data. We ensure that your personal data are adequately protected for the duration of its storage.

  1. Security measures

We use security measures we consider adequate to protect your personal data. Our information security management system focuses on risk analysis, including the analysis of risks in respect of the rights and freedoms of data subjects. However, we have no control over what happens between your device and the boundary of our information infrastructure. It is therefore worthwhile for you to understand the security risks involved, and take the appropriate measures to protect your data. We accept no responsibility for breaches outside our control.

  1. Your rights as a data subject

As a data subject – whose personal data we store – you have certain rights. If you wish to exercise any of these rights, please send an email to info.bunzl@bunzl.hu

or contact us using the contact details in the Contact section. In order to process your request, you will be asked to provide valid proof of identity for authentication purposes. You have the following rights:

  • Right to be informed
    As a data controller, we are obliged to provide you with clear and transparent information about our processing activities. Such information are contained in this Privacy Policy and any notices sent by us.
  • Right to access
    You may request a copy of the personal data we store about you free of charge. After we have verified your identity and, where applicable, the third party authorisation of the interested third party, we will provide you with access to the personal data we store about you and to the following:
  1. Information about whether we, as a data controller, store personal data about you
  2. Information about the personal data that we store about you and, where permitted and possible, a copy of your personal data
  3. Information about the purposes for which we process your personal data and where they were obtained from
  4. Information about whether the personal data will be disclosed to any other person other than the original recipient and, if so, the identity of the recipients
  5. You may also request to receive your personal data in a machine-readable format (Word, PDF, etc.) – however, such requests can only be granted if the data in question
    1. are provided to the company by the data subject,
    2. are subject to automated processing
  6. Where personal data are used for automated decision-making (e.g. profiling) about you as a data subject, you can request information about the logic underlying the decisions made by the system, and request human intervention to override such automated decisions.
  7. Where personal data are transferred to a third country or to an international organisation, you shall have the right to be informed of the safeguards pursuant to Article 46 relating to the transfer.
  • If, under certain exceptional circumstances we refuse to provide information, it shall be supported by explanation. If your request is frivolous or causes unreasonable inconvenience, we reserve the right to refuse it. If answering your request is likely to take more time or incur unreasonable costs (for you), we will inform you accordingly.
  • Right to rectification
    If you believe that any personal data we store about you is inaccurate or incomplete, you may exercise your right to have such data rectified or completed. You may also exercise this right in conjunction with your right to restrict processing to ensure that incorrect/incomplete data are not processed until rectified.
  • Right to erasure (“right to be forgotten”)
    If the compelling legal ground or legitimate grounds for the processing of your personal data cease to exist, you may request the erasure of your personal data. This also applies to personal data that may have been unlawfully processed. We will take all reasonable steps to delete such data.
  • Right to restriction of processing
    You have the right to request us to stop processing your personal data. We will continue to store the data, but we will no longer process them. This right is an alternative to the right to erasure of data. If one of the following conditions is met, you shall have the right to restrict data processing:
  1. a) The accuracy of the personal data is disputed
    b) The processing of personal data is unlawful
    c) We no longer need the personal data for the purposes of processing, but as part of a legal proceeding
    d) You have already exercised your right to object and the processing is restricted pending a decision on the status of the processing.
  • Right to data portability
    You have the right to request the transfer of your personal data file, in a commonly used and machine-readable format, to another controller or processor. You may exercise this right only if the original processing was based on consent, if the processing is carried out by automated means or if the processing is based on the performance of a contractual obligation.
  • Right to object
    You have the right to object to the processing of your personal data if
  1. the processing is based on legitimate interest;
  2. the processing is carried out for direct marketing purposes;
  3. the processing is carried out for scientific or historical research purposes; or
  4. the processing involves automated decision-making and profiling.
  5. Is it mandatory to provide your personal data to us?

Providing your personal data is never mandatory, however, if you enter into a contractual relationship in order to use our services or products, you may be required to provide them. We can only ensure our services and products for you if you provide us with the necessary personal data.

You will also be required to provide certain personal data if you wish to exercise your rights under the GDPR (listed in section 10) and you contact us.

  1. Automated decision-making

When you use our website, we use automated decision-making. This includes providing you with content that is relevant to your online behaviour. This allows us to display contents that are relevant to you.

  1. Do we use your personal data for marketing purposes?

Yes, we may occasionally use your personal data for marketing purposes, but we only contact people for such purpose who wish to receive marketing materials. If you object to marketing activities performed through electronic means or otherwise, please let us know and we will no longer contact you for such purposes.

  1. Cookies

We use cookies (small text files that are placed on your computer by the websites you visit) to enable us to operate our website properly, to monitor its use and to display contents that we think may be of interest to you. If you register with us or continue to use our website, we will ask you to consent to our use of cookies. You may read more about the cookies we use and your rights in our Cookie Policy here: https://en.bunzl.hu/cookie-policy/.

  1. Contact

If you have any comments, questions or suggestions regarding this Privacy Policy or the processing of your personal data, please send us an email to the address: info.bunzl@bunzl.hu.

Alternatively, you may also contact us at the following postal address:

Bunzl Magyarország Kft.
2051 Biatorbágy
Vendel Park
Erdőalja út 3.

  1. Complaints

If you wish to make a complaint, please feel free to contact us at the contact details provided above. All complaints are kept confidential.

If you are dissatisfied with the way we process your data, or if you have any concerns about the way we handle your complaint regarding our data processing, you have the right to contact the competent supervisory authority of the European Union with your complaint. In the case of Hungary, this authority is the National Authority for Data Protection and Freedom of Information, which is our main supervisory authority. The contact details of the authority can be found on the following website: https://naih.hu/.

  1. Changes to this Policy

This Policy was last updated on was last updated on: 31 August 2021