DATA PROTECTION DECLARATION

Please read this Notice carefully in order to understand how we handle your personal data and to learn about your rights related to data processing.

RENT WELL HUNGARY Limited Liability Company, as data controller, respects the privacy of all individuals whose personal data is provided to us and is committed to protecting it. Pursuant to Article 13 of the General Data Protection Regulation of the European Union (Regulation 679/2016 of the European Parliament and of the Council, hereinafter: GDPR), we provide the following information:

Data Controller Information:

Company name: Rent Well Hungary Limited Liability Company
Registered office: 1055 Budapest, Szent István körút 13. 1/6.

Website: https://madagascararomas.com, https://shop-madagascararomas.eu

Phone: +36 70 303 111 3

E-mail: madagascararomas@pm.me

Data protection requests: If you have any requests or questions regarding data processing, you may send your request by mail or electronically to the following addresses: madagascararomas@pm.me. We will respond to your inquiry without delay, but no later than within 30 days, to the address you provide.

Purposes of Data Processing

The data controller processes data for the following purposes, in accordance with applicable laws:
a) Fulfillment of services provided on the website.
b) Contact via electronic, telephone, SMS, and postal communication.
c) Providing information about the Company's products, services, contractual terms, and promotions.
d) Sending advertisements electronically and by post.
e) Analyzing website usage.
f) For the provision of the Company's business activities, we process the data of service users to fulfill legal obligations and maintain customer relationships.
g) Marketing activities for potential clients.
h) Processing data of employees and job applicants.
i) Processing contact data of partners' representatives.
j) Fulfilling customer orders.
k) Organizing prize draws.
l) Facilitating internal administration.

Our Company processes your personal data on the following legal bases:

a) Issuing invoices in accordance with accounting laws: legal basis: GDPR Article 6(1)(c)
b) Maintaining contact: legal basis: GDPR Article 6(1)(f). For data of employees or representatives of partners, the legal basis is legitimate interest. The data controller's legitimate interest: business continuity.
c) Processing employee data: GDPR Article 6(1)(b), (c).
d) Processing data of contractual partners: legal basis: GDPR Article 6(1)(b)
e) Marketing activities: legal basis: GDPR Article 6(1)(a).
For marketing purposes, a Facebook page is also operated, however, no independent database or profiling is created.
f) Online registration: legal basis: GDPR Article 6(1)(a)
g) Organizing prize draws: GDPR Article 6(1)(a).

Duration of Data Processing

Invoices are retained for at least 5 years due to legal obligations (data processing as a payer). The retention period for documents serving as the basis for invoicing is also 5 years.
The retention period for documents related to employment is 3 years from the termination of employment. Data provided for contact purposes are retained for 1 year after the end of the relationship. Data related to contract performance are retained for 5 years after the termination of the contract. Data processed for marketing purposes are retained until consent for data processing is withdrawn. Data processed for organizing prize draws are retained until the prize draw is finalized.

Persons Authorized to Access Personal Data

Your personal data may be processed and accessed by our Company's employees, in accordance with the relevant legal requirements and principles.

The Company does not transfer data abroad.

If the Company transfers personal data to a country outside the European Union, it will do so only if the recipient of the data provides adequate guarantees of compliance with the Regulation.

Your Rights Regarding the Processing of Your Personal Data

a) Right of access

You have the right to receive feedback from our Company as to whether your personal data is being processed, and if so, to receive information about your personal data being processed, the purpose of the processing, the recipients with whom your data is shared, the intended duration of data processing, and your further rights related to data processing.

Upon your request, our Company will provide you with a copy of your personal data being processed. For additional copies, our Company may charge a reasonable fee based on administrative costs.

b) Right to rectification

If your data is outdated or otherwise inaccurate, you may request the rectification of inaccurate personal data concerning you. Taking into account the purpose of processing, you also have the right to request the completion of incomplete personal data.

c) Right to erasure

Our Company will delete your personal data if it is no longer necessary for the purpose for which it was collected; if the processing is unlawful; if you withdraw your consent and there is no other legal basis for processing; if you object to the processing and there are no overriding legitimate grounds for the processing; or if deletion is required by a legal obligation applicable to our Company. You may indicate your intention to have your personal data deleted by sending an email to madagascararomas@pm.me.

d) Right to restriction of processing

You have the right to request that our Company restrict the processing of your data if any of the following applies:
a) You contest the accuracy of your personal data, in which case the restriction applies for a period enabling our Company to verify the accuracy of your personal data;
b) The processing is unlawful, but you oppose the deletion of the data and instead request the restriction of their use;
c) Our Company no longer needs the personal data for processing purposes, but you require them for the establishment, exercise, or defense of legal claims; or
d) You have objected to processing; in this case, the restriction applies for the period during which it is determined whether our Company's legitimate grounds override yours.

e) Right to object to the use of your personal data for direct marketing purposes

You have the right at any time to object to the use of your personal data for direct marketing purposes, in which case our Company will no longer send you marketing communications.

f) Right to data portability

If the processing is based on your consent or a contract with you, and the processing is carried out by automated means, you have the right to receive the personal data you have provided to us in a structured, commonly used, machine-readable format, and you have the right to transmit those data to another data controller.

g) Right to object

You have the right to object to the processing of your personal data if the processing is necessary for the purposes of the legitimate interests pursued by the data controller or a third party, or if the personal data is used or disclosed for direct marketing, public opinion research, or scientific research purposes.

Purpose and Legal Basis of Data Processing

The purposes of data processing carried out by the Data Controllers are as follows:

a) Distribution of the Company's printed publications to partners;

b) Identification of partners and maintaining contact with partners;

c) Processing and storage of résumés submitted by users until the owner of the résumé instructs us to cease storage;

d) Identification of user rights (services available to the user);

e) Provision of services available through the Company's websites;

f) Display of personalized content and advertisements, compiling statistics;

g) Facilitating customization of services and advertisements used by the user, and convenience features;

h) Handling and managing individual user inquiries;

i) Compiling statistics and analyses;

j) Direct marketing or marketing-related contact (e.g., newsletters, eDM, etc.);

k) Providing hosting for user-generated content (e.g., comments, chat, blog, forum, etc.);

l) In specific cases, organizing and conducting prize draws, notifying winners, and providing prizes;

m) Maintaining records required by law for the Company's employees, submitting reports and declarations;

n) Recruiting and selecting potential employees for the Company;

o) Technical development of the IT system;

p) Protection of users' rights;

q) Enforcement of the Data Controller's legitimate interests;

r) Facilitating the conclusion and performance of contracts within the scope of the Data Controller's activities.

The Company may use the data made available by Users while using the service to create user groups and to display targeted content and/or advertisements to those user groups on the Company's websites.

The Data Controller may process personal data for the purpose of achieving any of the data processing objectives described above.

The Data Controllers will not use the provided Personal Data for purposes other than those specified in these points.

User Rights, How to Exercise Them, Modification and Deletion of Data

The User may request that any Data Controller inform them whether their personal data is being processed, and if so, provide access to the Personal Data being processed.

The Personal Data provided by the User in connection with a given Service can be viewed in the access control settings of the Services and on the profile pages associated with each Service.

Regardless of this, the User may request information about the processing of their Personal Data or may make a declaration and decide on its deletion at any time.

Furthermore, upon request sent to the following email address: madagascararomas@pm.me, after processing but no later than 30 days, we will delete the user's data.

Requests sent by registered or return-receipt mail to the address of the Data Controller:
A request for information sent by mail will be considered authentic by the Data Controller only if the User can be clearly identified based on the request. Requests for information sent by email will only be considered authentic if sent from the User's registered email address; however, this does not preclude the Data Controller from identifying the User by other means before providing information. The request for information may cover the data managed by the Data Controllers about the User, their source, the purpose, legal basis, and duration of processing, the names and addresses of any Data Processors, activities related to data processing, and, in the case of transfer of Personal Data, who received or receives the User's data and for what purpose.

The User may request the rectification or modification of their Personal Data processed by the Data Controllers. Taking into account the purpose of processing, the User may also request the completion of incomplete Personal Data. The Personal Data provided by the User in connection with a given Service can be modified in the access control settings of the Services and on the profile pages associated with each Service. Once a request for modification of personal data has been fulfilled, the previous (deleted) data cannot be restored.

The User may request the deletion of their Personal Data processed by the Data Controllers.
Deletion may be refused (i) for the purpose of exercising the right to freedom of expression and information, or (ii) if the processing of Personal Data is authorized by law; as well as (iii) for the establishment, exercise, or defense of legal claims. The Data Controller will always inform the User of the reason for refusing a deletion request. Once a request for deletion of personal data has been fulfilled, the previous (deleted) data cannot be restored.
Newsletters sent by the Data Controller can be unsubscribed from via the unsubscribe link found in the newsletter. In the event of unsubscription, the Data Controller will delete the User's Personal Data from the newsletter database.

The User may request that the Data Controller restrict the processing of their Personal Data if the User disputes the accuracy of the Personal Data being processed. In this case, the restriction applies for the period necessary for the Data Controllers to verify the accuracy of the Personal Data. The Data Controllers will mark the Personal Data they manage if the User disputes its correctness or accuracy, but the incorrectness or inaccuracy of the disputed Personal Data cannot be clearly established. The User may also request that the Data Controller restrict the processing of their Personal Data if the processing is unlawful but the User opposes the deletion of the Personal Data and instead requests the restriction of its use.
Furthermore, the User may request that the Data Controller restrict the processing of their Personal Data if the purpose of processing has been fulfilled, but the User requires the Data Controller to continue processing it for the establishment, exercise, or defense of legal claims.

The User may request that the Data Controllers provide and/or transfer to another data controller the Personal Data provided by the User and processed by automated means, in a structured, commonly used, machine-readable format.

The User may object to the processing of their Personal Data (i) if the processing of Personal Data is necessary solely for compliance with a legal obligation applicable to the Data Controller or for the purposes of the legitimate interests pursued by the Data Controller or a third party; (ii) if the purpose of processing is direct marketing, public opinion polling, or scientific research; or (iii) if the processing is carried out for the performance of a task carried out in the public interest. The Data Controller will examine the legitimacy of the User's objection, and if the objection is found to be justified, will terminate the processing and block the Personal Data concerned, and will notify all those to whom the Personal Data affected by the objection has previously been disclosed of the objection and the measures taken based on it.

Remedies Information

If you have a complaint regarding the processing of your personal data, please contact our customer service/representative at madagascararomas@pm.me. Our Company will investigate your complaint and inform you of the results of the investigation and any actions taken within 30 (thirty) days.

If you believe that the processing of your personal data violates the applicable laws, you have the right to file a complaint with the data protection supervisory authority or to seek judicial remedy. In Hungary, the data protection supervisory authority is the National Authority for Data Protection and Freedom of Information (1125 Budapest, Szilágyi Erzsébet fasor 22/C, ugyfelszolgalat@naih.hu).

Data protection lawsuits fall under the jurisdiction of the regional court. The lawsuit may – at the data subject's choice – also be initiated before the regional court of the data subject's place of residence or habitual residence.

Data Protection and Data Management Policy of Rent Well Hungary Limited Liability Company

The purpose of this Policy is to set forth the data protection and data management principles applied by Rent Well Hungary Limited Liability Company (registered office: 1055 Budapest, Szent István körút 13. 1/6., company registration number: 01-09-419733; hereinafter: the "Company") and the Company's data protection and data management policy. The Company is committed to ensuring the security of Personal Data and will take all necessary technical and organizational measures and establish the necessary procedural rules to ensure that the collected, stored, and processed Personal Data are protected and to prevent their destruction, unauthorized use, or unauthorized alteration. The Company also undertakes to require all third parties to whom it may transfer or disclose Personal Data to comply with these obligations.

Details of Data Processing

Available Services

Without registration:

Viewing content

Scope of Data Processed

Data that may be provided at the User's discretion: email address, telephone number, name, place of residence/habitual residence, product category purchased by the User, method of delivery and payment used by the User, total amount of the User's purchases, and whether the User has a loyalty program identifier created within the framework of the loyalty program. During the operation of the system, the following data are recorded technically: data of the User's logging-in computer generated during the use of the service, which are automatically recorded by the Data Controller's system as a result of technical processes. Automatically recorded data are logged by the system automatically at login and logout, without any separate declaration or action by the User. These data cannot be linked to other Personal Data of the User – except as required by law. Only the Data Controller has access to the data. In order to provide personalized content, the Company places a small data package (so-called "cookie") on the User's computer. The purpose of the cookie is to ensure the highest possible quality of operation of the site and to enhance the user experience. The User can delete the cookie from their own computer or set their browser to prohibit the use of cookies. By prohibiting the use of cookies, the User acknowledges that the operation of the site may not be fully functional without cookies.

Purpose of Data Processing

The purpose of Data Processing is to ensure the provision of services available at the URL.

Duration of Data Processing

The processing of Personal Data provided by the User continues as long as the User does not unsubscribe from the service – with the given username. The date of deletion is within 10 working days from receipt of the User's unsubscription (deletion request). In the case of unlawful, misleading use of Personal Data, or in the event of a crime or attack against the system committed by the User, the Data Controller is entitled to immediately delete the User's registration and data, but in the case of suspicion of a crime or civil liability, is also entitled to retain the Personal Data for the duration of the proceedings.

Information regarding Personal Data

Please note that if your personal data becomes accessible to third parties as part of the Website's content without your consent or legal authorization, you may exercise your rights under Regulation 679/2016 General Data Protection Regulation by contacting madagascararomas@pm.me or by mail at 1055 Budapest, Szent István körút 13. 1/6. The above provisions and rules are only valid together with the General Terms and Conditions (GTC).