Privacy policy

LAST UPDATED: 21 December 2018

A. WHO ARE WE?

This website at ArtOrigo.com (the “Website”) is owned and operated by ArtOrigo.com Kft.

ArtOrigo.com Kft. with registered office at Csóka Street 1, Remeteszőlős, 2090 Hungary, company registration number Cg 13 09 211139, is the data controller of the personal information collected on this Website.

In this Privacy Policy, references to “we”, “us” or “our” means ArtOrigo.com Kft. References to “you” and “your” are to users of our Website.

This Privacy Policy also applies to any of your “Personal Information” obtained by us when you use our smart phone/ mobile applications (iOS and Android).

B. APPLICATION OF THE PRIVACY POLICY

This Privacy Policy describes how we collect, use and otherwise handle “Personal Information” we receive from you when you use this Website and explains the circumstances in which we may transfer this to others.

“Personal Information” is information about you which can be used alone, or combined with other information, to identify you personally.

Our Privacy Policy must be read together with any other legal notices or terms and conditions available on other pages of our Website.

C. HOW, WHEN AND WHY DO WE COLLECT AND USE PERSONAL INFORMATION?

1. Information that we collect

The types of information that we may collect from you, depending on how you use our Websites include:

a. your name;

b. your email address;

c. your address (business and personal);

d. your landline and mobile telephone numbers (business and personal);

e. any other information that you choose to provide to us when filling out a contact form on our Websites;

f. your geographic location (country/territory where you are living and/or working);

g. your job title, role and the name of your employer;

h. if you are a Seller, also certain information relating to your business, such as Years in business, Estimated inventory size, Average item price, types of items sold, associations in which you are a member,

2. How we use your Personal Information

a) Website registration and provision of our services through the Website – we collect your Personal Information to let you register to the Website, in compliance with our terms and conditions, and provide you with the services/products offered from time to time on the Website;

b) Contact Forms - we may collect your Personal Information, which you choose to provide when you fill in forms on our Websites, including the information set out in a.-e. above. We may use this Personal Information to respond to your queries, and/or provide the services and/or information that you have requested.

c) Mailing List - if you choose to subscribe to our Mailing List, we use Personal Information that you provide during the subscription process to send you our updates and marketing messages. Your agreement to the use of your Personal Information for these purposes is optional. If you decide not to subscribe to our Mailing List, we will not send you the relevant communications, but your use of our Website will remain otherwise unaffected.

Mailing List Opt-Out - you are entitled to opt-out from receipt of marketing communication at any time and free of charge by using the contact details provided in this Privacy Policy or by using the “unsubscribe” option included in any marketing e-mail or other marketing material received from us.

d) Marketing – where you have provided us with your contact details, we may contact you by telephone or by post for marketing purposes relating to our services, our Website, and/or to research opinion on proposed legal or business developments where legally permitted to do so, unless you let us know that you do not want to receive this type of marketing. We will only contact you for these marketing purposes by electronic means (email or SMS) where you have agreed to this. Your agreement to the use of your Personal Information for these purposes is optional and if you fail to provide your agreement, your visit to and use of the Website will not be affected.

Marketing Opt-Out - you are entitled to opt-out from receipt of marketing communication at any time and free of charge by using the contact details provided in this Privacy Policy or by using the “unsubscribe” option included in any marketing e-mail or other marketing material received from us.

e) Our Business Purposes - we may also use your Personal Information for our business purposes such as:

record keeping, statistical analysis, internal reporting and research purposes;
to ensure network and information security;
to notify you about changes to our services;
to investigate any complaint, you make;
to provide evidence in any dispute or anticipated dispute between you and us;
to customize various aspects of our Websites to improve your experience;
to host, maintain and otherwise support the operation of our Websites;
for the detection and prevention of fraud and other criminal offences and for risk management purposes;
for business and disaster recovery (e.g. to create back-ups);
for document retention/storage;
for database management;
to protect the rights, property, and/or safety of our organization, its personnel and others; and
to ensure the quality of the services we provide to our users.

f) Other - in addition, we may use your Personal Information to comply with legal obligation to which we are subject and for further specific purposes made clear at the point of collection on particular pages of our Websites.

If you choose not to provide Personal Information requested by us, we may not be able to provide you with the information and/or services you have requested or otherwise fulfil the purpose(s) for which we have asked for the Personal Information. Aside from this, your visit to our Website will remain unaffected.

3. Legal grounds for collection and use of Personal Information

We ask for your consent to process your Personal Information in relation to our Mailing List and for marketing purposes (paragraph 2 points c and d above), where this is made clear to you at the point where you provide your information (Art. 6, paragraph 1, letter a) of the Regulation (EU) 2016/679, the General Data Protection Regulation –GDPR);

In other cases, we process your personal information where we need to do so:

- to provide you with the service and perform a contract to which you are party or to take steps at you request prior to entering into a contract (Section C, Paragraph 2 Points a and b above, Art. 6, paragraph 1, letter a) of the,GDPR);

- to comply with our legal and regulatory obligations (Section C, Paragraph 2 Paragraph 2 points e and f above, Art. 6, paragraph 1, letter b) of the,GDPR);

- for our legitimate interests (Art. 6, paragraph 1, letter e) of the,GDPR) in: (i) responding to your queries (Section C, Paragraph 2 Paragraph 2 point b above); (ii) providing services and/or information to you where we do not have a contract (Section C, Paragraph 2 Paragraph 2, point a above); (iii) our internal business purposes, as set out in Section C, Paragraph 2 Paragraph 2. Point e above.

You can object to processing based on our legitimate interests at any time by contacting us as specified in Section J below. See also “Your Rights – The right to object”, Section I below. We consider that the risk to your data protection rights in connection with Personal Information that we process on the basis of our legitimate interests is not excessive or overly intrusive. We have also put in place protections for your rights by ensuring proper retention periods and security controls.

If you would like to find out more about the legal grounds on which we process your Personal Information for a particular purpose you can contact us as specified in Section J below..

4. Cookies

Where you use our Websites, we will process your Personal Information collected by using cookies in accordance with our Cookie Policy. Please click here to view our Cookie Policy.

5. Information from other sources

Where permissible under applicable local laws, we may combine information that you have provided to us with other information that we already hold about you and which we have collected for a compatible purpose.

D. HOW AND WHEN DO WE SHARE INFORMATION WITH THIRD PARTIES?

Some services that we provide require the involvement of third parties. We have carefully selected these third parties and taken steps to ensure that your Personal Information is adequately protected.

1. Google Analytics

This Website uses Google Analytics, a web analysis service provided by Google Inc. ("Google"). Google Analytics works using cookies.

Google Analytics cookies collect your IP address, however because IP anonymisation is used on this Website, your IP address will be shortened (and therefore anonymised) as soon as technically possible and before it is stored or otherwise used in connection with Google Analytics.

The anonymisation process takes place within the European Union or the European Economic Area, except in exceptional cases, where your full IP address may be sent to a Google server in the U.S.A. and shortened there.

We use the information collected by Google Analytics cookies to find out about how visitors use our Website.

The IP address sent by your browser in connection with Google Analytics will not be combined by Google, with other data.

You can prevent Google Analytics cookies from being stored by setting your browser software accordingly (see our Cookie Policy for further information). However, please note that you may not then be able to make full use of all the Website's functions.

You can also opt-out of Google Analytics by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=en.

2. Sharing to Service Providers

The Personal Information you provide on the Website is collected by ArtOrigo.com Kft.

If you are a website user, we may share your Personal Information with the dealers publishing information on our website. In additions, we may share the Personal Information with our third-party service providers who we engage to process the information that we collect from you on the Website, and/or to host and maintain our Website, content or services, on our behalf and in accordance with this Privacy Policy.

Where we employ third party companies or individuals to process Personal Information provided by us (and not collected by them), they only use this Personal Information on our behalf and in line with our instructions and this Privacy Policy.

3. Sharing with other third parties

We may also provide your information to other third parties such as regulators and law enforcement agencies, where we are required by law to do so, where necessary for the purposes of preventing and detecting fraud, other criminal offences and/or to ensure network and information security.

Our Website offers the possibility to share content on social media channels, e.g., Facebook. The respective social media provider will directly gather Personal Information only after you click on the corresponding sharing button. Please refer to the privacy policy of the social media providers to learn more about what Personal Information is collected and used.

When you "like" or "follow" us on Facebook, Instagram, Pinterest, Twitter, Tumbler or other social media sites, we may collect your information. This information may include your name, e-mail address, and any comments or content you post relevant to us. We may also collect your information if you sign up for one of our promotions or submit information to us through Facebook, Pinterest, Instagram, Twitter, Tumbler or another social media site. These links may include the use of so-called "share links." A "share link" is a button and/or text link appearing on our websites that launches a sharing mechanism that allows you to post links to, and content from, our websites or application onto other websites.

E. INTERNATIONAL TRANSFERS

The transfer of your Personal Information to our third-party service providers may involve your Personal Information being sent outside of the EEA, to locations that may not provide the same level of protection as those where you first provided the information.

However, we will only transfer your Personal Information outside of the EEA:

• where the transfer is to a place that is regarded by the European Commission as providing adequate protection for your Personal Information; or

• where we have put in place appropriate safeguards, for example by using a contract for the transfer which contains specific data protection provisions that have been adopted by the European Commission or a relevant data protection authority. You can request a copy of these contracts by contacting us at: inquiries@artorigo.com; or

• where you have consented to this, or there is another legal basis on which we are entitled to make the transfer.

F. HOW LONG DO WE STORE PERSONAL INFORMATION?

It is our policy to retain your Personal Information for the length of time required for the specific purpose or purposes for which it was collected, which are set out in this Privacy Policy. However, on occasion we may be obliged to store some data for a longer time, for example, where a longer time period is required by applicable laws. In this case, we will ensure that your Personal Data will continue to be treated in accordance with this Privacy Policy.

For more information on how long cookies are stored, please refer to our Cookie Policy.

G. SECURITY

We employ appropriate security measures to help protect your Personal Information and guard against access by unauthorised persons. Information storage is on secure computers in a locked and certified information centre and information is encrypted wherever possible. We undergo periodic reviews of our security policies and procedures to ensure that our systems are secure and protected. However, as the transmission of information via the Internet is not completely secure we cannot guarantee the security of your information transmitted to our Website.

H. CONFIDENTIALITY

We acknowledge that the information you provide may be confidential. We do not sell, rent, distribute or otherwise make Personal Information commercially available to any third party, except that we may share information with our service providers for the purposes set out in this Privacy Policy. We will maintain the confidentiality of and protect your information in accordance with our Privacy Policy and all applicable laws.

I. YOUR RIGHTS

The following section explains your rights. The various rights are not absolute, and each is subject to certain exceptions or qualifications. We will grant your request only to the extent that it follows from our assessment of your request that we are allowed and required to do so under data protection laws. Nothing in this Privacy Notice is intended to provide you with rights beyond or in addition to your rights as a data subject under data protection laws.

Rights	What does this mean?
1.The right to be informed	You have the right to be provided with clear, transparent and easily understandable information about how we use your Personal Information and your rights. This is why we are providing you with the information in this Privacy Notice.
2. The right of access	You have the right to obtain a copy of your Personal Information (if we are processing it), and other certain other information (similar to that provided in this Privacy Notice) about how it is used. This is so you are aware and can check that we are using your information in accordance with data protection law. We can refuse to provide information where to do so may reveal Personal Information about another person or would otherwise negatively impact another person's rights.
3. The right to rectification	You can ask us to take reasonable measures to correct your Personal Information if it is inaccurate or incomplete. E.g. if we have the wrong name or address for you.
4. The right to erasure	This is also known as ‘the right to be forgotten’ and, in simple terms, enables you to request the deletion or removal of your Personal Information where there’s no compelling reason for us to keep using it or its use is unlawful. This is not a general right to erasure; there are exceptions, e.g. where we need to use your Personal Information in defence of a legal claim.
5. The right to restrict processing	You have rights to ‘block’ or suppress further use of your Personal Information when we are assessing a request for rectification or as an alternative to erasure. When processing is restricted, we can still store your Personal Information, but may not use it further. We keep lists of people who have asked for further use of their Personal Information to be ‘blocked’ to make sure the restriction is respected in future.
6. The right to data portability	You have rights to obtain and reuse certain Personal Information for your own purposes across different organisations.
7. The right to object	You have the right to object to certain types of processing, on grounds relating to your particular situation, at any time insofar as that processing takes place for the purposes of legitimate interests pursued by us or by a third party. We will be allowed to continue to process your Personal Information if we can demonstrate “compelling legitimate grounds for the processing which override your interests, rights and freedoms” or we need this for the establishment, exercise or defence of legal claims.

J. HOW TO CONTACT US

If you have any questions about our privacy or security practices you can contact us:

(a) By post, using the postal address ArtOrigo.com Kft. d/b/a/ ArtOrigo.com: Csóka Street 1, Remeteszőlős, 2090 Hungary

(b) Click on "Contact us" on www.artorigo.com

If we need, or are required, to contact you concerning any event that involves your personal information we may do so by email, telephone, or mail.

K. CHANGES TO THIS PRIVACY POLICY

We may change our Privacy Policy from time to time. When we change our Privacy Policy, we will publish the updated policy on our Website. Please check this Privacy Policy regularly. Subject to applicable law, all changes will take effect as soon as we publish the updated Privacy Policy, but where we have already collected information about you and/or where legally required to do so, we may take additional steps to inform you of any material changes to our Privacy Policy and may request that you agree to these changes.

L. ONLINE PAYMENT ON ARTORIGO

I acknowledge the following personal data stored in the user account of ArtOrigo.com Kft. (Csóka Street 1, Remeteszőlős, 2090 Hungary) in the user database of artorigo.com will be handed over to OTP Mobil Ltd. (1093 Budapest, Közraktár u. 30-32.) and is trusted as data processor.
The data transferred by the data controller are the following: first name, last name, company name, fiscal code, email address, phone number, billing address
The nature and purpose of the data processing activity performed by the data processor in the SimplePay Privacy Policy can be found at the following link: https://simplepay.hu/vasarlo-aff