Privacy Policy

Solar Kit Hungary Kft., registered under company registration number Cg.: 01-09-330542 (registered office: 1084 Budapest, Déri Miksa utca 6. 1. lház. 2. floor 2. 

representative: Marcell Tóth, e-mail: info@solar-kit.hu, hereinafter referred to as the "Company") provides the following information in accordance with Regulation 2016/679 of the European Parliament and of the Council on the General Data Protection Regulation (hereinafter referred to as the "GDPR") in relation to its data processing activities. 

In compliance with the requirements of the General Data Protection Regulation (GDPR), we would like to inform you about the processing of personal data that you provide to us for the purposes of the services we provide.

As a data controller, we strive to ensure that the processing of your data is lawful and in compliance with the law.

We will treat your personal data confidentially, and we will take steps to ensure that it is kept and other secure IT and other security measures related to data storage and processing, in order to protect them and organizational measures to facilitate secure data management. 

In this notice, we may use terms that you are not familiar with. Their meaning and explanation can be found on the website below:
https://www.naih.hu/adatvedelmi-szotar

This notice is valid until withdrawn.

Whenever "data" or "information" is used in this notice, it is always understood to refer to personal data.
In particular, we are subject to the following legislation in relation to data processing:
Act CXII of 2011 on the Right of Informational Self-Determination and Freedom of Information (hereinafter referred to as "the Infotv."),
Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation; hereinafter: the Regulation).

1. Who processes your personal data? Who can you contact with questions about data processing?

Your personal data is processed by our company, Solar Kit Hungary Kft:

1084 Budapest, Déri Miksa utca 6. 1. lház. 2. floor 2.

Tax number: 26530129242

Company registration number: 01 09 330542

You can send any questions regarding data management to the following contact details:

info@solar-kit.hu

2. For what purposes and what personal data do we process?

For our customers who contact us and are interested in our services, we process their contact details for the purposes of price calculation, consultation and contact, such as:
Your name
Your address
Your telephone number
E-mail address
and any other personal data you may have provided in the message sent
You provide the above personal data to us, via our website, e-mail, or other communication channels, when you enquire about one of our services

The legal basis for the processing is Article 6(b) of the GPDR, the processing is necessary for the performance of a contract to which the data subject is a party or for taking steps at the request of the data subject prior to entering into a contract

If no business relationship is established between our company and you, in that case, your personal data will be deleted and will not be used for any further purposes.

Transfer of data to third parties: none

In the case of our small and wholesale customers, we process the data necessary for invoicing and the documentation of payment for the purposes of concluding a contract, such as:
Your name
Your address
Your telephone number

You provide us with the above personal data.

The legal basis for the processing is for the purposes of compliance with the Accounting Act, Article 6(c) of the GDPR, i.e. to fulfil a legal obligation, and Article 6(b) of the GDPR, i.e. to process data necessary for the performance of a contract.

We are obliged to keep the invoices for 8 years under the provisions of the law.

We keep contracts for 5 years.

Transmission of data to third parties: we must transmit the information on the invoice to the NAV, this is our legal obligation.

We assist our clients who have contracted with us to apply for grant aid in the proper preparation of their application, and therefore we process all personal data necessary for the submission of the application for the purpose of assisting with the preparation of the application, such as:

• full name
• name at birth
• place and date of birth
• address
• nationality
• mother's name
• address of the place of residence
• tax identification number
• identity card number
• bank account number
• telephone number
• e-mail address

You provide us with the above personal data.

The legal basis for the processing is the data subject's, i.e. your explicit and unambiguous consent, pursuant to Article 6(a) of the GPDR. You can give your consent in writing and withdraw it at any time.

The personal data provided to us will be processed until the application is properly prepared and submitted, after which it will not be used for any further purposes, unless any of the personal data is processed for another processing purpose, and will be permanently deleted.

Transfer of data to third parties.

 

In the case of wholesale customers, we will process the contact details of the contact persons provided by our customers for contact purposes, such as:

• Name
• Phone number
• E-mail address

The above personal data is provided by our wholesale customers, and it is their responsibility to obtain the data subject's consent to the transfer.

The legal basis for the processing is the legitimate business interest of our company pursuant to Article 6(f) of the GDPR. Contact is essential to ensure proper business processes, which would not be possible without this data.

The personal data of the contact(s) will be processed as long as there is a business relationship between us.

Data transfer to third parties.

In order to be able to use the devices (e.g. solar inverter) installed by us in the correct way, we need to register them on the manufacturer's website, for which we need to provide our customers' personal data, such as:

• Name
• e-mail address
• Your e-mail address

You provide us with the above personal data.

The legal basis for the processing is the data subject's, i.e. your explicit and unambiguous consent, pursuant to Article 6(a) of the GPDR. You can give your consent in writing and withdraw it at any time.

Transfers to third parties: your personal data will be transferred to the manufacturer of the product.

We will send our customers periodic newsletters informing them of our current promotions. The purpose of data processing is to promote our services and products. To do this, we process our customer's

• Name
• e-mail address

You provide us with the above personal data when you subscribe to our newsletter. The subscription is always voluntary, freely chosen and can be canceled at any time without any consequences.

The legal basis for the processing is the data subject's, i.e. your explicit and explicit consent, pursuant to Article 6(a) of the GPDR. You can give your consent in writing and withdraw it at any time.

The personal data provided at the time of subscription will be kept and used until the request for cancellation.

Data transfer to third parties: none

Our Website uses cookies to distinguish you from other users of our Website. This helps you to browse our Site more easily and the cookies also help us to improve our Site.
A cookie is a small file consisting of letters and numbers that is sent by our server and stored in your browser or on your computer's hard drive if you consent. It is generally used to identify a user when that user accesses the Site. It records the fact of a visit to the Site and contains other information about the visit.

The following types of cookies may be used:

Essential Cookies . Strictly necessary cookies help us to make our website more usable by enabling essential features such as site navigation and access to secure areas of the website. The website cannot function properly without these cookies.

Cookies for statistical purposes. By collecting and reporting data in an anonymous form, statistical cookies help the website owner understand how visitors interact with the website.

Marketing cookies. Marketing cookies are used to track visitors to websites. The goal is to display relevant and attractive ads to individual users, and thus make them more valuable to advertisers and third-party advertisers.

You can use your browser settings to disable all or some cookies. However, if you disable all cookies in your browser (including strictly necessary cookies), you may not be able to access some or all of our Sites. For more information about cookies and how to disable them, please visit www.allaboutcookies.org

3.Who is entitled to know your personal data?

Our customer service colleagues and our data processors may have access to your personal data.

4.Is my personal data safe with Solar Kit Ltd?

As data controllers, we strive to ensure that the personal data we process complies with the applicable legal requirements and we take all reasonable measures to ensure data security. Our company has an internal data protection policy, which contains provisions and guidelines on the appropriate handling of data.

What data processors do we use?
In some cases, we may engage third parties to process your personal data on our behalf. The data processors we use:

Processor | What personal data do you access? What uses may he/she make of the personal data (what activities does he/she perform for the Data Controller)? | How long may he/she keep the data?
HubSpot | Our CRM system, this is where we store all customer data, this is where we monitor the status of our service | As long as we have a live contract with them.
Wiredsign Zártkörűen Működő Részvénytársaság 2643 Diósjenő, Dózsa György út 28/b | is the operator of www.eszerzodes.hu. Their service is used to create and validate contracts and the personal data provided in the contract is stored on their servers. | As long as we have a live contract with them,
BILLING APPLICATION? | The operator of our billing application provides the infrastructure necessary to create and store our invoices | As long as we have a live contract with them.
Google Inc.
Google Building Gordon House, Barrow St, Dublin 4, Ireland | Provider of our mail system, emails are stored on Google servers. The content of the emails is not read by the processor, it is only used for infrastructure services. | As long as we have a live contract with them.
ACCOUNTANT | Our accounting partner, who is responsible for the accounting of the invoices issued, has access to the personal data contained therein but does not use it for any other purpose than accounting | As long as we have a live contract with them.
GLS General Logistics Systems Hungary Kft.2351 Alsónémedi, GLS Európa utca 2. | As long as we have a live contract with them
  |   |   |   |   |   |  

What rights do you have in relation to data processing?
Right to information

The data subject has the right to be informed about the processing of his or her personal data, which the Data Controller will fulfil by providing this notice.

Right of access

At the request of the data subject, the Controller shall at any time inform the data subject whether or not his or her personal data are being processed and, if so, provide access to the personal data and the following information:

a) the purposes of the processing;
(b) the categories of personal data concerned;
(c) the recipients or categories of recipients with whom or with which the controller has processed the personal data
the categories of recipients or recipients to whom or which the personal data have been or will be disclosed, including in particular the categories of third country recipients

recipients or international organisations;

(d) the intended duration of the storage of the personal data or, if this is not possible, the intended duration of the storage
the criteria for determining that period;

(e) the data subject is also informed of his or her right to obtain from the controller the right to obtain from the controller the information relating to him or her
to rectify, erase or restrict the processing of personal data concerning him; and

object to the processing of such personal data;

(f) the right to lodge a complaint with a supervisory authority or to take legal proceedings
the right to lodge a complaint with a supervisory authority or to initiate legal proceedings;

(g) where the data have not been collected directly from the data subject by the controller, the right to obtain or exercise the right to obtain the personal data concerned
the source of the data;

(h) where automated decision-making is carried out, the fact of such automated decision-making, including profiling,
and, at least in those cases, the logic used, i.e. the significance of such processing and the likely consequences for the data subject

consequences for the data subject.

Right to rectification of personal data

The data subject shall have the right at any time, at his or her request and without undue delay, to obtain from the Controller.

to correct inaccurate personal data relating to him or her. Taking into account the purposes of the processing, the data subject shall also have the right to obtain the rectification of incomplete personal data, including by means of a supplementary declaration.

In the event of a request for rectification (amendment) of the data, the accuracy of the data requested to be amended shall be verified by the

the data subject is required to substantiate the truth of the information, and the data subject is also required to certify that

that the person entitled to amend the data is indeed the person requesting the amendment. Only in this way can the Data Controller assess whether the new data is accurate and, if so, whether it can amend the previous data.

The Data Controller also draws the attention of the data subject to the need to notify changes to his/her personal data as soon as possible in order to facilitate lawful processing and the exercise of his/her rights.

Right to erasure

 

At the request of the data subject, the controller shall, without undue delay, erase the data relating to the data subject.

personal data concerning the data subject where one of the following grounds applies:

(a) the Controller no longer needs the personal data for the purposes for which they were
The data subject no longer needs the personal data for the purposes for which it was collected or otherwise processed;

(b) in the case of processing based on consent, the data subject withdraws the basis for the processing
where the data subject withdraws his or her consent on the basis of which the processing is based and there is no other legal basis for the processing;

(c) the data subject objects to the processing and there are no overriding legitimate grounds for the processing
or objects to processing for direct marketing purposes;

(d) the personal data are unlawfully processed by the Controller;
(e) the personal data are unlawfully processed in breach of any legal or regulatory obligations imposed on the controller by Union or Member State law applicable to the controller
or Union law or to comply with a legal obligation to which the Data Controller is subject;

(f) the personal data are collected for the purposes of the provision of information society services
in connection with the provision of information society services.

Right to restriction of processing
The data subject shall have the right to obtain restriction of processing by the Controller at his or her request if one of the following conditions is met:

(a) contests the accuracy of the personal data; in this case, the restriction shall be limited to the period during which the data are
The period of time during which the Controller may verify the accuracy of the personal data shall be limited to the period of time necessary to allow the Controller to verify the accuracy of the personal data

the accuracy of the data controller's records;

(b) the processing is unlawful and he or she opposes the erasure of the data and requests instead that it be used for a limited period of time, in order to ensure that the data are accurate; or
restriction of the use of the data;

c) the Controller no longer needs the personal data for the purposes of the processing, but the
the data subject needs them for the establishment, exercise or defence of legal claims;

or

(d) the data subject has objected to the processing; in this case, the restriction shall be for the period
in which case it shall apply for the period until it is established that the legitimate grounds of the controller override

over the legitimate grounds of the data subject.

Right to data portability

The data subject shall have the right to obtain access to the personal data relating to him or her which he or she has made available to the controller.

personal data provided by the Controller in a structured, commonly used, machine-readable format,

and the right to have those data transmitted by the Controller to another controller if:

(a) the processing is based on the consent of the data subject or on the processing of personal data pursuant to Article 6(1)(b) of the Regulation
(6)(6) of the Data Protection Regulation; and

(b) the processing is carried out by automated means.
You have exercised your rights as set out above by sending an e-mail to our Data Protection Contact at your address, at the following address by post to the Controller's registered office or in person at the Controller's registered office. The Controller shall start the examination and execution of the data subject's request without undue delay upon receipt. The Controller shall inform the data subject of the action taken on the basis of the request within 30 days of receipt. If the Controller is unable to comply with the request, it shall inform the data subject of the reasons for the refusal and of his or her rights of appeal within 30 days.

Within five years after the death of the data subject, the rights of the deceased as set out in this information notice, which the data subject enjoyed during his or her lifetime, may be exercised by a person authorised by the data subject by means of an administrative arrangement or a declaration in a public or private document having full probative value made to the controller, or, if the data subject made several declarations to a controller, by a declaration made at a later date. Even if the data subject has not made a corresponding declaration, his or her close relative within the meaning of the Civil Code shall still be entitled to exercise the rights under Articles 16 (right of rectification) and 21 (right to object) of the Regulation and, where the processing was unlawful during the data subject's lifetime or the purpose of the processing ceased to exist upon the death of the data subject, under Article 17 (right of access) of the Regulation. (right to erasure) and 18 (right to restriction of processing) of the Regulation within five years of the death of the data subject. The right to exercise the rights of the data subject under this paragraph shall be exercised by the next of kin who first exercises that right.

Remedies

In order to enforce his or her right to a judicial remedy, the data subject may contact the Data Controller.

may take legal action against the Data Controller or a processor or joint controller acting on our behalf or at our instructions, if he or she considers that the processing of his or her personal data by the Data Controller or a processor or joint controller acting on our behalf or at our instructions is in breach of the provisions of the law or of a legally binding act of the European Union relating to the processing of personal data. The court will decide the case out of turn. The Tribunal has jurisdiction to hear the case. The lawsuit may be brought, at the option of the data subject, before the court of the place of residence or domicile of the data subject or before the court of the seat of the Data Controller (Metropolitan Court).

By filing a complaint with the National Authority for Data Protection and Freedom of Information (NAIH) at

Any person may initiate an investigation against the Data Controller by filing a complaint with the

data, or that the Data Controller is restricting the exercise of his/her rights in relation to the processing of personal data or is refusing a request to exercise those rights. The notification can be made using one of the following contact details:

National Authority for Data Protection and Freedom of Information (NAIH)

Postal address. 1363Budapest, Pf. 9.

Address. 1055 Budapest, Falk Miksa utca 9-11.

E-mail: ugyfelszolgalat@naih.hu

URL: http://naih.hu

Budapest, 1 June 2022.