TERMS & conditions
Le Troquet Wines Korlátolt Felelősségű Társaság
Address: 1034 Budapest, Tímár utca 19. F. ép. 3. em. 87.
Tax number: 27048863-2-41
Telephone: +36 70 586 8568
Company registration: Cg.01-09-346665, nyilvántartja a Fővárosi Törvényszék Cégbírósága
Terms and conditions of shopping
As of January 1st, 2020.
The aim of the current Conditions of Purchase is the unified and detailed regulation relating to the legal relationship between the company, defined in Point 11, and the customer contracting with it for the subject of purchasing the item, described in Point 2 of Conditions of Purchase, as well as informing the customer preceding the purchase about the detailed regulations of the contracts between the customer and the company as defined by the 45/2014. (II.26.) Gov. decree (hereinafter “Decree”).
As defined by the 11.§ (6) paragraph of the Decree, Conditions of Purchase constitutes part of the contract.
As applied in the Conditions of Purchase
a) consumer: a natural person acting outside their profession, occupation or business venture
b) consumer legal dispute: a disputed case relating to the quality and/or safety of the product, to the application of product liability regulations, quality of service, and to the signing and execution of the contract
c) consumer contract: the contract signed between the consumer and the enterprise
d) guarantee: the 2013.V law on the Civil Code, and the obligatory guarantee defined by the separate law relating to consumer contracts
e) contracts between absentees: such a consumer contract that the parties sign without actual physical presence. These are enacted via a remote marketing system for a product or a service as defined by the contract whereby the contracted parties solely use a device that enables communication between the distant parties
f) device enabling communication between absentees: a device that is suitable for making a contractual statement – in order to sign the contract – while the parties are absent. Such a device can represent addressed or non-addressed forms, standard letters, advertisements published in print media with order form, catalogue, telephone, fax and the device providing internet access,
g) product: movable goods defined in Point 2 of current Conditions of Purchase,
h) enterprise: legal person defined in Point 11 fulfilling the business activity
2. The product defined by the contract
The wine, and other alcoholic beverages about which the website operated by the enterprise provides key information (such as winemaker, producer, region of origin, alcohol content, etc.) for the consumer at the time of their selecting and finalising the order.
On the pages of the product list, the prices in the first column (Bottle price) are the non-discounted bottle prices, which are valid when buying less than 12 bottles of the product in our wine shops or via the internet. When buying 12 or more bottles a discounted price is valid. These also apply to the mixed cases. The amount of the discount is determined by discussion. The indicated prices include VAT (27% in the case of wines.
The prices listed do not include costs relating to shipment, which are defined in detail in Point 7.
4. Ordering steps
Select the items and put them into the basket. Select the time of delivery, the method of payment and give the delivery and billing address.
Delivery dates may vary depending on the delivery address.
By clicking on the “add” button, you reserve the product. Accordingly, the product stays in your basket until you don’t quit the session, during which time the same type of product is only available to other customers providing there is available stock. Another customer cannot add the actual product you reserved to their own baskets. Should you not purchase the given product, it is automatically taken out of your basket after 2 (two) hours and becomes available to other customers.
Throughout the duration of the purchasing process you can make modifications, correct the mistakes and misspellings (regarding the type and amount of the product, personal data, delivery address, etc.) that occur during the electronic recording of the data. Finally check the given data and click on the “Check out” button.
Our system will automatically notify you in connection with your order via the email address you provided, whereby you can check the details. Your order will be registered with the order number that you can find in the notification.
The contract between us comes into being when the notification is sent back to you.
Based on paragraph 6:7.§ (3) of the Civil Code Act V of 2013 (henceforth "Ptk") the writing of a contract to be sealed constitutes a contract. The language of the contract is Hungarian.
The contract will be stored in the online system of the Company, which will be available afterwards. Furthermore, the contract will also be sent to the email address provided.
5. Method and terms of cancellation
You can change your order at any time. If you wish to do so, please call the 06 70 586 8568 mobile number or write to firstname.lastname@example.org. As a reference, please provide us with the order number you received in the notification email.
6. Restrictions regarding the use of the products and/or services
We can only deliver orders of products containing alcohol to people over 18.
a. Express delivery within Budapest
Should you select this method of delivery, and place your order on weekdays between 10am and 4pm, and providing our colleague is able to reach you on the phone in order to confirm the order, we can deliver your order within four hours. Fee: 2350 Ft. You can check delivery times under the Home Delivery menu point.
b. Delivery related fees in the whole country (prices include VAT)
Delivery is free of charge in case of purchases of above 3 (three) cartons, while it otherwise costs 1450 Ft below that. For delivery dates, please check the Delivery menu.
c. New home delivery time
In case the home delivery should fail, upon receiving the notification of our delivery person, our colleague will attempt to find a new home delivery time that is convenient for you. We will attempt to make the delivery again at the new delivery time chosen by you. In case we cannot get in touch with you, or you do not choose a new time of delivery, our contract will terminate. If you have already paid the purchase price, we will transfer it back to the bank account, the details of which have been provided by you. If the delivery is unsuccessful three times at the place and time given by you, your order will be nullified.
8. Complaints, rescission in connection with ordering and delivery
We take full responsibility for your order until the handing over of the product. Faulty or damaged goods will be changed within five working days or replaced at our own expense. If you rescind from your order because of faulty delivery or damage that occurs during the delivery, we will pay you back the already paid cost of the product.
Following the receipt of the product, we cannot accept complaints regarding the delivery.
You can email your complaints, comments regarding order and delivery to the following email address: , which we will respond to within a maximum of 30 days. You can also call the 06 70 586 8568 mobile number.
Supervisory body: Budapest, XIII. kerület, Önkormányzata Jegyzője
The procurer can rescind from the shopping within 14 working days following the receipt of the ordered product without any explanation, with the exception that the nature of the ordered and delivered product does not permit its return, or in case the product is perishable. In this case, our company is obliged to return the value of the undamaged, complete, unopened good(s) within a maximum of thirty days of them being returned. The costs incurred in returning the product due to carrying out the right of rescission should be borne by the procurer.
You are entitled to turn to a conciliatory board in order to settle any legal consumer dispute outside of court. Especially in cases of attempted agreement and failed attempts to reach a decision, consumers’ rights provide simple, quick, efficient and cost-effective ways.
To proceed with the case you should turn to the conciliatory board that is privy to act according to your place of residence, or in the case of a lack of one, the address of the company affected by the legal dispute or the body entitled to represent it.
For the proceedings – based on your request and with regards to it – instead of the assigned bodies, the conciliatory body is privy to the fact that you made the request.
The name and postal address of the conciliatory body assigned based on the headquarters of the company:
• Le Troquet Wines Kft, 1034 Budapest, Tímár utca 19. F. ép. 3. em. 87.
• BUDAPEST FŐVÁROS XIII. KERÜLETI ÖNKORMÁNYZAT ,1139 Budapest, Béke tér 1.
Posta cím: 1555 Budapest Pf. 10.
We inform you that the companies appearing in Point 11 do not have the behavioural codex as formulated in the law banning unfair trading practice against consumers.
8. Withdrawal right of consumers
a. The deadline and method of practicing the right of withdrawal
You are entitled to cancel the current contract without reason within 14 days.
The cancellation deadline runs out on the 14th day from the day you or any person appointed by you, a third party differing from the carrier, receives the product. In the case of the service of several products, it is the 14th day from the date you or a person appointed by you, a third party differing from the carrier, receives the last product.
If you wish to exercise your withdrawal right, you are obliged to send (whether by post, fax or electronic mail) your univocal statement containing your intention to cancel to the following address:
Le Troquet Wines Korlátolt Felelősségű Társaság, 1034 Budapest, Tímár utca 19. F. ép. 3. em. 87.
phone number: +36 70 586 8568, e-mail:
For this purpose, you may also use the cancellation statement sample provided in Appendix 2 of the Decree. In case you intend to cancel the contract, fill out this form and send it back to one of the addresses below:
Addressee: (it’s necessary to give the name, postal address and – if possible – phone number, fax number, email address of the company)
Undersigned, I/we declare that I/we practice my/our cancellation right regarding the contract of the following purchase of product(s): (It is necessary to name the products that are subject to the contract)
Date of receipt:
Name of consumer(s):
Address of consumer(s):
Signatures of consumers: (Only in the case of a statement made on paper)
You carry out your cancellation right when you send your statement of cancellation before the expiration of the deadline given above.
We inform you that you can practice your cancellation right during the time span between signing the contract and receiving the product.
b. Legal effects of cancellation
If you cancel the existing contract, we will return all the charges you previously incurred, including the delivery fee (except for those additional expenses that might arise from you having chosen another option than our usual shipment method), without delay or the latest within 14 days upon receiving your cancellation statement.
During the refunding process, we use the identical payment method to the one used during the original payment method, except when you provide your explicit endorsement to use another payment method for which you will not be charged any extra cost.
We are entitled to withhold refunding until we receive the returned product, or you verify that you have sent it back: out of the two, the earliest date will be considered.
You are liable to send or hand over the product to us or …. [insert the name and postal address of the person entitled to receive the product if there is such] without unreasonable delay or in any case, not later than 14 days after disclosing your cancellation statement. The deadline is complied with providing you send the product back before the expiry of the 14-day deadline.
The direct cost of sending back the product is borne by you.
c. Exclusion of withdrawal right
You cannot exercise your right of withdrawal from the contract in the case that the product cannot be sent back after having been opened following receipt due to health, safety and hygienic reasons.
9. Information about implied warranty, product warranty, and guarantee
a. Implied Warranty
In what cases can someone exercise the right of implied warranty?
In accordance with the regulations of the Hungarian Civil Code, you can claim for liability of defects against the faults made by the company defined in Point 11..
What rights do you have based on the right of implied warranty?
Based on your decision, you can choose from the following liability claims:
You can request repair or replacement, except in the case where the fulfilment of the claim you select is impossible or if it would entail disproportional additional costs for the company compared to the fulfilment of any other claims. In the case you did not, or could not, request repair or replacement then you can require the proportional decrease of the consideration, or you can fix or get the fault fixed at the expense of the company, or – as a last resort – withdraw from the contract.
You can also change from one implied warranty to another, yet the fee of transfer is charged to you, except if it was reasonable or if the company gave a reason for it.
Within what timeframe can someone claim for implied warranty?
You are obliged to report the fault promptly upon discovering it, but by all means not later than two months after discovering the fault. At the same time, we call your attention to the fact that two years past the forfeiture deadline following the fulfilment of the contract, you cannot exercise your right for liability for defects.
Against who can you exercise your claim for implied warranty?
You can exercise your claim of implied warranty against the company.
What other conditions are there to exercise one’s right of implied warranty?
Exercising your right of implied warranty has no other condition within six months of fulfilment but the stating of the fault if you prove that the product was provided by the company defined in Point 11. However, after the six months of fulfilment you are obliged to prove that the fault you discovered occurred at the time of fulfilment.
b. Product Warranty
In what case can you exercise the right of product warranty?
In the case of the fault of movables (product), based on your choice you can exercise your right as defined in Point 1 or claim product warranty.
What right do you have based on your claim for product warranty?
In the claim of product warranty you can ask for the repair or replacement of the faulty product.
In what cases does a product qualify as faulty?
A product qualifies as faulty if it does not meet the quality requirements at the time of being sold or if it does not have the qualities appearing in the description given by the producer.
Within what deadline can I claim for product warranty?
You can claim for product warranty within two years of the product being launched by the producer. You lose your right to claim for it once the deadline has passed.
Against who and under what other circumstances can I claim for product warranty?
You can exercise your claim for product warranty against the producer of the product or its seller. In the case of claiming product warranty, you should be able to prove the fault of the product.
In what cases does the producer (seller) get out of their obligation of product warranty?
The producer (seller) only gets out of their obligation of product warranty, if it can prove that:
• the product was not produced, or marketed, within its business activity, or
• the fault was not recognisable at the time of sale due to the scientific or technological knowledge available at the time, or
• the fault of the product occurred due to an application of a law or mandatory regulation of an authority
For the acquaintance of the producer (seller) it is enough to prove one reason.
We call your attention to the fact that for the same fault you cannot claim implied warranty and product warranty parallel to one another. However, following the successful claim for product warranty you can exercise your right for implied warranty towards the producer for the replaced product or the repaired part.
Regarding the nature of the product we take no guarantee for it.
10. Conditions of payment
The method of payment can be selected at the time of the order. You can pay for your order COD (by cash on delivery) by bank transfer, and by secure online connection – via CHECKOUT PORTAL – using the cards accepted by the bank:
a. We accept the following bank cards:
• MasterCard (embossed)
• Visa (embossed)
• American Express (embossed)
• Electron (unembossed)
In the case of these cards, the issuing bank of the card declares whether it authorizes them for use on the internet. In cases where the bank that issued your Electron card authorizes the card to be used on the internet, you can pay by your card for products from our webshop. For information, please turn to the bank that issued your card. Naturally, cards issued by K&H are accepted.
On the online payment channel of CHECKOUT PORTAL, Maestro cards issued by any bank are accepted with the condition that the issuing bank supports e-commerce transactions via Maestro cards. Please consult your bank.
In order to ensure that the credit card information you provide for carrying out the transaction is handled securely, Le Troquet Wines Kft. does not keep the given credit card number – neither before, during or after carrying out the transaction, nor on its computers or anywhere else.
The process of shopping and the bank card payment transaction happens in two completely separated systems, that is: while you complete the registration, select the products and complete the order on the website, the bank card transaction takes place on a secure website operated by CHECKOUT PORTAL. Under no circumstances will Le Troquet Wines Kft. learn about your credit card information, nor will K&H or CHECKOUT PORTAL receive the personal details (name, address, phone number, e-mail, etc.) you provided upon order with Le Troquet Wines Kft.
b. Further information about bank card payment
For our webshop, CHECKOUT PORTAL provides the possibility to accept cards via its secure card accepting system, which uses SSL protocol. When paying by card on our webshop, you are directed to CHECKOUT PORTAL’s payment site, thus payment occurs on the site operated in accordance with the regulations and security specifications of international card companies and not on the page of the webshop. The webshop in no way has the opportunity to acquire the data of your card or the account behind it, including its number and expiration date.
We would like to call your attention to the fact that in the case of choosing COD (Cash on delivery) payment, you can only pay by cash.
c. What you should pay attention to at the time of purchase?
- Read the information of our Webshop, the terms and conditions of purchase, delivery and payment.
- Learn about the security conditions of our Webshop, this way you guarantee the safety of your data.
- Keep track of your data relating to your purchase.
- Keep track of the transaction details in connection with payment. (transaction ID, permit number)
- Make sure that no unauthorized persons can get hold of your card data at any time.
- Use a browser that supports the option necessary for SSL security.
d. About security
In order to further enhance the security of online card use, CHECKOUT PORTAL and K&H has introduced its Verified by Visa/MasterCard Secure Code (VbV/MSC) service. This entails the issuing bank providing the cardholder with an additional means of identification that gets verified during the transaction, thus accurately confirming the identity of the card’s user.
If your issuing bank does not offer any VbV/MSC services, or you have not requested it, the payment process will remain unchanged. Our store will redirect you to CHECKOUT PORTAL’s site, where you will need to enter your card details (card number, expiration date, verification code), after which payment for the purchased items/services takes place.
If VbV/MSC services are available at your issuing bank, and you have opted in, the payment process will be different. You will still need to enter your card details (card number, expiration date, verification code) via the CHECKOUT PORTAL payment site. After this step, however, you will be automatically redirected by the Bank to the appropriate site of your issuing bank, where you will need to have your identity confirmed. Once your identity has been successfully confirmed, the payment transaction will resume, and you will receive a notification after it has completed. As it’s the last step, you will be redirected to our online store. If you are unable to have your identity confirmed, the transaction will be cancelled.
e. Steps of payment
1. You select the product on the page of the Web shop, the amount of which you wish to pay for by card.
2. After this, you are transferred to the page of CHECKOUT PORTAL that guarantees secure payment. Here you should provide your card data in order to initiate payment.
3. After providing card data, you can initiate the transaction by clicking on the Fizetés / Check out button.
4. Following the payment, you return to the page of the webshop, where you receive confirmation about the result of the transaction. In case of paying by bank card, following a successful transaction – which means the acceptance following the checking of the validity of the card – CHECKOUT PORTAL and + K&H starts to debit the account of the card holder with the consideration of the product or service.
In case you are not transferred back to the payment page of the webshop, then the transaction was unsuccessful. In case you click on the button "Vissza/Back" or "Frissítés/Refresh" on the payment page of the bank, or if you close the browser before being transferred back to the Webshop, your payment was unsuccessful. In case you wish to learn more about the result of the transaction, or in the case of a failure to execute it, the reasons and details for it, please contact your bank.
f) Further information: Bank Transfer
Please transfer the payable sum to our company’s bank account. The bank account number will be sent with your order confirmation via email. We regard the sum paid if the amount payable arrives in our bank account one workday preceding the receipt of the product. Otherwise we are unable to deliver / hand over the ordered product. After ordering the selected product, we will inform you by email about the necessary steps for a successful transfer. We will also inform you about the receipt of the sum by email.
Based on the paragraph of the Hungarian civil code: Ptk. 6:216.§ (1), we maintain the right of ownership of the product being sold until the full payment of the whole purchase price has been completed.
11. Duration of the contract, person of the company
In accordance with the Civil Code 6:3.§ a) point, with the mutual fulfilment of services, the contract expires.
The representative of the company regardless on the delivery address provided by you is going to be Le Troquet Wines Kft. At the end of the ordering process our system will automatically inform you that based on your address which of the above companies is going to be your service providing company.
12. Person authorized & Alcohol
The products sold are subject to the legislation refers to selling activity and that relating to alcoholic beverages agree within the public health rules.
Drink alcohol responsibly and consume with moderation. Only a person authorized by law to consume alcohol can contract with the seller. According to the public health rules, the sale of alcohol is in particular prohibited for minors. The seller can in no way be held responsible for the use which will be made of it by the buyer, who remains fully and solely responsible for its use. The age of majority will be checked upon delivery.
Le Troquet Wines Korlátolt Felelősségű Társaság
Address: 1034 Budapest, Tímár utca 19. F. ép. 3. em. 87.
Tax number: 27048863-2-41
Telephone: +36 70 586 8568
Company registration: Cg.01-09-346665, nyilvántartja a Fővárosi Törvényszék Cégbírósága
DATA MANAGEMENT NOTIFICATION
(hereinafter referred to as “Notification” or “Data Protection Notification”)
• 1. Fundamental Provisions
The new data protection regulation No. 2016/679 of the European Union (General Data Protection Regulation, GDPR, hereinafter referred to as “Regulation” or “GDPR”) will become/became directly applicable in Hungary as well. According to the Regulation, the Company is considered as data controller, i.e. the Regulation is applicable in respect of the personal data managed by the Company as well.
1.2 The purpose of the Notification
The purpose of the Notification is to establish the data protection and data management provisions and principles followed and applied by, and applicable to Le Troquet Wines Kft. (hereinafter referred to as “Data Controller” or “Company”), as well as the data protection and data management policy of the company.
In course of determining the content of the Notification, in addition to in particular the Regulation, the Company took into consideration the provisions of Act CXII of 2011 on the Right to Informational Self-determination and the Freedom of Information (“Privacy Act”), Act V of 2013 on the Civil Code (Civil Code), and Act XLVIII of 2008 on the Essential Conditions of and Certain Limitations to Business Advertising Activity (Business Advertising Act) as well.
The scope of the present Data Management Notification covers the data managements related to the website available at (hereinafter referred to as
“Website”) and data managements related to the commercial activity of the Company.
Unless there is notification to the contrary, the scope of the Notification shall not extend to those services and data managements which are related to the promotions, prize games, services and other campaigns of or to the content published by those third parties who advertise on the Website or appear on it any other manner. Unless there is notification to the contrary, the scope of the Notification shall not extend to the services and data managements of those websites or service providers to which any reference to be found on the Websites leads. The scope of the Notification shall not extend to the data managements of those persons (organizations, companies) from the notification, newsletter or advertisement letter the Data Subject had become aware of the Website.
1.5. The amendment of the Notification
1.5.1. The Company reserves the right to amend the Notification through its unilateral consent.
1.5.2. By entering the Website the Data Subject accepts the prevailing effective provisions of the Notification, and unless otherwise provided by the Notification, further consent of the Data Subject is not required.
The concepts used in the Data Management Notification shall have the following meaning:
2.1. Data Management: Means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
2.2.Data Controller: Any natural or legal person, public authority, service or other entity that determines the purposes and means of the management of personal data individually or jointly with other parties.
2.3.Personal Data or data: means any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular
by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
2.4.Data Processor: means a natural or legal person, public authority, agency or service provider which manages personal data on behalf of the Data Controller.
2.5.Data subject: means a natural person who provides his/her personal data or whose personal data are provided to the Company..
2.6. External service provider: means those third-party service provider partners employed - either directly or indirectly - by the Data Controller or the operator of the Website related to the provisions of the certain services, to which Personal Data are or may be transmitted in order to provide their services or which transmit Personal Data to the Company. In addition, external service providers shall include those service providers as well which are cooperating neither with the Company, nor the operators of the services, however, since they have access to the Website, they collect data from the Data Subjects, which either individually or linked with other data may be suitable for identifying the Data Subject. In course of the provision of hosting services, the Company considers the Data Subject as External service provider as well, in respect of the data management activity pursued on the hosting service used by the Data Subject.
2.7.Notification: the present data management notification of the Company.
3. The Data Controller and its activity
Name: Le Troquet Wines Korlátolt Felelősségű Társaság
Registered seat: 1034 Budapest, Tímár utca 19. F. ép. 3. em. 87
Company registration number: Cg. 01-09-346665, registered by the Company Registry Court of the Budapest-Capital Regional Court.
Phone number: +36 70 586 8568
Data protection officer: Pursuant to the Regulation, the Company is not obliged to appoint a data protection officer Position of the data protection officer: -
The Data Controller is a business association registered in Hungary.
Data Controller operates the Website which had been created for the purpose of purchasing the products of Le Troquet Wines Kft. through the internet, and which is in commercial contact with the suppliers and the buyers, as well as it may operate commercial units.
4.The fundamental principles of data management
The data shall be processed lawfully, fairly and in a transparent manner in relation to the data subject. The Company manages only those data specified by law or provided by the Data Subject or the employers/principals/clients thereof, for the following purposes. The scope of the Personal Data managed is proportional to the purpose of the data management and shall not reach beyond it.
The data shall be necessary and relevant in respect of the purpose of the data management, as well as shall be accurate and up-to-date, if necessary.
In any case where the Company intends to use the Personal Data for any purpose other than that of the original data collection, then the Company shall notify the Data Subject thereof and shall obtain the prior express consent of Data Subject for such purpose and shall provide opportunity to the Data Subject to prohibit the use.
The Company does not verify the Personal Data provided to it. Only the person providing the Personal Data shall be responsible for the compliance of the Personal Data.
4.5 Storage limitation
Personal data shall be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are managed.
4.6.Protection of the data of persons below the age of 16
The Personal Data of persons below the age of 16 may be managed only subject to the consent of the person of age who exercises parental control of such person. The Company cannot verify the right of the person giving consent or the content of the statement of such person, therefore the Data Subject or the person exercising parental control over the Data Subject shall warrant that the consent is compliant with the laws. In the absence of statement of consent, the Company does not collect Personal Data related to data subjects below the age of 16.
4.7.Save for the Data Processors and External service providers specified in the Notification, the Company does not provide the Personal Data to any third party. Data shall be processed in a manner that ensures their appropriate security through taking the appropriate technical and/or organizational measures.
Exception to the provision of the present section is the use of the data in statistically summarized form, which shall not include any other data suitable for identifying the Data Subject in any form.
In certain cases - official judicial, police request, legal procedure due to infringement of copyright, financial right or any other right, or due to the reasonable suspicion of the above, the infringement of the interests of the Company, jeopardizing the provision of the service, etc. - the Company may disclose the available Personal Data of the Data Subject to third parties.
4.8.The Data Subject, as well as all those parties to whom the Company had transmitted the Personal Data for the purpose of Data Management shall be notified by the Company of the correction, restriction and deletion of the Personal Data. The notification may be omitted if considering the purpose of the Data Management, such omission does not damage the legitimate interest of the Data Subject.
4.9.Pursuant to the Regulation, the Company is not obliged to appoint a data protection officer, since the Company is not considered as public authority or public service provider, and the activities of the Company do not involve any operation which requires the regular and systematic monitoring of Data Subjects on a large scale, as well as the Company does not manage sensitive data, or personal data related to relating to decisions regarding criminal convictions and offences.
5.The legal basis of the data management
5.1 Article 6 of the GDPR established the cases in which the personal data of the Data Subjects may be managed:
“a) the data subject has given consent to processing of his or her personal data for one or more specific purposes;
b) the data management is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into such contract;
c) the data management is necessary for compliance with a legal obligation to which the Data Controller is subject;
d) the data management is necessary in order to protect the vital interests of the data subject or of another natural person;
e) the data management is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller;
f) the data management is necessary for the purposes of the legitimate interests pursued by the data controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.”
5.2. Considering the nature of the activity of the Company, the legal basis of the data management is primarily the freely given, express, informed consent of the Data Subject (Point a) Subsection (1) Section 5 of the Privacy Act), the above Article 5.1 (b) and Article 5.1 (c) of the Regulation in course of the preparation of any contractual obligation between the Company and the Data Subject or the employee/principal/client thereof, or after the conclusion of such obligation.. In respect of the areas subject to video surveillance, the above Article 5.1 (d) of the Regulation. The Data Subject establishes contact with the Company in course of completing any task for his/her employer/principal/client voluntarily, or Data Subject registers voluntarily, or uses the service of the Company voluntarily. In the absence of the consent of the Data Subjects, the Company shall manage data only if unambiguously authorized by law.
5.3 If the data management is based on consent, then the data controller shall at all times be able to verify that the data subject had granted his/her consent to the management of his/her personal data.
5.4.The data subject shall have the right to withdraw his or her consent at any time in respect of all data management the legal basis of which is the above Article 5.1 (a) of the Regulation. The withdrawal of the consent does not prejudice the lawfulness of the data management based on consent and the data management according to the above Article 5.1 (b) and/or (c) and/or Article 5.1 (d) of the Regulation before the withdrawal.
5.5.Data Transfer to the Data Processors specified in the Notification may be carried out without the separate consent of the Data Subject. Unless otherwise provided by law
, the personal data may be provided to third parties or authorities exclusively based on final and enforceable administrative decision or based on the prior express consent of the Data Subject.
5.6. For the purpose of asset security, surveillance cameras are operated in the rooms open clients operated by the Company, as well as in the storage facilities. The legal basis of this is Article 6
(1) (d) of the Regulation.
5.7. Upon entry to certain websites, the IP address of the User is recorded by the Data Controller without the separate consent of the User, related to the provision of the service, considering the legitimate interest of the Data Controller and due to the lawful provision of the service (e.g. in order to filter unauthorized use or unlawful contents).
6. Purposes of data management
The data shall be managed lawfully, fairly and in a transparent manner in relation to the Data Subject. The Company aims at managing only those personal data which are essential to realize the purpose of the data management and which are suitable for achieving the purpose. Personal Data shall be managed to the extent and for the duration necessary for the realization of the purpose.
The primary purpose of the data management is the operation of the Website, provision of the services of Data Controller, the establishment and performance of its commercial and contractual relations.
In accordance with the above, the purposes of the data management are the following:
• identification of the Data Subject, maintaining contact with Data Subject
• Preparation of the contract concluded in course of the purchase made on the Website, the fulfilment of the contractual obligations by Data Controller, the enforcement of the rights of the Data Controller;
• the provisions of brief, transparent, comprehensible and easily accessible information to Data Subject;
• the conclusion and fulfilment of the legal transactions within the scope of activity of the Company, between the Company and the Data Subject;
• in case of use of services subject to payment of fees, the collection of the fees, invoicing
• fulfilment of the obligations to be fulfilled by Data Controller, exercising the rights to which Data Controllers is entitled to;
o preparation of analyses, statistics, the development of the services - for this purpose, the Data Controller uses only anonymized data and summaries unsuitable for personal identification
o Subject to the specific consent of the Data Subject, advertising, research
o protection of the interests of the Data Subject.
7. The source of the data
The Company manages exclusively those Personal Data which had been provided by the Data Subjects or the legal entities using the service (work) of the Data Subjects in order to prepare/fulfil the transaction; the Company does not collect data from any other source.
If the Data Subject registers to any promotion organized by the Data Controller, and the Data Subject provides his/her data, then the Data Subject grants his/her consent to the management of his/her personal data in accordance with notification of the promotion concerned. In this case, the Data Controller managed only those data which had been provided in course of the promotion.
8. The scope of the data managed
The Company manages the personal data provided in accordance with Section 8 exclusively. The data managed are the following: The data managed by the Company may be classified into the following groups based on the purpose of the data management:
• Data necessary for the registration: In the framework of the registration necessary for the purchase on the Website, the Data Subject allows purchases from the webshop by providing his/her family name, first name, e-mail address, telephone number.
• Data provided in course of communications of marketing purpose: In courser of the communications of marketing purpose carried out by the Company, the Data Subject provides his/her name, e-mail address, telephone number and address. The legal basis of the data management is the consent of the Data Subject, the primary purpose of the data management is maintaining contact for marketing purposes, and sending information, newsletter or direct marketing under Subsection (1) Section 6 of Act XLVIII of 2008.
o Data of suppliers: In course of the business cooperation with its suppliers of the Company, in case of data management, the Data Subject or the employer/principal/client of the Data Subject provides the name, e-mail address and telephone number of the Data Subject. The legal basis of the data management is performance of contract and the fulfilment of legal obligations.
o Data provided in course of public opinion surveys: In course of the public opinion surveys carried out by the Company, the data provided by the Data Subject will be managed, recorded and used later. The Company is entitled to manage such data under Point e) Section 9(2) of the GDPR
o Documents uploaded. The Data Subject may or in certain cases is obliged to upload pictures of certain personal documents. The Company recommends that the personal data not necessary for the above legal transaction of the parties and not requested by the Company shall be deleted from such documents (in accordance with Section 10 below). If the Data Subject publishes any picture of a document containing personal data as well, then the legal basis of the data management is the consent of the Data Subject. In respect of photographs, the purpose of the data management is the provision of the services of the Website.
o Invoicing data.If the Data Subject performs consideration to the Company, then the Company manages the data related to the payment and the invoicing (payment method, the data of the means of payment, the name, address and tax number of the buyer in case of invoicing). The legal basis of the data management is partly the consent of the Data Subject, and partly the laws relevant to taxation and accounting. The purpose of the data management is invoicing and the collection of the fees.
o The data, documents provided in course of authentication. The Data Subjects may, or in the cases specified by the Company are obliged to authenticate themselves, as specified in Section 11 below. The documents are managed in accordance with Section 11 below. The purpose of the data management is verifying the personal identity of the Data Subject.
In addition to the above, the Company manages the technical data - including the IP address – in accordance with the provisions of Section 13.
9. The description of the data management process
The source of the data is the Data Subject or any legal entity in employment/agency/works legal relationship with the Data Subject, who provides the data (1) in course of a possible registration and/or (ii) in course of the preparation or conclusion of the legal transaction and/or (iii) in course of making the statement related to the newsletter or the direct marketing under Subsection (1) Section 6 of Act XLVIII of 2008.
It is mandatory to provide the data indicated in the registration form, except if the contrary thereof is expressly indicated therein.
The Data Subject provides the data individually, the Company does not provide any mandatory guideline in this regard and specifies no content requirements. The Data Subject grants his/her express consent to the management of the data provided. The Data Subject may provide further data in his/her profile in addition to the data required by the Company, and the legal basis of managing the data shall be the voluntary consent of the Data Subject in this case as well.
If the Data Subject registers to any promotion organized by the Company (e.g. on facebook), and if the Data Subject provides his/her data requested there, then the Data Subject accepts the data management notification related to the promotion concerned. In this case, the Data Subject does not register on the Website by providing the data, however, the Data Subject gives his/her consent to his/her data being managed in accordance with the provisions of the notification of the promotion.
10. Data management related to documents
It is an option on the Website, that in case of mandatory notification on the Website, the Data Subject is obliged to provide his/her personal documents to the Company in the interest of facilitating the conclusion of the legal transaction between the parties.
The Data Subject – unless it is stipulated as mandatory by the Company – has the opportunity to publish the documents with the deletion of the personal data. If the Data Subject does not delete the data, then the Data Subject gives his/her consent to the publication of the data in case of disclosure.
If the Company does not require the disclosure of the documents with personal data, and it provides opportunity to delete the data, then the Company shall not be liable for any possible disclosure.
The purpose of the authentication process is to allow the Company to affirm the authenticity of the person of the Data Subject. The Company verifies whether the Data Subject indicating intention to conclude a contract is actually a natural person. After the verification, the Company deletes the photos and data from the Website, however, the Company stores those in another place of storage until the cease of the legal basis of the data management. The purpose of the data management is the authentication of the Data Subjects, as well as the conclusion of the legal transaction, and after the conclusion thereof, facilitating the lawful fulfilment thereof.
12. Data management for advertisement purposes, sending newsletters
If the Data Subject grants his/her consent, then the Company may maintain contact with the Data Subject through the contact information provided, and may send advertisements to Data Subject with the method of direct marketing. The advertisements may be sent via mail, telephone (including SMS) or e-mail (including Messenger as well); the condition of this in all cases is the consent of the Data Subject. The Data Subject may withdraw his/her consent any time, without justification.
The cookies allow the Website to recognize, identify and record the previous visitors. The cookies help both the Company and the operator of the Website in optimizing the Website, and in developing the services of the Website in accordance with the customs of the Data Subjects. In addition, cookies are suitable for
• memorizing the settings, therefore the Data Subject does not have to set those again when he/she enters a new site,
• remembering the data previously entered, therefore those do not have to be typed again,
• analyzing the use of the website, so that as a result of the developments carried out with the use of the information so gained, the website operates as much as possible according to the expectations of the Data Subject and the Data Subject can find the information wanted easily, and monitoring the efficiency of our advertisements.
If the Company displays different contents on the Website with the help of external web-based services, then that may result in the storage of several cookies which are not supervised by the Company, therefore the Company has no influence on the kind of data these websites or external domains collect. Information on these cookies is provide in the policies applicable to the service concerned.
The Company uses the cookies to display advertisements to the Data Subjects through Google and Facebook.
The Data Subjects have the opportunity to delete the cookies in their browser (usually in the data protection section of the settings). By prohibiting the use of the cookies, the Data Subject acknowledges that without cookies, the operation of the Website is not complete.
14. Data transmission
The Company shall transmit personal data to any third party only if the Data Subject – being aware of the scope of data transmitted and the recipient of the data transmission – had given his/her unambiguous consent to the transmission, or if authorization to the data transmission is given by law.
The Company is entitled and obliged to transmit all those Personal Data available to the Company and stored properly to the competent authorities, which Personal Data the Company is obliged to transmit based on law of final and enforceable administrative order. The Company shall not be made liable for such Data Transmission and the consequences resulting from it.
The Company shall document the data transmissions in all cases and shall keep records of the data transmissions.
15. Data processing
The Company may use data processors to pursue its activity. The data processors make no individual decisions, they are entitled to act only in accordance with the contract concluded with the Company and the instructions received. The Company controls the work of the data processors. The data processors may employ further data processor only upon the consent of the Company. The Company may use only those data processors who or which provide appropriate guarantees for the execution of the appropriate technical and organizational measures which ensure the protection of the rights of the data subjects.
The data processors may not employ further data processor without specific or general authorization given in advance in writing by the Company. In case of general written authorization, the data processor shall notify the Company of any and all planned changes which affect the use or replacement of additional data processors, thereby providing opportunity to the Company to make objections against such changes.
Data subject acknowledges the user id stored in the user account of Company
in the user database of Website will be handed over to KERESKEDELMI ÉS HITELBANK ZÁRTKÖRŰEN MŰKÖDŐ RÉSZVÉNYTÁRSASÁG (1095 Budapest, Lechner Ödön fasor 9.) and is trusted as data processor. The nature and purpose of the data processing activity performed by the data processor in the PORTAIL DE PAIEMENT can be found at the following link:
LIEN PORTAIL PAIEMENT
16. External service providers:
The Company uses External service providers, with which External service providers the Company cooperates.
In respect of the Personal data managed in the systems of the External service providers, the provisions of the data protection policies of the External service providers shall prevail. The Company uses its best efforts to ensure that the External service provider manages the Personal data transmitted to it in compliance with the law, and to ensure that such Personal Data are used by the External service provider exclusively for the purpose determined by the Data Subject or specified below in the Notification.
The Company informs the Data Subjects about the data transmission carried out for the External service providers in the framework of the Notification.
External service providers:
• Le Troquet Wines Kft, 1034 Budapest, Tímár utca 19. F. ép. 3. em. 87.
• KERESKEDELMI ÉS HITELBANK ZÁRTKÖRŰEN MŰKÖDŐ RÉSZVÉNYTÁRSASÁG (1095 Budapest, Lechner Ödön fasor 9.)
• Mastercard Europe SA Magyarországi Kereskedelmi Képviselete (1052 Budapest, Deák Ferenc utca 5.)
• Dr. Schmidt Richárd Ügyvédi Iroda 1027 Budapest, Margit körút 56. 4. em. 4.
• ECO PARTNER Könyvvizsgáló és Pénzügyi Tanácsadó Kft, 1112 Budapest, Nagyida u. 9.
• BOVA Consulting Kft., 3300 Eger, Garai János u. 35.
• PORTAIL DE PAIEMENT EX:
• Le Troquet Wines Kft. Managment Team
17. Tasks related to data security
The Company shall ensure the security of the data, and shall take those technical and organizational measures, and shall develop those procedural rules which are required for the enforcement of the prevailing laws, and data and secret protection rules. Through the appropriate measures, the Company shall protect the data from unlawful access, alteration, transmission, disclosure, erasure or destruction, as well as accidental destruction and damage, as well as from becoming inaccessible due to the change in technology.
Considering the state of science and technology and the costs of implementation, as well as the nature, scope, circumstances and purposes of the data management, and the risk of varying probability and gravity caused to the rights and freedoms of natural persons, the Company and the data processor shall take appropriate technical and organizational measures in order to ensure the level of data security corresponding to the rate of the risk.
In the framework of the above:
• shall ensure the measures ensuring protection against unlawful access, including the protection of software and hardware devices, as well as physical protection (access protection, network protection);
o shall take the measures providing opportunity to restore files, as well as regular backup saves;
o shall ensure anti-virus protection.
18. Duration of data management
The Company erases the Personal Data
a) If it is revealed that the data are managed unlawfully; the Company shall execute the deletion immediately.
b) If requested by the Data Subject (except for the data managements based on law).
The Data Subject may request that the data managed on the basis of the voluntary consent of Data Subject be erased. In such case, the Company erases the data. The erasure may be denied only if any law authorizes the management of the data. The Company shall in all cases provide information on the rejection of the request for erasure and the laws allowing the data management.
c) If it becomes known that the data are incomplete or incorrect – and this situation cannot be rectified lawfully – provide that the erasure is not excluded by law.
d) If the purpose of the data management had ceased, or if the period specified by law for storing the data had expired;
The erasure may be denied (i) if the management of the Personal data is authorized by law; and (ii) it is necessary for protection or rights, enforcement of rights.
e) It is ordered by the court or the Hungarian National Authority for Data Protection and Freedom of Information.
If the erasure of the data is ordered definitively by the court or the Hungarian National Authority for Data Protection and Freedom of Information, then the Data Processor shall execute the erasure.
Instead of erasure, the Company – along with notifying the Data Subject – blocks the personal data if the Data Subject so requests, or if based on the information available it may be presumed that the erasure would prejudice the legitimate interests of the Data Subject. The personal data so blocked may be managed exclusively until the data management purpose that excluded the erasure of the personal data exists. The Company shall mark the personal data managed by the Company if the Data Subject contests the correctness or the accuracy thereof, but the incorrectness or inaccuracy of the personal data cannot be established unambiguously.
In respect of the data managements stipulated by law, the provisions of the law shall prevail concerning the erasure of the data.
In case of erasure, the Company shall make the data unsuitable for personal identification. If stipulated by law, the Company shall destroy the data carrier containing the personal data.
The Company shall in all cases notify the Data Subject of the rejection of the request for erasure, including the reason for denying the erasure. After the fulfilment of the request for erasure of personal data, the previous (erased) data can no longer be restored.
The newsletters sent by the Company may be discontinued through the unsubscribing link to be found therein. In case of unsubscribing, the Company erases the Personal Data of the Data Subject in its newsletter database.
19. The rights of the Data Subjects related to data management
19.1. Simultaneously with contacting the Data Subject, the Company informs the Data Subject about the management of the data. In addition, the Data Subject may request information about the data management at any time.
The data subject shall have the right to obtain from the Company confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data, and to receive information on the purpose of the data management, the categories of the personal data affected, those recipients or categories of recipients to whom the personal data had been or will be disclosed, the planned duration of storage of the personal data, or if it is not possible, then the aspects of determining such duration. The Data Subject has the right to request from the Data Controller the rectification or erasure of personal data or restriction of processing of the personal data related to the Data Subject, or to object to management of such personal data. In addition, the Data Subject may submit complaints addressed to the supervisory authority, and where the personal data are not collected from the Data Subject, all available information as to their source.
19.2. The data subject shall have the right to obtain from the Data Controller without undue delay the rectification of inaccurate personal data concerning him or her. Considering the purpose of the data management, the data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
19.3. Save for the data managements stipulated by law, the Data Subject shall have the right to request that the Company erased the personal data concerning him or her without undue delay. The Company shall notify the Data Subject of the erasure. The Company notifies the Data Subject about the erasure.
19.4. The Data Subject may object to the management of his/her data in accordance with the provisions of the Privacy Act.
19.5. The Data Subject may submit his/her request for information, rectification or erasure in writing, in a letter addressed to the registered seat or place of business of the Company, or via e-mail sent to the Company to the following address:
19.6. The Data Subject may request that the management of his/her Personal Data be restricted by the Company if the Data Subject contests the accuracy of the Personal Data managed. In this case, the restriction applies to that period which allows the Company to verify the accuracy of the Personal Data. The Company shall mark the Personal Data managed by the Company if the Data Subject contests the correctness or the accuracy thereof, but the incorrectness or inaccuracy of the personal data cannot be established unambiguously.
The Data Subject may request that his/her Personal Data be restricted by the Company even if the data management is unlawful, but the Data Subject opposes the erasure of the Personal Data and requests the restriction of their use instead.
The Data Subject may request that his/her Personal Data be restricted by the Company even if the purpose of the Data Management had been realized, however, the Data Subject requests those for making, enforcing or protecting legal claims.
19.7. Data Subject shall have the right to receive the personal data concerning him or her, which he or she has provided to the data controller, in a structured, commonly used and machine-readable format and shall have the right to transmit those data to another data controller without hindrance from that data controller to which the personal data have been provided.
19.8. If the Company fails to comply with the request of the Data Subject for rectification, erasure or blocking, then the Company shall within 30 days of the receipt of the request notify the Data Subject of the reasons for rejecting the of request for rectification, erasure or blocking. If the request for rectification, erasure or blocking is rejected, the Data Controller shall notify the Data Subject of the opportunity of judicial legal remedy and referring to the Hungarian National Authority for Data Protection and Freedom of Information.
19.9. The Data Subject may make his/her above statements related to exercising his/her rights through the contact information of Data Controller specified in Section 2.
19.10. The Data Subject may refer directly to the Hungarian National Authority for Data Protection and Freedom of Information (address: H-1125 Budapest, Szilágyi Erzsébet fasor 22/c.; telephone: +36-1-391-1400; e-mail: ; website: www.naih.hu) as well. In the event the rights of the Data Subject are infringed, then the Data Subject may refer to the court under Subsection (1) Section 22 of the Privacy Act. The adjudication of the lawsuit falls within the competence of the regional court. Subject to the choice of the Data Subject, the lawsuit may be initiated before the regional court competent according to the residence or the place of stay of the Data Subject as well. Upon the request, the Data Controller shall notify the Data Subject in detail about the opportunities and means of legal remedy.