PRIVACY NOTICE
Effective as of 25th May 2018
DentAvantgArt-DIVISION Kft. (registered seat: Virágvölgyi út 59, H-9400 Sopron, Hungary; company registration number: Cg.08-09-008468; e-mail: contact@lablinemagazine.com) as data controller (hereinafter: “we”) is committed to protecting the privacy of our website’s visitors and readers (hereinafter: “you”). Your personal data submitted to us will be managed and processed in strict accordance with the applicable privacy laws. This Privacy Notice is to inform you of our data management principles and standards we follow in compliance with the applicable laws including the General Data Protection Regulation of the European Union (“GDPR”). By using our website www.lablinemagazine.com (hereinafter: the “Website”), you acknowledge that you have reviewed this Privacy Notice and you understand the terms hereof.
1. Personal Data Processing
1.1. We do not collect any of your personal data when you just browse our Website. During your visit to our Website our server automatically records information your browser sends whenever you visit a website (such as your Internet Protocol address, browser type, as well as the date, time and duration of your visit). This anonymous log information will not identify you as an individual and we never connect them with the personal data you may submit. We use the aforementioned information to compile aggregate statistical data on the use of our Website which enable us to administer and improve our Website.
1.2. If you send an email or address other oral or written communication to us (independently of any contract defined in Points 1.3. and 1.4. below) that includes personally identifiable information you give your implied consent to our processing of your submitted personal data by us in accordance herewith. In such case we process your personal data for the purpose of responding to the specific inquiry you have submitted to us. The legal ground for the processing of personal data is your implied consent.
1.3. If you submit an article to us, we collect the following information: your first name, last name, place and date of birth, postal address (where we can send your own copy, i.e. street, number, town / city, ZIP code, state/province, country), e-mail address, phone number, information about your article, and your portrait photo. We may also collect your co-authors’ name, address, and portrait photo, but please make sure that you are in the possession of their consent and approval to your transmission of their personal data to us. We process your personal data for the purpose of publishing your article and indicating your name and your coauthors’ name, and attaching your and their portrait photo. We process your postal address to send your own copy of Labline Magazine in which your article is published. The legal ground for the processing of personal data is the necessity of the performance of the contract (publication contract and license agreement) you conclude with us. Your knowledge and acceptance of the information about our processing of your personal data in accordance herewith is a prerequisite for your submission of any article, so you have to tick the appropriate checkbox whereby you declare that you have read the License Agreement and the Privacy Notice, and you agree to abide by them.
1.4. We collect the following information when you submit an order for Labline Magazine: your personal data (first and last name, e-mail address, telephone number, your company and position, EU VAT number, and your answer to the question how you know about Labline Magazine), your billing data (name or company name, billing address), as well as your delivery data (name or company name, delivery address, contact person, and your comment you add as a note, if any). To order Labline Magazine, you are required to provide the data marked with an asterisk at the first step of your order process, as well as your credit or debit card data (card number, expiry date, and security code) if you choose to pay by using credit or debit card. We process your personal, billing and delivery data for the purpose of proceeding with your subscription to or single issue order of Labline Magazine, and accordingly supplying Labline Magazine to you. We process your credit or debit card data for the sole purpose of your automatic subscription renewal to charge you with the price of your next subscription term as long as you do not cancel your subscription or we do not terminate our subscription service. The legal ground for the processing of personal data is the necessity of the performance of the contract (subscription or single order) you conclude with us. Your knowledge and acceptance of the information about our processing of your personal data in accordance herewith is a prerequisite for your submission of any order, so you have to tick the appropriate checkbox whereby you declare that you have read and understood the Terms and Conditions of Use and the Privacy Notice, and you agree to abide by them.
1.5. We collect the following information when you register on our Website and make product orders: your personal data (first and last name, e-mail address, telephone number, your company and position, EU VAT number, and your answer to the question how you know about us), your billing data (name or company name, billing address), as well as your delivery data (name or company name, delivery address, contact person, and your comment you add as a note, if any). To order our products, you are required to register and set up your user account, and also to provide your credit card or debit card data (card number, expiry date, and security code) if you choose to pay by using credit or debit card. We process your personal, billing and delivery data for the purpose of proceeding with your product orders in our webshop, and accordingly supplying the products to you. We process your credit or debit card data for the sole purpose of your payment of the product you ordered. The legal ground for the processing of personal data is the necessity of the performance of the contract (product orders) you conclude with us. Your knowledge and acceptance of the information about our processing of your personal data in accordance herewith is a prerequisite for your submission of any order, so you have to tick the appropriate checkbox whereby you declare that you have read and understood the Terms and Conditions of Use and the Privacy Notice, and you agree to abide by them.
1.6. During the course of your registration, we may send you email notices in relation with your current order or subscription including notices of updates to our Terms and Conditions of Use and this Privacy Notice. For this purpose, we process the following information: name, email address. In this case, data processing is based on the necessity of the performance of the contract (for subscription or single order or other product order, or for registration on our Website) you have concluded with us. You may also sign up to our free email newsletters, which we may send from time to time to provide you with news and information about Labline Magazine and our other products and services. Your ticking the appropriate checkbox and thus signing up to our newsletters implies your consent to our recording and use of your relevant personal data (name, email address) for the purpose of sending you such newsletters (direct marketing purpose). In this case, data processing is based on your voluntary consent. You may withdraw such consent to the processing of your personal data at any time without any explanation or limitation and free of charge by clicking on the unsubscribe link in any newsletter or by deleting the relevant checkmark when logged in the webshop, inside your user account.
1.7. We do not collect sensitive personal data or special categories of personal data through this Website. We do not process any data concerning health. Therefore we kindly ask authors not to transmit patient identifying data to us in the course of article submission. Please note that you are responsible for the accuracy of the data you submit, with particular regard to your current email address and delivery address, as well as for the lawfulness of your data transfer, with particular regard to the personal data of your co-authors in the case of article submission. You will indemnify and hold us harmless from any claim, demand, cost, expense, fine, penalty, damage or any other negative consequence that arises as a result of your transmission of patient identifying data to us, or any other case where you fail to comply with the applicable data protection laws and regulations, including the GDPR.
1.8. Our data processing activity regarding your personal data includes in particular collecting, using, storing, recording, reporting, transfer, adapting, summarizing, classifying, synchronizing or connecting, blocking, deleting and destroying such data as necessary for us to perform your order and/or our obligations under your contract, or as otherwise required by law.
1.9. You are not obliged to provide your personal data to us. In the cases of article submission, registration and subscription (single orders), provision of personal data is a contractual requirement, or a requirement necessary to enter into a contract; if you fail to provide such data, the respective contract (for publication, subscription or single order) will not be concluded.
2. Data Transfer and Data Security
2.1. In order to process your order, or to provide you with your own copy in the case of article submission, we transfer your delivery data (name or company name, delivery address, contact person, and your comment you add as a note, if any) to our courier partner UPS Hungary Kft. (seat: Airport City Logistic Park building G, Lőrinczi út 154, H-2220 Vecsés; company registration number: Cg.13-09-139285; e-mail: upshungary@ups.com) or DPD Hungária Kft. (seat: Késmárk utca 14/B, H-1158 Budapest; company registration number: Cg.01-09-888141; e-mail: dpd@dpd.hu).
2.2. In respect of article submission, we may transfer authors’ data (name, article, portrait photo) to third countries (e.g., Brazil) where Labline Magazine is published. Regarding third countries, the European Commission has so far recognized Andorra, Argentina, Canada (commercial organizations), Faroe Islands, Guernsey, Israel, Isle of Man, Jersey, New Zealand, Switzerland, Uruguay and the US (limited to the Privacy Shield framework) as providing adequate protection. In view of article submission, however, please note that even in the absence of an adequacy decision by the European Commission, or of appropriate safeguards, such transfer of personal data to a third country takes place as it is necessary for the performance of a contract (publication contract and license agreement) between you as data subject and us as controller.
2.3. Apart from the aforementioned transfer, we do not transfer your personal data to any third person unless we are required to do so by applicable laws or by a binding and enforceable order of the court or the competent regulatory authority.
2.4. We agree to treat your personal data confidentially and securely, and although security cannot be absolutely guaranteed against all threats we take all reasonable steps to protect your data against unauthorized access, use and disclosure. Access to your data is restricted to our company managers and those of our employees on a need to know basis who have been properly trained to observe strict confidentiality standards in processing personal data.
2.5. Please be informed that we cooperate with the following data processors who under our authority and control process your data on our behalf for the purposes set forth herein:
2.5.1. Hosting service provider: OnlineNIC, Inc. (909 Marina Village Pkwy #236, Alameda, CA 94501; onlinenic-enduser@onlinenic.com);
2.5.2. Mailchimp newsletter service provider: The Rocket Science Group LLC (https://mailchimp.com/contact/, The Rocket Science Group is active on the Privacy Shield list, further information: https://www.privacyshield.gov/list);
2.5.3. Payment processing: Wirecard AG (Einsteinring 35, 85609 Aschheim, Germany; contact@wirecard.com);
2.5.4. Web and design development: Plus Kreatív & Média Kft. (Tinódi utca 1-3. 1. em. 29. H1095 Budapest; hello@plus-kreativ.hu).
2.5.5. Accounting and book-keeping: Szigno-Computer Bt. (Vincellér utca 35, 8330 Sümeg, szigno@euroweb.hu).
3. Duration
3.1. We process your personal data for no longer than is necessary for the purposes set forth herein (in respect of contracts and registration, until termination or cancellation thereof) or, where our data processing is based on your consent (e.g., newsletter), for as long as you do not withdraw your consent to such processing of your data or we do not terminate the related services.
3.2. We will retain your data concerned for 5 (five) years of the aforementioned termination for whatever reason of our data processing on the legal grounds referenced above in Point 1, in order for us to be able to demonstrate compliance with the GDPR on the one hand, and also to be able to rely on these data in a potential civil law dispute within the statutory limitation period on the other. In the first case, our data processing (storage) is based on the necessity for compliance with a legal obligation stipulated by Article 5(2) of the GDPR, whereby the data controller shall be responsible for, and be able to demonstrate compliance with, the principles relating to processing of personal data (‘accountability’). Regarding the other case, our data processing is based on our legitimate interests, limited in time, scope, and purpose to the potential civil law dispute concerned, which therefore we do not consider as overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data.
3.3. Notwithstanding the aforementioned, please note that we are subject to certain data retention obligations prescribed by applicable laws. Accordingly, we are obliged by the applicable accounting and VAT act to retain for 8 (eight) years the invoices we issued, which contain your name and address if you are a private person and did not provided us with different billing data. In this case, our data processing (storage) is based on the necessity for compliance with a legal obligation.
4. Rights and Legal Remedies
4.1. You have the right to obtain information from us about our processing of your personal data, including confirmation as to whether or not your personal data are being processed, and access to the personal data and any relevant information about our data processing activity (e.g., the purposes of the processing; the categories of personal data concerned; the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations; where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period, etc.). You also have the right to request from us the rectification of inaccurate personal data concerning you as well as the completion of incomplete personal data in line with the purposes of data processing. You also have the right to request from us the erasure of your personal data, where appropriate (e.g., if your personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed), or restriction of processing. You can also object to the processing of your data if processed for direct marketing purposes, or otherwise, on grounds relating to your particular situation if personal data processing is based on the legitimate interests pursued by us or by a third party. Furthermore you also have the right to data portability, i.e. to receive your personal data, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller, or to have the personal data transmitted directly from one controller (us) to another, where technically feasible
4.2. You may send such requests either by regular mail to Virágvölgyi út 59, 9400 Sopron, Hungary or by email to contact@lablinemagazine.com. We will provide you with information on the action we take upon your request without undue delay and in any event within one month of receipt of the request. Where necessary (taking into account the complexity and number of the requests) that period may be extended by two further months. We will inform you of any such extension within one month of receipt of the request, together with the reasons for the delay. If you contact us by electronic means, we will provide you with the information in a commonly used electronic form unless you request it otherwise. Please note that we will comply with your request only if we can determine your identity as data subject; if we have reasonable doubts concerning the identity of the person making the request, we may request the provision of additional information necessary to confirm the identity of the data subject. The information provided and any communication and any actions taken will be free of charge, except where your requests are manifestly unfounded or excessive, in particular because of their repetitive character, in which case we can either charge a reasonable fee, or refuse to act on the request.
4.3. If you consider that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the competent supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement (in Hungary, with the Hungarian National Authority for Data Protection and Freedom of Information; seat: Szilágyi Erzsébet fasor 22/c, H-1125 Budapest; postal address: PO Box 5, H-1530 Budapest; phone: +36 (1) 391-1400; fax: +36 (1) 391-1410; e-mail: ugyfelszolgalat@naih.hu; web: http://naih.hu). You may also seek court action if you consider that your rights under the GDPR have been infringed as a result of the processing of your personal data in non-compliance with the GDPR. Please contact us whenever you believe that your rights have been violated and we will use our best efforts to remedy the issue.
5. Cookie policy
5.1. Cookies are small files that our Website places on your computer’s hard drive through your browser (if you allow) to enable our system to recognize your browser and capture and remember certain information for your better web experience. Cookies may uniquely identify your browser but they are not able to identify you personally. We do not combine the information collected through cookies with personally identifiable information. You are not obliged to accept cookies. You may set your browser to accept or reject cookies or to prompt you each time a cookie is offered. You may also delete cookies from your system after your visit to our Website.
5.2. Please be informed that we use “Google Analytics” to collect information about the use of our Website (such as how often users visit this Website, what pages they visit when they do so, and what other websites they used prior to coming to our Website) in order to improve our Website. Google Analytics collects only the Internet Protocol address (in an anonymous form) assigned to you on the date you visit our Website. We do not combine the information collected through the use of Google Analytics with personally identifiable information. Please further note that Google Analytics places a permanent cookie on your web browser to identify you as an individual user the next time you visit this Website. This cookie can only be used by Google, Inc. with the aim to provide us with reports and statistical analyses on our Website’s activity, and such use is restricted by the Google Analytics Terms of Use and the Google Privacy Policy. You can prevent Google Analytics from recognizing your browser on return visits to this Website by disabling cookies on your browser. You may also refuse the use of Google Analytics cookies by downloading and installing Google Analytics Opt-out Browser Add-on.
5.3. You can control and/or delete cookies as you wish – for details, see aboutcookies.org. You can delete all cookies that are already on your computer and you can set most browsers to prevent them from being placed. If you do this, however, you may have to manually adjust some preferences every time you visit a site and some services and functionalities may not work.
6. Applicable Law
This Privacy Notice forms part of our Terms and Conditions of Use as well as the License Agreement and accordingly shall be governed by the laws of Hungary.
7. Amendments
We may update this Privacy Notice from time to time. We will inform you in advance of any changes in our Privacy Notice together with the effective date by posting a notice on our Website and if you have subscribed to Labline Magazine by sending you the same notice to your email address. Your continued use of our Website represents your agreement to our updated Privacy Notice.
8. Third Party Links
This Privacy Notice applies only to this Website. Our Website may contain references or links to other websites which are outside of our control and outside of the scope of this Privacy Notice. The links from our Website do not imply our review or endorsement of such third party websites, it is therefore your exclusive responsibility to inform yourself as to the privacy policies they follow.