Effective: June 13, 2025.<\/strong><\/p>\n\n\n\n It is very important for us to comply with currently valid data protection regulations and laws, so below we discuss in detail the data protection steps of growshroom.hu and Cs\u00f6me Attila EV and their data collection processes.<\/p>\n\n\n\n The data is processed by Cs\u00f6me Attila EV, and this company is responsible for the processing of personal data.<\/p>\n\n\n\n Contact details:<\/p>\n\n\n\n Full legal name: Cs\u00f6me Attila EV<\/p>\n\n\n\n Email address: info@growshroom.hu<\/a><\/u><\/p>\n\n\n\n Postal address: 2461 T\u00e1rnok, \u0150sz u. 32. 1A.<\/p>\n\n\n\n Personal data is that which clearly enables the precise identification of an individual.<\/p>\n\n\n\n On the growshroom.hu website, we process the following personal data, specifying the legal basis:<\/p>\n\n\n\n <\/p>\n\n\n\n This includes any message that the user sends to us via the website, by email, in a social media message, or in any other form of communication. We process and retain this data in order to fulfill orders and to provide a basis for decision-making in the event of possible legal claims. Our legal basis for this processing is the user's justified interest in our activities, which is manifested in the messages addressed to us.<\/p>\n\n\n\n <\/p>\n\n\n\n This includes all data related to the purchase of products and services, such as the customer's name, shipping and billing address, email address, telephone number, purchased product details. We process this data in order to successfully fulfill orders and to have legally adequate records of purchases. The legal basis for storing the data is the fulfillment of the contract concluded with the order between the customer and Cs\u00f6me Attila EV.<\/p>\n\n\n\n <\/p>\n\n\n\n This includes data generated during the use of the website, which enables the technical operation of the site, to maintain the security of the site, to store backups of user activity, and to always have access to the most relevant content. The legal basis for processing the data is the user's clear interest in our activities, for which the storage of this data is necessary for the provision and technical operation of the site.<\/p>\n\n\n\n <\/p>\n\n\n\n This includes data generated during the use of the site, such as IP address, login information, browser data, time of visit to individual pages, page views and navigation paths, number and time of page visits, time zones, and data about the device you use to view the site. The source of the data is our analytics software. We process this data to analyze user habits on the site, maintain the secure operation of our site, and understand the usefulness of our individual marketing decisions. The legal basis for processing the data is the user's clear interest in our activities, which allows us to process this data in accordance with security requirements and use it to increase business in order to operate more effectively.<\/p>\n\n\n\n <\/p>\n\n\n\n This includes the visitor's preferences for what marketing content they would like to receive from us. We process this data to enable participation in prize draws and to send advertising related to our products\/services in which the user has expressed interest. The legal basis for processing the data is the user's clear interest in our activities, which allows us to process this data in accordance with security requirements and use it to increase business in order to operate more effectively.<\/p>\n\n\n\n <\/p>\n\n\n\n We may occasionally use the collected data for purposes such as providing targeted, relevant advertising on the Facebook and Instagram platforms and various dynamic advertising platforms, and measuring the effectiveness of the ads.<\/p>\n\n\n\n The legal basis for processing data is the user's clear interest in our activities, which allows us to process this data in accordance with security requirements and use it to grow our business and operate more effectively.<\/p>\n\n\n\n By placing an order, the Customer gives their consent to be contacted by growshroom with occasional marketing emails at the email address provided at the time of ordering. Consent can be withdrawn in a reply message.<\/p>\n\n\n\n In the course of our activities, we do not collect sensitive data such as ethnicity, religious beliefs, sexual life and orientation, political opinions and trade union membership, or health background, and genetic or biometric information.<\/p>\n\n\n\n We may collect personal data in ways that the user provides to us directly (for example, by placing an order or sending a message).<\/p>\n\n\n\n Furthermore, certain data is collected automatically when you use the site, for example through so-called \u201ccookies\u201d and similar technologies. These only come into operation after you have given your consent.<\/p>\n\n\n\n For more information, read the Our cookie policy<\/a><\/u>.<\/p>\n\n\n\n We receive certain data from third-party partners, such as analytics providers such as Google (non-EU partner), advertising networks such as Facebook\u2122 (non-EU partner), and payment partners such as Barion.<\/p>\n\n\n\n The protection of users' data and compliance with applicable regulations is extremely important to growshroom. Therefore, the<\/p>\n\n\n\n <\/p>\n\n\n\n At growshroom.hu, we take data protection very seriously and have made significant efforts to securely collect the information collected by the site.<\/p>\n\n\n\n <\/p>\n\n\n\n <\/p>\n\n\n\n <\/p>\n\n\n\n <\/p>\n\n\n\n <\/p>\n\n\n\n Marketing communications are essential to the business. The legal basis for data processing in this regard is the interest shown in our services or the express consent of the users. In accordance with the European Union Privacy and Electronic Communications Regulations (PECR), we send marketing messages to our users if they have purchased from us or have expressly consented to receive marketing messages. We always make it possible to suspend consent and unsubscribe from messages in a clearly visible way. You will find a link to unsubscribe at the bottom of each email, or you can request removal from the database by info@growshroom.hu<\/a><\/u> We may also send you messages if you opt out of marketing communications, but only in connection with order fulfillment.<\/p>\n\n\n\n Sometimes it is necessary to share certain personal data with certain partners in order to maintain normal business operations: -IT service providers and service providers who perform troubleshooting and maintenance on computer systems -Expert partners such as lawyers, accountants, bankers, insurers -Government agencies that request reports on our activities -Payment service providers who securely manage bank card data -Courier services that fulfill incoming orders to the specified delivery address. Sometimes it is necessary to share user data with service partners outside the European Economic Area (EEA) in order to maintain business operations. Countries outside the EEA often do not provide the same level of protection for data, therefore European laws prohibit the export of data unless the appropriate conditions are met. Whenever personal data is transferred outside the EEA, we take the following steps in addition to the steps discussed in point 4 to ensure the secure handling of data: -We only transfer data to countries that the European Commission considers adequate in terms of data security. -We only use US-based services that are part of the EU-US Privacy Shield. If the above is not met, we ask for the express consent of users to make the data transfer. Consent can be withdrawn at any time.<\/p>\n\n\n\n Links to external sites<\/strong><\/p>\n\n\n\n This site occasionally contains links to external sites or embedded code snippets that enable the operation of external services. Clicking on these links or using embedded solutions may allow third-party partners to collect data about users. While we do our best to properly screen our partners, we have no control over their privacy practices and are not responsible for their data practices.<\/p>\n\n\n\n We only store user data for as long as our legal\/accounting\/data provision obligations require it or it is necessary to operate the service.<\/p>\n\n\n\n When deciding on the duration of storage, we consider the amount, nature and sensitivity of the data, and the potential impact of its leakage in the event of a data breach.<\/p>\n\n\n\n For tax reasons, we need to retain customer billing and purchase data for at least 8 years to comply with our legal obligations.<\/p>\n\n\n\n Under certain circumstances, we may use the data in an anonymized form for statistical purposes, in which case we will store the data indefinitely without notification.<\/p>\n\n\n\n As a citizen of the European Union, the General Data Protection Regulation (GDPR) gives users of this site the following rights:<\/p>\n\n\n\n a, Access to personal data<\/strong><\/p>\n\n\n\n Users of the site have the right to request a copy of the personal data stored by growshroom.hu. The request will generally be fulfilled free of charge, within 14 days of the request.<\/p>\n\n\n\n In the event of repeated, abusive, and unjustified data requests, Attila Cs\u00f6me EV may charge a moderate amount to provide the data, and additional time may be required to provide the data.<\/p>\n\n\n\n Furthermore, Attila Cs\u00f6me EV requests proof of identity before releasing the data, in order to prevent misuse. Disclosure of personal data can be requested via email customer service.<\/p>\n\n\n\n b, Modifying personal data<\/strong><\/p>\n\n\n\n If personal data has been changed or has been provided incorrectly, users have the right to request that the data be changed. To change personal data, please contact us at info@growshroom.hu<\/a><\/u> by email.<\/p>\n\n\n\n c, Request for deletion of personal data<\/strong><\/p>\n\n\n\n Users have the right to request the deletion of all their personal data. We will fulfill the request free of charge within 14 days of the request.<\/p>\n\n\n\n Attila Cs\u00f6me EV requests proof of identity before deleting personal data to prevent misuse. Disclosure of personal data can be requested via email customer service.<\/p>\n\n\n\n d, Request restriction of processing of personal data<\/strong><\/p>\n\n\n\n Users have the right to request that their data be restricted from being made available to third parties (service providers). When submitting the request, the service providers to whom the restriction is requested can also be named.<\/p>\n\n\n\n It is important to note that cooperation with certain service providers is essential for the operation of the site, so in the event of their restrictions, the site's services will become inaccessible to the user.<\/p>\n\n\n\n Attila Cs\u00f6me EV requests proof of identity before restricting the transfer of personal data to prevent misuse. Disclosure of personal data can be requested via email customer service.<\/p>\n\n\n\n In Hungary, the official body dealing with data protection is the National Authority for Data Protection and Freedom of Information (NAIH). Users can learn more about their data protection rights on the NAIH website.<\/a><\/p>\n\n\n\n National Data Protection and Freedom of Information Authority, 1125 Budapest, Szil\u00e1gyi Erzs\u00e9bet fasor 22\/C., Mailing address: 1530 Budapest, P.O. Box: 5., growshroom uses so-called "cookies" and similar technologies, such as tracking codes, re-marketing tags, pixels, on the website, in e-mail messages and advertisements, which are activated after the user's consent.<\/p>\n\n\n\n These technologies help us better understand user behavior and interests, helping us operate more efficiently and effectively.<\/p>\n\n\n\n Our goal is to make the use of growshroom.hu as user-friendly and personal as possible. If the user wishes to prohibit the recording of non-personal data by these technologies, this can be done in the following ways:<\/p>\n\n\n\n -by suspending use of the website<\/p>\n\n\n\n -by disabling \u201ccookies\u201d in your browser<\/p>\n\n\n\n1. INTRODUCTION<\/strong><\/h5>\n\n\n\n
2. WHAT PERSONAL DATA DO WE PROCESS AND FOR WHAT REASON?<\/strong><\/h5>\n\n\n\n
COMMUNICATION DATA<\/h6>\n\n\n\n
CUSTOMER DATA<\/h6>\n\n\n\n
USER DATA<\/h6>\n\n\n\n
TECHNICAL DATA<\/h6>\n\n\n\n
MARKETING DATA<\/h6>\n\n\n\n
3. HOW DO WE COLLECT DATA?<\/strong><\/h5>\n\n\n\n
4. OUR PRACTICAL STEPS RELATED TO DATA PROTECTION<\/strong><\/h5>\n\n\n\n
After conducting a data protection impact assessment on the site, we have prepared a list of the data collected, their necessity and legal basis, and their legal compliance.<\/h6>\n\n\n\n
To protect the data entered in forms and generated on the site, we use SSL certification on the entire website (Let's Encrypt certification).<\/h6>\n\n\n\n
To protect the site from attacks, we use the security features of the hosting provider, which protects the stored data.<\/h6>\n\n\n\n
In the site's databases, purchase and user data are stored in encrypted form (pseudonymized), so they are not readable by third parties.<\/h6>\n\n\n\n
Through our email customer service, we provide users with the ability to request information about the management of their personal data, modify or delete their personal data.<\/h6>\n\n\n\n
Sometimes, in order to carry out our business activities, it is necessary to provide data to our service partners (e.g. hosting providers, courier companies, newsletter software). In such cases, we always choose to ensure that they comply with the requirements of the GDPR regulation and, in the case of a US-based partner, participate in the EU-US Privacy Shield data protection initiative, and we sign a data management agreement with them, ensuring responsible data management.<\/h6>\n\n\n\n
5. MARKETING COMMUNICATION<\/strong><\/h5>\n\n\n\n
6. NOTE ON PERSONAL DATA<\/strong><\/h5>\n\n\n\n
7. DURATION OF DATA PROCESSING<\/strong><\/h5>\n\n\n\n
8. VISITOR'S RIGHTS<\/strong><\/h5>\n\n\n\n
Phone: 06.1.391.1400,Fax: 06.1.391.1410,
E-mail: ugyfelszolgalat@naih.hu<\/a> Website: http:\/\/www.naih.hu<\/a><\/p>\n\n\n\n9. ANONYMIZED DATA AND \u201cCOOKIES\u201d<\/strong><\/h5>\n\n\n\n