Data protection
Effective: from 10.05.2022
CRÉEM Kft. (hereinafter referred to as the "Service Provider", "Controller")
THE DATA CONTROLLER'S DATA
Name: CRÉEM Limited Liability Company
Head office: 1122 Budapest, Bíró u. 11. fszt. 1.
Address for correspondence: 1122 Budapest, Bíró u. 11. fszt. 1.
Registering authority: Fővárosi Törvényszék Cégbírósága
Company registration number: 01-09-160811
Tax number: 10639865-2-43
Representative Dr. Péter Pál Varga, Managing Director
Phone number:
E-mail:
Website: www.creemorganics.com
a www.creemorganics.com (hereinafter referred to as the "Website") carries out product sales activities on its website available under the domain name.
The Data Controller operates www.creemorganics.com website is described below:
The web hosting service is a hosting space on the server dedicated by the system, whose public content is available under a unique domain name. The domain name is www.creemorganics.com.
For the operation of the website www.creemorganics.com, the Data Controller uses the assistance of hosting providers.
The name of the location provider: Closte, LLC
The location of the hosting provider:1603 Capitol Ave.
Suite 310 A546
Cheyenne, Wyoming 82001
The controller also makes use of the Google Workspace cloud service. A
Details of Google Ireland Limited (Registration number: 368047/Registration number: IE6388047V, Gordon House, Barrow Street Dublin 4 Ireland) can be found at workspace.google.com/.
The Data Controller uses the following data processors for the operation of the website www.creemorganics.com it will use the help of.
Name of service provider: Closte LLC
Location of the service provider: 1603 Capitol Ave.
Suite 310 A546
Cheyenne, Wyoming 82001
Anonymous visitor identifiers (cookies) are files or information, which are are stored on the device of the user concerned when visiting the website.
The function of cookies is to help the website function, to provide communication with the website visitor (e.g. display of marketing messages), to collect statistical and other information about the person visiting the website (e.g. IP address, time of accessing the website, movements on the website, name of the previous website).
Cookies can be disabled or deleted by the data subject at any time on their device (under settings).
In the light of the GDPR, the processing of cookies constitutes the processing of personal data, so an appropriate legal basis is required for the processing and the user concerned must be informed of the processing of cookies. No personal data is transferred to third countries in the context of cookies. Below we provide information about the cookies we use and their functions:
| Cookie Name | Function | Legal basis | Duration |
|---|---|---|---|
| _ga | Google Analytics cookie. It helps the website to work. Recording traffic data (statistical data cookie). | Legitimate interest to analyse user behaviour anonymously | 2 years |
| gdpr | To help the website function. Adoption of the GDPR policy on the website. | Legitimate interest | 365 days |
| PHPSESSID | It helps the website to work. | Legitimate interest | Website during visit |
| greeting | It helps the website to work. | Legitimate interest | Website during visit |
| _gid | Google Analytics cookie. Recording traffic data (statistical data cookie). | Legitimate interest to analyse user behaviour anonymously | 1 day |
| _gat | Google Analytics cookie. Recording traffic data (statistical data cookie). | Legitimate interest to analyse user behaviour anonymously | 1 day |
| test_cookie | Google Doubleclick cookie consent acceptance status. | Legitimate interest in the operation of the website | 1 day (or until consent is withdrawn) |
| _fbp | Meta, Facebook cookie. Facebook following | User consent | 3 months (or until consent is withdrawn) |
| fr | Meta, Facebook cookie. Facebook pixel targeting/remarketing | User consent | 3 months (or until consent is withdrawn) |
| tr | Meta, Facebook cookie. Facebook pixel targeting/remarketing | User consent | Working Session Cookie (or until consent is withdrawn) |
| _gcl_au | Google AdSense advertising effectiveness measurement | Legitimate interest to analyse user behaviour anonymously | 3 months (or until consent is withdrawn) |
| IDE | Google Doubleclick ad serving | User consent | 1 year (or until consent is withdrawn) |
| pagead/1p-user-list/# | Google cookie. It tracks when a user shows interest in certain products or events on multiple websites and detects how the user navigates between websites. | User consent | Working Session Cookie (or until consent is withdrawn) |
The Data Controller sends newsletters to interested parties in connection with its services.
Sending the newsletter subject in all cases to the prior consent of the data subject. Please note that you may withdraw your consent at any time, without giving any reason, either by clicking on the unsubscribe link or by contacting us at our contact details.
The processing is carried out as follows:
Purpose of data processing Information about the services and current discounts of the Data Controller.
Legal basis for processing:The data subject pursuant to Article 6(1)(a) of the GDPR consent, which may be withdrawn at any time without giving reasons.
Legitimate interest: the processing is not based on legitimate interest.
Categories of data subjects: natural persons subscribing to the newsletter
Persons.
Categories of personal data processed: the name and email address of the data subject.
Source of personal data: the data subject provides the data himself/herself.
Duration of processing: Until the withdrawal of consent by the data subject (unsubscribe).
Recipients (data subjects): personal data will not be transferred to third parties.
Transfers to third countries: no transfers are made.
Automated decision making/profiling: none.
Is it mandatory to provide data: no, in this case we cannot send you a newsletter.
What are the consequences if the data subject does not provide his or her personal data:
You will not receive a newsletter.
By registering online on the Controller's website, you can use the shopping functions. Registration allows customers to conveniently manage and track their purchases.
For example, you can track orders, download online invoices, and automatically fill in data for orders.
When you register, you provide us with personal data that we will process. The registration will be indicated in a so-called "registration form". activation emailwhich you can click to activate your personal account.
In this case the registration will be successful and we will process your registration data in the future.
In the absence of confirmation, your registration will be deleted after 48 hours. Importantly, the registration itself is done with your consent, you can delete your personal account at any time.
The details of the processing are set out below:
Purpose of data processing Create a personal account
Legal basis for processing: data subject in accordance with Article 6(1)(a) of the GDPR Contributionwhich you can withdraw at any time.
In this case, your registration (i.e. your personal account) will be deleted.
Legitimate interest: the processing is not based on legitimate interest.
Categories of data subjects: personal customer accounts, registering customers.
Categories of personal data processed: username and password of the registrant,
your email address, name, address details, mailing address, billing address, telephone number, company details, tax number, purchase details, invoices.
Source of personal data: the data subject provides the data himself/herself.
Duration of processing: registration is based on the data subject's consent, which is may be withdrawn at any time without justification. In this case, your personal account will be deleted.
Recipients (subjects of data transmission):
The online customer account registration as a data processor for Aut O'Mattic A8C Ireland Ltd. (address: 25 Herbert Place Dublin 2Dublin 662881).
Transfers to third countries: as part of the service provided by the processor, personal data may be transferred to Canada and the USA, which are countries that also apply the European Commission's standard contractual clauses.
Automated decision making/profiling: none.
Is it mandatory to provide data: no, in this case we cannot create a personal account.
What are the consequences if the data subject does not provide his or her personal data:
You can use the services of the webshop without registering and without the convenience of a customer account.
The Customer, website visitor, can make a purchase without registering online with the Data Controller.
The details of the processing are set out below:
Purpose of data processing Buying, ordering
Legal basis for processing: data subject in accordance with Article 6(1)(a) of the GDPR Contributionwhich you can withdraw at any time. Without providing personal data, the purchase process cannot be completed.
Legitimate interest: the processing is not based on legitimate interest.
Categories of data subjects: website visitors, customers.
Categories of personal data processed: e-mail address, name, address details, postal address, billing address, telephone number, company details, tax number of the data subject.
Source of personal data: the data subject provides the data himself/herself.
Duration of data processing: the Data Controller processes the data in addition to the data required for invoicing until 30 days after the purchase.
Recipients (subjects of data transmission):
As a data processor during the online shopping process, the Aut O'Mattic A8C Ireland Ltd.(address: 25 Herbert Place Dublin 2Dublin 662881).
Transfers to third countries: as part of the service provided by the processor, personal data may be transferred to Canada and the USA, which are countries that also apply the European Commission's standard contractual clauses.
Automated decision making/profiling: none.
Is it compulsory to provide the data: no, in this case the purchase cannot be carried out.
What are the consequences if the data subject does not provide his or her personal data:
You cannot use the services of the webshop.
By ordering the product, a contract is created between the Parties, the purpose of the processing is related to the performance of this contract.
The details of the processing are set out below:
Purpose of data processing Purchase, order fulfilment
Legal basis for processing:The legal basis for processing is the following pursuant to Article 6(1)(b) of the GDPR performance of the contract.
Legitimate interest: the processing is not based on legitimate interest.
Categories of data subjects: website visitors, customers.
Categories of personal data processed: e-mail address, name, address details, postal address, billing address, telephone number, company details, tax number of the data subject.
Source of personal data: the data subject provides the data himself/herself.
Duration of data processing: deletion will take place after the general limitation period under the Civil Code has expired.
Recipients (subjects of data transmission):
As a data processor during the online shopping process, the Aut O'Mattic A8C Ireland Ltd.(address: 25 Herbert Place Dublin 2Dublin 662881).
Transfers to third countries: as part of the service provided by the processor, personal data may be transferred to Canada and the USA, which are countries that also apply the European Commission's standard contractual clauses.
Transport in respect of data processor:
the GLS General Logistics Systems Hungary Csomag-Logisztikai Kft. (address: 2351 Alsónémedi, GLS Európa utca 2.; the privacy policy is available at: https://gls-group.eu/HU/hu/altalanos-uzleti-feltetelek),
Automated decision making/profiling: none.
Is it compulsory to provide the data: no, in this case the purchase cannot be carried out.
What are the consequences if the data subject does not provide his or her personal data:
You cannot use the services of the webshop, the order cannot be fulfilled.
Data subjects' rights in relation to data processing: the right to be informed of the existence of processing; the right of access to the above information on processing; the right to obtain a copy of the personal data processed; the right to data portability (in the case of processing for the performance of a contract or for consent); the right to rectification, erasure or restriction of processing of personal data concerning him or her; the right to object to the processing of personal data (in the case of processing for legitimate interests); the right to lodge a complaint with a supervisory authority, the right to apply to the courts.
Explanation of the data subject's rights above:
Right to information:
You may request information from the controller about the processing of your personal data.
The data controller must provide you with all information relating to the processing of personal data in a concise, transparent, intelligible and easily accessible form, in clear and plain language.
The information shall be provided by the controller in writing without delay and at the latest within one month of receipt of the request. Information may also be provided orally at the request of the data subject, provided that the data subject has previously provided other credible proof of his or her identity.
If the request is complex and numerous, the one-month deadline may be extended by a further two months. The Data Controller shall inform the data subject of the extension of the time limit within one month of receipt of the request, stating the reasons for the delay. Where the data subject has made the request by electronic means, the information shall, where possible, be provided by electronic means, unless the data subject requests otherwise.
If the controller does not take action on the data subject's request, the controller shall inform the data subject without delay and at the latest within one month of receipt of the request of the reasons for the failure to act and of the possibility for the data subject to lodge a complaint with a supervisory authority and to exercise his or her right of judicial remedy.
The right of access to personal data and information on data management:
The data subject shall have the right to receive feedback from the controller on.
whether your personal data is being processed and, if such processing is taking place, your right to access your personal data and the following information:
a) the purposes of the processing;
b) the categories of personal data concerned;
(c) the recipients or categories of recipients with whom or with which the personal data are
have communicated or will communicate;
(d) the envisaged period of storage of the personal data or the means of determining that period
aspects;
(e) informing the data subject that he or she may request the controller to disclose personal data relating to him or her
rectification, erasure or restriction of processing of your personal data and to object to the processing of such personal data;
f) the right to lodge a complaint with the supervisory authority (NAIH);
(g) where the data have not been collected from the data subject, any available information on their source;
(h) whether automated decision-making (including profiling) is carried out by the controller and if so
yes, in which area, what is the logic used and what is the relevance of such processing,
or the likely consequences for the person concerned.
Right to provide a copy:
The Data Controller shall provide a copy of the personal data subject to processing to the data subject.
at the request of the data subject.
For additional copies requested by the data subject, the Data Controller may charge a reasonable fee based on administrative costs..
Where the data subject has made the request by electronic means, the information shall be provided in a commonly used electronic format, unless the data subject requests otherwise.
The right to obtain a copy is limited, however, by the fact that it must not adversely affect the rights and freedoms of others.
The right to data portability:
The data subject shall have the right to obtain the personal data concerning him or her which he or she has provided to the Controller in a structured, commonly used, machine-readable format and the right to transmit such data to another controller without hindrance by the Controller, where the legal basis for the processing is the data subject's consent or explicit consent or the performance of a contract and where the processing is carried out by automated means.
Where the above conditions are met, the data subject has the right to request, where technically feasible, the direct transfer of personal data between controllers.
The right to data portability is limited, however, by the requirement that it must not adversely affect the rights and freedoms of others.
The right to rectification:
The data subject shall have the right to request the Controller to correct inaccurate personal data concerning him or her without undue delay or to supplement incomplete personal data, inter alia, by means of a supplementary declaration.
The right to erasure:
The data subject shall have the right to obtain from the Controller the erasure of personal data relating to him or her without undue delay and the Controller shall be obliged to erase personal data relating to him or her without undue delay if one of the following grounds applies:
(a) the personal data are no longer necessary for the purposes for which they were collected or for other
have been treated in a way that;
(b) the data subject withdraws his or her consent (or explicit consent) as the legal basis for the processing and there is no other legal basis for the processing;
(c) the data subject objects to the processing for reasons of public interest or legitimate interest and there are no overriding legitimate grounds for the processing or the data subject objects to the processing for direct commercial advantage;
d) the personal data have been unlawfully processed by the controller;
(e) the personal data are processed in accordance with the legal or regulatory requirements applicable to the controller under Union or Member State law
must be deleted in order to fulfil the obligation.
Where the Controller has disclosed the personal data and is obliged to delete it, it shall take reasonable steps, including technical measures, taking into account the available technology and the cost of implementation, to inform other controllers that process the data that the data subject has requested the deletion of the links to or copies or replicas of the personal data in question.
It is not possible to request the deletion of data if the processing is necessary:
a) for the exercise of the right to freedom of expression and information;
(b) for the purposes of complying with an obligation under Union or Member State law to which the controller is subject to which the processing of personal data is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
c) on the basis of public interest in the field of public health;
(d) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes, where the right of erasure would be likely to render such processing impossible or seriously jeopardise it; or
(e) for the presentation, exercise or defence of legal claims.
Right to restriction of processing:
The data subject shall have the right to obtain, at his or her request, the restriction of processing by the Controller if one of the following conditions is met:
(a) the data subject contests the accuracy of the personal data, in which case the restriction shall apply for the period of time necessary to allow the controller to verify the accuracy of the personal data;
(b) the processing is unlawful, but the data subject opposes the erasure of the data and requests instead the restriction of their use;
(c) the controller no longer needs the personal data for the purposes of the processing, but the data subject requires them for the establishment, exercise or defence of legal claims; or
(d) the data subject has objected to the processing; in this case, the restriction shall apply for the period until it is established whether or not the objection is lawful and valid.
If the processing is restricted, such personal data, except for storage, may be processed only with the consent of the data subject or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or of an important public interest of the Union or of a Member State.
The Controller shall inform the data subject in advance if the restriction on processing is lifted.
The right to object to processing:
The data subject has the right to object at any time, on grounds relating to his or her particular situation, to the processing of his or her personal data on grounds of legitimate interest.
In such a case, the Controller may no longer process the personal data unless it can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.
Right to lodge a complaint:
The data subject is entitled to lodge a complaint with the supervisory authority if any of the above rights are infringed.
The supervisory authority shall National Authority for Data Protection and Freedom of Information (mailing address:
1055 Budapest, Falk Miksa u. 9-11., 1363 Budapest, P.O. Box 9., phone: +36 (30) 683-5969, +36 (30) 549346838, email: ugyfelszolgalat@naih.hu, website: www.naih.hu), where you can lodge a complaint or a complaint to the data protection authority, or request an investigation into a claim or a breach of your rights concerning the processing of your personal data.
We also inform you that you are affected by or are at imminent risk of being affected by a violation of your rights in connection with the processing of your personal data or that your rights have been violated. can also go directly to court.
Online: For now, you can find the products exclusively on our own webshop.
In person:
- Somogytúr
Kunffy Memorial Museum (Árpád u. 22, 8683)
- Budapest
Nora Deli (Németvölgyi út 150, 1112)
We will soon be available in more physical stores. Come back later for the latest news!
