Conditions for processing personal data

Dollcini Hungary Kft, tax number: 25730663-2-42 (hereinafter "Thundersell" or "we"), the operator of the www.thundersell.eu online store, declares that it treats all personal data (hereinafter "Data") strictly confidential, and handles them in accordance with the applicable legal provisions on personal data.

The security of your personal data is extremely important to us, so we pay due attention to personal data and their protection. In these data management principles (hereinafter "Principles"), you can read information about what personal data we collect about you, under what legal title we process it, for what purposes we use it, how long we store it, and to whom we can pass it on. In the Basic Principles, we also inform you about the rights you have in relation to the management of your personal data.

1. What personal data do we process?

If you use the services of our online store or our stores (our stores and pick-up locations), we process different types of data about you.

1.1. If you buy

Our customers most often provide data through the forms required to order products or services. These are predominantly data that are essential for the conclusion and fulfillment of sales contracts. These data are therefore necessary to fulfill the order and can be divided as follows: Personal identification data, i.e. surname and first name, and in the case of a company purchase, the company's statistical number and tax number; Contact details, i.e. e-mail address, postal address, billing address, phone number, bank account details and payment details. Data generated based on the conclusion of the contract, more specifically the products purchased, the range of services provided and the customer segment.

1.2. If you register on the site

If you also want to enjoy the benefits of a customer account, you must first register on our website or sign a contract with us about the so-called Thundersell club. The customer account is protected by a password of your choice, which we do not have access to, so if it is lost, we cannot send it to you or generate a new password even at your request.

Through the customer account, you have unlimited access to your personal data and the possibility to change them. You can also view the history of completed orders, purchased products and abandoned orders in the customer account. Through the customer account, you can also save your bank card details, as well as manage the sending of the newsletter and the so-called wish list, to which you can add your favorite products.

The Thundersell club is also part of the customer account, through which we provide you with many discounts. You can read more information in the terms of use of the Thundersell club. If you do not want to create a customer account to complete your purchase, you can also shop in our online store without registration. You can conclude the Thundersell club membership contract according to the applicable Terms of Use.

If you are a member of the Thundersell club, we process the following data: Personal identification data, i.e. surname and first name, and in the case of company purchases, the company's statistical number and tax number; Contact details, i.e. e-mail address, postal address, billing address, telephone number, bank account details and payment details; Demographic information based on the settings you select on our website and your behavior there, including information about your gender, date of birth and preferred language; Login data, i.e. username and password. We do not have access to the password itself. Data generated based on the conclusion of the contract, more specifically the products purchased, the range of services provided and the customer segment.

1.3. If you have subscribed to our business information

You can sign up for business information about products similar to the ones you buy from us. You can unsubscribe from newsletters at any time using the unsubscribe link in the footer of e-mails containing such information. If you have a customer account, you can also unsubscribe through it. Unsubscribing from commercial communications is free.

If you are our registered user, you can also subscribe to business information in the form of SMS or push messages sent via our mobile phone application. You can also receive push messages with business information via Facebook or Messenger. This type of data processing takes place in accordance with the data management principles of the given social media site. You can unsubscribe from receiving business information through these channels at any time. If you have subscribed to these newsletters, we process the following data: Personal identification data, specifically your first name; Contact information, phone number, so that we can contact you, more precisely, your e-mail address and, if you are a member of the Thundersell club, your phone number; Demographic data based on the settings you select on our website and your behavior there, including your gender and preferred language.

1.4. When you visit our website or create content on it

When you visit our website, we collect various information about you during your visit, such as your IP address, browser settings, your preferred language and the websites you visit, including the time of your visit. We also track how you move around the website and which links you click on, so that we can tailor the displayed content to your interests as best as possible and offer you products and services that are attractive to you. When you visit our website, we save cookies in the browser you use and on your device, which we read later. We have devoted a separate chapter to this activity in the Basic Principles. However, in addition to cookies, we also process data about your behavior on our website, your IP address and the data provided by your browser: more precisely, the resolution, the device's operating system (including its version) and language settings.

We may also connect to social media sites, including automatically logging into your user account. In order to create a connection on our website, more precisely in relation to blog posts, the so-called we use social plugins, i.e. sharing buttons, thanks to which you can share the relevant content on your own profile. Once the connection is established, you may also see personalized offers and targeted advertisements on social media sites and other websites that link to our website.

In order to make your connection with the world of beauty even closer, we provide the opportunity for you to be actively present on our website and create content, such as writing reviews about the products you have purchased and their usefulness, as well as writing comments on our blog posts. A customer account is not required to create this content. The first and last name you provide may appear under such content if you provide them in the form. You are responsible for the content and activities posted on our website. Therefore, we caution you not to share any personal information that you do not wish to make publicly available through these contents.

Our websites may also contain links to other websites. We think they may be interesting and contain useful information. However, we would like to warn you that these sites may be maintained by other companies or organizations and may handle your data according to their own privacy policies. Therefore, our company has no control over such data processing and we are not responsible for the information, materials, products and services contained or published by these sites.

1.5. If you contact us through our customer service or social networks.

If you decide to contact our customer service through our telephone or e-mail contacts, we primarily process recordings of telephone calls (since they are monitored) and e-mail messages. If you contact us with a question via our page or profile created on a social media site, we will handle your personal data exclusively based on the data management principles of the company that maintains the given social media site.

1.6. When you visit one of our stores

To protect our legitimate interests, we have installed camera systems in our stores and other premises to protect our property and yours. If you visit one of our stores, you may appear on the camera footage, which we will process later. The rooms where we have placed cameras are always properly marked.

1.7. If you set up an alert about the availability of a product

In the event that you are interested in a product that is not currently available, we offer you the option of stock monitoring. As soon as the product is back in stock, we will notify you to the e-mail address you provided and thus processed by us.

1.8. If you write an opinion about us on a review website.

After your order has been delivered, we may ask you to rate the products and your overall satisfaction on a rating website. All feedback is extremely valuable to us, but it's up to you to share your opinion with us. If you choose to do so, we will process your review and transmit the following data to the relevant partners: Availability, specifically the email address for delivery of the review request; Data generated based on the conclusion of a contract, more precisely the purchased products.

1.9. If you enter a sweepstakes

We organize attractive sweepstakes for you on our website or through a profile created on a social network, which you can join and whose full game rules can be found here. The announcement of the winner can also be public, which means that we can publish certain details of the winner on our website or on our profile created on the given social network. Any activity or communication with us via the social site, as well as the processing of your personal data, is based on the data management principles of the company operating the social site.

If you participate in such a prize draw, we process the following personal data: Personal identification data, i.e. surname and first name; Contact information, specifically your profile on the social media site or your email address and, in the case of a prize, your address, postal address, billing address and telephone number for the purpose of mailing the prize.

1.10. If you participate in a user test or other event

If you participate in the user test program organized by us, we can process the following data: Personal identification data, i.e. surname and first name; Contact details, in particular your email address and telephone number; Camera recording, i.e. recording your image. In addition, we organize various events for you, in the framework of which we can process the following data: Personal identification data, i.e. surname and first name, possibly statistical number and tax number; Contact data, specifically your e-mail address and telephone number. We will always inform you about the exact range of personal data processed during each event.

2. For what purpose do we process personal data?

2.1. Purchase of products and services

We handle your personal data most often for the purpose of successful processing and delivery of your order placed via our website, mobile application or customer service phone number. We use the e-mail address and phone number to send the confirmation of the order, to deliver the confirmation of payment and send an electronic invoice, as well as for continuous information about the status of the order, and possibly for further unique communication processes related to the given order.

2.2. Customer account

If you are a registered user, we process your personal data in order to fulfill the Thundersell club membership contract, i.e. to maintain the customer account that provides many discounts.

2.3. Marketing offers

We will send you business information about products that are similar to products you have already purchased. You can unsubscribe from newsletters at any time using the unsubscribe link in the footer of e-mails containing such information. If you are a registered user, we also send you business information in the form of SMS or push messages via our mobile phone application. You can also receive push messages with business information via Facebook or Messenger. This type of data processing takes place in accordance with the data management principles of the given social media site. If you opt out of receiving business information, we will no longer use your electronic contact information for such purposes. Unsubscribing from business communications is free.

2.5. Customer service and communication

We constantly strive to improve the services provided by our customer service. In order to be able to respond to your inquiries as quickly as possible, as well as to provide you with this service, we also need your personal data in order to successfully process your inquiry and to resolve it during the fulfillment of the sales contract or the Thundersell club membership contract emerging problems. Therefore, if you contact us by phone, we will record the conversation after prior warning in order to further improve the quality of our services.

We also use the collected personal data for the purpose of communicating with you and for further customization. For example, we may contact you by phone, email, mobile application, or other channel to remind you of items left in your cart or to help finalize your order. We may also contact you to inform you of the current status of your request, order or complaint, or to request additional information from you. We may also warn you that certain steps are required to keep your customer account active.

2.6. Camera recordings

To protect our legitimate interests, we have installed camera systems in our stores and other premises to protect our property and yours.

2.7. Inventory monitoring

If you set up inventory tracking for a product that is currently unavailable, we will notify you via the email address you provided as soon as the product becomes available again.

2.8. Satisfaction survey of evaluation websites

In connection with the order, we may also ask you to rate the products on one of the rating websites. In this case, the satisfaction survey is the purpose of the data management.

2.9. Sweepstakes

If you decide to participate in a sweepstakes organized by us, we will process your personal data for the purpose of conducting the sweepstakes and, in the event of a successful application, publicly announcing the winner and contacting you.

2.10. User test, events

If you participate in a user test program organized by us, we process your personal data for the purpose of testing new or existing functions of our system. If you participate in an event organized by us, we process your data for the purpose of organizing, conducting and evaluating the event organized by us.

2.11. Development of services

We also use your personal data to continuously improve our services and systems, including adding new features. We also process personal data to make informed decisions using aggregated analyzes and business intelligence. This stems from our legitimate interest in freedom of enterprise and is based on the fundamental development of our services in order to successfully participate in business competition. However, we use anonymized personal data for these purposes to the extent possible to ensure adequate protection of your rights and interests.

2.12. Protection, Security and Dispute Resolution

We may also process your personal data for the purpose of ensuring the protection and security of our customers and systems, asserting our rights and legitimate demands, detecting and preventing fraud, settling disputes or enforcing our agreements. We may also process personal data for possible inspections by the authorities.

3. What is the legal basis for processing personal data?

We process personal data to different extents and for different purposes, as detailed in Articles 1 and 2, namely:

a) Without your consent, based on contract performance, legal obligations or our legitimate interests;
b) Based on your consent, data processing without your consent depends on the stated purpose of data management and your relationship with us - i.e. whether you are a simple visitor to our website, or make a purchase or register with us. However, your personal data may also be processed if you are the recipient of ordered products or services, if you contact us or if you visit one of our stores.

3.1. Fulfillment of sales contract and Thundersell club membership contract

When you shop with us or place an order, an offer for a sales contract is created, which becomes final when we ship the ordered products and accept the offer. However, in order to be able to fulfill this sales contract or any other contract regarding products or services, we also need a significant part of your personal data, which you provided through the order form. The exact range of data processed in this case can be found in paragraphs (1) and (5) of Article 1.

If you register with us, we process your data for the purpose of fulfilling the Thundersell club membership contract, i.e. operating the customer account. The contract on which data management is based is created by creating your customer account. After deleting the account, i.e. terminating the Thundersell club membership contract in accordance with the terms of use, we will no longer process your personal data for this purpose. You can find the exact range of data processed in this case in paragraph 2 of Article 1.

3.2. Fulfillment of legal obligations

We also have to comply with certain obligations prescribed by current legislation. Therefore, we do not need to ask for your consent to process your personal data if we process it in order to fulfill these obligations. This is the legal basis for the processing of your personal identification data and contact information, as well as the data of your orders. You can find the exact range of data processed in this case in paragraph 1 of Article 1.

3.3. Contribution

For the purpose of sending business information by e-mail, we may process your personal data based on your consent. We process it based on your consent, if it is not based on a legitimate interest or a Thundersell club membership contract. You can withdraw your consent and unsubscribe from business information at any time. In this case, you will find the exact range of processed data in paragraph 3 of Article 1.

We also ask for your consent if you want to publish a review or comment on the blog about the purchased products, if you want to track the availability of a product, or if you participate in a user test or other event. Of course, in these cases you can withdraw your consent at any time. The exact scope of the data processed in this case can be found in paragraphs (4), (7) and (10) of Article 1.

3.4. Legitimate interest

We also process your personal data based on legitimate interests in order to develop and customize the services we provide, to make sure you are satisfied with the fulfillment of your order, and to more effectively promote the products and services we offer. All of this applies in particular to the data specified in paragraphs (4) and (5) of Article 1.

Due to our legitimate interest in direct marketing, we may send you business information about products similar to the products you have purchased from us. However, we can only do this if you do not object to it. However, if you are our registered user, we will send you business information based on the subscription concluded with the Thundersell club membership contract. You will find the exact range of data processed in this case in paragraph 3 of Article 1.

It is our legitimate interest to protect our legal claims and internal records, as well as to monitor the proper provision of our services. In this case, we process all types of personal data specified in Article 1.

It is also in our legitimate interest to send a request for an evaluation of a completed purchase or an evaluation of a prize draw organized by us on the evaluation website. The exact range of data processed in this case can be found in paragraphs 8 and 9 of Article 1.

Your personal data will be processed for legitimate interests even if you visit one of our stores. We monitor our stores with a camera system to protect our property. You can object to the processing of your personal data in this way at any time. You will find the exact range of data processed in this case in paragraph 6 of Article 1.

4. To whom do we forward personal data?

In the majority of cases, we manage your personal data for our own purposes as a data controller, which means that we can customize the purposes of collecting personal data detailed above, the method of data management and the method of data collection. We will only transfer your personal data to our partners if this is essential in connection with the performance of the sales contract, for example to ensure payment or delivery; also within the framework of the Thundersell club membership contract, due to legitimate interests, or if you have previously consented to the transfer of data. We also forward your personal data to our data processors, who also strictly comply with the legal requirements for the protection of personal data. Our data processors process the data following our instructions, so the procedure does not affect your rights in any way. After your consent, we may forward your personal data to social media sites or operators of marketing tools so that they can display targeted advertisements on other websites.

4.1. Categories of data receivers

We may forward your data to the following recipients:

To carry out the internal processes and procedures of the subsidiaries and data processors of the Thundersell group based on the fulfillment of the sales contract or the Thundersell club membership contract; To companies operating payment services for the purpose of processing the payment corresponding to your order, i.e. for the purpose of fulfilling the sales contract; To delivery companies for the purpose of delivering the products or services you have ordered and handling complaints, including termination of the contract; To the suppliers of our products or our service centers in connection with complaints related to the products or services you have ordered; To our partners who ensure the distribution of business information, who are bound by a confidentiality agreement and who cannot use your personal data for any other purpose; For the operators of our marketing tools; who help us customize offers and content; To social media sites, if you contact us through them or share content through them; To our partners who provide the customer service with the tools necessary to communicate with you, or possibly to external call centers; To our partners who conduct satisfaction surveys among our customers; To our technology and cloud providers; To legal or financial representatives, courts for the purpose of processing tax documents, for the purpose of fulfilling claims, other demands and fulfilling our other legal obligations; To authorities (e.g. police) for the purpose of asserting our rights. We are not responsible for third parties using your data for their own legitimate interests. This kind of data processing takes place exclusively in accordance with the principles of personal data management of the companies concerned.

4.2. Data transfer outside the EU

While we transfer your personal data to our data processors, in some cases we may also transfer personal data to third countries that are not members of the European Union and do not guarantee adequate protection of personal data. However, the data will only be forwarded if our data processing partner undertakes to comply with the contractual conditions issued by the European Commission available here.

5. How long do we process personal data and how do we ensure security?

5.1. Duration of data processing

Your personal data is primarily handled during the contractual relationship between us, i.e. the sales contract or the Thundersell club membership contract. We are obliged to handle the personal data that is absolutely necessary for the fulfillment of our obligations for the period specified in the relevant legal provisions or in accordance with them - regardless of whether the obligations arise from the contract concluded between us or from the generally applicable legal provisions. Thus, for example, as a data controller, we are obliged to keep your data in the accounting documents issued by us for 10 years from the date of issue.

Personal data is primarily handled during the contractual relationship, i.e. the sales contract or the Thundersell club membership contract. In addition, we process your personal data for as long as it is absolutely necessary for us to fulfill our obligations arising from concluded contracts and generally applicable legislation. For example, we must keep your data for at least 10 years in the accounting documents we issue.

In order to fulfill our obligations and ensure quality customer service, we process your personal data starting from the establishment of the contractual relationship, namely for the purpose of settling possible disputes, including 1 year from the end of the warranty period of the purchased products.

If you contact us through our customer service, we will keep your personal data from the contact (including recordings of monitored calls) for 2 years.

If you consent to the sending of business information, your consent is valid for 4 years or until withdrawn. Likewise, if you consent to us notifying you of the availability of products you follow, your consent will remain in effect until we send you inventory information, but for a maximum of 1 year or until revoked. The consent given with the product evaluation is valid for 6 years or until withdrawn. If you create content related to our blog posts, your consent given by writing the post is valid for 2 years or until revoked. If you decide to participate in a user test or other event organized by us and give your consent, we will process your personal data for 1 year or until withdrawn, including camera or other audio-visual recordings.

If you participate in a prize draw organized by us, your data will be processed for 1 year. If you visit one of our stores or other locations of our company, or their surroundings, the camera recordings will be processed for 90 days from the date of recording. In other cases, the duration of the data management is determined by the purpose of the data management or by the legislation on the protection of personal data. Your personal data will be automatically deleted after the expiry of the periods specified for processing.

5.2. Safety

The personal data we collect and process about you is sent to us in coded form. We use an SSL (secure socket layer) coding system for data transmission. As long as your browser communicates with our server, this system guarantees the security of your personal data. Our websites and other systems we use are secured with appropriate technical and organizational measures against the loss of your personal data and against access by unauthorized persons, as well as against the alteration or distribution of your personal data.

We are constantly developing these measures, while also demanding from our data processors that the systems they use are demonstrably compliant with the GDPR.

If you register on our website, you can only access your customer account after entering the password of your choice. We do not have access to your password as it is stored in an encrypted form that even we cannot decipher.

Therefore, we would like to remind you, among other things, that it is absolutely important not to share your login information with third parties. We recommend that you always log out when you are done with your customer account, especially if you share the device with other users. We are not responsible for misuse of your password, unless we directly cause such a situation.

6. How do we use cookie files?

We also use cookies to ensure that our website functions properly and that our offer is relevant, interesting and user-friendly for you. In order to use cookies, it is necessary that the browser you are using also supports them. However, our website can also function without cookies, albeit to an extremely limited extent and without the use of certain basic functions. Cookies are widely used tools for saving information about the use of websites. These are small text files that are automatically created when you visit a website and saved by your browser on your computer, smartphone or other device. Thanks to certain cookies, we can link your activities on our website to each other - until you close your browser.

However, other cookies remain in your browser or device after the set time and are reactivated each time you visit our website. In addition to cookies, we also use so-called pixels, which are small images that work on the same principle as cookies and are invisible to ordinary users. How long cookies remain in your browser or device depends on your own cookie settings and browser settings. We store the data obtained with the help of cookie files for a maximum of 1 year.

6.1. What cookies do we use?

The cookie files used on our website can be classified into 2 basic types: Permanent, so-called "persistent cookies", which remain in your browser or device for a specified period of time or until you delete them manually. Cookies can also be divided according to their functions as follows: Indispensably necessary cookies, which are technical and functional cookies that are important for the basic operation of the website. Without them, you would not be able to add products to the cart, place an order or log in to your customer account. Analytical cookies that help improve the user experience on our website by understanding how users use the site. They also make it possible to analyze the performance of different sales channels. Cookies for remarketing purposes, which we use to personalize and target ads.

In practice, we use the cookie files indicated above, e.g.: For the proper functioning of the shopping cart, so that you can complete your order as simply and quickly as possible. Recording your login details so you don't have to enter them again. To adapt our website to your needs as best as possible, namely by tracking your visits and movements on our website and the functions you use. Obtaining information about the advertisements you view so that we do not later show you advertisements for products that are not of interest to you.

Certain cookies, including their content, are able to collect information that third parties may later use, e.g. they directly support our advertising activities (so-called third-party cookies). For example, information about products purchased on our website may be viewed by the advertising agency when viewing and customizing the banners that appear on the websites you visit. However, these cookies are anonymized for third parties, so you cannot be identified based on this data.

6.2. How can I restrict cookies?

The setting for the use of cookies is part of the Internet browser you use, but most browsers automatically accept cookies by default. You can reject cookies entirely or limit cookies to the types you choose through your browser. However, this also limits the functionality of our website and you cannot fully use the features we offer, including logging into your customer account. You can also use the browser's incognito mode, which does not completely eliminate the use of cookies, but makes them more anonymous and does not save the list of visited websites. You can find information about the preliminary settings related to cookies at the following links or in the additional documentation of your Internet browser: Chrome, Firefox, Internet Explorer, Android, iPhone and iPad. You can find an effective tool for managing cookies on the website https://www.youronlinechoices.com/hu/.

7. What rights do you have and how can you enforce them?

Just as we have rights and obligations when processing your personal data, you also have certain rights that you can exercise. These rights are:

7.1. Access right

You have the right to request free information about the processing of your personal data: What data do we process, for what purpose and for how long, where do we obtain your data, and to whom do we pass it on? As part of your right of access, you can also request that the data we process be sent to you in a structured, computer-readable format. After personal identification, we will prepare an extract for you, just send your request to the data protection officer (hereinafter "officer")

to your e-mail address: info@thundersell.com.

7.2. Right to rectification

If you consider that the personal data we have processed about you is incorrect or incomplete, you have the right to request rectification from us. We will promptly and immediately correct or supplement your personal data if your request is sent to the Official Person's e-mail address: info@thundersell.com.

7.3. The right to erasure

In certain cases, you can exercise your right to delete your personal data processed by us. Your personal data will be deleted or anonymized immediately. However, this does not apply to the personal data required to fulfill our obligations arising from legal regulations, the retention of which is ordered by legal regulations (e.g. to fulfill an order that has already been placed), or which is necessary to protect our legitimate interests. Your personal data will also be destroyed if this data is no longer necessary for the stated purpose, or if the storage of your personal data is no longer permitted for other legally prescribed reasons. You can request the deletion of your personal data from the Official via the e-mail address info@thundersell.com.

7.4. The right to restrict data processing

In certain cases, you have the right to restrict the processing of your personal data that we process. You can request that the personal data provided by you not be processed further after a certain period of time. You can request the restriction of the processing of your personal data from the Official by email at the following address: info@thundersell.com.

7.5. The right to data portability

You have the right to receive from us all the data you have provided that we process based on your consent. We transmit your personal data in a structured and computer-readable format. We are happy to extract your data in this format, just email your request to the Official at info@thundersell.com.

7.6. The right to object to data processing

You have the right to object to the processing of your personal data based on our legitimate interests. If this concerns data processing for marketing purposes, we will immediately stop processing your personal data, but in other cases based on our legitimate interests and your rights and reasons. We will do this after the review. You can object to data processing by sending a request to the Official Person's email address: info@thundersell.com.

7.7. The right to file a complaint

The exercise of the above rights and procedures shall in no way affect your right to file a complaint with the appropriate supervisory body. You can exercise these rights in particular if you believe that we are processing your personal data without a legal title or in accordance with general legal requirements. Complaints can be submitted to the following body: Thundersell Data Protection and Freedom of Information Authority, headquarters: 1089 Budapest, Golgota u.4.203.épulet 2008. store.

8. Contact

If you have any questions, comments or requests regarding these principles or the processing of your personal data, you may contact the Data Protection Officer at info@thundersell.com at any time. We will process your request immediately, but within 30 days at most. In exceptional cases - especially in the case of complex requests - we have the right to extend this deadline by another two months. However, we will always inform you about the possible extension of the deadline and the reasons for it.

You can also contact us at the address provided in the footer of these Principles or at our customer service.

Our contact details: 1089 Budapest VIII, Golgota u.4.203.épulet 2008. business.Hungary

Customer service: +36 30 110 6226 or info@dollcini.com

9. Validity

These data protection principles are valid and effective as of September 15, 2020.