Privacy notice

This notice explains what personal data we process through our website, why, for how long, and what rights you have.

The data controller

The data controller is Pam-Pam Mix Ipari, Kereskedelmi és Szolgáltató Betéti Társaság (registered seat: 4244 Újfehértó, Széchenyi utca 87/a, Hungary, tax number: 25654101-2-15, company registration number: 15 06 082013).

For any question about data protection you may contact us at pampammix@gmail.com or via the details given on the Contact page.

What data we process, and why

Contact form

Data processed: name, email address, phone number, the text of the message, and the time of submission.

Purpose: answering the enquiry.

Legal basis: your consent, given by ticking the checkbox when submitting the form (GDPR Article 6(1)(a)).

Retention: 24 months after the case is closed, or until consent is withdrawn.

Quote request form

Data processed: name, email address, phone number, the products selected, the text of the message, and the time of submission.

Purpose: assessing the request and preparing a quote.

Legal basis: your consent, and steps taken at your request prior to entering into a contract (GDPR Article 6(1)(a) and (b)).

Retention: 24 months after the quote. If the quote leads to an order, accounting records are kept for 8 years as required by law.

Website operation and statistics

We use strictly necessary cookies without consent, because the website would not work without them. These include the protection of the forms against abuse and remembering your language choice.

We measure anonymous traffic statistics only if you have consented on the cookie bar. The details are in our Cookie notice.

Form submissions are protected by an abuse check and a submission limit. For this the system temporarily processes your IP address, solely to filter out automated submissions, and does not store it afterwards.

Users of the editing interface

The website's editing interface keeps a log of logins and content changes, including the name, IP address and browser identifier of the colleague signing in. This processing serves the security of the website, and its legal basis is the legitimate interest of the controller (GDPR Article 6(1)(f)). It does not apply to visitors.

Who can see your data

Your data is seen by our colleagues, only to the extent required for their work. Beyond that, the following processors act on our behalf:

• Hosting provider: operation of the website and the database, within the European Union.
• Email provider: delivery of the notifications sent by the forms.
• Web developer: during bug fixing and development, with occasional access.
• Google Analytics: only with your consent, for anonymous statistical purposes.
• Accounting: where an invoice is issued, to meet a statutory obligation.

We do not sell your data and do not use it for any purpose beyond those described here. We do not transfer data to third countries; where Google Analytics is used, the provider's own notice governs any such transfer.

Your rights

• Information. You may ask us to tell you what data we hold about you.
• Rectification. You may ask us to correct inaccurate data.
• Erasure. You may ask us to delete your data, where we have no legal reason to keep it.
• Restriction. You may ask us not to use your data for a period.
• Withdrawal of consent. Where we process data based on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing before it.
• Data portability. You may ask for your data in a machine-readable format.
• Objection. You may object to processing based on legitimate interest.

You may submit your request via the contact details given on the Contact page. We respond within one month at the latest.

If you are not satisfied with our answer

You may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information: 1055 Budapest, Falk Miksa utca 9-11., Hungary, ugyfelszolgalat@naih.hu, +36 1 391 1400. You may also seek judicial remedy before the court of your place of residence or stay.

Data security

The website runs over an encrypted (HTTPS) connection. The editing interface can only be accessed with a password and two-factor authentication, and passwords are stored with one-way encryption. The database is backed up daily. The forms are protected by an abuse check and a submission limit.

If a personal data breach occurs and it is likely to result in a risk to you, we notify the authority within 72 hours and inform those affected.

Changes to this notice

If this notice changes substantially, we publish the change on the website. It is worth checking back from time to time.