Second version. Effective from 11 February 2021

Vitaking Kft’s quality policy is based on a solid ethical foundation and includes the handling of personal data in accordance with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of personal data of natural persons and on the free movement of such data (GDPR).

Your personal data is processed by Vitaking Kft. as the data controller.

Contact details of the Data Controller:

Company name: “VITAKING” Ltd. Registered office.

Company registration number: 01-09-985921

Tax number: 13076281-2-42

E-mail: info@vitaking.com

Personal scope of the prospectus: This notice applies to any natural person who visits, registers or purchases from the vitaking.com website operated by Vitaking Kft.

In this policy, we would like to inform you regarding:

• When, what personal data do we need from you.
• Why do we need this data, for what purpose do we need your personal data.
• How long we want to use your data.
• Who else we need to share your data with.
• What rights do you have when we process your personal data.

1, When and what data we need from you?

2, Why do we need this data, for what purpose do we need your personal data?

3, How long we want to use your data?

4, Who else we need to share your information with?

Data Processor: a natural or legal person or an organization without legal personality  who or which, under a contract, processes data on behalf of the controller, who or which processes data.

5, How we protect your data?

At Vitaking Ltd we take the following security measures to protect your data.

At our Veszprém site, lockable cabinets provide physical protection at each workstation. 

Authorisation system assignment helps to ensure that only those who really need to access your data have access to them, both within the building and in terms of the company management system.

We use technical tools, working procedures and training to protect Vitaking’s IT systems. Together, these ensure the most up-to-date and effective protection available at any given time to safeguard the data of the company and its partners. Unauthorised access issue is tackled at several layers. All computers that store data are physically separated from the Internet by means of devices. This is ensured by a multi-layer firewall solution for both the machines stored on our premises in Veszprém and on the server farm.

1. Servers run on server-class hardware with virtualisation.
2. Devices are located in locations accessible only to designated staff.
3. An up-to-date virus and malware protection system is run on the machines.
4. A network monitoring system (Nagios, Zabbix) monitors critical points (servers, network active elements) 24/7 and alerts administrators when it detects downtime, abnormal traffic or load.
5. Administrators have a checklist of weekly tasks, based on which critical points are checked and, if necessary, intervened. Every Tuesday, the administrators discuss and assign the following weekly tasks.
6. Daily backups are made of all computers storing data to a physically separate location. Backups are retained for 3 years.
7. Administrators are constantly training themselves.

6, What rights do you have when we process your personal data?

You have the right to:

1. Access your data under Article 15 of the GDPR and to obtain information about

• The purposes of the processing
• The scope of the data processed
• The data processors to whom your data will be transferred
• The duration of the processing

2. Request rectification of your personal data under Article 16 of the GDPR.

3. You can request the erasure of your personal data under Article 17 of the GDPR, unless the data is necessary for compliance with a legal obligation.

4. You can request the restriction of your personal data under Article 18 of the GDPR if you dispute the accuracy of your data. In this case, the restriction applies for the period of time during which the data controller verifies the accuracy of the data.

7, Remedies in relation to data processing

The data subject may lodge a complaint with the controller about unlawful processing that he or she has experienced, or bring a civil action against the controller before the courts in his or her place of residence.

All data subjects have the right to lodge a complaint with a supervisory authority. National Authority for Data Protection and Freedom of Information (NAIH)

Address: 1125 Budapest, Szilágyi Erzsébet fasor 22/c

Postal address: 1530 Budapest, P.O.Box.:5

E-mail: ugyfelszolgalat@naih.hu

Telephone: +36 (1) 391-1400 fax.: +36 (1) 391-1410

Website: www.naih.hu