Privacy notice

 

 

MAGYAR

PRIVACY NOTICE

regarding the Simple Application and Simple Website

 

The developer and provider of the Simple Application and System, OTP Mobile Ltd (company reg. no. 01-09-174466; seat: 1093 Budapest, Közraktár u. 30-32.; hereafter referred to as: Simple) hereby informs the Users of the data management in the Simple Application, Simple Website (www.simple.hu) and the Simple System as follows, in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council on the General Data Protection Regulation (hereafter referred to as GDPR).

 

The terms herein and the phrases beginning with capital letters are to be understood as those in the General Terms and Conditions on Simple System (hereafter: Simple GTC).

 

Simple is entitled to modify tThe present Privacy Notice in any time. The present Privacy Notice is published pn the Simple Website and also is available in the Simple Application. The present Privacy Notice takes into effect by publishing.

 

1.         What personal data do we manage in the Simple System, for how long, for what purposes and by what authorization?

 

The legal bases for our data processing are the following:

 

a)       GDPR Article 6 (1) a) where the processing is based on the informed consent of the data subject (hereafter referred to as Consent)

b)      GDPR Article 6 (1) b), on where processing is necessary for the performance of a contract to which the data subject is party (hereafter referred to as Conclusion of Contract)

c)       GDPR Article 6 (1) c) where data processing is necessary for the fulfillment of or compliance with a legal obligation of the data controller (e.g. obligations with tax statues – hereafter referred to as Compliance)

d)      GDPR Article 6 (1) f) where data processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, (hereinafter referred to as: Lawful Interest)

e)      the data processing authorization afforded by Article 13/A of Act CVIII of 2001 on Electronic Commerce and on Information Society Services, where data controllers are authorized to process the natural identification data and home address of the recipients without the need for consent, as required for contracts for information society services, for defining their contents, for subsequent amendments and for monitoring performance of these contracts, for invoicing the relevant fees, and for enforcing the claims arising out of or in connection with such contracts., moreover, where data controllers are authorized to process natural identification data and home address for the purposes of invoicing for the fees payable under the contracts for the provision of information society services to the extent related to the use of information society services, and information relating to the date, the duration and the place of using the service. (hereafter referred to as E-Commerce)

 

The legal basis for the data processing is specified below, per data categories and by reference to the elements of the above list. 

 

1.1.    Data managed in general within the Simple System

 

1.1.1.         Regarding data management relating to Simple account, Simple profile and Simple registration

 

A

B

C

D

E

F

Subject

Data Category

Data origin

Purpose of data management

Legal basis of data management

Duration of data management

User registered within Simple

name*

From Subject

a)     Concluding the contract, determination of its content, modification, completion thereof

b)     Invoicing of contractual charges

c)     Claim and law enforcement, fraud prevention and management

d)     User identification

e)     Ensuring communication

 

In case of processing purposes of column D/a) and b): Article 13/A E-commerce Act

 

In case of processing purposes of column D/a), d) and e):

GDPR Article 6 (1) b) Conclusion of Contract

 

In case of processing purposes of column D/b):

GDPR Article 6 (1) c) Fulfilment of legal obligation – billing

 

In case of processing purposes of column D/c):

GDPR Article 6 (1) f) Lawful Interest Fraud prevention and management

For the conclusion of the contract and for invoincing: 8 years from the deletion of Simple account and Simple registration by the User (reason: billing information).

e-mail address*

From Subject

a)    Concluding the contract, determination of its content, modification, completion thereof

b)   Invoicing of contractual charges

f)      Claim and law enforcement, fraud prevention and management

c)    User identification

d)   Ensuring communication

 

In case of processing purposes of column D/a) and b): Article 13/A E-commerce Act

 

In case of processing purposes of column D/a), d) and e):

GDPR Article 6 (1) b) Conclusion of Contract

 

In case of processing purposes of column D/b):

GDPR Article 6 (1) c) Fulfilment of legal obligation – billing

 

In case of processing purposes of column D/c):

GDPR Article 6 (1) f) Lawful Interest

For the conclusion of the contract and for invoincing: 3 months from the deletion of Simple account and Simple registration by the User.

 

By lawful interest: 6 months thereafter.

phone number*

From Subject

a)    User identification

b)   Ensuring communication

GDPR Article 6 (1) b) Conclusion of Contract

For the conclusion of the contract and for invoincing: 3 months from the deletion of Simple account and Simple registration by the User.

password*

From Subject

a)    User identification

b)   Ensuring communication

GDPR Article 6 (1) b) Conclusion of Contract

For the conclusion of the contract and for invoincing: 3 months from the deletion of Simple account and Simple registration by the User.

e-mail address pertaining to a Facebook account(if it differs from the e-mail address of the Simple account)

From Subject

a)    User identification

b)   Ensuring communication

GDPR Article 6 (1) b) Conclusion of Contract

For the conclusion of the contract and for invoincing: 3 months from the deletion of Simple account and Simple registration by the User.

name pertaining to a Facebook acount (if it differs from the name given in the Simple acocunt)

From Subject

a)    User identification

b)   Ensuring communication

GDPR Article 6 (1) b) Conclusion of Contract

For the conclusion of the contract and for invoincing: 3 months from the deletion of Simple account and Simple registration by the User.

avatar pertaining to a Facebook account (profile picture)

From Subject

a)    User identification

b)   Personalizing the User account

 

GDPR Article 6 (1) a) Consent

For the conclusion of the contract and for invoincing: 3 months from the deletion of Simple account and Simple registration by the User.

e-mail address pertaining to a Google account (if it differs from the e-mail address of the Simple account)

From Subject

a)    User identification

b)   Ensuring communication

GDPR Article 6 (1) b) Conclusion of Contract

For the conclusion of the contract and for invoincing: 3 months from the deletion of Simple account and Simple registration by the User.

name pertaining to a Google account (if it differs from the name given in the Simple acocunt)

From Subject

a)    User identification

b)   Ensuring communication

GDPR Article 6 (1) b) Conclusion of Contract

For the conclusion of the contract and for invoincing: 3 months from the deletion of Simple account and Simple registration by the User.

Age data (under 16 years or not) *

From Subject

a)    Ascertaining of parental consent necessity

 

GDPR Article 6 (1) c) Fulfilment of legal obligation – Request of parental consent

For the conclusion of the contract and for invoincing: 3 months from the deletion of Simple account and Simple registration by the User.

Phone identification code

Generated by the data conroller

a)     User identification

b)    Ensuring communication

GDPR Article 6 (1) a) Consent

For the conclusion of the contract: 3 months from the deletion of Simple account and Simple registration by the User.

 

Data marked with * are mandatory to fill in, without these data Simple account registration and the use of Simple System is not possible, the provision of these data is a prerequisite for contracting.

 

Simple is the data controller.

 

Presentation of Lawful Interest: Certain data as indicated above are processed 6 months after the deletion of your Simple account and your Simple registration was effectuated by you, because this period is necessary for the settlement of our contracts with the card companies and cooperating partners, for the examination of the possible fraud-suspicious transactions and for the claim and law enforcement in connection with them. This data processing for the purpose of settlement, fraud prevention and examination and claim and law enforcement does not concern the exercise of your other moral or fundamental rights; however, it is necessary for us and for our cooperating partners to enforce and fulfil our fraud prevention legal obligations set out by law.

The User is entitled to object against the data management based on the aforementioned lawful interest in an e-mail sent to the Simple’s customer service: ugyfelszolgalat@simple.hu.

1.1.2.                    Regarding data management relating to the general use of Simple System

 

A

B

C

D

E

F

Subject

Data Category

Data origin

Purpose of data management

Legal basis of data management

Duration of data management

User registered within Simple

ID of the concluded transaction

From Subject

a)      Concluding the contract, determination of its content, modification, completion thereof

b)      Invoicing of contractual charges

c)     Claim and law enforcement, fraud prevention and management

In case of processing purposes of column D/a) and b): Article 13/A E-commerce Act

 

In case of processing purposes of column D/a) and b):

GDPR Article 6 (1) b) Conclusion of Contract

 

In case of processing purposes of column D/c):

GDPR Article 6 (1) f) Lawful Interest

For the conclusion of the contract and for invoincing: 3 months from the deletion of Simple account and Simple registration by the User.

 

By lawful interest: 6 months thereafter.

price of the concluded transaction

From Subject

a)     Concluding the contract, determination of its content, modification, completion thereof

b)    Invoicing of contractual charges

c)     Claim and law enforcement, fraud prevention and management

 

In case of processing purposes of column D/a) and b): Article 13/A E-commerce Act

 

In case of processing purposes of column D/a) and b):

GDPR Article 6 (1) b) Conclusion of Contract

 

In case of processing purposes of column D/b):

GDPR Article 6 (1) c) Fulfilment of legal obligation – billing

 

In case of processing purposes of column D/c):

GDPR Article 6 (1) f) Lawful Interest

For the conclusion of the contract and for invoincing: 8 years from the deletion of Simple account and Simple registration by the User (reason: billing information).

Subject of the concluded transaction

(purchased product, service)

From Subject

a)     Concluding the contract, determination of its content, modification, completion thereof

b)    Invoicing of contractual charges

c)     Claim and law enforcement, fraud prevention and management

 

In case of processing purposes of column D/a) and b): Article 13/A E-commerce Act

 

In case of processing purposes of column D/a) and b):

GDPR Article 6 (1) b) Conclusion of Contract

 

In case of processing purposes of column D/b):

GDPR Article 6 (1) c) Fulfilment of legal obligation – billing

 

In case of processing purposes of column D/c):

GDPR Article 6 (1) f) Lawful Interest

For the conclusion of the contract and for invoincing: 8 years from the deletion of Simple account and Simple registration by the User (reason: billing information).

 

Shipping address

From Subject

a)     Concluding the contract, determination of its content, modification, completion thereof

b)    Claim and law enforcement, fraud prevention and management

 

In case of processing purpose of column D/a): Article 13/A E-commerce Act

 

In case of processing purpose of column D/a):

GDPR Article 6 (1) b) Conclusion of Contract

 

In case of processing purposes of column D/b):

GDPR Article 6 (1) f) Lawful Interest

For the conclusion of the contract: 3 months from the deletion of Simple account and Simple registration by the User.

 

By lawful interest: 6 months thereafter.

Billing name and address

From Subject

a)     Concluding the contract, determination of its content, modification, completion thereof

b)    Invoicing of contractual charges

c)     Claim and law enforcement, fraud prevention and management

 

In case of processing purposes of column D/a) and b): Article 13/A E-commerce Act

 

In case of processing purposes of column D/a) and b):

GDPR Article 6 (1) b) Conclusion of Contract

 

In case of processing purposes of column D/b):

GDPR Article 6 (1) c) Fulfilment of legal obligation – billing

 

In case of processing purposes of column D/c):

GDPR Article 6 (1) f) Lawful Interest

For the conclusion of the contract and for invoincing: 8 years from the deletion of Simple account and Simple registration by the User (reason: billing information)

 

 

GPS coordinates, if the User has authorized it

From Mobile device

Profiling – displaying of behavioural advertisements, learning about customer preferences

GDPR Article 6 (1) a) Consent

Until the consent is withdrawn.

 

Data marked with * are mandatory to fill in, without these data the use of Simple System is not possible, the provision of these data is a prerequisite for contracting.

 

The User is entitled to object against the data management based on the aforementioned lawful interest in an e-mail sent to the Simple’s customer service: ugyfelszolgalat@simple.hu.

 

Simple is the data controller.

 

1.1.3.                    Regarding data management relating to Simple customer service

 

A

B

C

D

E

F

Subject

Data Category

Data origin

Purpose of data management

Legal basis of data management

Duration of data management

User registered within Simple and turning to the customer service

 

name*

From Subject

a)     User identification

b)    Communication with the User in course of complaint management

c)     Completion of contract

d)    Complaint management

e)    Claim and law enforcement

GDPR Article 6 (1) f) Lawful Interest

Within the general civil law limitation period following the complaint, that is 5 years from the submission of the complaint.

e-mail address*

From Subject

a)     User identification

b)    Communication with the User in course of complaint management

c)     Completion of contract

d)    Complaint management

e)    Claim and law enforcement

GDPR Article 6 (1) f) Lawful Interest

Within the general civil law limitation period following the complaint, that is 5 years from the submission of the complaint.

recorded phone call

From Subject

a)     User identification

b)    Quality assurance

c)     Protection of consumers’ rights

d)    Proof of the content of the complaint

e)    Claim and law enforcement

GDPR Article 6 (1) f) Lawful Interest

Within the general civil law limitation period following the complaint, that is 5 years from the submission of the complaint.

subject of complaint

From Subject

a)     Complaint management

b)    Claim and law enforcement

GDPR Article 6 (1) f) Lawful Interest

Within the general civil law limitation period following the complaint, that is 5 years from the submission of the complaint.

parameters of transaction in question

From Subject

a)     Complaint management

b)    Claim and law enforcement

GDPR Article 6 (1) f) Lawful Interest

Within the general civil law limitation period following the complaint, that is 5 years from the submission of the complaint.

 

Data marked with * are mandatory to fill in.

 

Simple is the data controller.

 

Indication of Lawful Interest in accordance with GDPR Article6 (1) f): the data processing within the scope of making a complaint, examination, settlement and management of the complaint, including the recording of phone calls, is your and our common interest, as well as the interest of the service providers of the services available within Simple Application, since the processing of these data is necessary for the enforcement of our consumer and civil rights and interests in connection with the the purchase made, service used within Simple Application.

 

The processing of your personal data hereunder is not precluded by your right to self-determination of recorded voice, since your personal freedoms are not infringed upon, since at the very beginning of the phonecall, you are duly informed regarding the recording of audio that is to commence, leaving you ample opportunity to decide on continuing with the phonecall, or terminating it. The same services and solutions are also available via e-mail customer service, thus, you have a choice regarding the addressing of your complaint.

 

The User is entitled to object against the data management based on the aforementioned lawful interest in an e-mail sent to the Simple’s customer service: ugyfelszolgalat@simple.hu.

 

1.2.    Personal data managed specifically within the scope of certain services of Simple System

 

1.2.1.                    Parking

 

A

B

C

D

E

F

Subject

Data Category

Data origin

Purpose of data management

Legal basis of data management

Duration of data management

User registered within Simple

Vehicle’s licence plate*

From Subject

a)     Concluding the contract, determination of its content, modification, completion thereof

b)    Invoicing of contractual charges

c)     Claim and law enforcement

In case of processing purposes of column D/a) and b): Article 13/A E-commerce Act

 

In case of processing purposes of column D/a) and b):

GDPR Article 6 (1) b) Conclusion of Contract

 

In case of processing purposes of column D/b):

GDPR Article 6 (1) c) Fulfilment of legal obligation – billing

 

In case of processing purposes of column D/c):

GDPR Article 6 (1) f) Lawful Interest

For the conclusion of the contract: 3 months from the deletion of Simple account and Simple registration by the User.

 

By lawful interest: 6 months thereafter.

Vehicle’s country denomination*

From Subject

a)     Concluding the contract, determination of its content, modification, completion thereof

b)    Invoicing of contractual charges

c)     Claim and law enforcement

In case of processing purposes of column D/a) and b): Article 13/A E-commerce Act

 

In case of processing purposes of column D/a) and b):

GDPR Article 6 (1) b) Conclusion of Contract

 

In case of processing purposes of column D/c):

GDPR Article 6 (1) f) Lawful Interest

For the conclusion of the contract: 3 months from the deletion of Simple account and Simple registration by the User.

 

By lawful interest: 6 months thereafter.

Parking location*

From Subject

a)     Concluding the contract, determination of its content, modification, completion thereof

b)    Invoicing of contractual charges

c)     Claim and law enforcement

In case of processing purposes of column D/a) and b): Article 13/A E-commerce Act

 

In case of processing purposes of column D/a) and b):

GDPR Article 6 (1) b) Conclusion of Contract

 

In case of processing purposes of column D/c):

GDPR Article 6 (1) f) Lawful Interest

For the conclusion of the contract and for invoincing: 3 months from the deletion of Simple account and Simple registration by the User.

 

By lawful interest: 6 months thereafter.

 

Data marked with * are mandatory to fill in, without these data the use of the Parking function is not possible.

 

The data controller is Simple.

 

The User is entitled to object against the data management based on the aforementioned lawful interest in an e-mail sent to the Simple’s customer service: ugyfelszolgalat@simple.hu.

 

1.2.2.         Purchase of motorway vignettes

 

A

B

C

D

E

F

Subject

Data Category

Data origin

Purpose of data management

Legal basis of data management

Duration of data management

User registered within Simple

Vehicle’s licence plate *

From Subject

a)      Concluding the contract, determination of its content, modification, completion thereof

b)     Invoicing of contractual charges

c)      Claim and law enforcement

In case of processing purposes of column D/a) and b): Article 13/A E-commerce Act

 

In case of processing purposes of column D/a) and b):

GDPR Article 6 (1) b) Conclusion of Contract

 

In case of processing purposes of column D/b):

GDPR Article 6 (1) c) Fulfilment of legal obligation – billing

 

In case of processing purposes of column D/c):

GDPR Article 6 (1) f) Lawful Interest

For the conclusion of the contract: 3 months from the deletion of Simple account and Simple registration by the User.

 

By lawful interest: 6 months thereafter.

Vehicle’s country denomination *

From Subject

a)      Concluding the contract, determination of its content, modification, completion thereof

b)     Invoicing of contractual charges

c)      Claim and law enforcement

In case of processing purposes of column D/a) and b): Article 13/A E-commerce Act

 

In case of processing purposes of column D/a) and b):

GDPR Article 6 (1) b) Conclusion of Contract

 

In case of processing purposes of column D/c):

GDPR Article 6 (1) f) Lawful Interest

For the conclusion of the contract: 3 months from the deletion of Simple account and Simple registration by the User.

 

By lawful interest: 6 months thereafter.

Type of the Vehicle*

From Subject

a)      Concluding the contract, determination of its content, modification, completion thereof

b)     Invoicing of contractual charges

c)      Claim and law enforcement

In case of processing purposes of column D/a) and b): Article 13/A E-commerce Act

 

In case of processing purposes of column D/a) and b):

GDPR Article 6 (1) b) Conclusion of Contract

 

In case of processing purposes of column D/c):

GDPR Article 6 (1) f) Lawful Interest

For the conclusion of the contract: 3 months from the deletion of Simple account and Simple registration by the User.

 

By lawful interest: 6 months thereafter.

Data of the purchased vignette (type, period of validity)*

From Subject

a)      Concluding the contract, determination of its content, modification, completion thereof

b)     Invoicing of contractual charges

c)      Claim and law enforcement

In case of processing purposes of column D/a) and b): Article 13/A E-commerce Act

 

In case of processing purposes of column D/a) and b):

GDPR Article 6 (1) b) Conclusion of Contract

 

In case of processing purposes of column D/c):

GDPR Article 6 (1) f) Lawful Interest

For the conclusion of the contract: 3 months from the deletion of Simple account and Simple registration by the User.

 

By lawful interest: 6 months thereafter.

 

Data marked with * are mandatory to fill in, without these data the use of the Purchase of motorway vignette function is not possible.

 

The data controller is Simple.

 

The User is entitled to object against the data management based on the aforementioned lawful interest in an e-mail sent to the Simple’s customer service: ugyfelszolgalat@simple.hu.

 

1.2.3.         Food Courier, ordering food

 

A

B

C

D

E

F

Subject

Data Category

Data origin

Purpose of data management

Legal basis of data management

Duration of data management

User registered within Simple

Shipping address*

From Subject

a)      Concluding the contract, determination of its content, modification, completion thereof

b)     Invoicing of contractual charges

c)      Claim and law enforcement

In case of processing purposes of column D/a) and b): Article 13/A E-commerce Act

 

In case of processing purposes of column D/a) and b):

GDPR Article 6 (1) b) Conclusion of Contract

 

In case of processing purposes of column D/c):

GDPR Article 6 (1) f) Lawful Interest

For the conclusion of the contract: 3 months from the deletion of Simple account and Simple registration by the User.

 

By lawful interest: 6 months thereafter.

 

Data marked with * are mandatory to fill in, without these data the use of the Food Courier function is not possible.

 

With respect to the data listed in the present section Simple is to be construed as data processor of Euro Hungary LLC, service provider of pizza.hu and Viala LLC, service provider of netpincer.hu ,and processes these data as data processor. The data controller of these data is Euro Hungary LLC.

 

The User is entitled to object against the data management based on the aforementioned lawful interest in an e-mail sent to the Simple’s customer service: ugyfelszolgalat@simple.hu.

 

1.2.4.         Bookline order

 

A

B

C

D

E

F

Subject

Data Category

Data origin

Purpose of data management

Legal basis of data management

Duration of data management

User registered within Simple

Data of Bookline account (name, e-mail address)*

From Subject

a)      Concluding the contract, determination of its content, modification, completion thereof

b)     Invoicing of contractual charges

c)      Claim and law enforcement

In case of processing purposes of column D/a) and b): Article 13/A E-commerce Act

 

In case of processing purposes of column D/a) and b):

GDPR Article 6 (1) b) Conclusion of Contract

 

In case of processing purposes of column D/c):

GDPR Article 6 (1) f) Lawful Interest

For the conclusion of the contract: 3 months from the deletion of Simple account and Simple registration by the User.

 

By lawful interest: 6 months thereafter.

Mode of shipping*

From Subject

a)      Concluding the contract, determination of its content, modification, completion thereof

b)     Invoicing of contractual charges

c)      Claim and law enforcement

In case of processing purposes of column D/a) and b): Article 13/A E-commerce Act

 

In case of processing purposes of column D/a) and b):

GDPR Article 6 (1) b) Conclusion of Contract

 

In case of processing purposes of column D/c):

GDPR Article 6 (1) f) Lawful Interest

For the conclusion of the contract and for invoincing: 3 months from the deletion of Simple account and Simple registration by the User.

 

By lawful interest: 6 months thereafter.

Shipping address*

From Subject

a)      Concluding the contract, determination of its content, modification, completion thereof

b)     Claim and law enforcement

In case of processing purpose of column D/a): Article 13/A E-commerce Act

 

In case of processing purpose of column D/a):

GDPR Article 6 (1) b) Conclusion of Contract

 

In case of processing purpose of column D/c):

GDPR Article 6 (1) f) Lawful Interest

For the conclusion of the contract and for invoincing: 3 months from the deletion of Simple account and Simple registration by the User.

 

By lawful interest: 6 months thereafter.

Order name*

From Subject

a)      Concluding the contract, determination of its content, modification, completion thereof

b)     Claim and law enforcement

In case of processing purpose of column D/a): Article 13/A E-commerce Act

 

In case of processing purpose of column D/a):

GDPR Article 6 (1) b) Conclusion of Contract

 

In case of processing purpose of column D/c):

GDPR Article 6 (1) f) Lawful Interest

For the conclusion of the contract and for invoincing: 3 months from the deletion of Simple account and Simple registration by the User.

 

By lawful interest: 6 months thereafter.

 

Data marked with * are mandatory to fill in, without these data the use of the Bookline order function is not possible.

 

With respect to the data listed in the present section Simple is to be construed as data processor of Libri-Bookline LLC. operator of bookline.hu online webshop, and processes these data as data processor. The data controller of these data is Libri-Bookline LLC.

 

The User is entitled to object against the data management based on the aforementioned lawful interest in an e-mail sent to the Simple’s customer service: ugyfelszolgalat@simple.hu.

 

1.2.5.         Taxi order

 

A

B

C

D

E

F

Subject

Data Category

Data origin

Purpose of data management

Legal basis of data management

Duration of data management

User registered within Simple

Taxi order address*

From Subject

a)      Concluding the contract, determination of its content, modification, completion thereof

b)     Claim and law enforcement

In case of processing purpose of column D/a): Article 13/A E-commerce Act

 

In case of processing purpose of column D/a):

GDPR Article 6 (1) b) Conclusion of Contract

 

In case of processing purpose of column D/c):

GDPR Article 6 (1) f) Lawful Interest

For the conclusion of the contract and for invoincing: 3 months from the deletion of Simple account and Simple registration by the User.

 

By lawful interest: 6 months thereafter.

Phone number*

From Subject

a)      Concluding the contract, determination of its content, modification, completion thereof

b)     Communication with User

c)      Claim and law enforcement

In case of processing purpose of column D/a): Article 13/A E-commerce Act

 

In case of processing purpose of column D/a):

GDPR Article 6 (1) b) Conclusion of Contract

 

In case of processing purpose of column D/c):

GDPR Article 6 (1) f) Lawful Interest

For the conclusion of the contract and for invoincing: 3 months from the deletion of Simple account and Simple registration by the User.

 

By lawful interest: 6 months thereafter.

Order name*

From Subject

a)      Concluding the contract, determination of its content, modification, completion thereof

b)     Claim and law enforcement

In case of processing purpose of column D/a): Article 13/A E-commerce Act

 

In case of processing purpose of column D/a):

GDPR Article 6 (1) b) Conclusion of Contract

 

In case of processing purpose of column D/c):

GDPR Article 6 (1) f) Lawful Interest

For the conclusion of the contract and for invoincing: 3 months from the deletion of Simple account and Simple registration by the User.

 

By lawful interest: 6 months thereafter.

 

Data marked with * are mandatory to fill in, without these data the use of the Taxi order function is not possible.

 

With respect to the data listed in the present section Simple is to be construed as data processor of Főtaxi Ltd. service provider of Főtaxi, and processes these data as data processor. The data controller of these data is Főtaxi Ltd.

 

The User is entitled to object against the data management based on the aforementioned lawful interest in an e-mail sent to the Simple’s customer service: ugyfelszolgalat@simple.hu.

 

 

1.2.6.         OTP Health Fund balance check and upload

 

A

B

C

D

E

F

Subject

Data Category

Data origin

Purpose of data management

Legal basis of data management

Duration of data management

User registered within Simple

OTP EP card number*

From Subject

a)   Concluding the contract, determination of its content, modification, completion thereof

b)  User identification

c)   Claim and law enforcement

In case of processing purposes of column D/a) and b):

GDPR Article 6 (1) b) Conclusion of Contract

 

In case of processing purposes of column D/c):

GDPR Article 6 (1) f) Lawful Interest

For the conclusion of the contract and for invoincing: 3 months from the deletion of Simple account and Simple registration by the User.

 

By lawful interest: 6 months thereafter.

OTP EP card telecode*

From Subject

a)   Concluding the contract, determination of its content, modification, completion thereof

b)  User identification

c)   Claim and law enforcement

In case of processing purposes of column D/a) and b):

GDPR Article 6 (1) b) Conclusion of Contract

 

In case of processing purposes of column D/c):

GDPR Article 6 (1) f) Lawful Interest

For the conclusion of the contract and for invoincing: 3 months from the deletion of Simple account and Simple registration by the User.

 

By lawful interest: 6 months thereafter.

OTP EP card balance

OTP Országos Egészség- és Önsegélyező Pénztár (National Health and Self-care Fund)

a)   Concluding the contract, determination of its content, modification, completion thereof

In case of processing purposes of column D/a) and b):

GDPR Article 6 (1) b) Conclusion of Contract

 

In case of processing purposes of column D/c):

GDPR Article 6 (1) f) Lawful Interest

For the conclusion of the contract and for invoincing: 3 months from the deletion of Simple account and Simple registration by the User.

 

By lawful interest: 6 months thereafter.

OTP EP card charged amount*

From Subject

b)  Concluding the contract, determination of its content, modification, completion thereof

c)   User identification

d)  Claim and law enforcement

In case of processing purposes of column D/a) and b):

GDPR Article 6 (1) b) Conclusion of Contract

 

In case of processing purposes of column D/c):

GDPR Article 6 (1) f) Lawful Interest

For the conclusion of the contract and for invoincing: 3 months from the deletion of Simple account and Simple registration by the User.

 

By lawful interest: 6 months thereafter.

 

Data marked with * are mandatory to fill in, without these data the use of the OTP EP card check and upload function is not possible.

 

With respect to the data listed in the present section Simple is to be construed as data processor of OTP National Health and Self-care Fund, and processes these data as data processor. The data controller of these data is OTP National Health and Self-care Fund.

 

The User is entitled to object against the data management based on the aforementioned lawful interest in an e-mail sent to the Simple’s customer service: ugyfelszolgalat@simple.hu.

 

1.2.7.         Loyalty Card

 

A

B

C

D

E

F

Subject

Data Category

Data origin

Purpose of data management

Legal basis of data management

Duration of data management

User registered within Simple

Data of the saved Loyalty Card *

From Subject

Concluding the contract, determination of its content, modification, completion thereof

 

GDPR Article 6 (1) b) Conclusion of Contract

 

3 months from the deletion of Simple account and Simple registration by the User.

 

Data marked with * are mandatory to fill in, without these data the use of the Loyalty Card function is not possible.

 

Simple is the data controller.

 

Use of the Loyalty Card function is prohibited for the purpose of fixing and saving any card eligible for the identification of a person, in particular ID card, address card, driving license, passport, tax ID card, Social security card, student crd, EU social security card, other ID card containing personal data with or without photo, entering card. In case of fixing and saving such cards as Loyalty Cards, Simple is entitled – but not obliged – to erasure them from the Simple System. Simple does not undertake to store such kind of cards or to manage personal data in connection with those cards; Simple does not undertake any responsibility or liability for that and excludes its liability regarding that.

 

In case of fixing, registering and activating the Costa Coffee loyalty card in the Loyalty card function – according to the contract between Simple and Costa Coffee – the Simple manages, stores and transfer the Costa Coffee card number, e-mail address, full name of card owner as well as the optional data such as birthdate, zip code and store id. The aim, legal basis and duration of those data management is as same as indicated in the above chart of other loyalty card data. In case of registering Costa Coffee loyalty card Costa Coffee transfers the loyalty points to be given after the purchase with the card to the Simple system; Simple stores those data connected to the card.

 

1.2.8.         Wallet

 

1.2.8.1.    Support for bank transfer

 

A

B

C

D

E

F

Subject

Data Category

Data origin

Purpose of data management

Legal basis of data management

Duration of data management

User registered within Simple

Number of the sender bank card registered within Simple*

From Subject

a)     Concluding the contract, determination of its content, modification, completion thereof

b)     User identification

c)     Claim and law enforcement, prevention and management of fraud

In case of processing purposes of column D/a) and b):

GDPR Article 6 (1) b) Conclusion of Contract

 

In case of processing purposes of column D/c):

GDPR Article 6 (1) f) Lawful Interest

For the conclusion of the contract and for invoincing: 3 months from the deletion of Simple account and Simple registration by the User.

 

By lawful interest: 6 months thereafter.

Holder of the recipient bank card

 

Number of the recipient bank card*

From Simple User

a)     Concluding the contract, determination of its content, modification, completion thereof

b)     User identification

c)     Claim and law enforcement, prevention and management of fraud

In case of processing purposes of column D/a) and b):

GDPR Article 6 (1) b) Conclusion of Contract

 

In case of processing purposes of column D/c):

GDPR Article 6 (1) f) Lawful Interest

For the conclusion of the contract and for invoincing: 3 months from the deletion of Simple account and Simple registration by the User.

 

By lawful interest: 6 months thereafter.

Holder of the recipient bank card

 

Recipient Simple User’s e-mail address*

From Simple User

a)     Concluding the contract, determination of its content, modification, completion thereof

b)     User identification

c)     Claim and law enforcement, prevention and management of fraud

In case of processing purposes of column D/a) and b):

GDPR Article 6 (1) b) Conclusion of Contract

 

In case of processing purposes of column D/c):

GDPR Article 6 (1) f) Lawful Interest

For the conclusion of the contract and for invoincing: 3 months from the deletion of Simple account and Simple registration by the User.

 

By lawful interest: 6 months thereafter.

 

Data marked with * are mandatory to fill in, without these data the use of the Support for bank transfer function is not possible.

 

With respect to the data listed in the present section Simple is to be construed as data processor of OTP Bank Plc, and processes these data as data processor. The data controller of these data is OTP Bank Plc.

 

The User is entitled to object against the data management based on the aforementioned lawful interest in an e-mail sent to the Simple’s customer service: ugyfelszolgalat@simple.hu.

 

1.2.8.2.    Banking balance inquiry

 

A

B

C

D

E

F

Subject

Data Category

Data origin

Purpose of data management

Legal basis of data management

Duration of data management

User registered within Simple

Number of the sender bank card registered within Simple*

From Subject

a)     Concluding the contract, determination of its content, modification, completion thereof

b)    User identification

c)     Claim and law enforcement

In case of processing purposes of column D/a) and b):

GDPR Article 6 (1) b) Conclusion of Contract

 

In case of processing purposes of column D/c):

GDPR Article 6 (1) f) Lawful Interest

For the conclusion of the contract and for invoincing: 3 months from the deletion of Simple account and Simple registration by the User.

 

By lawful interest: 6 months thereafter.

account balance

From OTP Bank Plc.

a)     Concluding the contract, determination of its content, modification, completion thereof

b)    Claim and law enforcement

In case of processing purpose of column D/a):

GDPR Article 6 (1) b) Conclusion of Contract

 

In case of processing purposes of column D/b):

GDPR Article 6 (1) f) Lawful Interest

For the conclusion of the contract and for invoincing: 3 months from the deletion of Simple account and Simple registration by the User.

 

By lawful interest: 6 months thereafter.

 

Data marked with * are mandatory to fill in, without these data the use of the Banking balance inquiry function is not possible.

 

With respect to the data listed in the present section Simple is to be construed as data processor of OTP Bank Plc, and processes these data as data processor. The data controller of these data is OTP Bank Plc.

 

The User is entitled to object against the data management based on the aforementioned lawful interest in an e-mail sent to the Simple’s customer service: ugyfelszolgalat@simple.hu.

 

1.2.8.3.               Bank card registration within Simple System

 

A

B

C

D

E

F

Subject

Data Category

Data origin

Purpose of data management

Legal basis of data management

Duration of data management

User registered within Simple

name on bank card*

From Subject

a)     Concluding the contract, determination of its content, modification, completion thereof

b)    User identification

c)     Claim and law enforcement, prevention and management of fraud

In case of processing purposes of column D/a) and b):

GDPR Article 6 (1) b) Conclusion of Contract

 

In case of processing purposes of column D/c):

GDPR Article 6 (1) f) Lawful Interest

For the conclusion of the contract: 3 months from the deletion of Simple account and Simple registration by the User.

 

By lawful interest: 6 months thereafter.

number of bank card*

From Subject

a)     Concluding the contract, determination of its content, modification, completion thereof

b)    User identification

c)     Claim and law enforcement, prevention and management of fraud

In case of processing purposes of column D/a) and b):

GDPR Article 6 (1) b) Conclusion of Contract

 

In case of processing purposes of column D/c):

GDPR Article 6 (1) f) Lawful Interest

For the for invoincing: 3 months from the deletion of Simple account and Simple registration by the User.

 

By lawful interest: 6 months thereafter.

expiration date of bank card*

From Subject

a)     Concluding the contract, determination of its content, modification, completion thereof

b)    User identification

c)     Claim and law enforcement, prevention and management of fraud

In case of processing purposes of column D/a) and b):

GDPR Article 6 (1) b) Conclusion of Contract

 

In case of processing purposes of column D/c):

GDPR Article 6 (1) f) Lawful Interest

For the conclusion of the contract: 3 months from the deletion of Simple account and Simple registration by the User.

 

By lawful interest: 6 months thereafter.

name of the bank issuing the bank card

 

From Subject

a)     Concluding the contract, determination of its content, modification, completion thereof

b)    User identification

c)     Claim and law enforcement, prevention and management of fraud

In case of processing purposes of column D/a) and b):

GDPR Article 6 (1) b) Conclusion of Contract

 

In case of processing purposes of column D/c):

GDPR Article 6 (1) f) Lawful Interest

For the conclusion of the contract: 3 months from the deletion of Simple account and Simple registration by the User.

 

By lawful interest: 6 months thereafter.

bank card CVV/CVC code*

From Subject

a)     Concluding the contract, determination of its content, modification, completion thereof

b)    User identification

c)     Claim and law enforcement, prevention and management of fraud

In case of processing purposes of column D/a) and b):

GDPR Article 6 (1) b) Conclusion of Contract

 

In case of processing purposes of column D/c):

GDPR Article 6 (1) f) Lawful Interest

For the conclusion of the contract: 3 months from the deletion of Simple account and Simple registration by the User.

 

By lawful interest: 6 months thereafter.

name of bank card

From Subject

a)     Concluding the contract, determination of its content, modification, completion thereof

GDPR Article 6 (1) b) Conclusion of Contract

For the conclusion of the contract: 3 months from the deletion of Simple account and Simple registration by the User.

 

Data marked with * are mandatory to fill in, without these data the use of the Bank card registration function is not possible.

 

Simple is the data controller.

 

The User is entitled to object against the data management based on the aforementioned lawful interest in an e-mail sent to the Simple’s customer service: ugyfelszolgalat@simple.hu.

 

1.2.8.4.    NFC-payment

 

A

B

C

D

E

F

Subject

Data Category

Data origin

Purpose of data management

Legal basis of data management

Duration of data management

User registered within Simple

name on the bank card*

From Subject

a) Concluding the contract, determination of its content, modification, completion thereof

b)     User identification

c)     Claim and law enforcement, prevention and management of fraud

In case of processing purposes of column D/a) and b):

GDPR Article 6 (1) b) Conclusion of Contract

 

In case of processing purposes of column D/c):

GDPR Article 6 (1) f) Lawful Interest

For the conclusion of the contract and for invoincing: 3 months from the deletion of Simple account and Simple registration by the User.

 

By lawful interest: 6 months thereafter.

number of the bank card*

From Subject

a)     Concluding the contract, determination of its content, modification, completion thereof

b)     User identification

c)     Claim and law enforcement, prevention and management of fraud

In case of processing purposes of column D/a) and b):

GDPR Article 6 (1) b) Conclusion of Contract

 

In case of processing purposes of column D/c):

GDPR Article 6 (1) f) Lawful Interest

For the conclusion of the contract and for invoincing: 3 months from the deletion of Simple account and Simple registration by the User.

 

By lawful interest: 6 months thereafter.

expiration date of bank card *

From Subject

a)     Concluding the contract, determination of its content, modification, completion thereof

b)     User identification

c)     Claim and law enforcement, prevention and management of fraud

In case of processing purposes of column D/a) and b):

GDPR Article 6 (1) b) Conclusion of Contract

 

In case of processing purposes of column D/c):

GDPR Article 6 (1) f) Lawful Interest

For the conclusion of the contract and for invoincing: 3 months from the deletion of Simple account and Simple registration by the User.

 

By lawful interest: 6 months thereafter.

name of the bank issuing the bank card

 

From Subject

a)     Concluding the contract, determination of its content, modification, completion thereof

b)     User identification

c)     Claim and law enforcement, prevention and management of fraud

In case of processing purposes of column D/a) and b):

GDPR Article 6 (1) b) Conclusion of Contract

 

In case of processing purposes of column D/c):

GDPR Article 6 (1) f) Lawful Interest

For the conclusion of the contract and for invoincing: 3 months from the deletion of Simple account and Simple registration by the User.

 

By lawful interest: 6 months thereafter.

bank card CVV/CVC code*

From Subject

a)     Concluding the contract, determination of its content, modification, completion thereof

b)     User identification

c)     Claim and law enforcement, prevention and management of fraud

In case of processing purposes of column D/a) and b):

GDPR Article 6 (1) b) Conclusion of Contract

 

In case of processing purposes of column D/c):

GDPR Article 6 (1) f) Lawful Interest

For the conclusion of the contract and for invoincing: 3 months from the deletion of Simple account and Simple registration by the User.

 

By lawful interest: 6 months thereafter.

phone number*

From Subject

a)     Concluding the contract, determination of its content, modification, completion thereof

b)     User identification

c)     Transaction authentication

d)     Claim and law enforcement, prevention and management of fraud

In case of processing purposes of column D/a), b) and c):

GDPR Article 6 (1) b) Conclusion of Contract

 

In case of processing purposes of column D/d):

GDPR Article 6 (1) f) Lawful Interest

For the conclusion of the contract and for invoincing: 3 months from the deletion of Simple account and Simple registration by the User.

 

By lawful interest: 6 months thereafter.

 

Data marked with * are mandatory to fill in, without these data the use of NFC-payment function is not possible.

 

OTP Bank Plc. is the data controller, Simple processes the data of the bank card suitable for NFC-payment on behalf of OTP Bank Plc.

 

The User is entitled to object against the data management based on the aforementioned lawful interest in an e-mail sent to the Simple’s customer service: ugyfelszolgalat@simple.hu.

 

1.2.8.5.    Simple card payment

 

A

B

C

D

E

F

Subject

Data Category

Data origin

Purpose of data management

Legal basis of data management

Duration of data management

User registered within Simple

name

From Subject

a)     Concluding the contract, determination of its content, modification, completion thereof

b)    User identification

c)     Claim and law enforcement, prevention and management of fraud

 

In case of processing purposes of column D/a) and b):

Article 13/A E-commerce Act

 

In case of processing purposes of column D/a) and b):

GDPR Article 6 (1) b) Conclusion of Contract

 

In case of processing purposes of column D/c):

GDPR Article 6 (1) f) Lawful Interest

 

In case of processing purposes of column D/ b): GDPR Article 6 (1) c) Fulfilment of legal obligation – identification as per the Credit Institutotions Act

For the conclusion of the contract: 3 months from the deletion of Simple account and Simple registration by the User.

 

By lawful interest: 6 months thereafter

address

From Subject

a)     Concluding the contract, determination of its content, modification, completion thereof

b)    User identification

c)     Claim and law enforcement, prevention and management of fraud

 

In case of processing purposes of column D/a) and b):

Article 13/A E-commerce Act

 

In case of processing purposes of column D/a) and b):

GDPR Article 6 (1) b) Conclusion of Contract

 

In case of processing purposes of column D/c):

GDPR Article 6 (1) f) Lawful Interest

 

In case of processing purposes of column D/ b): GDPR Article 6 (1) c) Fulfilment of legal obligation – identification as per the Credit Institutotions Act

For the conclusion of the contract: 3 months from the deletion of Simple account and Simple registration by the User.

 

By lawful interest: 6 months thereafter

date of birth

From Subject

a)     Concluding the contract, determination of its content, modification, completion thereof

b)    User identification

c)     Claim and law enforcement, prevention and management of fraud

 

In case of processing purposes of column D/a) and b):

Article 13/A E-commerce Act

 

In case of processing purposes of column D/a) and b):

GDPR Article 6 (1) b) Conclusion of Contract

 

In case of processing purposes of column D/c):

GDPR Article 6 (1) f) Lawful Interest

 

In case of processing purposes of column D/ b): GDPR Article 6 (1) c) Fulfilment of legal obligation – identification as per the Credit Institutotions Act

For the conclusion of the contract: 3 months from the deletion of Simple account and Simple registration by the User.

 

By lawful interest: 6 months thereafter

phone number

From Subject

a)     Concluding the contract, determination of its content, modification, completion thereof

b)    User identification

c)     Claim and law enforcement, prevention and management of fraud

 

In case of processing purposes of column D/a) and b):

Article 13/A E-commerce Act

 

In case of processing purposes of column D/a) and b):

GDPR Article 6 (1) b) Conclusion of Contract

 

In case of processing purposes of column D/c):

GDPR Article 6 (1) f) Lawful Interest

 

In case of processing purposes of column D/ b): GDPR Article 6 (1) c) Fulfilment of legal obligation – identification as per the Credit Institutotions Act

For the conclusion of the contract: 3 months from the deletion of Simple account and Simple registration by the User.

 

By lawful interest: 6 months thereafter

e-mail address

From Subject

a)     Concluding the contract, determination of its content, modification, completion thereof

b)    User identification

c)     Claim and law enforcement, prevention and management of fraud

In case of processing purposes of column D/a) and b):

Article 13/A E-commerce Act

 

In case of processing purposes of column D/a) and b):

GDPR Article 6 (1) b) Conclusion of Contract

 

In case of processing purposes of column D/c):

GDPR Article 6 (1) f) Lawful Interest

 

In case of processing purposes of column D/ b): GDPR Article 6 (1) c) Fulfilment of legal obligation – identification as per the Credit Institutotions Act

For the conclusion of the contract: 3 months from the deletion of Simple account and Simple registration by the User.

 

By lawful interest: 6 months thereafter

name on the bank card*

from OTP Bank Plc.

a)     Concluding the contract, determination of its content, modification, completion thereof

b)    User identification

c)     Claim and law enforcement, prevention and management of fraud

In case of processing purposes of column D/a) and b):

GDPR Article 6 (1) b) Conclusion of Contract

 

In case of processing purposes of column D/c):

GDPR Article 6 (1) f) Lawful Interest

For the conclusion of the contract: 3 months from the deletion of Simple account and Simple registration by the User.

 

By lawful interest: 6 months thereafter

number of bank card*

from OTP Bank Plc.

a)     Concluding the contract, determination of its content, modification, completion thereof

b)    User identification

c)     Claim and law enforcement, prevention and management of fraud

In case of processing purposes of column D/a) and b):

GDPR Article 6 (1) b) Conclusion of Contract

 

In case of processing purposes of column D/c):

GDPR Article 6 (1) f) Lawful Interest

For the conclusion of the contract and for invoincing: 3 months from the deletion of Simple account and Simple registration by the User.

 

By lawful interest: 6 months thereafter

expiration date of bank card*

from OTP Bank Plc.

a)     Concluding the contract, determination of its content, modification, completion thereof

b)    User identification

c)     Claim and law enforcement, prevention and management of fraud

In case of processing purposes of column D/a) and b):

GDPR Article 6 (1) b) Conclusion of Contract

 

In case of processing purposes of column D/c):

GDPR Article 6 (1) f) Lawful Interest

For the conclusion of the contract: 3 months from the deletion of Simple account and Simple registration by the User.

 

By lawful interest: 6 months thereafter

name of the bank issuing the bank card

 

from OTP Bank Plc.

a)     Concluding the contract, determination of its content, modification, completion thereof

b)    Claim and law enforcement, prevention and management of fraud

In case of processing purposes of column D/a) and b):

GDPR Article 6 (1) b) Conclusion of Contract

 

In case of processing purposes of column D/c):

GDPR Article 6 (1) f) Lawful Interest

For the conclusion of the contract: 3 months from the deletion of Simple account and Simple registration by the User.

 

By lawful interest: 6 months thereafter

bank card CVV/CVC code*

from OTP Bank Plc.

a)     Concluding the contract, determination of its content, modification, completion thereof

b)    User identification

c)     Claim and law enforcement, prevention and management of fraud

In case of processing purposes of column D/a) and b):

GDPR Article 6 (1) b) Conclusion of Contract

 

In case of processing purposes of column D/c):

GDPR Article 6 (1) f) Lawful Interest

For the conclusion of the contract: 3 months from the deletion of Simple account and Simple registration by the User.

 

By lawful interest: 6 months thereafter

 

Data marked with * are mandatory to fill in, without these data the issuing of Simple Card may not be ordered.

 

OTP Bank Plc. is the data controller, Simple processes the data of Simple Card on behalf of OTP Bank Plc.

 

The User is entitled to object against the data management based on the aforementioned lawful interest in an e-mail sent to the Simple’s customer service: ugyfelszolgalat@simple.hu.

 

1.2.9.         SimplePay Hero Wallet

 

A

B

C

D

E

F

Subject

Data Category

Data origin

Purpose of data management

Legal basis of data management

Duration of data management

User registered within Simple

name on the bank card*

From Subject

a)     Concluding the contract, determination of its content, modification, completion thereof

b)    User identification

c)     Claim and law enforcement, prevention and management of fraud

In case of processing purposes of column D/a) and b):

GDPR Article 6 (1) b) Conclusion of Contract

 

In case of processing purposes of column D/c):

GDPR Article 6 (1) f) Lawful Interest

For the conclusion of the contract: 3 months from the deletion of Simple account and Simple registration by the User.

 

By lawful interest: 6 months thereafter

number of the bank card*

From Subject

a)     Concluding the contract, determination of its content, modification, completion thereof

b)    User identification

c)     Claim and law enforcement, prevention and management of fraud

In case of processing purposes of column D/a) and b):

GDPR Article 6 (1) b) Conclusion of Contract

 

In case of processing purposes of column D/c):

GDPR Article 6 (1) f) Lawful Interest

For the conclusion of the contract: 3 months from the deletion of Simple account and Simple registration by the User.

 

By lawful interest: 6 months thereafter

expiration date of the bank card*

From Subject

a)     Concluding the contract, determination of its content, modification, completion thereof

b)    User identification

c)     Claim and law enforcement, prevention and management of fraud

In case of processing purposes of column D/a) and b):

GDPR Article 6 (1) b) Conclusion of Contract

 

In case of processing purposes of column D/c):

GDPR Article 6 (1) f) Lawful Interest

For the conclusion of the contract: 3 months from the deletion of Simple account and Simple registration by the User.

 

By lawful interest: 6 months thereafter

name of the bank issuing the bank card

 

From Subject

a)     Concluding the contract, determination of its content, modification, completion thereof

b)    Claim and law enforcement, prevention and management of fraud

In case of processing purpose of column D/a)

GDPR Article 6 (1) b) Conclusion of Contract

 

In case of processing purposes of column D/b):

GDPR Article 6 (1) f) Lawful Interest

For the conclusion of the contract: 3 months from the deletion of Simple account and Simple registration by the User.

 

By lawful interest: 6 months thereafter

bank card CVV/CVC code*

From Subject

a)     Concluding the contract, determination of its content, modification, completion thereof

b)    User identification

c)     Claim and law enforcement, prevention and management of fraud

In case of processing purposes of column D/a) and b):

GDPR Article 6 (1) b) Conclusion of Contract

 

In case of processing purposes of column D/c):

GDPR Article 6 (1) f) Lawful Interest

For the conclusion of the contract: 3 months from the deletion of Simple account and Simple registration by the User.

 

By lawful interest: 6 months thereafter

 

Data marked with * are mandatory to fill in, without these data the issuing of Simple Card may not be ordered.

 

Simple is the data controller.

 

The User is entitled to object against the data management based on the aforementioned lawful interest in an e-mail sent to the Simple’s customer service: ugyfelszolgalat@simple.hu.

 

 

1.2.10.     Simple Bill

 

A

B

C

D

E

F

Subject

Data Category

Data origin

Purpose of data management

Legal basis of data management

Duration of data management

User registered within Simple and Simple Bill

utility provider’s client/consumer/consumer location ID *

from the utility provider

a)   Concluding the contract, determination of its content, modification, completion thereof

b)   User identification

c)   Claim and law enforcement

In case of processing purposes of column D/a) and b):

Article 13/A E-commerce Act

 

In case of processing purposes of column D/a) and b):

GDPR Article 6 (1) b) Conclusion of Contract

 

In case of processing purposes of column D/c):

GDPR Article 6 (1) f) Lawful Interest

For the conclusion of the contract and for invoincing: 3months from the deletion of Simple account and Simple registration by the User.

 

By lawful interest: 6 months thereafter

notification address as registered at the utility provider

from the utility provider

a)   Concluding the contract, determination of its content, modification, completion thereof

b)   User identification

c)   Claim and law enforcement

In case of processing purposes of column D/a) and b):

Article 13/A E-commerce Act

 

In case of processing purposes of column D/a) and b):

GDPR Article 6 (1) b) Conclusion of Contract

 

In case of processing purposes of column D/c):

GDPR Article 6 (1) f) Lawful Interest

For the conclusion of the contract and for invoincing: 3 months from the deletion of Simple account and Simple registration by the User.

 

By lawful interest: 6 months thereafter

address of place of consumption

from the utility provider

a)   Concluding the contract, determination of its content, modification, completion thereof

b)   User identification

c)   Claim and law enforcement

In case of processing purposes of column D/a) and b):

Article 13/A E-commerce Act

 

In case of processing purposes of column D/a) and b):

GDPR Article 6 (1) b) Conclusion of Contract

 

In case of processing purposes of column D/c):

GDPR Article 6 (1) f) Lawful Interest

For the conclusion of the contract and for invoincing: 3 months from the deletion of Simple account and Simple registration by the User.

 

By lawful interest: 6 months thereafter

name of party contracted with the utility provider

from the utility provider

a)   Concluding the contract, determination of its content, modification, completion thereof

b)   User identification

c)   Claim and law enforcement

In case of processing purposes of column D/a) and b):

Article 13/A E-commerce Act

 

In case of processing purposes of column D/a) and b):

GDPR Article 6 (1) b) Conclusion of Contract

 

In case of processing purposes of column D/c):

GDPR Article 6 (1) f) Lawful Interest

For the conclusion of the contract and for invoincing: 3 months from the deletion of Simple account and Simple registration by the User.

 

By lawful interest: 6 months thereafter

contractual account number at utility provider

 

from the utility provider

a)   Concluding the contract, determination of its content, modification, completion thereof

b)   User identification

c)   Claim and law enforcement

In case of processing purposes of column D/a) and b):

GDPR Article 6 (1) b) Conclusion of Contract

 

In case of processing purposes of column D/c):

GDPR Article 6 (1) f) Lawful Interest

For the conclusion of the contract and for invoincing: 3 months from the deletion of Simple account and Simple registration by the User.

 

By lawful interest: 6 months thereafter

 

name of the invoiced party

from the utility provider

a)   Concluding the contract, determination of its content, modification, completion thereof

b)   User identification

c)   Claim and law enforcement

In case of processing purposes of column D/a) and b):

Article 13/A E-commerce Act

 

In case of processing purposes of column D/a) and b):

GDPR Article 6 (1) b) Conclusion of Contract

 

In case of processing purposes of column D/c):

GDPR Article 6 (1) f) Lawful Interest

For the conclusion of the contract and for invoincing: 3 months from the deletion of Simple account and Simple registration by the User.

 

By lawful interest: 6 months thereafter

 

address of the invoiced party

from the utility provider

a)   Concluding the contract, determination of its content, modification, completion thereof

b)   User identification

c)   Claim and law enforcement

In case of processing purposes of column D/a) and b):

Article 13/A E-commerce Act

 

In case of processing purposes of column D/a) and b):

GDPR Article 6 (1) b) Conclusion of Contract

 

In case of processing purposes of column D/c):

GDPR Article 6 (1) f) Lawful Interest

For the conclusion of the contract and for invoincing: 3 months from the deletion of Simple account and Simple registration by the User.

 

By lawful interest: 6 months thereafter

amount to be paid to the utility provider

from the utility provider

a)   Concluding the contract, determination of its content, modification, completion thereof

b)   Claim and law enforcement

In case of processing purposes of column D/a) and b):

Article 13/A E-commerce Act

 

In case of processing purposes of column D/a) and b):

GDPR Article 6 (1) b) Conclusion of Contract

 

In case of processing purposes of column D/c):

GDPR Article 6 (1) f) Lawful Interest

For the conclusion of the contract and for invoincing: 3 months from the deletion of Simple account and Simple registration by the User.

 

By lawful interest: 6 months thereafter

 

Data marked with * are mandatory to fill in, without these data SimpleBill service shall not be used.

 

The data controller is the utility provider pertaining to the given bill payment transaction to which Simple acts as data processor regarding the data specified above.

 

The User is entitled to object against the data management based on the aforementioned lawful interest in an e-mail sent to the Simple’s customer service: ugyfelszolgalat@simple.hu.

 

 

1.2.11.     Sending out of Invitation

 

A

B

C

D

E

F

Subject

Data Category

Data origin

Purpose of data management

Legal basic of data management

Duration of data processing

Recipient of the invitation

e-mail address*

User registered within Simple

Concluding the contract, determination of its content, modification, completion thereof

User identification

GDPR Article 6 (1) f) Lawful Interest

30 days calculated from the sending of the Invitation.

 

Data marked with * are mandatory to fill in, without these data the Invitation shall not be sent.

 

Simple is the data controller. Simple is the recipient of the data transmission carried out by User as data controller.

 

Within the Simple System you can send out Coupons, Tickets, messages, recommendations, invitations (hereinafter referred to as Invitation) promoting and encouraging the use of the Simple System and all the services therein, to unregistered third parties, whose email addresses you know (hereinafter referred to as Recipient).

 

When sending out such Invitations you only type in the Recipient’s name and email address in the appropriate field of Simple System.

 

By sending out the Invitation you thereby accept that you can only send invitations to such Recipients who have given their prior consent to the use of their name and email address for the purpose of receiving such Invitations. We do not take responsibility if you failed to get the Recipient’s consent to the use of his or her information in order to send out an Invitation or in case you provided an inaccurate email address of the Recipient. By sending out the Invitation you authorize us to send it out to the given Recipient in your name and on your behalf in such a way that due to some technical particularities the sender will appear as Simple, however the Invitation will be considered to have been sent by you and not us and the content of the Invitation will not be considered as an offer made by us, as advertisement or as another direct way of marketing communication.

 

By using the Invitation service you accept that a part of the Message is determined by us and that part cannot be erased by you. The content determined by us may include information about the Simple System and/or the Application.

 

You can only send messages that are corresponding with the law as well as with ethical, moral, and social norms. The message shall not include onscene, infringing contents or contents that unjustifiably infringe or contravene others’ rights or legitimate interests. Moreover, the content determined by the sender shall not be defamatory or detrimental to Simple System, the Application, and the Service Provider as well as to their reputation.

 

The personal data of the Recipient provided by you (name and email address) are only stored for Invitation delivery purposes.

 

 

 

1.2.12.     Sending of electronic direct marketing messages via e-mail or push notification

 

A

B

C

D

E

F

Subject

Data Category

Data origin

Purpose of data processing

Legal basis of data processing

Duration of data processing

User registered within Simple

name*

From Subject

Electronic direct marketing content, such as newsletter, sending of an advertisement with the method of direct business acquisition

GDPR Article 6 (1) a) Consent

Until the consent is withdrawn.

e-mail address*

From Subject

Electronic direct marketing content, such as newsletter, sending of an advertisement with the method of direct business acquisition

GDPR Article 6 (1) a) Consent

Until the consent is withdrawn.

 

In case of push notification: Simple account

From Subject

Electronic direct marketing content, such as newsletter, sending of an advertisement with the method of direct business acquisition

GDPR Article 6 (1) a) Consent

Until the consent is withdrawn.

 

Data marked with * are mandatory to fill in, without these data it is not possible to subscribe to the newsletter.

 

Simple is the data controller.

 

1.2.13.     Prize game, promotional game

 

A

B

C

D

E

F

Subject

Data Category

Data origin

Purpose of data processing

Legal basis of data processing

Duration of data processing

User registered within Simple

name*

From Subject

Participation in a promotion or prize game,

Communication, Notification of the User about the result,

User identification

GDPR Article 6 (1) a) Consent

Until the consent is withdrawn.

e-mail address*

From Subject

Participation in a promotion or prize game,

Communication, Notification of the User about the result,

User identification

GDPR Article 6 (1) a) Consent

Until the consent is withdrawn.

 

Data marked with * are mandatory to fill in, without these data it is not possible to participate in the prize game, promotion. Data controller is Simple.

 

1.2.14.      Sending system messages via e-mail or push notification

 

Simple sends system messages to the registered Users from time to time. System messages are messages regarding the operation, service breakout, maintenance, traoubleshooting, functions of Simple System, change of these functions, availability of new functions of Simple System, the range of the services available in Simple System, way of use of these services, the General Terms and Conditions and Privacy Notice of Simple System or the modification thereof, rights and obligations of the Users concerning Simple System and also including the confirmation messages, notifications, confirmations sent in connection with the use of the services in Simple System, electronic bills, receipts and invoices.

 

For the purpose of sending system messages, Simple manages the following personal data:

 

A

B

C

D

E

F

Subject

Data Category

Data origin

Purpose of data processing

Legal basis of data processing

Duration of data processing

User registered within Simple

name*

From Subject

Sending system messages in order to fulfil the contract

GDPR Article 6 (1) b) Fulfilment of the contract

3 month after the termination of the contract

e-mail address*

From Subject

Sending system messages in order to fulfil the contract

GDPR Article 6 (1) b) Fulfilment of the contract

3 month after the termination of the contract

 

In case of push notification: Simple account

From Subject

Sending system messages in order to fulfil the contract

GDPR Article 6 (1) b) Fulfilment of the contract

3 month after the termination of the contract

 

Data marked with * are mandatory to fill in, without these data it is not possible to send system messages. Data controller is Simple.

 

1.3.  What type of data do we collect of you automatically, why do we profile your data, and what effects could this have on you?

How and what type of data do we collect of you automatically?

 

In course of the use of Simple System via mobile application we run cookies and similar technologies on your phone to help your identification and the recognition of your data so that you don’t have to type them in every time, as well as to get to know your interests more in order to send you customized offers. We also use these cookies to improve the user-experience, and to increase the security and efficiency of Simple System and Application, as well as to publish advertisements. These data are not provided by the user, we are the ones collecting them from you while you use the application.

 

 

Regarding iOS mobile devices:

 

A

B

C

D

E

Subject

Data Category

Purpose of data processing

Legal basis of data processing

Duration of data processing

User registered within Simple

language of the application

a)      Personalization of the application,

b)      Communication,

c)      Determination of the language of automatic notifications

GDPR Article 6 (1) a) Consent

Until the deletion of the application

unique hardware ID generated upon installation

User identification

GDPR Article 6 (1) b) Conclusion of Contract

Until the deletion of the application

key chain data required to identify and authenticate the User

User identification

GDPR Article 6 (1) b) Conclusion of Contract

Until the logging out of the application

e-mail address used for logging in

User identification

GDPR Article 6 (1) b) Conclusion of Contract

Until the logging out of the application

type of log in(e-mail, Google+ or Facebook account)

User identification

GDPR Article 6 (1) a) Consent

Until the logging out of the application

double-hashed version of the user password for the tasks requiring less stonger authentication (e.g. re-log in)

User identification

GDPR Article 6 (1) b) Conclusion of Contract

Until the logging out of the application

hashed version of the user password hashelt for the tasks requiring stonger authentication (e.g. payment)

User identification

GDPR Article 6 (1) b) Conclusion of Contract

Until the logging out of the application

regarding EP card upload, the number of the most recently used EP card is saved

Streamlining, customizing the application, increasing user experience

GDPR Article 6 (1) a) Consent

Until the logging out of the application

regarding money transfer function, the number of the most recently used bank card is saved

Streamlining, customizing the application, increasing user experience

GDPR Article 6 (1) a) Consent

Until the logging out of the application

date of last password modification

Ensuring safety

GDPR Article 6 (1) b) Fulfilment of the contract

Until the deletion of the application

date of last log in

a)      Ensuring safety,

b)      Understanding of circle of interests,

c)      Customizing the application,

d)      Displaying advertisement, sending of personalized offer

In case of column C/a) purpose: GDPR Artcile 6 (1) b) Fulfilment of the contract

 

In case of processing purposes of column C/b) – d):

GDPR Article 6 (1) a) Consent

Until the deletion of the application

maximum amount of payment without password

Ensuring safety

GDPR Artcile 6 (1) b) Fulfilment of contract

Until the deletion of the application

registration date

a)      Understanding of circle of interests,

b)      Customizing the application,

c)      Displaying advertisement, sending of personalized offer

GDPR Article 6 (1) a) Consent

Until the deletion of the application

registration channel

a)      Understanding of circle of interests,

b)      Customizing the application,

c)      Displaying advertisement, sending of personalized offer

GDPR Article 6 (1) a) Consent

Until the deletion of the application

fact of registration from a social media network

a)      Understanding of circle of interests

b)      Customizing the application

c)      Displaying advertisement, sending of personalized offer

GDPR Article 6 (1) a) Consent

Until the deletion of the application

 

Regarding Android mobile devices:

 

A

B

C

D

E

Subject

Data Category

Purpose of data processing

Legal basis of data processing

Duration of data processing

User registered within Simple

bank card profile data (card ID, card status, card data)

 

User identification

GDPR Article 6 (1) b) Conclusion of Contract

Until the deletion of the application

Card transaction data (card ID, transaction timestamp ID, log)

 

a)     User identification,

b)    plausibility,

c)     Claim and law enforcement,

d)    Understanding of circle of interests,

e)    customizing the application,

f)      displaying advertisement, sending of personalized offer

In case of processing purpose of column C/a):

Fulfilment of contract

 

In case of processing purposes of column C/b) and c):

GDPR Article 6 (1) f) Legal Interest

 

In case of processing purposes of column C/d) -f):

GDPR Article 6 (1) a) Consent

Until the deletion of the application

Environmental data (latitude, longitude – location, wallett status, remote url)

a)     Understanding of circle of interests,

b)    customizing the application,

c)     displaying advertisement, sending of personalized offer

GDPR Article 6 (1) a) Consent

Until the logging out of the application

Mobile Keys (mobile key set, ID, type, value, ID card)

Ensuring safety

GDPR Article 6 (1) b) Conclusion of Contract

Until the logging out of the application

Transaction report status data (token unique refernce, timestamp)

a)     Conclusion of contract,

b)    plausibility

c)     Claim and law enforcement

In case of processing purpose of column C/a):

Fulfilment of contract

 

In case of processing purposes of column C/b) and c):

GDPR Article 6 (1) f) Legal Interest

Until the logging out of the application

Token unique reference list (token unique reference card ID)

a)     Conclusion of contract,

b)    plausibility

c)     Claim and law enforcement

In case of processing purpose of column C/a):

Fulfilment of contract

 

In case of processing purposes of column C/b) and c):

GDPR Article 6 (1) f) Legal Interest

Until the logging out of the application

e-mail address used for logging in

User identification

GDPR Article 6 (1) b) Conclusion of Contract

Until the logging out of the application

type of log in (e-mail, Google+ or Facebook account)

a)     User identification,

b)    understanding of circle of interests,

c)     customizing the application,

d)    displaying advertisement, sending of personalized offer

In case of processing purpose of column C/a):

Fulfilment of contract

 

In case of processing purposes of column C/b) -d):

GDPR Article 6 (1) a) Consent

Until the logging out of the application

double-hashed version of the user password for the tasks requiring less stonger authentication (e.g. re-log in)

User identification

GDPR Article 6 (1) b) Conclusion of Contract

Until the logging out of the application

hashed user password, fingerprint encrypted version

User identification

GDPR Article 6 (1) b) Conclusion of Contract

Until the deletion of the application

Number of successful transactions

a)     Conclusion of contract,

b)    plausibility

c)     Claim and law enforcement,

d)    understanding of circle of interests,

e)    customizing the application,

f)      displaying advertisement, sending of personalized offer

In case of processing purpose of column C/a):

Fulfilment of contract

 

In case of processing purposes of column C/b) and c):

GDPR Article 6 (1) f) Legal Interest

 

In case of processing purposes of column C/d) -f):

GDPR Article 6 (1) a) Consent

Until the deletion of the application

regarding EP card upload, the number of the most recently used EP card is saved

a)     Streamlining, customizing the application,

b)    Increasing user experience

GDPR Article 6 (1) a) Consent

Until the deletion of the application

regarding money transfer function, the number of the most recently used bank card is saved

a)     Streamlining, customizing the application,

b)    Increasing user experience

GDPR Article 6 (1) a) Consent

Until the deletion of the application

e-mail address used for the last log in is saved

a)     Streamlining, customizing the application,

b)    Increasing user experience

GDPR Article 6 (1) a) Consent

Until the deletion of the application

user API level

Ensuring safety

GDPR Article 6 (1) b) Conclusion of Contract

Until the deletion of the application

Message center, last shown message and timestamp

a)     Conclusion of contract,

b)    plausibility

c)     Claim and law enforcement

In case of processing purpose of column C/a):

Fulfilment of contract

 

In case of processing purposes of column C/b) and c):

GDPR Article 6 (1) f) Legal Interest

Until the deletion of the application

Taxi order dialogue data

a)     Conclusion of contract,

b)    plausibility

c)     Claim and law enforcement

In case of processing purpose of column C/a):

Fulfilment of contract

 

In case of processing purposes of column C/b) and c):

GDPR Article 6 (1) f) Legal Interest

Until the logging out of the application

Parking GPS verification dialogue data

a)     Conclusion of contract,

b)    plausibility

c)     Claim and law enforcement

In case of processing purpose of column C/a):

Fulfilment of contract

 

In case of processing purposes of column C/b) and c):

GDPR Article 6 (1) f) Legal Interest

Until the logging out of the application

Wallet PIN

User identification

GDPR Article 6 (1) b) Conclusion of Contract

Until the deletion of the application

Wallet app payment ID

User identification

GDPR Article 6 (1) b) Conclusion of Contract

Until the deletion of the application

digitalization of Wallet Card ID

a)     User identification,

b)    Conclusion of contract,

c)     plausibility

d)    Claim and law enforcement

In case of processing purpose of column C/a) and b):

Fulfilment of contract

 

In case of processing purposes of column C/c) and d):

GDPR Article 6 (1) f) Legal Interest

Until the deletion of the application

unlocked phone timestamp

Ensuring safety

GDPR Article 6 (1) b) Conclusion of Contract

Until the logging out of the application

mobile payment being blocked by EULA

a)     Conclusion of contract,

b)    plausibility

c)     Claim and law enforcement

In case of processing purpose of column C/a):

Fulfilment of contract

 

In case of processing purposes of column C/b) and c):

GDPR Article 6 (1) f) Legal Interest

Until the deletion of the application

safe keyguard

Ensuring safety

GDPR Article 6 (1) b) Conclusion of Contract

Until the deletion of the application

changed Keyguard

Ensuring safety

GDPR Article 6 (1) b) Conclusion of Contract

Until the deletion of the application

Simple is not the default payment application

a)     Understanding of circle of interests,

b)    customizing the application,

c)     displaying advertisement, sending of personalized offer

GDPR Article 6 (1) a) Consent

Until the deletion of the application

Application settings

(language, newsletter subscription, fingerprint ID usage, notifications, Facebook connection in place or not, parking notifications, taxi notifications, cinema notifications)

a)     Understanding of circle of interests,

b)    customizing the application,

c)     displaying advertisement, sending of personalized offer

GDPR Article 6 (1) a) Consent

Until the deletion of the application

date of last password modification

Ensuring safety

GDPR Article 6 (1) b) Conclusion of Contract

Until the deletion of the application

date of last log in

a)     Ensuring safety,

b)    Understanding of circle of interests,

c)     customizing the application,

d)    displaying advertisement, sending of personalized offer

In case of processing purpose of column C/a):

Fulfilment of contract

 

In case of processing purposes of column C/b) - d):

GDPR Article 6 (1) f) Legal Interest

Until the deletion of the application

maximum amount of payment without password

Ensuring safety

GDPR Article 6 (1) b) Conclusion of Contract

Until the deletion of the application

registration date

a)      Understanding of circle of interests,

b)     customizing the application,

c)      displaying advertisement, sending of personalized offer

GDPR Article 6 (1) a) Consent

Until the deletion of the application

registration channel

a)      Understanding of circle of interests,

b)     customizing the application,

c)      displaying advertisement, sending of personalized offer

GDPR Article 6 (1) a) Consent

Until the deletion of the application

fact of registration from a social media network

a)      Understanding of circle of interests,

b)     customizing the application,

c)      displaying advertisement, sending of personalized offer

GDPR Article 6 (1) a) Consent

Until the deletion of the application

 

Profiling – what is the purpose of our profiling and what effects can it have on you?

 

The above listed data are connected to the data you have provided when registering in the Simple Application and to the data you have given when using other services as well as to the data we have automatically collected of you. Furthermore, they are also connected to the data you have provided on websites run by us e.g. www.simple.hu, www.simplepay.hu, www.simplepartner.hu, www.mozizzunk.hu, www.mozi-filmek.hu, www.simplejatekok.hu, www.nyerjamatricaddal.hu, www.penzugyekonline.hu including the data we have automatically collected of you there. Finally all the above data are assigned to you personally. The database we have created of you is being used to make Simple Application more efficient, to measure the use of Simple Application as well as to customize it and to find out about your preferences. Based on the above, after an automatic evaluation we target you with customized offers and advertisements with the help of automatic tools. These data are anonymously used for the development of new products, services as well as for statistical purposes.

 

In order to reach tose goals we use Facebook Custom Audiences, Facebook Pixel and Google Analytics services. In order to reach the aforementioned goal in the framework of Facebook Cutom Audience services we upload your e-mail address and pohone identification number into the Facebook’s system. In case of Facebook Pixel and Google Analytics we use your data collected by them and we on an ad hoc basis combine with your data collected by us. Simple is the data controller of the data we forward to Facebook and Google as well as of the data received from them by us. Facebook and Google are the data controllers of the data collected by them. Facebook and Google is the data processor acting on behalf of Simple in case of the data collected by Simple and forwarded to them by Simple.

 

It is necessary to put cookies on the user’s device for the use of Facebook Pixel and Google Analytics. You are able to control and set those data management activities of Facebook and Google in your Facebook and Gogle account. Furthermore, you are able to grant consent to the data collection through Facebook and Google cookies in the Simple Application and the Simple Website on your own.

 

The ban on profiling, cookies and notifications may worsen the user experience; it may make the use of the application more inconvenient and may prevent you from getting personalized offers, coupons, and discounts from us in connection with the services provided in the application.

 

Upon visiting the Webpage and ustilising the Services, Service Provider places cookies within User’s browser and in HTML-based emails as per the regulations herein.

 

In general the cookie is a small file consisting of letters and numbers which is sent to the device of the User from the web server of the Service Provider. It enables for example the Service Provider to recognize the final appliance of the User when the connection is created between the web server of the Service Provider and the device. The main purpose of the cookie is to enable the Service Provider to make available individualized offers, publicity and advertisements for the User which may personalize the User’s experience during the use of the Simple System and may reflect more to the personal needs of the User.

 

Purpose of the cookies used by Service Provider:

 

a)          Security: aiding and ensuring safety, moreover enabling and aiding Service Provider to detect unlawful conduct.

b)         Preferences, attributes and services: cookies let Service Provider know, what language is preferred by the User, what are their communications preferences, aid the User in completing forms on the Website, making them easier to fill out.

c)          Advertisements: Service Provider may utilise cookies, in order to serve Users with relevant advertisements both on the Website and off it. Certain cookies may be used, which show, whether the Users who have seen a certain advertisement on the Website, have visited the advertiser’s website later. Similarly, the Service Provider’s business partners may use cookies to ascertain, whether the Service Provider had displayed their advertisement on their Webpage, and to ascertain its performance, also, they may issue information to Service Provider on how the User conducts themselves regarding the advertisement. Service Provider may collaborate with business partners, who display certain advertisements for the User either on the Website or off it, after the user having visited the website of that partner.

d)         Performance, analytics and research: cookies aid the Service Provider in understanding how the Website performs in various areas. Service Provider may use cookies, which rate, improve and search the Website, the products, functions, services, including when User enters the Website from other webpages, and the devices, such as User’s computer or mobile device.

 

Types of cookies utilised by Service Provider:

 

a)          analytics, tracking cookies;

b)         session cookies, which only operate during the active session (usually the webpage visit itself);

c)          permanent cookies: which help in identifying the Customer as an existing user, making it easier for them to return without having to log in again. After the Customer logs in, the permanent cookie remains in their browser, withe the webpage being able to read it.

 

Adobe Flash is another technology equal in function to cookies. Adobe Flash is able to store data on the User’s device. Not every browser allows the removal of Adobe Flash cookies however. The Customer may restrict or block Adobe Flash cookies via the website of Adobe. If Customer restricts or blocks them, certain elements of the Website may become inaccessible.

 

Third party cookies:

 

Reputable partners aid Service Provider in analysing Webpage statistics, and analytics companies such as Google Analytics, Quantcast, Nielsen and ComScore may also place cookies on the Customer’s device.

 

Users may disallow Google cookies on the page used for the disabling of Google ads.

 

On http://www.networkadvertising.org/choices/ there are further means to deny other, third party cookies from being used.

 

Control of cookies:

 

Most cookies enable Customers to control cookie usage via their settings. However, if Customer restricts the usage of cookies, this may hinder user experience, since it will no longer be customised. Customer may also stop the saving of personal settings, such as the saving of login information.

 

If Customer does not wish for Service Provider to use cookies when User visits the webpage, they may refuse usage under their settings page. In order to let Service Provider know that the Customer has refused usage of cookies, a denial cookie is placed on the Customer’s device, thus, Service Provider will know that no cookies may be placed on the device upon the next visit of the webpage. If the Customer does not wish to receive cookies, they may change their browser settings accordingly. If no such change has been made, Service Provider will view Customer as having given consent to the sending of any kinds of cookies. The Website shall not function completely without cookies.

 

For further information of cookies, including types, management and removal, visit Wikipedia.org or www.allaboutcookies.org or www.aboutcookies.org.

 

The users are able to control cookies on the following websites: https:\\www.aboutads.info/choices and https://www.youronlinechoices.eu

 

2.         Who manages your personal data, and who has access to them?

The data controller

 

The controller of the personal data specified under point 1.2.3. – 1.2.6 hereto is Simple, meaning OTP Mobile Service Llc., the company data of which are as follows:

 

OTP Mobile Service Limited Liability Company.

Company reg. no.: 01-09-174466

Tax no.: 24386106-2-43

Seat: 1093 Budapest, Közraktár u. 30-32. RiverPark irodaház, K30 VII. emelet

Postal address: 1093 Budapest, Közraktár u. 30-32.

Represented by: Péter Benyó managing director (availability: Budapest, Közraktár u. 30-32. RiverPark irodaház, K30 VII. emelet; ugyfelszolgalat@simple.hu)

E-mail address: ugyfelszolgalat@simple.hu

Telephone: 06 1 3666 611

06 70 3666 611

06 30 3666 611

06 20 3666 611

 

On behalf of Simple, the data is accessible to the employees of Simple whose access is essential to the performance of their duties. Access authorizations are specified in a strict internal code.

 

Data processors

 

For the processing of the personal data of representative and contact persons, we engage the following companies, with whom we have entered into data processor agreements and to whom we forward your data necessary for the fulfilment of the aforementioned purposes.. The following data processors conduct the processing of personal data:

 

Data processors’ name and address

Purpose of data processing

OTP Bank Plc. (seat: 1051 Budapest, Nádor u. 16.; Reg. Nr.: 01-10-041585;   Tax Nr.: 10537914-4-44)

a)    providing online bank card payment service in the Simple System, bank card authorization

b)   providing Simple with IT infrastructure

c)    operation of the Simple Customer Service

Microsoft Corporation (USA - One Microsoft Way
Redmond, Washington 98052)

a)    provider of Microsoft 365 cloud service

Mastercard Europe SA, Reg. Nr.: RPR 0448038446, seat: 198/A, Chaussée de Tervuren, 1410 Waterloo, Belgium

a)    conclusion of online bank card payment

Visa Europe Services LLC (registered int he USA, Delaware, acting through its London Branch Office (Reg. no of the Branch: BR007632) registered office: 1 Sheldon Square, London W2 6TT, VAT No: GB 840 111 776)

a)     conclusion of online bank card payment

American Express Services Europe Limited (registered office: Belgrave House, 76 Buckingham Palace Road, London SW1W 9AX, United Kingdom, Reg. No: 1833139, Registered by: Companies House)

a)     conclusion of online bank card payment

The Rocket Science Group LLC d/b/a MailChimp (seat: Georgia

675 Ponce De Leon Ave NE, Suite 5000
Atlanta, Georgia 30308)