{"id":53,"date":"2025-08-04T15:10:52","date_gmt":"2025-08-04T13:10:52","guid":{"rendered":"https:\/\/trendidivat.hu\/en\/?page_id=53"},"modified":"2025-08-04T15:10:52","modified_gmt":"2025-08-04T13:10:52","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/trendidivat.hu\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"

RECORD OF PROCESSING ACTIVITIES<\/h3>\n

 <\/p>\n

From data controller <\/em><\/strong>The records to be kept by the controller must contain the following information:<\/p>\n

    \n
  1. the name and contact details of the controller (and, where applicable, the name and contact details of the joint controller, the controller’s representative and the Data Protection Officer);<\/li>\n
  2. the purposes of the processing (some typical purposes (the list is not exhaustive): processing of employee data in connection with the employment relationship; operation of a CCTV system; monitoring of the use of email\/laptop\/Internet by employees; employer abuse reporting system; direct marketing; processing of customer data; processing of data under B2B contracts; organisation of a prize draw; operation of a webshop; use of a debt management company, etc.);<\/li>\n
  3. a description of the categories of data subjects and the categories of personal data;<\/li>\n
  4. the categories of recipients to whom the personal data are or will be disclosed, including recipients in third countries or international organisations;<\/li>\n
  5. where applicable, information on the transfer of personal data to a third country or international organisation, including the identification of the third country or international organisation and a description of the appropriate safeguards;<\/li>\n
  6. the time limit foreseen for the deletion of different categories of data;<\/li>\n
  7. a general description of the technical and organisational measures taken to maintain data security (e.g. who has access to the data; the IT security level applied).<\/li>\n<\/ol>\n

    It is also recommended to describe the processing activity in a few sentences and to specify the legal basis for the purpose (possible legal bases are set out in Article 6(1) and, for special categories of personal data, in Article 9(2)).<\/p>\n

     <\/p>\n

    Name of data controller: Trendidivat Fashion Kft.<\/strong> Phone: +36 ….<\/strong> E-mail: trendidivatfashionkft@gmail.com<\/strong> Data Controller’s representative: J\u00f3zsef Katona <\/strong> Phone: +36 ….<\/strong> E-mail: trendidivatfashionkft@gmail.com<\/strong><\/p>\n

     <\/p>\n\n\n\n\n\n\n
    Purpose of data processing<\/td>\nLegal basis for data processing<\/td>\nCategories of persons concerned<\/td>\nCategories of personal data<\/td>\nRecipients<\/p>\n

    (with whom personal data are shared)<\/td>\n

    		3. transfers to the country and guarantees<\/td>\nTime limits foreseen for cancellation<\/td>\nTechnical and organisational measures taken to ensure the security of data processing (if possible)<\/td>\n<\/tr>\n
    processing of employee data<\/p>\n

    for the fulfilment of legal (notification) obligations,<\/p>\n

    establishment, maintenance and termination of employment relationships, contact management, payment of wages…<\/td>\n

    		performance of an employment contract,<\/p>\n

    performance of a legal obligation,<\/p>\n

    consent of the data subject<\/td>\n

    		workers<\/td>\nname, address, date and place of birth, mother’s name, social security number, tax identification number, telephone number, e-mail address, education, bank account number, number of children,<\/p>\n

     <\/td>\n

    		data are transferred to the company carrying out the accounting, payroll services in order to fulfil a legal obligation, no other data are transferred<\/td>\nNo transfer to country 3.<\/td>\nprocessing necessary for compliance with a legal obligation for the period specified in the legislation,<\/p>\n

    processing based on consent for an indefinite period or until the withdrawal of the data subject’s consent<\/td>\n

    		employee information, training, IT system protection: firewall, virus protection, password protection<\/td>\n<\/tr>\n
    customer data management<\/p>\n

    for issuing invoices, contacting the customer,<\/p>\n

    contract fulfilment<\/td>\n

    		consent of the data subject, performance of the contract<\/td>\ncustomer, contact person provided by the customer,<\/td>\nname, e-mail address,<\/p>\n

    telephone number, basic data necessary for issuing the invoice (name, address\/address, tax number) and all personal data, including sensitive data, which are collected in the course of the performance of the matter covered by the mandate<\/td>\n

    		transmission of invoice data to accountancy firms, other data transmission to authorities, courts, if necessary<\/td>\nNo transfer to country 3.<\/td>\nindefinitely or until the withdrawal of the data subject’s consent<\/td>\nemployee information, training, IT system protection: firewall, virus protection, password protection<\/td>\n<\/tr>\n
    managing partner data<\/p>\n

    (suppliers), contacting the partner<\/td>\n

    		consent of the data subject, performance of the contract<\/td>\npartner, contact person provided by partner<\/td>\nname, e-mail address,<\/p>\n

    phone number<\/p>\n

     <\/td>\n

    		transmission of invoice data to an accounting firm, no other data transmission<\/td>\nNo transfer to country 3.<\/td>\nindefinitely or until the withdrawal of the data subject’s consent<\/td>\nemployee information, training, IT system protection: firewall, virus protection, password protection<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

     <\/p>\n

     <\/p>\n

    DATA PROTECTION INCIDENT RECORD<\/strong><\/p>\n

     <\/p>\n

    A data breach is a breach of security<\/strong> thatresults in the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data<\/strong> transmitted, stored or otherwise processed. A personal data breach may cause physical, pecuniary or non-pecuniary damage to natural persons, including loss of control over their personal data or restriction of their rights, discrimination, identity theft or misuse, financial loss, unauthorised impersonation, damage to reputation, damage to the confidentiality of personal data protected by professional secrecy or other significant economic or social harm to the natural persons concerned. The data protection incident must be notified to the data protection authority<\/strong> (using a so-called ‘model data protection incident report<\/strong> ‘, the content of which is specified in the GDPR) without undue delay and, if possible, no later than 72 hours after the data protection incident has come to its attention,<\/strong> unless<\/strong> the data protection incident is unlikely to pose a risk<\/strong> to the rights and freedoms of natural persons. The data breach notification must include:<\/p>\n

      \n
    1. describe the nature of the personal data breach, including, where possible, the categories and approximate number of data subjects and the categories and approximate number of data subjects affected by the breach;<\/li>\n
    2. the name and contact details of the Data Protection Officer or other contact person who can provide further information;<\/li>\n
    3. explain the likely consequences of the data breach;<\/li>\n
    4. describe the measures taken or envisaged by the controller to remedy the personal data breach, including, where appropriate, measures to mitigate any adverse consequences of the personal data breach.<\/li>\n<\/ol>\n

      If the notification isnot made within 72 hours, it must be accompanied by the reasons justifying the delay.<\/strong> It is also the responsibility of the data processor<\/strong> to notify the data controller of<\/strong> the personal data breach without<\/strong> undue delay<\/strong> after becoming aware of it. If the personal data breach is likely to result in a high risk<\/strong> to the rights and freedoms of natural persons, the controller shall inform the data subjects of<\/strong> the personal data breach without undue delay. The notification shall include the information referred to in points (b)(c)(d). The data subject need not be informed if one of the following conditions is met:<\/p>\n

        \n
      • has implemented protection measures for the data affected by the data breach, such as encryption that makes the data unintelligible to unauthorised persons;<\/li>\n
      • the controller has taken additional measures following the personal data breach to ensure that the high risk to the rights and freedoms of the data subject is no longer likely to materialise;<\/li>\n
      • information would require a disproportionate effort. In such cases, the data subjects should be informed by means of publicly disclosed information or by a similar measure which ensures that the data subjects are informed in an equally effective manner.<\/li>\n<\/ul>\n

        The data controller shall keep a record of<\/strong> the data breaches, which shall be recorded in the register:<\/p>\n

          \n
        • the facts related to the data breach<\/li>\n
        • the impact of the data breach<\/li>\n
        • the measures taken to remedy the data breach<\/li>\n<\/ul>\n

          The supervisory authority may request the production of records during the inspection and use them as a basis for checking compliance with the requirements relating to data protection incidents.<\/p>\n

           <\/p>\n

          DATA PROTECTION INCIDENT RECORD<\/strong><\/p>\n

           <\/p>\n

          Name of data controller: Trendidivat Fashion Kft.<\/strong> Phone: +36 ….<\/strong> E-mail: trendidivatfashionkft@gmail.com<\/strong> Data Controller’s representative: J\u00f3zsef Katona <\/strong> Phone: +36 ….<\/strong> E-mail: trendidivatfashionkft@gmail.com<\/strong><\/p>\n

           <\/p>\n\n\n\n\n\n\n\n\n\n
          Serial number<\/td>\nDate<\/p>\n

          Date<\/td>\n

          		Facts related to the data breach (nature of the breach, categories and approximate number of data subjects, categories and approximate number of data subjects affected by the breach)<\/td>\nImpact of the data breach, likely consequences<\/td>\nMeasures taken to remedy\/mitigate a data breach<\/td>\nHas the supervisory authority \/ stakeholders been informed, if yes, when<\/td>\n<\/tr>\n
          <\/td>\n<\/td>\n<\/td>\n<\/td>\n<\/td>\n<\/td>\n<\/tr>\n
          <\/td>\n<\/td>\n<\/td>\n<\/td>\n<\/td>\n<\/td>\n<\/tr>\n
          <\/td>\n<\/td>\n<\/td>\n<\/td>\n<\/td>\n<\/td>\n<\/tr>\n
          <\/td>\n<\/td>\n<\/td>\n<\/td>\n<\/td>\n<\/td>\n<\/tr>\n
          <\/td>\n<\/td>\n<\/td>\n<\/td>\n<\/td>\n<\/td>\n<\/tr>\n
          <\/td>\n<\/td>\n<\/td>\n<\/td>\n<\/td>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

           <\/p>\n

           <\/p>\n

          DATA BREACH NOTIFIER<\/strong><\/p>\n

           <\/p>\n

          A data breach is a breach of security<\/strong> thatresults in the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data<\/strong> transmitted, stored or otherwise processed. A personal data breach may cause physical, pecuniary or non-pecuniary damage to natural persons, including loss of control over their personal data or restriction of their rights, discrimination, identity theft or misuse, financial loss, unauthorised impersonation, damage to reputation, damage to the confidentiality of personal data protected by professional secrecy or other significant economic or social harm to the natural persons concerned. The data protection incident must be notified to the data protection authority<\/strong> (using a so-called ‘model data protection incident report<\/strong> ‘, the content of which is specified in the GDPR) without undue delay and, if possible, no later than 72 hours after the data protection incident has come to its attention,<\/strong> unless<\/strong> the data protection incident is unlikely to pose a risk<\/strong> to the rights and freedoms of natural persons. The data breach notifier must include:<\/p>\n

            \n
          1. describe the nature of the personal data breach, including, where possible, the categories and approximate number of data subjects and the categories and approximate number of data subjects affected by the breach;<\/li>\n
          2. the name and contact details of the Data Protection Officer or other contact person who can provide further information;<\/li>\n
          3. explain the likely consequences of the data breach;<\/li>\n
          4. describe the measures taken or envisaged by the controller to remedy the personal data breach, including, where appropriate, measures to mitigate any adverse consequences of the personal data breach.<\/li>\n<\/ol>\n

            If the notification isnot made within 72 hours, it must be accompanied by the reasons justifying the delay.<\/strong> It is also the responsibility of the data processor<\/strong> to notify the data controller of<\/strong> the personal data breach without<\/strong> undue delay<\/strong> after becoming aware of it. If the personal data breach is likely to result in a high risk<\/strong> to the rights and freedoms of natural persons, the controller shall inform the data subjects of<\/strong> the personal data breach without undue delay. The notification shall include the information referred to in points (b)(c)(d). The data subject need not be informed if one of the following conditions is met:<\/p>\n

              \n
            • has implemented protection measures for the data affected by the data breach, such as encryption that makes the data unintelligible to unauthorised persons;<\/li>\n
            • the controller has taken additional measures following the personal data breach to ensure that the high risk to the rights and freedoms of the data subject is no longer likely to materialise;<\/li>\n
            • information would require a disproportionate effort. In such cases, the data subjects should be informed by means of publicly disclosed information or by a similar measure which ensures that the data subjects are informed in an equally effective manner.<\/li>\n<\/ul>\n

              The data controller shall keep a record of<\/strong> the data breaches, which shall be indicated in the record:<\/p>\n

                \n
              • the facts related to the data breach<\/li>\n
              • the impact of the data breach<\/li>\n
              • the measures taken to remedy the data breach<\/li>\n<\/ul>\n

                The supervisory authority may request the production of records during the inspection and use them as a basis for checking compliance with the requirements relating to data protection incidents.<\/p>\n

                 <\/p>\n

                DATA BREACH NOTIFIER<\/strong><\/p>\n

                 <\/p>\n

                Name of data controller: Trendidivat Fashion Kft.<\/strong> Phone: +36 …<\/strong> E-mail: trendidivatfashionkft@gmail.com<\/strong> Representative of the Data Controller: J\u00f3zsef Katona <\/strong> Phone: +36 …<\/strong> E-mail: trendidivatfashionkft@gmail.com<\/strong><\/p>\n

                 <\/p>\n\n\n\n\n\n
                Serial number<\/td>\nDate<\/p>\n

                Date<\/td>\n

                		Nature of the data breach,<\/p>\n

                categories of data subjects and<\/p>\n

                approximate number of data subjects,<\/p>\n

                categories of data affected by the incident<\/p>\n

                and approximate number of data subjects<\/td>\n

                		Data Protection Officer \/ Contact Name<\/td>\nContact<\/td>\nLikely consequences<\/td>\nMeasures taken to remedy\/mitigate a data breach<\/td>\n<\/tr>\n
                <\/td>\n<\/td>\n<\/td>\n<\/td>\n<\/td>\n<\/td>\n<\/td>\n<\/tr>\n
                <\/td>\n<\/td>\n<\/td>\n<\/td>\n<\/td>\n<\/td>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

                 <\/p>\n","protected":false},"excerpt":{"rendered":"

                RECORD OF PROCESSING ACTIVITIES   From data controller The records to be kept by the controller must contain the following information: the name and contact details of the controller (and, where applicable, the name and contact details of the joint controller, the controller’s representative and the Data Protection Officer); the purposes of the processing (some…<\/p>\n","protected":false},"author":4,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"page-aszf.php","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-53","page","type-page","status-publish","hentry"],"acf":[],"yoast_head":"\nPrivacy Policy - Trendi Fashion<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/trendidivat.hu\/en\/privacy-policy\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Privacy Policy - Trendi Fashion\" \/>\n<meta property=\"og:description\" content=\"RECORD OF PROCESSING ACTIVITIES   From data controller The records to be kept by the controller must contain the following information: the name and contact details of the controller (and, where applicable, the name and contact details of the joint controller, the controller’s representative and the Data Protection Officer); the purposes of the processing (some...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/trendidivat.hu\/en\/privacy-policy\/\" \/>\n<meta property=\"og:site_name\" content=\"Trendi Fashion\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"9 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/trendidivat.hu\/en\/privacy-policy\/\",\"url\":\"https:\/\/trendidivat.hu\/en\/privacy-policy\/\",\"name\":\"Privacy Policy - Trendi Fashion\",\"isPartOf\":{\"@id\":\"https:\/\/trendidivat.hu\/en\/#website\"},\"datePublished\":\"2025-08-04T13:10:52+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/trendidivat.hu\/en\/privacy-policy\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/trendidivat.hu\/en\/privacy-policy\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/trendidivat.hu\/en\/privacy-policy\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Kezd\u0151lap\",\"item\":\"https:\/\/trendidivat.hu\/en\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Privacy Policy\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/trendidivat.hu\/en\/#website\",\"url\":\"https:\/\/trendidivat.hu\/en\/\",\"name\":\"Trendi Fashion\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/trendidivat.hu\/en\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Privacy Policy - Trendi Fashion","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/trendidivat.hu\/en\/privacy-policy\/","og_locale":"en_US","og_type":"article","og_title":"Privacy Policy - Trendi Fashion","og_description":"RECORD OF PROCESSING ACTIVITIES   From data controller The records to be kept by the controller must contain the following information: the name and contact details of the controller (and, where applicable, the name and contact details of the joint controller, the controller’s representative and the Data Protection Officer); the purposes of the processing (some...","og_url":"https:\/\/trendidivat.hu\/en\/privacy-policy\/","og_site_name":"Trendi Fashion","twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"9 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/trendidivat.hu\/en\/privacy-policy\/","url":"https:\/\/trendidivat.hu\/en\/privacy-policy\/","name":"Privacy Policy - Trendi Fashion","isPartOf":{"@id":"https:\/\/trendidivat.hu\/en\/#website"},"datePublished":"2025-08-04T13:10:52+00:00","breadcrumb":{"@id":"https:\/\/trendidivat.hu\/en\/privacy-policy\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/trendidivat.hu\/en\/privacy-policy\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/trendidivat.hu\/en\/privacy-policy\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Kezd\u0151lap","item":"https:\/\/trendidivat.hu\/en\/"},{"@type":"ListItem","position":2,"name":"Privacy Policy"}]},{"@type":"WebSite","@id":"https:\/\/trendidivat.hu\/en\/#website","url":"https:\/\/trendidivat.hu\/en\/","name":"Trendi Fashion","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/trendidivat.hu\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"}]}},"_links":{"self":[{"href":"https:\/\/trendidivat.hu\/en\/wp-json\/wp\/v2\/pages\/53","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/trendidivat.hu\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/trendidivat.hu\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/trendidivat.hu\/en\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/trendidivat.hu\/en\/wp-json\/wp\/v2\/comments?post=53"}],"version-history":[{"count":1,"href":"https:\/\/trendidivat.hu\/en\/wp-json\/wp\/v2\/pages\/53\/revisions"}],"predecessor-version":[{"id":54,"href":"https:\/\/trendidivat.hu\/en\/wp-json\/wp\/v2\/pages\/53\/revisions\/54"}],"wp:attachment":[{"href":"https:\/\/trendidivat.hu\/en\/wp-json\/wp\/v2\/media?parent=53"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}