Your basket is currently empty!
Privacy Policy
2025.11.17.
Data Controller
Name: Natago Sweet Korlátolt Felelősségű Társaság
Registered office: 2092 Budakeszi, Fő utca 232.
Mailing address, complaint handling: 2092 Budakeszi, Fő utca 232.
E-mail: info@mentesdelikat.hu
Phone number: +204526692
Website: http://www.mentesdelikat.hu
Hosting Provider
Name: Vitarex Stúdió Kft.
Mailing address: Budapest, Aladár u. 17 Fsz. 1, 1016
E-mail address: (06 1) 466 7404
Phone number: https://vitarex.hu/
Description of data processing carried out during the operation of the webshop
This document contains all relevant data processing information regarding the operation of the webshop in accordance with the European Union General Data Protection Regulation No. 2016/679 (hereinafter: Regulation, GDPR) and Act CXII of 2011 (hereinafter: Infotv.).
Information on the use of cookies
What is a cookie?
The Data Controller uses so-called cookies when you visit the website. A cookie is an information package consisting of letters and numbers sent by our website to your browser with the aim of saving certain settings, facilitating the use of our website, and helping us collect some relevant, statistical information about our visitors.
Some cookies do not contain personal information and are not suitable for identifying an individual user, but some contain a unique identifier – a secret, randomly generated string of numbers – which is stored by your device, thereby ensuring your identification. The operational duration of individual cookies is contained in the relevant description of each cookie.
Legal background and legal basis of cookies:
We distinguish three main types of cookies: strictly necessary cookies, which serve the proper functioning of the Website, statistical cookies, and marketing cookies.
The legal basis for data processing, pursuant to Article 6(1)(a) of the Regulation, is your consent in the case of statistical and marketing cookies, and pursuant to Article 6(1)(f) of the Regulation, the legitimate interest necessary to ensure the operation of the Website in the case of strictly necessary cookies.
Main characteristics of cookies used by the website:
Strictly necessary cookies:
If you do not accept the use of these cookies, certain functions may not be available to you.
Strictly necessary cookies for operation: These cookies are essential for the use of the website and enable the use of basic website functions. Without them, many functions of the site will not be available to you. The lifespan of this type of cookie is strictly limited to the duration of the session.
Session cookie: These cookies store the visitor’s location, browser language, and payment currency; their lifespan is until the browser is closed, or a maximum of 2 hours.
Age-restricted content cookie: These cookies record the fact of approval of age-restricted content and that the data subject is over 18 years old; their lifespan lasts until the browser is closed.
Recommended products cookie: For the “recommend to a friend” function, it records the list of products to be recommended. Its lifespan is 60 days.
Mobile version, design cookie: Detects the device used by the visitor and switches to full view on mobile. Its lifespan is 365 days.
Cookie acceptance cookie: Upon arriving at the site, accepts the statement on storing cookies in the warning window. Its lifespan is 365 days.
Logout #2 cookie: According to option #2, the system logs the visitor out after 90 days. Its lifespan is 90 days.
Backend identifier cookie: The identifier of the backend server serving the site. Its lifespan lasts until the browser is closed.
Statistical cookies:
Google Analytics cookie: Google Analytics is Google’s analytics tool that helps website and app owners get a more accurate picture of their visitors’ activities. The service may use cookies to collect information and report website usage statistics without personally identifying visitors to Google. The main cookie used by Google Analytics is the “__ga” cookie. In addition to reporting website usage statistics, Google Analytics—together with some of the advertising cookies described above—can also be used to show more relevant ads across Google products (like Google Search) and across the web.
Cookies for improving user experience: These cookies collect information about the user’s website usage, such as which pages they visit most often, or what error messages they receive from the website. These cookies do not collect information that identifies the visitor, meaning they work with completely general, anonymous information. The data obtained from these is used to improve website performance. The lifespan of this type of cookie is strictly limited to the duration of the session.
Referrer cookies: They record which external site the visitor came from to reach the site. Their lifespan lasts until the browser is closed.
Last viewed product cookie: Records the products last viewed by the visitor. Their lifespan is 60 days.
Last viewed category cookie: Records the last viewed category. Its lifespan is 60 days.
Cart cookie: Records products placed in the cart. Its lifespan is 365 days.
Smart offer cookie: Records the conditions for displaying smart offers (e.g., whether the visitor has been to the site before, whether they have an order). Its lifespan is 30 days.
Marketing cookies:
Google AdWords cookie When someone visits our site, the visitor’s cookie ID is added to the remarketing list. Google uses cookies—such as NID and SID cookies—to customize ads seen in Google products, such as Google Search. It uses such cookies, for example, to remember your recent searches, your previous interactions with an advertiser’s ads or search results, and your visits to advertisers’ websites. AdWords conversion tracking uses cookies. To track sales and other conversions resulting from an ad, it saves cookies to a user’s computer when that person clicks on an ad. Some common uses of cookies include: selecting ads based on what is relevant to a user, improving reporting on campaign performance, and avoiding showing ads the user has already seen.
Remarketing cookies: May appear to previous visitors or users when they browse other websites on the Google Display Network or search for terms related to their products or services.
Facebook pixel (Facebook cookie) The Facebook pixel is code used on the website to report on conversions, build audiences, and provide the site owner with detailed analytics on how visitors use the website. With the Facebook pixel, you can show personalized offers and ads to website visitors on the Facebook interface. You can study Facebook’s privacy policy here: https://www.facebook.com/privacy/explanation
You can find more information about deleting cookies at the following links:
- Internet Explorer: http://windows.microsoft.com/en-us/internet-explorer/delete-manage-cookies#ie=ie-11
- Firefox: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer
- Mozilla: https://support.mozilla.org/hu/kb/weboldalak-altal-elhelyezett-sutik-torlese-szamito
- Safari: https://support.apple.com/guide/safari/manage-cookies-and-website-data-sfri11471/mac
- Chrome: https://support.google.com/chrome/answer/95647
- Edge: https://support.microsoft.com/hu-hu/help/4027947/microsoft-edge-delete-cookies
Data processed for contract conclusion and fulfillment
Several data processing cases may occur for contract conclusion and fulfillment. Please be informed that data processing related to complaint handling and warranty administration only takes place if you exercise one of these rights.
If you do not make a purchase through the webshop and are only a visitor, the provisions described under marketing data processing may apply to you if you give us marketing consent.
Detailed information on data processing for contract conclusion and fulfillment:
Order processing
During order processing, data processing activities are necessary to fulfill the contract.
Processed data
During data processing, the Data Controller processes your name, address, phone number, e-mail address, characteristics of the purchased Product, order number, and the date of purchase.
If you have placed an order in the webshop, data processing and providing the data are essential for the fulfillment of the contract.
Duration of data processing
Data is processed for 5 years according to the civil law limitation period.
Legal basis for data processing
Performance of a contract. [Data processing pursuant to Article 6(1)(b) of the Regulation]
Invoicing
The data processing process is carried out to issue an invoice in accordance with legislation and to fulfill the obligation to retain accounting documents. Under Section 169(1)-(2) of the Accounting Act (Sztv.), business associations must retain accounting documents directly and indirectly supporting bookkeeping accounts.
Processed data
Name, address, e-mail address, phone number.
Duration of data processing
Pursuant to Section 169(2) of the Accounting Act, issued invoices must be retained for 8 years from the date of issue of the invoice.
Legal basis for data processing
Pursuant to Section 159(1) of Act CXXVII of 2007 on Value Added Tax, issuing an invoice is mandatory, and pursuant to Section 169(2) of Act C of 2000 on Accounting, it must be retained for 8 years [Data processing pursuant to Article 6(1)(c) of the Regulation].
Data processing related to delivery of goods
The data processing process takes place in order to deliver the ordered product.
Processed data
Name, address, e-mail address, phone number.
Duration of data processing
The Data Controller processes the data until the duration of the delivery of the ordered goods.
Legal basis for data processing
Performance of a contract [Data processing pursuant to Article 6(1)(b) of the Regulation].
Recipients and data processors of data processing related to delivery of goods
Name of recipient: GLS General Logistics Systems Hungary Csomag-Logisztikai Kft.
Registered office of recipient: 2351 Alsónémedi, GLS Európa u. 2.
Phone number of recipient: 06-29-88-67-00
E-mail address of recipient: info@gls-hungary.com
Website of recipient: https://gls-group.eu/HU/hu/home
The courier service cooperates in the delivery of the ordered goods based on a contract concluded with the Data Controller. The courier service processes the received personal data in accordance with its privacy policy available on its website.
Name of recipient: Packeta Hungary Kft.
Registered office of recipient: 1044 Budapest, Ezred utca 2.
Phone number of recipient: +36 1 400 8806
E-mail address of recipient: info@packeta.hu
Website of recipient: packeta.hu
The courier service cooperates in the delivery of the ordered goods based on a contract concluded with the Data Controller. The courier service processes the received personal data in accordance with its privacy policy available on its website.
Name of recipient: FoxPost Kft.
Registered office of recipient: 1068 Budapest, Dózsa György út 84. B. ép.
Phone number of recipient: +36 1/999-0-369
E-mail address of recipient: info@foxpost.hu
Website of recipient: foxpost.hu
The courier service cooperates in the delivery of the ordered goods based on a contract concluded with the Data Controller. The courier service processes the received personal data in accordance with its privacy policy available on its website.
Marketing data processing
Data processing related to sending newsletters
The data processing process takes place in order to send out newsletters.
Processed data
Name, address, e-mail address, phone number.
Duration of data processing
Until the data subject withdraws their consent.
Legal basis for data processing
Your voluntary consent, given to the Data Controller by subscribing to the newsletter [Data processing pursuant to Article 6(1)(a) of the Regulation]
Data processing related to sending and displaying personalized advertisements
The data processing process takes place in order to send advertising content corresponding to the data subject’s sphere of interest.
Processed data
Name, address, e-mail address, phone number.
Duration of data processing
Until consent is withdrawn.
Legal basis for data processing
Your voluntary, separate consent, given to the Data Controller during data collection [Data processing pursuant to Article 6(1)(a) of the Regulation]
Remarketing
Data processing as a remarketing activity is implemented with the help of cookies.
Processed data
Data processed by cookies defined in the cookie notice.
Duration of data processing
The data storage duration of the given cookie, more information is available here:
Google General Cookie Notice:
https://www.google.com/policies/technologies/types
Google Analytics Notice:
https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage?hl=hu
Facebook Notice:
https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen
Legal basis for data processing
Your voluntary consent, given to the Data Controller by using the website [Data processing pursuant to Article 6(1)(a) of the Regulation].
Prize game
The data processing process takes place in order to conduct the prize game.
Processed data
Name, email address, phone number.
Duration of data processing
The data will be deleted following the conclusion of the prize game, except for the winner’s data, which the Data Controller is obliged to retain for 8 years under the Accounting Act.
Legal basis for data processing
Your voluntary consent, given to the Data Controller by using the website. [Data processing pursuant to Article 6(1)(a) of the Regulation]
Payee.tech
The Service Provider informs the Customer/User that in the event of enforcing a claim, the Service Provider may, on the basis of legitimate interest, transfer the Customer’s/User’s following data to Legal Labs Kft. (registered office: 1054 Budapest, Honvéd utca 8. 1. em. 2., company registration number: 01-09-382985, represented by: Dávid Grüll, Managing Director, e-mail: hello@payee.tech, web: https://payee.tech/, hereinafter: “Payee”) used as a contributor in debt collection, as a data processor.
Scope of data affected by data transfer: last and first name, residential address, e-mail address, phone number, amount of debt, legal title of debt, date of contract formation.
Information regarding data processing by Payee is available at this link: https://payee.tech/legal/privacy-policy
Relevant legislation
Legislation: Government Decree 45/2014 (II. 26.) on the detailed rules of contracts between consumers and businesses / Section 22 – Link: View
11. Exercising the right of withdrawal or termination granted to the consumer
Section 22 (1) The consumer may exercise the right granted in Section 20
a) using the model statement found in Annex 2; or
b) via an unambiguous statement to this effect.
(2) The business may also ensure the consumer’s exercise of the right specified in Section 20 as per subsection (1) on its website. In this case, the business shall immediately confirm receipt of the consumer’s statement on a durable medium.
(3) The right specified in Section 20 shall be deemed exercised within the deadline if the consumer sends their statement before the expiration of the deadline defined in Section 20(2) or Section 21.
(4) The burden of proof lies with the consumer to prove that they exercised the right defined in Section 20 in accordance with this Section.
Legislation: Civil Code / Section 6:156 – Link: View
Section 6:156 [Creditor’s default]
(1) The obligee is in default if they fail to accept performance offered to them.
(2) Default by the obligee excludes simultaneous default by the obligor.
(3) In the event of default in acceptance, the obligor is obliged to keep the thing safe according to the rules of agency without authority, and the risk of loss passes to the obligee.
(4) If the parties have specified the service by kind and quantity, the provisions of subsection (3) shall apply if the parties have designated the things intended for performance or have separated them from other similar things for the obligee.
Processed data
Name, email address, phone number, address.
Duration of data processing
Legal basis for data processing
Further data processing
If the Data Controller wishes to carry out further data processing, it shall provide prior information on the essential circumstances of the data processing (legal background and legal basis of data processing, purpose of data processing, scope of processed data, duration of data processing).
Recipients of personal data
Data processing aimed at storing personal data
Name of data processor:
Contact details of data processor:
Phone number:
E-mail address:
Registered office:
Website:
The Data Processor stores personal data based on a contract concluded with the Data Controller. They are not entitled to inspect personal data.
Data processing activity related to newsletter sending
Name of company operating newsletter sending system:
Registered office of company operating newsletter sending system:
Phone number of company operating newsletter sending system:
E-mail address of company operating newsletter sending system:
Website of company operating newsletter sending system:
The Data Processor cooperates in sending out newsletters based on a contract concluded with the Data Controller. During this, the Data Processor processes the data subject’s name and e-mail address to the extent necessary for sending newsletters.
Data processing related to invoicing
Name of data processor:
Registered office of data processor:
Phone number of data processor:
E-mail address of data processor:
Website of data processor:
The Data Processor cooperates in the registration of accounting documents based on a contract concluded with the Data Controller. During this, the Data Processor processes the data subject’s name and address to the extent necessary for accounting records, for the duration corresponding to Section 169(2) of the Accounting Act, and deletes them thereafter.
Data processing related to the operation of a CRM system
Name of data processor:
Registered office of data processor:
Phone number of data processor:
E-mail address of data processor:
Website of data processor:
The Data Processor cooperates in the registration of orders based on a contract concluded with the Data Controller. During this, the Data Processor processes the data subject’s name, address, phone number, order number and date within the civil law limitation period.
Payee.tech
The Service Provider informs the Customer/User that if they do not accept the ordered product—without communicating an intention to withdraw under the law—they commit a breach of contract.
By accepting the provisions of these GTC, the Customer/User acknowledges that the Service Provider is entitled to enforce against them costs incurred as a result of the Customer’s/User’s breach of contract (e.g., shipping, packaging, freight, storage, or other incurred costs), where the legal basis is a penalty for breach of contract.
The Service Provider informs the Customer/User that if it enforces its claim under these GTC via non-legal (e.g., payment demand, lawyer’s letter) or legal (e.g., order for payment, enforcement) means, the Service Provider commissions Legal Labs Kft., operator of the Payee debt collection platform, with collecting the claim.
By accepting the provisions of these GTC, the Customer/User acknowledges that the Service Provider is entitled to enforce against the Customer/User any costs incurred in connection with debt collection. The basis for the amount of costs is available here: https://payee.tech/pricing
The Customer/User acknowledges that their data necessary for collection will be transferred to Legal Labs Kft.
Trusted Store Program
In order to operate the Trusted Store program of www.arukereso.hu (Online Comparison Shopping Kft. 1074 Budapest, Rákóczi út 70-72., Tax No: 24868291-2-42, Company Reg. No: 01-09-186759), after purchases made here, the customer’s e-mail address and the name of the Product purchased by them are transferred to arukereso.hu. Purpose of data transfer: requesting and displaying customer feedback. The personal data transferred in this way is processed by Online Comparison Shopping Kft. in accordance with the Privacy and Data Processing Policy of www.arukereso.hu. Online Comparison Shopping Kft. is considered the data controller for the data transferred in this scope.
Your rights regarding data processing
Within the duration of data processing, you are entitled to the following rights under the provisions of the Regulation:
- right to withdraw consent
- access to personal data and information related to data processing
- right to rectification
- restriction of data processing,
- right to erasure
- right to object
- right to portability.
If you wish to exercise your rights, it will involve your identification, and the Data Controller must necessarily communicate with you. Therefore, personal data will need to be provided for identification (but identification can only be based on data that the Data Controller already processes about you), and your complaints regarding data processing will be available in the Data Controller’s email account within the period specified in this notice regarding complaints. If you were a customer of ours and wish to identify yourself for complaint handling or warranty administration, please also provide your order ID for identification. Using this, we can also identify you as a customer.
The Data Controller will respond to complaints related to data processing within 30 days at the latest.
Right to withdraw consent
You have the right to withdraw your consent given for data processing at any time; in such cases, the provided data will be deleted from our systems. Please note, however, that in the case of an order not yet fulfilled, withdrawal may result in our inability to deliver to you. In addition, if the purchase has already taken place, we cannot delete invoicing-related data from our systems due to accounting regulations, and if you have an outstanding debt to us, we may process your data based on the legitimate interest related to debt collection even if consent is withdrawn.
Access to personal data
You have the right to receive confirmation from the Data Controller as to whether or not your personal data is being processed, and where that is the case, you have the right to:
- gain access to the processed personal data and
- be informed by the Data Controller about the following information:
- the purposes of the data processing;
- the categories of personal data processed about you;
- information on recipients or categories of recipients to whom the personal data have been or will be disclosed by the Data Controller;
- the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
- your right to request from the Data Controller rectification or erasure of personal data or restriction of processing of personal data concerning you, or to object to such processing in the case of processing based on legitimate interest;
- the right to lodge a complaint with a supervisory authority;
- where the data are not collected from you, any available information as to their source;
- the existence of automated decision-making (if such a procedure is applied), including profiling, and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you.
The purpose of exercising the right may be aimed at determining and checking the lawfulness of data processing; therefore, in the case of repeated requests for information, the Data Controller may charge a reasonable fee in exchange for providing the information.
The Data Controller provides access to personal data by emailing you the processed personal data and information following your identification. If you have a registration, we provide access by allowing you to view and check the personal data processed about you by logging into your user account.
Please indicate in your request whether you are requesting access to personal data or requesting information related to data processing.
Right to rectification
You have the right to obtain from the Data Controller without undue delay the rectification of inaccurate personal data concerning you upon your request.
Right to restriction of data processing
You have the right to obtain from the Data Controller restriction of processing upon your request where one of the following applies:
- the accuracy of the personal data is contested by you, for a period enabling the Data Controller to verify the accuracy of the personal data; if the correct data can be established immediately, no restriction will take place;
- the processing is unlawful and you oppose the erasure of the personal data for any reason (for example, because the data is important to you for the assertion of legal claims), and therefore you do not request deletion of the data, but instead request the restriction of their use;
- the Data Controller no longer needs the personal data for the specified purposes of the processing, but they are required by you for the establishment, exercise, or defense of legal claims; or
- you have objected to processing, but the Data Controller’s legitimate interest may also justify the processing; in this case, pending the verification whether the legitimate grounds of the Data Controller override your legitimate grounds, data processing must be restricted.
Where processing has been restricted, such personal data shall, with the exception of storage, only be processed with the data subject’s consent or for the establishment, exercise, or defense of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or of a Member State.
The Data Controller will inform you in advance (at least 3 working days before lifting the restriction) of the lifting of the restriction on data processing.
Right to erasure – right to be forgotten
You have the right to obtain from the Data Controller the erasure of personal data concerning you without undue delay where one of the following grounds applies:
- the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed by the Data Controller;
- you withdraw consent and there is no other legal ground for the processing;
- you object to the processing based on legitimate interest and there are no overriding legitimate grounds (i.e., legitimate interest) for the processing,
- the personal data have been unlawfully processed by the Data Controller and this has been established based on the complaint,
- the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the Data Controller is subject.
Where the Data Controller has made the personal data public for any lawful reason and is obliged to erase it for any of the reasons specified above, the Data Controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform other controllers which are processing the personal data that you have requested the erasure by such controllers of any links to, or copy or replication of, those personal data.
Erasure shall not apply to the extent that processing is necessary:
- for exercising the right of freedom of expression and information;
- for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject (such an instance is data processing carried out within the framework of invoicing, as the retention of invoices is required by law), or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
- for the establishment, exercise, or defense of legal claims (e.g., if the Data Controller has a claim against you that has not yet been fulfilled, or consumer or data processing complaint handling is in progress).
Right to object
You have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data based on legitimate interest. In such a case, the Data Controller shall no longer process the personal data unless it demonstrates compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims.
Where personal data are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. If you object to processing for direct marketing purposes, the personal data shall no longer be processed for such purposes.
Right to portability
If the data processing is carried out by automated means, or if the data processing is based on your voluntary consent, you have the right to request from the Data Controller to receive the data provided by you to the Data Controller, which the Data Controller shall make available to you in XML, JSON, or CSV format; if technically feasible, you may request that the Data Controller transmit the data in this format directly to another data controller.
Automated decision-making
You have the right not to be subject to a decision based solely on automated processing (including profiling), which produces legal effects concerning you or similarly significantly affects you. In these cases, the Data Controller shall implement suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express their point of view, and to contest the decision.
The above shall not apply if the decision:
- is necessary for entering into, or performance of, a contract between you and the Data Controller;
- is authorized by Union or Member State law to which the Data Controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or
- is based on your explicit consent.
Registration in the data protection register
Under the provisions of the Infotv., the Data Controller had to notify certain data processing activities to the data protection register. This notification obligation ceased on May 25, 2018.
Data security measures
The Data Controller declares that it has taken appropriate security measures to protect personal data against unauthorized access, alteration, transmission, public disclosure, deletion, or destruction, as well as accidental destruction and damage, and against becoming inaccessible due to changes in applied technology.
The Data Controller, within organizational and technical capabilities, does everything possible to ensure that its Data Processors also take appropriate data security measures when working with your personal data.
Remedies
If you believe that the Data Controller has violated a statutory provision relating to data processing or has not fulfilled one of your requests, you may initiate an investigation procedure by the National Authority for Data Protection and Freedom of Information to terminate the presumed unlawful data processing (mailing address: 1363 Budapest, Pf. 9., e-mail: ugyfelszolgalat@naih.hu, telephone numbers: +36 (30) 683-5969, +36 (30) 549-6838; +36 (1) 391 1400).
Please also be informed that in the event of a violation of statutory provisions regarding data processing, or if the Data Controller has not fulfilled one of your requests, you may file a civil lawsuit against the Data Controller before a court.
Amendment of the Privacy Policy
The Data Controller reserves the right to amend this privacy policy in a way that does not affect the purpose and legal basis of data processing. By using the website after the amendment enters into force, you accept the amended privacy policy.
If the Data Controller wishes to carry out further data processing regarding collected data for a purpose other than the purpose of collection, it shall inform you prior to the further data processing of the purpose of data processing and the following information:
- the duration of personal data storage, or if this is not possible, the criteria used to determine that period;
- your right to request from the Data Controller access to personal data concerning you, rectification, erasure, or restriction of processing thereof, and to object to data processing in the case of processing based on legitimate interest, and to request the right to data portability in the case of processing based on consent or a contractual relationship;
- in the case of consent-based data processing, that you may withdraw your consent at any time,
- the right to lodge a complaint with a supervisory authority;
- whether the provision of personal data is a statutory or contractual requirement, or a requirement necessary to enter into a contract, as well as whether you are obliged to provide the personal data and of the possible consequences of failure to provide such data;
- the existence of automated decision-making (if such a procedure is applied), including profiling, and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you.
Data processing may only commence thereafter; if the legal basis for data processing is consent, you must also consent to the data processing in addition to receiving information.