Privacy Policy - Phone calls

Data Management Policy regarding the recording of telephone conversations by BOXY Logistics Zrt.

Who is the Data Controller?	The Data Controller is BOXY Logistics Ltd. (1036 Budapest, Lajos utca 48-66. B. building).
Who qualifies as a Data Subject (whose personal data does the Data Controller manage)?	The Data Controller records: – telephone conversations about complaints or information regarding deliveries related to the contract made between the given webshop and its contracting party, as well as the webshop’s representative (contact person) handling any orders or deliveries in representation of the contracted webshop. – telephone conversations with either the contracting party or the delivery recipient in connection with the performance or complaints related to deliveries carried out by the Data Controller.
What is the purpose, legal basis, and duration of the data processing?	The purpose, legal basis, and duration of data processing for the recording of telephone conversations as personal data are summarized in the following table:

Who is the Data Controller?

The Data Controller is BOXY Logistics Ltd. (1036 Budapest, Lajos utca 48-66. B. building).

Who qualifies as a Data Subject (whose personal data does the Data Controller manage)?

The Data Controller records:

– telephone conversations about complaints or information regarding deliveries related to the contract made between the given webshop and its contracting party, as well as the webshop’s representative (contact person) handling any orders or deliveries in representation of the contracted webshop.

– telephone conversations with either the contracting party or the delivery recipient in connection with the performance or complaints related to deliveries carried out by the Data Controller.

What is the purpose, legal basis, and duration of the data processing?

The purpose, legal basis, and duration of data processing for the recording of telephone conversations as personal data are summarized in the following table:

Data Subject	Purpose of Data Processing	Legal Basis of Data Processing	Duration of Data Processing
The contracting party with the webshop, and the delivery recipient	Investigation of telephone complaints, and traceability of non-complaint-related telephone communications	Data processing is necessary for compliance with a legal obligation applicable to the Data Controller [GDPR Article 6(1)©]	5 years [under the Consumer Protection Law of 1997, Section 17/B(3)]
The person acting as a representative (contact) of a webshop contracted with BOXY Logistics Ltd. as the Data Controller	Fulfillment of contractual obligations related to orders and deliveries	The legitimate interest of the Data Controller [GDPR Article 6(1)(f)]	Until the purpose/interest ceases or upon successful objection, but no later than the expiration of related claims arising from the contract between BOXY Logistics Ltd. and the webshop

What rights do you have?	Under the General Data Protection Regulation (GDPR) 2016/679 of the European Parliament and the Council, you have the right to: (i) request access to and information about your personal data processed by the Data Controller, (ii) request rectification, deletion, or restriction of processing of your personal data, (iii) request that the Data Controller informs recipients about the rectification, deletion, or restriction of your data, (iv) object to data processing based on the legitimate interests of the Data Controller, (v) pursue legal remedies.
	Additionally, please note that you may object to the processing of your personal data based on a balancing of interests at any time. You can make your objection free of charge at the contact details of the Data Controller or BOXY Logistics Ltd.
Who are the recipients of your personal data with whom or which your personal data is shared?	The Data Controller uses a data processor, Call To Action Hungary Ltd. (2040 Budaörs, Ébner György köz 4.), for contact center tasks (B2C) for the duration of an indefinite contract. The Data Controller does not transfer personal data to others or abroad.
What are the consequences of not providing data?	Failure to provide personal data may result in the inability to properly fulfill orders, deliveries, and handle or clarify complaints, which may take longer or not be guaranteed.
What legal remedies are available to you?	Regarding the lawfulness of the data processing, you may initiate proceedings with the National Data Protection and Freedom of Information Authority (1055 Budapest, Falk Miksa u. 9-11., postal address: 1363 Budapest, Pf.: 9., website: www.naih.hu, phone: +36 (1) 391-1400, fax: +36 (1) 391-1410, central email: ugyfelszolgalat@naih.hu) or you may turn to the court of your domestic residence or the headquarters of the Data Controller. You can find the court according to your place of residence or place of stay at http://birosag.hu/ugyfelkapcsolati-portal/birosag-kereso. We recommend that before approaching the National Data Protection and Freedom of Information Authority or the court, you should contact the data protection officer responsible for data protection tasks at the Data Controller.
How can you contact the person responsible for data protection tasks?	The contact details for the person responsible for data protection tasks at BOXY Logistics Ltd. are: – email: ugyfelszolgalat@boxygroup.hu, – phone number: 061 44 77 260, – postal address: 1036 Budapest, Lajos u. 48-66.