Privacy Notice

This document contains information about data handling on the website https://bestdealmatrix.com
operated by Gábor Nagy entrepreneur.

The Privacy Notice has been prepared in accordance with the rules of the General Data Protection
Regulation 2016/679 (hereinafter: the Regulation).
How to contact us:
Registered office: 7030 Paks, Hungary Tulipán Utca 14. 4 em. 15 door
E-mail address: info@bestdealmatrix.com

1. Scope of data processing, legal basis, purpose and duration of processing

1.1. Send newsletter
Description of the data processing scope
Through the Website, the visitor has the possibility to subscribe to a newsletter.
Legal basis and purpose of processing
The legal basis for processing is your voluntary consent pursuant to Article 6(1)(a) of the Regulation.
The purpose of the processing is to enable us to send you newsletters.
Duration of data processing
The data will be deleted 1 year after the contact has been processed.

2. Data processors
Name: Shopify
Company name: Shopify Inc.
Address: 150 Elgin St, Suite 800, Ottawa, ON, K2P 1L4, Kanada
Phone: +1 888-746-7439
E-mail: support@shopify.com
Website: https://www.shopify.com

3. Cookie processing
Parts of the Website use small data files (hereinafter referred to as "cookies" to identify the Data
Subject. By visiting the Website and using certain of its functions, the Data Subject gives his or her
consent to the storage of these cookies on the Data Subject's computer and to their access by the
data controller.
You can use your browser software to set and block cookie-related activity. Please note, however,
that in the latter case, without the use of cookies, you may not be able to use all the services of the
Website.
The Service Provider may ensure, as a technical intermediary, that third parties cooperating with the
Service Provider, in particular Google Inc., store cookies during the visit to the websites if the Data
Subject has previously visited the Service Provider's Website and may display an advertisement to
the Data Subject on this basis.

You can also delete the cookie from your computer or set your browser to refuse the use of cookies.
In addition, Google ensures that the user can disable cookies set by Google by going to the page
where you can opt out of ads from Google (http://www.google.hu/policies/technologies/ads/). By
disabling or deleting the use of cookies, the use of the websites may become less convenient for the
Data Subject.
What are cookies and how do we handle them?
Cookies are small data files (hereinafter: cookies) that are transferred to the Data Subject's computer
through the use of the Website by the Website and are saved and stored by the Data Subject's
internet browser.
General functions of cookies:
o collect information about visitors and their devices;
o remember visitor's individual preferences, which are used, for example, when making online
transactions, so they do not need to be re-entered;
o make it easier to use the Website;
o provide a quality user experience.
In order to provide a personalised service, a small piece of data, a cookie, is placed on the user's
computer and read back during a subsequent visit. When the browser returns a previously saved
cookie, the cookie provider has the possibility to link the user's current visit to previous visits, but
only in relation to its own content.
Most of the most commonly used internet browsers (Chrome, Firefox, Edge, Explorer, Opera, Safari,
etc.) accept and allow the download and use of cookies by default, but it is up to you to modify your
browser settings to refuse or block them, or to delete cookies already stored on your computer.
The following cookies may be managed on the Website:

1. Essential session-id cookies (Technical [necessary] cookies):
They are essential for navigating a website, for the operation of key website functions and for
accessing protected content. These cookies do not collect information that could be used for
marketing purposes or to remember what other websites the visitor has visited. Once the website is
closed, these cookies are automatically deleted and the session is terminated. If the visitor does not
accept these cookies, the website or parts of the website may not be displayed or may be displayed
incorrectly or may not be accessible, making it impossible to use the website or fill in forms. The legal
basis for the processing of these cookies is the legitimate interest of the Data Controller in the
operation of the Website.

The Data Controller uses the following essential cookies:
Name: _GRECAPTCHA
Lifespan: six months
Purpose: Google reCAPTCHA sets a required cookie (_GRECAPTCHA) when it performs a risk analysis.

2. Cookies for statistical purposes (technical [functional] cookies):
These cookies are linked to the performance, development and user experience of websites and
allow the website operator to collect information about how users use the website. The information
they collect relates to which part of the site the visitor clicked on, how many web pages or pages
they visited, how long each session took, what error messages they received, etc. We also distinguish
between persistent and session cookies for statistical purposes, depending on the length of time they
are stored on the visitor's browser or device. Cookies for statistical purposes are placed on the user's
device during the browsing of a given website, can be deleted afterwards in the browser settings and
the consent of the data subject to their use should be requested.

Name: _ga_5QWB09MPTT
Lifetime: one year one month
Purpose: This cookie is used by Google Analytics to keep track of session status.

Name: _ga
Lifetime: one year one month
Purpose: This cookie name is associated with Google Universal Analytics, a major update to Google's
commonly used analytics service. This cookie is used to distinguish individual users by assigning a
randomly generated number as a customer identifier. This cookie is included in each page request on
the site and is used to calculate visitor, session and campaign data for analytics reporting on
websites.

Name: _gid
Lifetime: one year one month
Purpose: This cookie is set by Google Analytics. It stores and updates a unique value for each page
visited and is used to count and track visits.
Name: _gat_gtag_UA_134641689_1
Lifetime: one year one month
Purpose: This cookie is part of Google Analytics and is used to limit requests (reduce the number of
requests).

For information about cookies on our website, please see the links below:
- Google: https://support.google.com/analytics/answer/7667196?hl=hu
- Meta (Facebook, Instagram) : https://www.facebook.com/policies/cookies/
- Youtube: https://www.youtube.com/intl/ALL_hu/howyoutubeworks/user-settings/privacy/

4. Your rights in relation to data processing
During the period of processing, you have the following rights under the Regulation:
- access to personal data and information on data management,
- the right to rectification
- restriction of processing,
- the right to erasure,
- the right to portability,
- the right to protest,
- the right to withdraw consent.
If you wish to exercise your rights, this will involve identifying yourself and we will need to
communicate with you. Therefore, in order to identify you, you will be required to provide personal
data (but identification will only be based on data that we already hold about you) and your
complaints about our processing will be available in our email account for the period of time
specified in this notice in relation to complaints.
We will respond to complaints about data processing within 30 days at the latest.
Right to withdraw consent
You have the right to withdraw your consent to data processing at any time, in which case the data
will be deleted from our systems.
Access to personal data and information.
You have the right to receive feedback on whether your personal data is being processed and, if it is,
you have the right to:
- have access to the personal data processed; and
- the following information:
o the purposes of the processing;
o the categories of personal data processed about you;
o information about the recipients or categories of recipients to whom or with whom
we have disclosed or will disclose the personal data;
o the envisaged period of storage of the personal data or, if this is not possible, the
criteria for determining that period;
o your right to request the rectification, erasure or restriction of the processing of
personal data concerning you and to object to the processing of such personal data
where there is a legitimate interest in the processing;

o the right to lodge a complaint with a supervisory authority;
o if the data was not collected from you, any available information about its source;
o the fact of automated decision-making (where such a process is used), including
profiling, and, at least in these cases, clear information about the logic used and the
significance and likely consequences for you of such processing.

The purpose of exercising the right may be to ascertain and verify the lawfulness of the processing,
and we may charge a reasonable fee for providing the information in exchange for repeated
information and requests.
Access to your personal data will be ensured by sending you the personal data and information we
process by e-mail after you have been identified.
Please indicate in your request whether you want access to your personal data or information on
data management.
Right to rectification.
You have the right to have inaccurate personal data about you corrected without delay at your
request.
Right to restriction of processing.
You have the right to request that we restrict processing if one of the following conditions is met:
- You contest the accuracy of the personal data, in which case the restriction applies for the
period of time that allows us to verify the accuracy of the personal data, if verification is not
necessary, no restriction will be applied;
- the processing is unlawful and you object to the deletion of the data and instead request the
restriction of their use;
- we no longer need the personal data for the purposes for which we are processing them, but
you need them for the establishment, exercise or defence of legal claims; or
- You have objected to the processing, but we may also have a legitimate interest in the
processing, in which case, until it is determined whether our legitimate grounds override
your legitimate grounds, the processing must be restricted.
If the processing is restricted, such personal data, except for storage, may only be processed with
your consent or for the establishment, exercise or defence of legal claims or for the protection of the
rights of another natural or legal person or for reasons of important public interest of the Union or of
a Member State.
You will be informed in advance (at least 3 working days before the restriction is lifted) of the lifting
of the restriction.
Right to erasure - right to be forgotten.
You have the right to have your personal data deleted without undue delay if one of the following
grounds applies:

- the personal data are no longer necessary for the purposes for which they were collected or
processed;
- You withdraw your consent and there is no other legal basis for the processing;
- You object to processing based on legitimate interest and there is no overriding legitimate
ground (i.e. legitimate interest) for processing,
- the personal data were unlawfully processed and this was established on the basis of the
complaint,
- personal data must be erased in order to comply with a legal obligation under EU or Member
State law applicable to us.
If we have disclosed personal data we hold about you for any lawful reason and we are required to
delete it for any of the reasons set out above, we will take reasonable steps, including technical
measures, taking into account the available technology and the cost of doing so, to inform other data
controllers that you have requested that links to or copies of your personal data in question be
deleted. As a general rule, your personal data will not be disclosed.
Erasure does not apply where the processing is necessary:
- to exercise the right to freedom of expression and information;
- to comply with an obligation under EU or Member State law that requires the processing of
personal data (such as processing in the context of invoicing, where the storage of the
invoice is required by law) or for the performance of a task carried out in the public interest
or in the exercise of official authority vested in the controller;
- to bring, enforce or defend legal claims (e.g. if we have a claim against you and you have not
yet settled it, or if you are the subject of a consumer or data management complaint).
Right to object
You have the right to object to the processing of your personal data based on legitimate interests at
any time on grounds relating to your particular situation. In such a case, we may no process the
personal data unless we can prove that the processing is justified by compelling legitimate grounds
which override your interests, rights and freedoms or for the establishment, exercise or defence of
legal claims.
Right to portability
If the processing is necessary for the performance of a contract, or if the processing is based on your
voluntary consent, you have the right to request that the data you have provided to us is provided to
you in a machine-readable format, which we will make available to you in xml, JSON or csv format,
and if technically feasible, you may request that we transfer the data in this format to another
controller.
Remedies available
If you believe that we have violated a legal provision on data processing or have failed to comply
with a request, you may initiate an investigation procedure with the National Authority for Data

Protection and Freedom of Information (address: 1363 Budapest Pf. 9., e-mail:
ugyfelszolgalat@naih.hu) to stop the alleged unlawful processing.
You should also be aware that you can also bring a civil action in court.

5. Data security
In the operation of our IT systems, we ensure that the necessary access control, internal organisation
and technical solutions are in place to prevent unauthorised persons from gaining access to your
data and to prevent unauthorised persons from deleting, removing or modifying your data. We also
enforce data protection and data security requirements with our data processors.
We keep records of any data breaches and, if necessary, we will inform you of any incidents that
occur.

6. Other provisions
We reserve the right to amend this privacy notice in a way that does not affect the purpose and legal
basis of the processing.
If, however, we intend to carry out further processing of the data collected for purposes other than
those for which they were collected, we will inform you of the purposes of the processing and the
following information before carrying out the further processing:
- the duration of the storage of personal data or, where this is not possible, the criteria for
determining that duration;
- the right to request access to, rectification, erasure or restriction of processing of personal
data concerning you and, in the case of processing based on legitimate interest, to object to
the processing of personal data and, in the case of processing based on consent or a
contractual relationship, to request the right to data portability;
- in the case of processing based on consent, that you can withdraw your consent at any time,
- the right to lodge a complaint with a supervisory authority;
- whether the provision of the personal data is based on a legal or contractual obligation or is
a precondition for entering into a contract and whether you are obliged to provide the
personal data and the possible consequences of not providing the data;
- the fact of automated decision-making (where such a process is used), including profiling,
and, at least in these cases, clear information about the logic used and the significance and
likely consequences for you of such processing.
The processing can only start after that, if the legal basis for the processing is consent, you must also
consent to the processing in addition to the information.
This Privacy Notice is valid from 18.03.2025.