Cookie and Privacy Policy

Last updated: 21-08-2018

PRIVACY POLICY

1. PREAMBLE

At XBody International Ltd. (hereinafter referred to as “XBody International”), we want to give you the best possible experience to ensure that you enjoy our service today and in the future. We appreciate that you are trusting us with information that is important for you, and we believe that transparency is the key to any healthy relationship. So, we want to transparently explain how and why we gather, store, share and use your personal data, outline the controls and choices you have around when as well as the measure we take to keep your personal data safe.

The highest level of protection of personal data is a priority for XBody International Ltd. (seat: H- 1072 Budapest, Rákóczi u. 42., contact details: https://dk.xbodyworld.com/contact-us, or +36 96 200 180)

This Privacy Policy aims to give information to the visitors of www.xbodyworld.com website (hereinafter referred to as the “Website“) on the data processing related to the operation of XBody International. XBody International’s data processing is in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as the “GDPR“) and the Act CXII of 2011 on the Right of Informational Self-Determination and on Freedom of Information (hereinafter referred to as the “Privacy Act“).

XBody International, as data controller, accepts the content of this legal notice as mandatory. XBody International commits to comply its data processing to the present Privacy Policy and to the legislation in force.

We hereby inform you on the main aspects of our data processing:

2. GENERAL PROVISIONS

The principles of XBody International data processing comply with the existing data protection legislation, in particular:

• GDPR,
• Privacy Act.,
• Act V of 2013 on the Civil Code (“Civil Code“),
• Act CVIII of 2001 on Electronic Commerce and on Information Society Services,
• Act C of 2003 – on Electronic Communications,
• Act XLVIII of 2008 on the Basic Requirements and Certain Restrictions of Commercial Advertising Activities
• Act CLV of 1997 on Customer Protection (“Act on Consumer Protection”)
• Act C of 2000 on Accounting (“Act on Accounting”)

XBody International does not process special categories of personal data for the purposes specified in this Privacy Policy.

For processing your personal data, XBody International uses the following processors:

• The Rocket Science Group LLC (675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308 USA) for sending our newsletters by operating the MailChimp platform as defined in Point 3.2 below (legal newsletter service),
• KingSol Informatikai Szolgáltató és Tanácsadó Kft. (1139 Budapest, Forgách utca 19.) as web hosting service provider for operating our website and as cloud provider
• WebOrigo Magyarország Zrt. (1027 Budapest, Bem József utca 9. fszt.) for providing IT support in relation to the operation of our website

XBody International only discloses your processed personal data to the members and employees of XBody International whose access to your personal data is vital to the achievement of the purpose of processing.

XBody International processes your personal data in confidence and implements appropriate technical and organisational measures to ensure their protection. Furthermore, XBody International creates appropriate procedures provisions that are necessary to implement the regulations of GDPR, the Privacy Act and other domestic and international data protection laws.

XBody International reserves the right to modify the present Privacy Policy at any time. Naturally, we will notify our partners and customers in sufficient time of any changes.

3. SPECIAL PROVISIONS APPLIED TO OUR DATA PROCESSING

3.1. Partner Portal registration data processing

Visitors of the Website have the opportunity to register to our partner portal.

Purpose of processing: to register and perform orders, to keep records of partners and clients, to document orders and payments.

Legal basis of processing: In case an order is placed it is the performance of contract (Article 6 (1) (b) of GDPR) and compliance with legal obligation (Act on Accounting section 2 Article 169; GDPR point c) section 1 of Article 6), in case there is no order placed it is the freely given consent of the data subject (Article 6 (1) (b) of GDPR).

Scope of the processing: name and contact details (phone number, e-mail address) of the data subject, name of the organization, country.

Data retention period: in case of accounting documentation 8 years; in other cases 5 years

Data processors:

Name	Seat	Data processor’s task
XBody Online Kft.	H-1072 Budapest, Rákóczi út 42.	FAQ and download files update

3.2. Processing for marketing purposes

3.2.1. XBody International’s newsletter service

We regularly send newsletters to our clients and business partners who register on our partner portal and build a database for business purposes.

Purpose of the processing: to inform our clients on the latest news regarding our services, awareness raising and relationship management.

Scope of the processing: name, e-mail address, phone number, the name of the company and the consent of the data subject (declaration of consent)

Legal basis of processing: The legal basis of XBody International’s data processing is the freely given consent of the data subject (Article 6 (1) (a) of GDPR).

Data retention period: XBody International only processes your collected personal data until it is compatible with its purposes, but no later than the withdrawal of consent by the data subject.

Please note that withdrawal of consent and the erasure or modification of personal data can be requested on the following contact details:

• e-mail: helpdesk@xbodyworld.com
• address: H-1072 Budapest, Rákóczi u. 42
• other: https://dk.xbodyworld.com/contact-us/

The scope of the processing: name, e-mail address, phone number, the name of the company and the consent of the data subject (declaration of consent).

Data transfer: To the Rocket Science Group LLC d/b/a MailChimp acting as data processor (seat: 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, Georgia 30308) that is part of the EU-U.S. Privacy Shield Framework Agreement.

XBody International uses the servers of the Data Processor that are located in a third country.

Due to the fact that Data Processor is part of the EU-U.S. Privacy Shield Framework Agreement, the appropriate level of protection of personal data is ensured.

3.2.2. Sending invitations and other marketing materials in connection to the professional events of XBody International

We regularly organise professional events for our clients, business partners and other interested audiences. In order to create and organise these events, we send out invitations and other materials for them.

Purpose of the processing: assessing the customer’s needs, consideration of the comments, client relationship management, informing our clients on the latest news regarding our services.

Scope of the processing: name, e-mail address, phone number, the name of the company and the consent of the data subject (declaration of consent)

Legal basis of processing: The legal basis of XBody International’s data processing is the freely given consent of the data subject (Article 6 (1) (a) of GDPR).

Data retention period: XBody International only processes your collected personal data until it is compatible with its purposes, but no later than the withdrawal of consent by the data subject.

3.2.3. Processing for the purpose of business relationship management

Purpose of the processing: client relationship management and facilitating to get in contact with XBody International. In case you would like to contact us, you can do it on our contact details indicated in this Privacy Policy and on our website, or directly on our website at the following link: direct contact: https://dk.xbodyworld.com/contact-us/

Scope of the processing: name and contact details (phone number and e-mail address) of the data subjects, other personal data placed on a business card (position, company name), documents provided by the requesting party, the description of the request and the consent of the data subject (declaration of consent)

Legal basis of processing: The legal basis of XBody International’s data processing is the freely given consent of the data subject (Article 6 (1) (a) of GDPR).

Data retention period: XBody International only processes your collected personal data until it is compatible with its purposes, but no later than the withdrawal of consent by the data subject.

3.2.4. Polls

Customer satisfaction has utmost importance to us, therefore we may send you polls and questionnaires.

Purpose of processing: to recognize your opinion about our services.

Legal basis of processing: The legal basis of XBody International’s data processing is the freely given consent of the data subject (Article 6 (1) (a) of GDPR).

Scope of the processing: name and contact details (phone number, e-mail address) of the data subject, name of the organization, your opinion and the consent of the data subject (declaration of consent).

Data retention period: XBody International only processes your collected personal data until it is compatible with its purposes, but no later than the withdrawal of consent by the data subject.

Data processors:

Name	Seat	Data processor’s task
Salesforce	Salesforce.com EMEA Limited, village 9, floor 26 Salesforce Tower, 110 Bishopsgate, London, UK, EC2N 4AY	send and receive of polls

3.3. Complaint handling, customer service

Personal data in connection with complaint handling and customer service is processed jointly with XBody Online Ltd (seat: 1072 Budapest, Rákóczi út 42.).

Purpose of the processing: to handle quality and quantity complaints concerning XBody services or products, to provide product service operation. The complaint notice can be registered through email: helpdesk@xbodyworld.com, telephone: +36 96 200 180, personally, in our website at: https://dk.xbodyworld.com/contact-us/, or at https://partnerportal.xbodyworld.com our registered partners through their partner portal.

Legal basis of processing: performance of service (GDPR point b) section 1 of Article 6); compliance with legal obligation (Act on Consumer Protection Article 17/A; Act on Accounting section 2 Article 169; GDPR point c) section 1 of Article 6); consent of data subject (Act on Consumer Protection Article 17/A; GDPR point a) section 1 of Article 6)

Scope of the processing: name and contact details (phone number, e-mail address) of the data subject, name and price of the product, time of the purchase and complaint notification, description of defect, claim required to be validated and the mode of settlement.

Data retention period: invoices of the returned goods: 8 years; records of the complaint and the replies: 5 years; comments in the book of customers: 2 years;

Consequence of refusal of data provision: it would be impossible to investigate and settle the complaint

Data processors:

Name	Seat	Data processor’s task
Salesforce	Salesforce.com EMEA Limited, village 9, floor 26 Salesforce Tower, 110 Bishopsgate, London, UK, EC2N 4AY	IM IT system where complaint notifications are registered and handled.
XBody Online	H-1072 Budapest, Rákóczi út 42.	External developer
XBody Hungary Kft.	H-1120 Budapest, György Aladár utca 35-39. alagsor 52.	External Developer

3.4. Contacting XBody International

Purpose of processing: In case data subject wishes to contact XBody International, it may do so through channels provided in present Policy or the website.

Legal basis of processing: The legal basis is the freely given consent of the data subject (Article 6 (1) (a) of GDPR), in case of complaint handling or sales service, compliance with legal obligation (Act on Consumer Protection Article 17/A; GDPR point c) section 1 of Article 6).

Scope of the processing: name and contact details (phone number, e-mail address) of the data subject, description of the matter, documents attached by the data subject.

Data retention period: records of the inquiry and the replies: 5 years; in other case until the withdrawal of consent.

Data processors:

Name	Seat	Data processor’s task
Salesforce.com EMEA Ltd.	village 9, floor 26 Salesforce Tower, 110 Bishopsgate, London, EC2N 4AY, United Kingdom	receive and send messages
WebOrigo Magyarország Zrt.	9. fszt., Bem József street, 1027 Budapest, Hungary	website operation

Data transfer: To Salesforce acting as data processor (seat: Salesforce.com EMEA Limited, village 9, floor 26 Salesforce Tower, 110 Bishopsgate, London, UK, EC2N 4AY, that is part of the EU-U.S. Privacy Shield Framework Agreement.

3.5. Processing on https://dk.xbodyworld.com/ website

3.5.1. Logging on the xbodyworld.com server

When visiting https://xbodycorld.com/, the webserver does not record any personal data.

Data logging for external service providers:

The portal’s html code contains links to external servers that are independent form XBody International. The external service provider’s server is directly connected to the user’s computer. Please be aware of the fact, that the aforementioned service providers are able to collect user data (e.g.: IP address, browser, operating system details, cursor movement, name of the visited page and the date of the visit) due to the direct communication with the user’s browser.

3.5.2. Cookies at https://dk.xbodyworld.com/

XBody International and other service partners install cookies (small piece of information) in order to identify and track users and to read them back during internet usage. If your browser returns a previously saved cookie, the cookie operator has the capacity to link the user’s current visit to the previous ones for websites where XBody International or the external service providers’ cookies are installed.

XBody International uses cookies for the technical operation of the Website, for sending targeted newsletters and for statistical purposes. We inform you that cookies do not damage your computer and they do not contain viruses.

Cookies can be deleted from your computer and be blocked in your browser. To manage cookies, generally you can visit the menu point Tools / Preferences of your browser, then you shall visit the Privacy / History / Custom Settings menu point where cookies are found under the name of cookies or tracing.
The following external service providers have installed cookies on our website:

• Google Analytics,
• Google Adwords
• Facebook Pixel,
• Instagram
• YouTube
• Zoom
• Mouse flow

3.5.3. Google Analytics

Our website uses Google Analytics, as an external service provider who assists in the independent measurement and audit of the visits of the website and other web analytic data on xbodyworld.com.

Google Analytics uses cookies to operate the site’s web analytical system.

For further information on Google Analytics’(www.google.com/analytics) processing please visit http://www.google.com/intl/hu/policies.

Document called „How Google uses information from sites or apps that use our services” is available at the following link: http://www.google.com/intl/hu/policies/privacy/partners/.

3.5.4. Facebook

The data processing activity of the company’s Facebook page

When you are accessing the company’s a Facebook page, we allow Facebook to collect cookies at your devices. We inform you that our company does not process any personal data on you, we only receive viewing statistics for our Facebook page.

Our company only determines the criteria – provided by the Facebook- upon which the Facebook provides us the statistical data.

For further information on Facebook’s cookie policy, please visit the following link: https://www.facebook.com/policy/cookies/

Our website uses Facebook’s services to provide insights about the people who like our Facebook page. The collected data are anonymous to the operator of the website, therefore no conclusion about the identity of the users can be drawn. However, the data is stored and processed by Facebook so that a connection to the uses profile is possible, and Facebook can use the data for its own advertising purposes. Our website includes plugins for the social network Facebook, Facebook plugins can be recognized by the Facebook log or the Like button on our site.

For further information on Facebook’s processing please visit: https://www.facebook.com/about/privacy

Document called „Cookies and other storage technologies” is available at the following link: https://www.facebook.com/policies/cookies/

If you do not have a Facebook account, you can opt-out of Facebook-based advertising on the European Interactive Digital Advertising Alliance website: http://www.youronlinechoices.com/uk/your-ad-choices

3.5.5. Instagram

Functions of the service Instagram are integrated on our website, for further information on Instagram’s processing, please visit: https://help.instagram.com/519522125107875.

Document called „Cookies and other storage technologies” is available at the following link: https://www.facebook.com/policies/cookies/.

3.5.6. Youtube

Our website uses plugins from the Google-powered YouTube page. When you visit our YouTube plug-in enabled site, you will be connected to the servers of YouTube, which tells the YouTube server which of our you have visited. The use of YouTube is in the interest of an attractive presentation of our product, services and website.

For further information on YouTube’s processing, please visit please visit: https://policies.google.com/privacy?hl=en

Cookie policy is available at the following link: https://policies.google.com/technologies/cookies?hl=en

3.5.7. Mouseflow

This website uses Mouseflow: a website analytics tool that provides session replay, heatmaps, funnels, form analytics, feedback campaigns, and similar features/functionality. Mouseflow may record your clicks, mouse movements, scrolling, form fills (keystrokes) in non-excluded fields, pages visited and content, time on site, browser, operating system, device type (desktop/tablet/phone), screen resolution, visitor type (first time/returning), referrer, anonymized IP address, location (city/country), language, and similar meta data. Mouseflow does not collect any information on pages where it is not installed, nor does it track or collect information outside your web browser. If you’d like to opt-out, you can do so at https://mouseflow.com/opt-out. If you’d like to obtain a copy of your data, make a correction, or have it erased, please contact us first or, as a secondary option, contact Mouseflow at privacy@mouseflow.com.

For more information, see Mouseflow’s Privacy Policy at http://mouseflow.com/privacy/.

For more information on Mouseflow and GDPR, visit https://mouseflow.com/gdpr/.

3.5.8. WordPress

The Website was created with WordPress, for more information see: https://automattic.com/privacy-notice/.

3.6. Other processing

We provide information about processing that is not listed in this Privacy Policy at the time when personal data are obtained. We inform our partners and clients that courts, prosecution, investigating authorities, the authority dealing with administrative offences, administrative authorities, the National Data Protection and Freedom of Information Authority and other organs under the provisions of the applicable law may contact XBody International in order to receive notification or that XBody International discloses, transfers personal data or provides documents to them.

XBody International will only provide information to the authorities -if they have indicated the exact purpose and scope of the personal data – that is strictly necessary to the purpose of the inquiry.

4. METHOD OF STORING PERSONAL DATA, SECURITY OF PROCESSING

We and our processors by taking into account the state of the technology, the costs of the execution, the nature, scope, context and purposes of processing as well as the risks of varying likelihood and severity for the rights and freedoms of natural persons, implement appropriate technical and organisational measures to ensure the appropriate level of data protection.

We choose and operate IT tools for data processing so that the processed personal data:

• is accessible to the authorised person (availability);
• its authenticity and authentication is ensured (credibility of processing);
• can be verified that there is no change in the data (data integrity);
• is protected against unauthorised or unlawful access (confidentiality of data).

We protect your data with appropriate measures against unlawful access, alteration, transfer, disclosure, erasure or destruction, as well as accidental loss, damage, and the accidental unavailability due to the change of the used technic.

In order to protect the electronic processed personal data that are stored in our various registries, we provide appropriate technical measures to ensure that the stored personal data – unless it is permitted by law – cannot be directly linked and assigned to the data subjects.

The provided technical and organisational measures are in accordance with the current state of technology and they are compatible with the level of risks associated to ensure the security of processing.

During processing we respect and maintain

• confidentiality: protecting the information so that it can only be accessed by those who are entitled to it;
• integrity: protecting the accuracy and completeness of information and processing methods;
• availability: ensuring that when the data subject needs it, he/she can actually access the information and she/he has procedures for it.

XBody International and our partners’ IT systems are protected against computer-aided fraud, espionage, sabotage, vandalism, fire and flood, as well as computer viruses, computer intrusion and denial-of-service attacks. The operator provides security through server-level and application-level security procedures. We inform you that electronic mails apart from the protocols (email, web, ftp etc.) that are transferred through the Internet are vulnerable to network threats that may lead to fraudulent activity, challenge of the contract and disclosure or modification of information. We shall take all the precautionary measures to protect you from such threats. Systems are monitored so that we could record all security dangers and provide evidence of any security incident. System monitoring also allows the controlling of the efficiency of the precautionary measures.

We, as data controller record potential personal data breaches, including facts and effects of the personal data breach and measures taken or proposed to be taken by us to address the personal data breach. We shall notify the National Data Protection and Freedom of Information Authority on any potential personal data breach without undue delay and, where feasible, not later than 72 hours after having become aware of it, unless the personal data breach is unlikely to result in a risk to the rights and freedoms of natural persons.

Your password protects your account, so we encourage you to use a unique and strong password, limit access to your computer and browser, and log out after you have finished using the XBody Partner Portal.

5. RIGHTS OF THE DATA SUBJECT

We inform you that in relation to the processing of your personal data you dispose the following rights:

• Transparent information,
• Right of access by the data subject,
• Right to rectification,
• Right to erasure (‘right to be forgotten’),
• Right to restriction of processing,
• Right to data portability,
• Right to object,
• Right to withdrawal of consent,
• Right to effective remedy.

5.1. Transparent information

We are obliged to provide you with information – in accordance with the provisions of the GDPR – about the processing of your personal data. We fulfil our obligation by providing the present Privacy Policy to you. Please be aware of the fact, that if you have further questions in relation to the processing of your personal data you can exercise your right of access.

5.2. Right of access by the data subject

You have the right to get information whether we process your personal data and if so, you may demand a detailed prospectus that contains the following information:

• the reason of the data processing,
• the scope of the processed personal data,
• the source of the processed data,
• the recipient of the data,
• the term of the storage of the processed personal data,
• in case of an international transfer of your personal data, the guarantees of the transfer, and
• a repeated information on your rights in relation to the processing of your personal data and your right to lodge a complaint with a supervisory authority.

For your request we may give you a copy of your processed personal data free of charge.

For further copies we may charge you with a reasonable fee taking into account the administrative costs of providing such information.2 We provide information by electronic means for your request. You may exercise your right of access in writing at the following contact details:

• e-mail address: helpdesk@xbodyworld.com
• phone number: +36 96 200 180

Upon your request, the aforementioned information may be provided orally if your identity is proven genuinely.

5.3. Right to rectification

For your request we rectify, correct or complete your inaccurate personal data (e.g. your date of birth is inaccurate, your e-mail address or your name has changed).

5.4. Right to erasure

You may request that we erase your processed personal data without undue delay if,

• the purpose of the data processing no longer justifies the processing,
• consent is the legal basis of the processing and you have withdrawn your consent (and there is no other applicable legal basis),
• you object the processing and there are no overriding legitimate grounds for the processing,
• the personal data have been unlawfully processed, or
• the personal data have to be erased under legal obligation.

The right of erasure cannot be exercised if the processing is necessary for exercising the right of freedom of expression and information, the compliance with a legal obligation that XBody International is subject to, or for the performance of a public task, or reasons of public interest in the area of public health or archiving purposes in the public interest, scientific or historical research purposes or statistical purposes, or for the establishment, exercise or defence of legal claims.

5.5. Right to restriction of processing

If you exercise this right and according to the applicable law you shall obtain restriction of processing, we cannot process your personal data (therefore we cannot transfer or organise your data) – with the exception of storage – unless you consent or it is necessary for the establishment, exercise or defence of XBody International’s legal claims.

When can you exercise this right?

• If you claim that your personal data is inaccurate, for a period while we examine the accuracy of your data.
• If the processing is unlawful but instead of erasure, you request the restriction of your data.
• If we no longer need your personal data (for the purpose of the processing) however you request that we store them (e.g. for the establishment, exercise or defence of legal claims).
• If you object the processing, for a period while we verify whether our legitimate grounds override those of yours.

We inform you before the restriction of the processing is lifted (e.g. your inaccurate data have been rectified or we declined your request of restriction).

5.6. Right to data portability

If the legal basis of the processing is your consent or the performance of a contract and the processing is carried out by automated means you may request to receive the personal data that concerns you and which you provided us, in a structured, commonly used and machine-readable format You may also request that we transmit your data to another controller.

We inform you that we do not process your personal data by automated means.

5.7. Right to object

You may object on the grounds relating to your particular situation, at any time to the processing of personal data concerning you if the legal basis of the processing is the legitimate interest of XBody International In this case, we will no longer process your personal data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

If we process your personal data for direct marketing purposes (e.g. newsletter) you can object the processing of your personal data concerning you at any time. We will no longer process your personal data if you object the processing.

5.8. Right to withdraw a consent

You have the right to withdraw your consent at any time during the processing.

We inform you that the withdrawal of your consent shall not affect the lawfulness of processing based on your consent before its withdrawal.

You can exercise your right by the following methods:

• You can unsubscribe from our legal newsletter by clicking to the following link:
  You can unsubscribe from our newsletter by clicking to the unsubscribe button provided in our e-mail.
• Or you can notify us at the following e-mail address that you would like to withdraw your consent:
  helpdesk@xbodyworld.com

5.9. Procedural provisions

Please note that we will notify you on the action taken without undue delay, but within one month of receipt of your request. We may extend the period by further two months if it is necessary due to the complexity and the number of the requests. We inform you on the extension within one month of the receipt of your request.

If you submit your request by electronic means, XBody International will give you the information by electronic means (unless you request otherwise).

If we do not take any action on your request, we inform you – without any undue delay and at the latest within one month of the receipt of your request – on its reasons and on the possibility to lodge a complaint with the Data Protection Authority and to seek a judicial remedy.

We inform you that we provide the requested information free of charge. If your request is clearly unfounded or excessive, in particular because of its repetitive character, we can charge you with a reasonable fee for administrative costs or we can refuse to take action on your request.

We communicate any rectification or erasure of personal data or rectification of processing to each recipient with whom we have provided your personal information (unless it is impossible). Upon your request, we inform you about these recipients.

5.10. Right to compensation

XBody International compensates your damages that we caused by unlawful processing or breaching the data protection requirements. In case of the violation of the rights relating to your personality, you are entitled to restitution in accordance with the provisions of the Civil Code.

We inform you that XBody International is liable for any damages caused by a data processor that we used during the processing of your personal data. XBody International shall be relieved of liability if the damage occurred in consequence of unforeseen circumstances beyond our control.

XBody International does not compensate your damages and you cannot claim restitution insofar as damage or impairment – caused by the violation of the right relating to your personality – is caused by your intentional or gross negligent behaviour.

5.11. Remedies

5.11.1. Right to a judicial remedy

If you consider that your rights under data protection law have been infringed (e.g. you couldn’t exercise your aforementioned rights, you didn’t receive any information on the processing etc.) you may file for court action against the controller before the general court in whose jurisdiction your home address or habitual residence is located. The court shall hear such cases in priority proceedings. We inform you that lawsuits related to personal data protection are free of charge.

5.11.2. Right to lodge a complaint with a supervisory authority

If you consider that your rights under data protection law have been infringed you can choose to lodge a complaint with the National Data Protection and Freedom of Information Authority.

Contact details of the authority:

Name: National Data Protection and Freedom of Information Authority (“Nemzeti Adatvédelmi és Információszabadság Hatóság” in Hungarian)
Seat: 1055 Budapest, Falk Miksa utca 9-11.
Mailing address: 1363 Budapest, Pf.: 9.

INFORMATION ON COOKIES USED BY XBODYWORLD.COM

1. What are cookies?

Cookies are small-sized files containing letters, numbers, punctuation and other technical characters that are placed on your device (computer, mobile phone, tablet, smart TV, etc.) when you visit a website. These are computer data, helping the utilisation of websites, and are sent by the web server to the user’s browser, are stored on the user’s device and the browser resends them to the server in each case when such request arises. They don’t contain executable files, computer viruses, spyware and have no access to the data on the user’s hard drive.

Cookies usually contain the following: domain name of the visited website (that is the access path inserted in the browser), storage duration of the cookie and the stored information. Among others, cookies allow the recognition of the device and browser of the user, hence they facilitate the display of content tailored to the visitor’s needs and basic browsing functions, such as ensuring coherent sessions. Beside anonymity of users, cookies support the preparation of website traffic statistics.

We don’t store personally identifiable data in cookies, but in order to improve user experience, we use encrypted information that stem from those cookies. For example, they help us in identifying and eliminating errors or in defining the circle of interesting and relevant products that we would like to draw your attention to while browsing our website.

In case you still reach out to us via any contact form – with your explicit consent – on a website of ours where we use cookies, it may occur that we get to know data regarding your website visits following the utilisation of the form, with the help of these cookies. This is done in favour of the improvement of user experience.

If you accepted the Cookie Information on our websites, it won’t appear again unless you remove cookies from the settings of the browser (chapter 6 provides assistance for this).

If you share any content of xbodyworld.com on a social media site – e.g. Facebook, YouTube, Instagram –, then you may receive further cookies from these sites. These cookies are not controlled by the xbodyworld.com, therefore we suggest you visiting the third party’s site for further information on these cookies and relating to their control.

2. Categories of cookies used on the website

2.1. Session cookies

There are cookies that are indispensable for the proper operation of the website and that of its functions and for the navigation on the website. In order to facilitate customized service and login process, the system identifies the computer of the logged-in User with „session cookie”. If User closes only the browser window, the logged-in status remains active when he/she reopens the window. These cookies don’t collect personally identifiable information (personal data) on the User or information that could be used for marketing purposes or would remember the User’s prior visits on other websites or subpages of a website.

2.2. Behavioural tracking cookies

In order that we could provide personalized service for the User, offer jobs/job advertisements that best match their interest and needs, improve the efficiency of service, analyse their website visits and utilization (the fact of visiting and duration of visiting the website and its subpages, monitoring of applications), we place cookies on your browser, hence on your computer, phone or on other device (end user device) and we use them, if User gives its prior explicit consent to it. User may give this consent by clicking the button „I accept” on the text track appearing on the website. Behavioural tracking cookie stores a randomly generated identifier, then, based on this, the application records certain user events (application, viewing advertisements, duration of visit, key word, location, type of device) in the data base. After logging in the website, it connects data recorded on the behaviour of User to User.

2.3. „Third party” cookies

Third-party cookies are downloaded by User’s browser when visiting a page, however not from the Company’s (sub)domain, but from the domain of a third party (typically an ad mediator or Facebook), given the fact that the website constitutes partly of these Third-party modules. Third-party cookies are back to the third party, for example when User visits one of their advertisements or visits their website. With the help of these cookies, the third party (such as an advertiser) may track User’s full browsing history in case of those websites that contain the third party’s so-called Third-party modules (e.g. its advertisement module and advertisements).

3. Stored cookies

3.1. Own cookies

Name of the cookie	Purpose of the cookie	Storing time of the cookie
PHPSESSID	Functional cookie	Session

3.2. Behavioural tracking cookie

Name of the cookie	Service provider	Description of cookie	Storing time of the cookie
_ga	Google	Statistics	2 years
_gid	Google	Statistics	Session

3.3. Third Party cookie

Name of the cookie	Service provider	Description of cookie	Storing time of the cookie
_dc_gtm_UA-#	Google	Functional cookie	Session
fr	Facebook	Advertisement	3 months
GPS	YouTube	Statistics	Session
VISITOR_INFO1_LIVE	YouTube	Functional cookie	179 days
YSC	YouTube	Statistics	Session

4. Data processors

Data of the cloud hosting provider:

Microsoft Ireland Operations, Ltd.
One Microsoft Place
South County Business Park, Leopardstown, Dublin 18, D18 P521

KingSol Informatikai Szolgáltató és Tanácsadó Kft.
Seat: 1084 Budapest, Tolnai Lajos utca 18 3. em 4.
Company reg. number: 01-09-948538
Tax number: 23004122-2-42

Developer of the website:

WebOrigo Magyarország Zrt.
Seat: 9. fszt., Bem József street, 1027 Budapest, Hungary
Company reg. number: 01-10-141001
Tax number: 28767116-2-41
Website: weborigo.hu

YouTube:

YouTube, LLC
901 Cherry Ave.
San Bruno, CA 94066
USA

Google:

Google Ireland Limited – Google Analytics
Gordon House
Barrow Street, Dublin 4
Ireland

Facebook:

Facebook Ireland Ltd.
4 Grand Canal Square
Grand Canal Harbour, Dublin 2
Ireland

5. Transmission to third countries (outside the EU)

Through which data processor	Where	Guarantees of transmission	Reason of transmission to third country
YouTube	USA	Privacy Shield https://www.privacyshield.gov/participant?id=a2zt0000000TN8pAAG&status=Active	Data storing of video- sharing system
Google	USA	Privacy Shield https://www.privacyshield.gov/participant?id=a2zt0000000TN8pAAG&status=Active	Data relating to statistical and user habits

6. Handling of cookies

Visitors of the page may remove and ban cookies used by the Company’s web page, as well as they may modify settings.

In case of different browsers, instructions are available on the following links regarding the modification of settings:

• Google Chrome
  https://support.google.com/chrome/answer/95647?hl=hu&co=GENIE.Platform%3DDesktop
• Microsoft Internet Explorer and Edge
  https://support.microsoft.com/hu-hu/help/17442/windows-internet-explorer-delete-manage-cookies
• Mozilla Firefox
  https://support.mozilla.org/hu/kb/sutik-engedelyezese-es-tiltasa-amit-weboldak-haszn