Terms of purchase

Privacy Policy with regard to the processing of personal data

Cold War Park Budapest regards it as a basic obligation to ensure fully the right to the protection of personal data in its operation, – therefore, by all means at its disposal and in every possible way, we strive to handle your data by fully complying with decree EU 2016/679 (General Data Protection Regulation) and in accordance with other applicable laws.

With regard to that one of the main aims of basic legislation is to ensure transparency, we hereby, in this document would like to inform you about the collection, usage, forwarding, and last but not least safety of your personal data– especially when you get in touch with us regarding our products and/or services through our web site or other mobile application. We reserve the right to update and modify this current Privacy Policy at specified intervals so that these fixed terms should always reflect the actual method of handling personal data, and be in full accordance with applicable legal obligations. If any of the provisions should be modified based on per above, we will public the modified Privacy Policy on our website, therefore, we kindly ask you to check the current Privacy Policy from time to time.

Who we are and how can you contact us?

The operator of the commercial name “BulStore.eu” and related business form is Erwa Gun., a company registered under Hungarian law, seated at:1222 Budapest, No 3-5, Pannónia str. (Company registration number:01 09 987752, tax number:23984361243(hereinafter called as „BulStore” or „we”).to Privacy Policy, we are considered to be a data management organization when we treat your personal information in any way.

We assure you that we welcome your opinion and suggestions and if necessary we will be happy to give you further information in all questions may arise regarding the handling of your data so please address all questions and concerns in this topic to the cold War Park Budapest Privacy Officer to the following email address: info@erwagun.com . Additionally, you can contact us by mail or courier at the following address: 1222 Budapest, 3-5 Pannónia str.– please mark in the heading: for the Cold War park Budapest Data Protection Officer.

What category of personal data do we handle?

Generally speaking, we ask you to give your personal data, therefore during this process, you can affect what type of information you share with us. F.e. we get the following information from you:

During reservation online through the website of BulStore, you forward your email address, First name and second name, and phone number.

When booking, you give us information about the desired product, invoice details, chosen payment method, your phone number, etc.

To personalize the most your online user’s experience and our offers for your preferences, we can collect and process some information on browsing and user behavior during visiting our website, using our mobile phone application. Please read the following chapter on the purpose of data handling for further information about these terms

On our website and in the mobile application we may store and collect such data we process by cookies and similar technologies.

We don’t collect and handle sensitive data classified as a special category as per the General Data Protection Decree in any way. Accordingly neither we collect nor handle data persons under 18 until data supply.

What are the purpose and legal basis of data management?

We can use your personal data for the following goals:

For serving you the services of BulStore

This general goal includes the following applications, if necessary:

Creating and handle user accounts on the website of BulStore;

Processing of orders including their welcoming, screening, confirming, and invoicing.

To manage deleting orders or ordering other services;

To manage your return program as per applicable legal provisions;

To refund the counter value of programs as per applicable legal provisions.

To provide support, including replying to questions regarding products and services offered by BulStore or regarding a concrete order.

In most cases handling and processing your data for the above reasons is necessary for making and performing the contract between you and BulStore. On top of this, handling some data for this purpose is required by statutory provisions including Taxation and Accounting Law.

For upgrading our services

We are working to serve the best possible service and online shopping experience every time for you. This requires among others, collecting and using some information on your shopping habits: this is why we do market research directly or by involving external partners.

These activities are based on our legitimate business interests, at the same time we always keep in mind to avoid your fundamental rights and freedom suffered during such activities.

For marketing activities:

We would like to keep you informed about our latest offers and news about products you are interested in. To reach this goal we send you general and thematic newsletters certain from time to time through our electronic channels (e-mail, SMS, mobile notification, banners, pop-up messages, etc), furthermore, we inform you about products ordered formerly or similar to ones wished to order or supplement products.

Furthermore, we would like to present other commercial-type requests and personalized offers on our website and mobile application. In order to provide you with information as per your interest, we can use some data regarding your shopping habits (f.e. viewed items, items added to the wishlist, purchased products). We ensure that such data handling and processing must be carried out with the utmost consideration of your rights and freedoms every time; we warrant you that data handling processes and actions will not affect you with any kind of adverse legal effect, will not limit your rights, and will not affect them particularly.

We carry out our marketing communication activity with your approval which you give us by sending the order and ticking „I agree with the General Contract Terms & Conditions and Privacy Policy”. Anytime you change your mind, can withdraw your approval as follows:

By sending us an “Unsubscribe” message to our email.

Or through contacting Cold War Park Budapest at any of the above-listed options

We use some of our marketing activities to promote and develop our commercial activities with reference to our legitimate business interests. Though any case where we use information relating to you in the interest of our legitimate business interests, we act with the utmost care and guarantee to prevent your fundamental rights and freedom from being hurt. At the same time, You can ask us a time in any of the ways listed above to cease handling your personal data for marketing purposes, to which we reply the soonest as possible to.

To protect our legitimate business interest:

There may be such situations where enforcing our own rights and business interests and protecting our commercial activities requires forwarding certain information. Such situations can be without completeness:

Protection and other precautions against cyber-attacks endangering the security of the website and users of the BulStore interface:

Provisions for preventing and detecting accidental intents to defraud including forwarding related information to authorized and public authorities;

Provisions to handle every further risk.

Our authorization to the above-listed and detailed types of data management and data processing is based on our legitimate business interest to protect our commercial activities, meanwhile, we constantly guarantee that provisions made or placed in view take the principle of balance and proportion between our interest and your fundamental rights and freedoms into account.

Furthermore, we carry out the data handling and processing to fulfill some legal obligations in some cases, in particular, it is necessary to guarantee the principles and values required by applicable law for that special case.

For how long do we store your personal information?

In principle, Cold War Park will guard-store your personal data until your user’s account exists. Nevertheless, You anytime can ask us to cancel some of your data or your account, which request we reply without exception to, meanwhile ensuring fulfillment of data guarding-storing compliance with the law, even after the account is canceled.

If you don’t have a user’s account at BulStore.eu, then the main principle is to store all information regarding orders from performing it/them for 3 years. It can happen similarly as written above that as per applicable law for guarding-storing requirements we are obliged to ensure data storing for specific data over 3 years.

To whom we forward your personal information?

In some cases, we shall pass on your personal data to parties of following sharing circles or give access to certain personal data.

To fulfill our statutory obligations, and in the interest of our legitimate business interest, we give out certain personal data to public authorities.

We guarantee fully, that a private organization identified as a third party can have access to your personal data exclusively by complying totally with legal provisions on data protection, information security, and confidentiality, within the contractional content stipulated as per tied agreement with such organization.

To which countries do we forward your personal information?

Currently, we store and handle your personal data in the territory of Hungary.

Such cases can arise, that we forward your personal data to an organization seated out of the territory of Hungary. These organizations can be within the EU and outside of the EU, including such countries where the European Commission considers that the protection level of personal data is at least consistent with what the EU has.

In each and every case we take steps and precautions required to ensure the security of personal data involved in international disclosures, for protection of your right to data protection and information freedom.

In all cases, the security of information provided to service providers and other third parties is protected by contractual obligations, and if somewhere needed, additional guarantees assure, f.e. provisions of a decree on General Terms and Conditions of forwarding personal data to third countries, and standard such certification systems like Privacy Shield, which is a security shield to protect data forwarding between EU and USA.

You can contact us anytime at any of the above-listed ways, if you have any further questions about the countries we forward your data to or about those security provisions and assurance we apply during such data forwarding.

How do we protect the safety of your personal data?

We undertake to fully guarantee the security of personal data by implementing technical and organizational provisions in accordance with industry standards. We store your personal data on secure servers by using a storage expansion mechanism and the most UpToDate technology encryption algorithm.

We use OTP SimplePay payment solutions. Each and every piece of information regarding payment has encryption with SSL technology.

We draw your kind attention that in spite of all our efforts to protect your personal data, the safety of the forwarded information through the internet generally and through other public channels is never considered to be full, therefore it may happen that such data are phished and used by unauthorized third parties. We are not responsible for the vulnerability of systems out of our control.

What right do you have?

General data protection Decree gives you many rights related to your personal data. You can ask for access to your data, modifier of wrong data in our registration, and you can protest against the handling of your data. You have a right to make a complaint, objection at authorized authority or bring an action to the competent court. Depending on the situation you have a right to ask the deletion of your personal data, the limitation of data handling, and its blocking, furthermore ask for secureness of data transportation. For further information on the above rights, please read the below chart.

To enforce your rights you can contact us at any of the above-mentioned ways. Please read carefully the following points, if you want to enforce your rights:

identification We take strictly the confidentiality of personal data registration, therefore we ask you to send your request related to these registrations from the email address belonging to our

BulStore account or from the email address you used during ordering.

If you use the alternate email address we keep the right to check your identity through an identification process of some questions.

Fees We don’t charge any fees when practicing your right to personal data unless your request for disclosure or access is baseless, unnecessarily repetitive, disproportionate or exaggerated, in which cases we provide disclosure or access to data for a reasonable fee. In any case, we may ask for a fee, and we will notify you in advance, before processing the request.

Response deadline We reply to all valid requests within a month, maximum, unless the request is specifically complicated or if you have sent more requests at the same time, in which case we send our reply in 3 months maximum.

If we need more than 1 month to process your request, we will notify you about this fact. At the same time, it may happen, that we ask you for further information to process your request, to reply to your request with reference to what data or documents you need, and hat concerns you may have if any. This way we can help you faster and the time for reply are shortened too.

The right of a third party We are not obliged to reply to your request if the fulfillment of need in the request would result in hurting other data-protection people (s)’ or third parties’ rights or freedom.

Right of access You can ask:

• confirm, if we handle your personal data;
• provide a copy of personal data subject to data management;

give further information regarding your personal data with special regard to what data we have, about the goals of data handling, who we share these data with, whether we forward these data abroad, how we protect these data, how long we store them, what rights you have regarding these data, what form and way you can complain, and finally, how we got your data if we have not forwarded you the information on this topic prior to the notification as per this point.

Right to rectification You can ask to correct or complete your inaccurate or incomplete personal data. Before correcting the wrong data, we can examine the realness and accuracy of related data.

Right to cancellation, to forget You can ask for canceling your personal data, but only if the related data is not necessary anymore for the fulfillment of data handling goals formulated at the time of collection;

or if you have withdrawn your approval (if the data handling is only based on approval)

• or if you practice your right to protest;
• or if the related personal data was handled wrongly;
• or if the cancellation of related data is required by a law obligation.

We are not obliged to fulfill your request for canceling your personal data if processing your personal data is required and well-founded for the below reasons:

Complying with EU or member state law applicable, or in the interest of law requirements drafts, validation, or protection.

On top of the above listed, such circumstances can arise when we are not obliged to cancel your personal data as per your request, but first of all, we can deny the such request from you in the above-listed cases.

We draw your attention before practicing your right to cancellation as per this point that canceling your data and BulStore account together with all involved data is an irreversible, terminal process.

Right to limit data management (locking right) You can ask for limitation of data processing lock your data), but only if the below cases happen:

if you doubt the accuracy of personal data, for the time, needs checking, or if data processing is illegal and You stand against their cancellation.

or if the related data is not necessary for fulfilling data processing purposes created at its collection, but its cancellation is prohibited by submission, validation, or protection of some legal needs;

or if you lived with your right to protest and the examination of the legality of our process is not yet finished.

in the case of locking right, we are entitled to use it further, if:

we have received approval from you

or use of related data is required to a certain right or legitimate interest in court

or usage of the related data (its exist) is required to protect another natural person’s right or of a legal person

If the data processing is illegal, and you are against canceling data;

or if related data is not necessary anymore for fulfilling data processing purposes created at its collection, but its cancellation is prohibited by certain rights submission, validation, or protection of some legal needs;

or if you have lived with your right to protest, and examination of the legality of our process is not yet finished.

In case of practicing locking right, we are authorized to use your personal data further, if:

we have received your approval for this;

or use of related data is required to a certain right or legitimate interest in court

or usage of the related data (its exist) is required to protect another natural person’s right or of a legal person

Securing data transportability (right to data storage) You may as us to provide you with your personal data in an articulate, widely used, machine-readable format; furthermore, you have a right to forward these data to an alternate Data Controller, if:

Data management is only done upon your approval and based on contractive authorization stipulated in the agreement you made and data management is automated.

Right to protest You may at any time protest for your own reason against handling/managing your personal data if you consider that your fundamental rights and freedoms require this against our business interest.

You can anytime without any justification protest against handling your personal data for direct marketing purposes too, including user’s profile making too; if it is related to direct solicitation, we cease data management the soonest possible.

Performing automated processes As a data management subject, you can ask us to exempt you from making decisions made exclusively automated processes, but only if:

such a decision in the process has a legal effect on you. or

if you would be affected by it similarly significantly

The right under this point cannot be enforced if that decision is made through automatized decision-making:

• it is necessary to make or perform a contract with you;
• or if its making is possible as per such an EU or member state law, which stipulates appropriate provisions serving the protection of your rights and freedoms and legitimate interests;
• or if it is based on your special approval.

Right to complain You are entitled to make a complaint at authorized supervisory authority regarding processing your personal data. In Hungary data protection authority can be reached at:

Authority for National Data Protection and Information Freedom competent for personal data processing, Hungary, 1125, Szilágyi Erzsébet Alley 22/c,

Phone number: +36 (1) 391-1400

E-mail:ugyfelszolgalat@naih.hu

Without hurting your right to complain at the supervisory authority given by law, we kindly ask you to contact us the first time and guarantee to do your utmost for a peaceful settlement of your harm.

We would like to remind you again that you can contact the BulStore Privacy Officer at any time by choosing to send a request to any of the specified notification addresses:

by email to info@erwagun.com

by mail or courier to the following mailing address: Erwa Gun Kft. 1222 Budapest 3-5 Pannónia str; please mark it in the address bar for the BulStore BudapestPrivacy Officer

Using Barion Pixel Against FraudBarion scans all payments to filter out fraud. Hungarian legislation also requires the operation of a fraud prevention system. Accurate cart content and visitor activity can provide important information to achieve this goal. By placing the Barion Pixel Data Manager on its website, it is possible to collect information on user activity for a given payment transaction. Use of Barion Pixel for Marketing PurposesBarion Pixel is JavaScript code that monitors visitor activity on the Data Management Website. The browsing data collected by the pixel will only be used for fraud prevention purposes without the consent of the User. The data collected by the pixel may be used for marketing purposes only if the User has given his / her prior consent. Regarding the data collected with the help of the Barion Pixel, : //www.barion.com/hu/) the data collected by the data controller, the pixel, is sent directly to Barion. on the duration of data management - the User can find out more at https://www.barion.com/en/cookie-notice/