Scan and Win Privacy policy

Scan and Win Sweepstakes
Privacy policy

For the purposes of conducting the Scan and Win Sweepstakes announced by BioTechUSA, drawing the winner, and contacting the winner, BioTech USA Kft. will process the personal data you provided when registering for the Sweepstakes to the extent and for the duration necessary for the conduct of the Sweepstakes. Participation in the Sweepstakes requires your voluntary and explicit consent. BioTech USA Kft., as the Data Controller, will only use your personal data as defined herein for the purposes of the Sweepstakes.  

In the development and application of this Notice, the Data Controller acts in the spirit and with the application of Act CXII of 2011 on the Right of Informational Self-Determination and on Freedom of Information and Regulation (EU) 2016/679 of the European Parliament and of the Council (hereinafter: GDPR), and in full compliance with them. 

BioTechUSA Kft. (Registered office: 1033 Budapest, Huszti út 60., company registration number: 01 09 352550, Tax number: 25114681-2-44, Phone: 06 1 453 2716, E-mail: adatvedelem@biotechusa.com) 

Contact details of our Data Protection Officer: Mailing address: 1277 Budapest, Pf. 83.; E-mail address: dpo.btu@dnui.hu 

The scope of data processed in the Game: 

When registering for the Game, Players are only entitled to enter their own personal data. The Data Controller shall not be liable for any damage resulting from the processing of false, unauthorised, or incorrect data.  

Personal data processed during the Sweepstakes are primarily accessible to the Data Controller and the Data Controller's employees. 

The purpose of the data processing is to conduct the Sweepstakes, which includes the drawing of the winner and the notification of the winner, as well as the documentation thereof.  

The Data Controller will notify the Winners via the e-mail address provided by the Player (5 persons/month). 

The Data Controller shall keep the list of participants until the delivery of the prizes in a given month, but no later than 60 days after the closure of the respective monthly Sweepstakes (final closure). Immediately after the final closing of the Sweepstakes, the Controller will delete any personal data obtained during the Sweepstakes.  

1. Emarsys marketing automation system:  

 The Data Controller sends the notification of participation in the Sweepstakes to the Players and notifies the Winners in case of winning through its newsletter sending system.  

4. The Data Controller uses an invoicing program to fulfil its financial obligations.  

Details of the data processor company: IFS Hungary Számítástechnikai Kft. (registered office: 1132 Budapest, Váci út 22-24., company registration number: 01 09 687800, tax number: 12469589-2-41)  

5. The Data Controller uses delivery companies to deliver the prizes:   

Details of the data processor company: GLS General Logistics Systems Hungary Csomag-Logisztikai Kft. (address: 2351 Alsónémedi, GLS Európa utca 2., company registration number: 13 09 111755, tax number: 12369410-2-44)  

Details of the data processor company: UPS Magyarország Szállítmányozó Kft. (address: 2220 Vecsés, Lőrinci út 154. Airport City Logistic Park. Building G., company registration number: 13 09 139285, tax number: 22776082-2-13)  

6. Legal Basis for Data Processing  

Consent of the data subject pursuant to Article 6(1)(a) of the GDPR. 

By registering for the Game, the Player consents to the Data Controller processing his/her personal data as described in this Privacy Notice. The processing of personal data is based on the voluntary and explicit consent of the Player given in the knowledge of this information. Consent may be withdrawn at any time, but the lawfulness of the processing prior to the withdrawal is not affected. 

Only persons aged 18 or over may enter the Game. 

7. Lawfulness of Data Processing: 
The Data Controller shall keep records to demonstrate the lawfulness of the processing. The Data Controller will delete the personal data from the register at the same time as the final closure of the Sweepstakes.  

8. Data Subjects' Rights in Relation to Data Processing:
The Data Controller shall inform you of the action taken on the request under clauses (a) to (e) below without undue delay and in any event within one month of receipt of the request. If necessary, taking into account the complexity of the request and the number of requests, this deadline may be extended by a further two months. The Data Controller shall inform you of the extension of the deadline within one month of receipt of the request, stating the reasons for the delay. 

a) Right of access: you have the right to obtain from the Data Controller confirmation as to whether or not personal data concerning you are being processed, and to request information on the details of the processing. and to request from the Data Controller your personal data processed in connection with the Sweepstakes in a portable format. 

b) Right to rectification: you have the right to obtain from the Data Controller, at your request and without undue delay, the rectification of inaccurate personal data concerning you and the completion of incomplete personal data. 

c) Right to erasure ("right to be forgotten"): You may request the termination of data processing by writing to the contact email address of the Data Controller indicated above, by fax or post, or by making a recorded request to the telephone number provided. In this case, the Data Controller will take all reasonable steps to inform the additional data processors of your request to cease data processing. 

d) Right to object: you have the right to object at any time to the processing of personal data concerning you occurring based on the legitimate interests of the Data Controller.