Privacy policy

1. Who processes your data

The controller is the operator of the web shop, whose details are shown at the bottom of this page. The operator is not required to appoint a data protection officer and has not done so.

2. What data we process and why

We ask only for data needed to provide the service. The purposes of processing are as follows:

• Fulfilling the order: name, email address, phone number, shipping and billing address, the products ordered. Legal basis: performance of the contract.
• Invoicing: the data required to issue the invoice. Legal basis: compliance with a legal obligation.
• Running your account: email address, password in encrypted form, saved addresses, order history. Legal basis: performance of the contract, or the consent given at registration.
• Social sign-in: if you sign in with a Google account, we receive your name and email address from the provider. Legal basis: consent.
• Contact and complaint handling: the data you provide and the content of the correspondence. Legal basis: legitimate interest; for complaints, a legal obligation.
• Secure operation of the web shop: cookies identifying the session and the cart. Legal basis: legitimate interest.
• Fraud prevention: browser and device data collected by the Barion Pixel, from which the payment provider filters out card fraud. Legal basis: legitimate interest.

3. How long we keep your data

We keep data only for as long as needed for the purpose:

• invoicing data for 8 years from issuing the invoice, as required by the Accounting Act,
• order data until claims arising from the contract lapse, that is, 5 years,
• your account data until the account is deleted or your deletion request is fulfilled,
• complaints and the related correspondence for 5 years,
• cookies for the period stated in the cookie policy.

4. Who we share your data with

We do not sell your data and do not pass it to third parties for marketing. We use only those providers without whom the order cannot be fulfilled; they act as processors, on our instructions:

• card payment and fraud prevention: Barion Payment Zrt. — the data needed for payment, including name, email address and order total, plus the browser data of the Barion Pixel,
• invoicing: the invoicing provider — the data on the invoice,
• parcel delivery: the chosen carrier (Foxpost, Hungarian Post or GLS) — name, address, phone number and email address,
• hosting and email: the hosting provider storing the web shop data,
• social sign-in: Google, if you choose that sign-in method,
• visit measurement and advertising: Google Ireland Limited (Google Analytics, Google Ads) and Meta Platforms Ireland Limited (Meta Pixel) — only if you consented to it on the cookie banner,
• newsletter: Sendinblue SAS (Brevo) — your email address and the language of your subscription, if you subscribe.

5. Your rights

You have the following rights regarding your data. You can exercise any of them by writing to the operator's email address; we answer within one month at the latest.

• Access: you may ask what data of yours we process and request a copy of it.
• Rectification: you may ask us to correct inaccurate data; most of it you can also edit yourself in your account.
• Erasure: you may ask us to delete your data, unless the law requires us to keep it — invoice data, for example, cannot be deleted before the end of the retention period.
• Restriction of processing: you may ask us to store your data but otherwise not process it.
• Data portability: you may ask for the data you provided in a machine-readable format, or for it to be transmitted to another controller.
• Objection: you may object to processing based on legitimate interest.
• Withdrawal of consent: where processing is based on consent, you may withdraw it at any time — this does not affect the lawfulness of processing before the withdrawal.

6. Data security

Data travels over an encrypted connection (HTTPS). Passwords are never stored in readable form, only as an irreversible hash. Access to the system is limited to those who need it for their work.

We neither store nor see card details: payment takes place on the provider's interface.

7. Legal remedies

If you believe your rights have been infringed, please contact us first — most questions are resolved fastest this way.

You may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH), or, in the event of an infringement of your rights, go to court. Proceedings may also be brought before the court competent for your place of residence, at your choice.