Privacy Policy

Privacy Policy

1.The purpose of this privacy policy

This document contains all the relevant data processing information in connection with the operation of the web store, on the basis of Regulation (EU) 2016/679 (GDPR) and Hungarian Act CXII of 2011 on informational self-determination.

2.Use of cookies

What is a cookie?

While you visit the website, the Controller uses so-called cookies. A cookie is a package of letters and numbers that the website sends to your browser in order to save certain settings, make the website easier to use, and help gather statistical information about visitors.

Some cookies contain no personal information and cannot identify an individual user, while others contain a unique identifier stored by your device.

The legal basis for the processing is your consent, under Article 6(1)(a) GDPR.

The main types of cookie used by the website

• Google Ads cookie: for remarketing lists, conversion tracking, showing relevant ads and measuring campaign performance.
• Google Analytics cookie: collecting anonymous statistical data about use of the website, in particular via the "__ga" cookie.
• Remarketing cookies: showing personalised ads to previous visitors on the Google Display Network.
• Cookies necessary for operation: to provide the basic functions of the website, only for the duration of the session.
• Cookies that improve the user experience: to collect the anonymous information needed to improve the performance and operation of the website.
• Session cookie: stores the visitor's location, browser language and payment currency, for up to 2 hours.
• Referer cookie: records which external site the visitor arrived from.
• Last viewed product cookie: records the products the visitor viewed most recently, for 60 days.
• Last viewed category cookie: records the category viewed most recently, for 60 days.
• Recommended products cookie: stores the product list linked to the "recommend to a friend" function, for 60 days.
• Mobile version / design cookie: detects the device used and can switch to the mobile view, for 365 days.
• Cookie acceptance cookie: stores the declaration of cookie acceptance, for 365 days.
• Basket cookie: stores the products placed in the basket, for 365 days.
• Smart offer cookie: helps display offer conditions, for example on the basis of a previous visit or order, for 30 days.
• Facebook Pixel: used for conversion measurement, audience building and showing personalised ads. Facebook's privacy policy is available here: facebook.com/privacy/explanation

If you do not accept the use of cookies, certain functions will not be available to you.

Information on deleting cookies

• Internet Explorer: Managing cookies
• Firefox: Managing cookies
• Mozilla: Deleting cookies
• Safari: Managing cookies
• Chrome: Managing cookies
• Edge: Deleting cookies

3.Data processed in order to conclude and perform the contract

Several instances of data processing may take place in order to conclude and perform the contract. If you do not buy through the web store and are only a visitor, then primarily the marketing-related processing may apply to you, if you consent to it.

Getting in touch

If you contact us by email, through the contact form or by phone about a product, contacting us in advance is not compulsory; you can order from the web store without it.

Data processed: the data you give when getting in touch.

Duration of processing: until the enquiry is closed.

Legal basis for processing: your voluntary consent, Article 6(1)(a) GDPR.

Registering on the website

By storing the data given during registration, the Controller can provide a more convenient service — for example you do not have to enter your details again when you buy next time.

Data processed: name, address, phone number, email address, characteristics of the product purchased and the date of purchase.

Duration of processing: until the consent is withdrawn.

Legal basis for processing: your voluntary consent, Article 6(1)(a) GDPR.

Processing the order

While orders are processed, the data processing activities necessary to perform the contract take place.

Data processed: name, address, phone number, email address, characteristics of the product purchased, the order number and the date of purchase.

Duration of processing: 5 years, in line with the civil law limitation period.

Legal basis for processing: performance of the contract, Article 6(1)(b) GDPR.

Issuing the invoice

The purpose of the processing is to issue an invoice that complies with the law and to meet the obligation to retain accounting documents.

Data processed: name, address, email address, phone number.

Duration of processing: 8 years from the issue of the invoice.

Legal basis for processing: compliance with a legal obligation, Article 6(1)(c) GDPR.

Data processing linked to delivery

The processing takes place in order to deliver the ordered product.

Data processed: name, address, email address, phone number.

Duration of processing: until the ordered goods have been delivered.

Legal basis for processing: performance of the contract, Article 6(1)(b) GDPR.

Transfer of data to the logistics partner

Delivery of ordered products and handling of returns is carried out by the Controller's logistics partner, Boxy Logistics Kft. To fulfil the order we transfer the following data to it:

• name
• delivery address
• email address
• phone number
• order identifier

Details of the logistics partner: Boxy Logistics Kft., 1132 Budapest, Visegrádi utca 80., email: hello@boxy.hu, website: www.boxy.hu.

Boxy acts on the Controller's instructions and processes the data solely in order to carry out delivery, parcel collection and return-handling tasks.

Legal basis for the transfer of data: performance of the purchase contract, Article 6(1)(b) GDPR.

Árukereső Trusted Shop Programme

Árukereső, that is Online Comparison Shopping Kft., holds a data processor mandate for storing buyers' email addresses for the purposes of the customer satisfaction survey linked to the Trusted Shop Programme.

After purchases made here, the buyer's email address is transferred to Árukereső. The purpose of the transfer is to request and display customer feedback.

The email address transferred for processing in this way is processed as personal data by Online Comparison Shopping Kft. on our instructions, under an appropriate written contract and data protection conditions.

Details of the data processor: Online Comparison Shopping Kft., 1074 Budapest, Rákóczi út 70-72., tax number: 24868291-2-42, company registration number: 01-09-186759.

Further delivery partners

Magyar Posta Zrt.
Registered office: 1138 Budapest, Dunavirág utca 2-6.
Phone number: +36 1 767 8200
Email: ugyfelszolgalat@posta.hu
Website: posta.hu

FoxPost Zrt.
Registered office: 3200 Gyöngyös, Batsányi János utca 9.
Phone number: +36 1 999 0369
Email: info@foxpost.hu
Website: foxpost.hu

The courier services take part in delivering the ordered goods under a contract with the Controller, and process the personal data they receive in accordance with their own privacy policy.

Handling warranty and guarantee claims

We handle warranty and guarantee claims in accordance with Hungarian Decree 19/2014 (IV. 29.) NGM.

Data processed, in particular:

1. your name, address and declaration of consent,
2. the name and purchase price of the product sold,
3. the date the contract was performed,
4. the date the fault was reported,
5. the description of the fault,
6. the claim to be asserted,
7. how the claim was settled, or the reason for rejecting it.

Duration of processing: 3 years from the date the record was taken.

Legal basis for processing: compliance with a legal obligation, Article 6(1)(c) GDPR.

Handling other consumer protection complaints

Data processed: buyer's name, phone number, email address, content of the complaint.

Duration of processing: 5 years, under the consumer protection act.

Legal basis for processing: compliance with a legal obligation, Article 6(1)(c) GDPR.

Data relating to the provability of consent

During registration, ordering or newsletter sign-up, the IT system stores the technical data relating to the consent so that it can be proved later.

Data processed: the time of the consent and the data subject's IP address.

Duration of processing: until the end of the limitation period following the end of the processing.

Legal basis for processing: compliance with a legal obligation, in line with Article 7(1) GDPR.

4.Processing for marketing purposes

Sending newsletters

Data processed: name, address, email address, phone number.

Duration of processing: until the consent is withdrawn.

Legal basis for processing: your voluntary consent, Article 6(1)(a) GDPR.

Personalised advertising

Data processed: name, address, email address, phone number.

Duration of processing: until the consent is withdrawn.

Legal basis for processing: your separate consent, Article 6(1)(a) GDPR.

Remarketing

The processing takes place as remarketing activity using cookies.

Data processed: the data set out in the cookie policy.

Duration of processing: the storage period of the given cookie.

More information:

• Google cookie policy
• Google Analytics cookie usage
• Facebook ad settings

Legal basis for processing: your voluntary consent, Article 6(1)(a) GDPR.

Prize draw

Data processed: name, email address, phone number.

Duration of processing: until the prize draw closes; for the winner's data, 8 years under the accounting legislation.

Legal basis for processing: your voluntary consent, Article 6(1)(a) GDPR.

5.Further processing

If the Controller wishes to carry out further processing, it provides prior information about the purpose and legal basis of the processing, the scope of the data processed, the duration of the processing and every material circumstance.

We also inform you that the Controller is obliged to comply with written data requests from authorities based on a statutory mandate, and keeps a record of such data transfers.

6.Recipients and processors of personal data

Hosting

Processor: Shopify Inc.
Registered office: 151 O'Connor Street, Ground floor, Ottawa, ON K2P 2L8, Canada
Phone number: 888-746-7439
Email: support@shopify.com
Website: www.shopify.com

The Processor stores personal data under a contract.

Sending newsletters

Processor: The Rocket Science Group LLC.
Registered office: 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA
Email: privacy@mailchimp.com
Website: mailchimp.com

The Processor takes part in sending newsletters and processes the data subject's name and email address to the extent necessary.

Invoicing

Processor: Billingo Technologies Zrt.
Registered office: 1133 Budapest, Árbóc utca 6.
Phone number: +36 1 500 9491
Email: hello@billingo.hu
Website: www.billingo.hu

Online payment

OTP Mobil Szolgáltató Kft.
Registered office: 1143 Budapest, Hungária krt. 17-19.
Phone number: +36 1 366 6611
Email: ugyfelszolgalat@simple.hu
Website: www.simplepay.hu

Stripe, Inc.
Registered office: 354 Oyster Point Boulevard, South San Francisco, California 94080, USA
Website: www.stripe.com

Transfer of data to a third country

Some processors are located outside the European Union. Such transfers take place with appropriate contractual and data protection safeguards.

Mailchimp / The Rocket Science Group LLC.
Address: 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, Georgia 30308
Email: legal@mailchimp.com
Phone: (404) 806-5843

7.The rights of the data subject

Within the duration of the processing you have the following rights under the GDPR:

• the right to withdraw consent,
• the right of access to personal data and to information about the processing,
• the right to rectification,
• the right to restriction of processing,
• the right to erasure,
• the right to object,
• the right to data portability.

The Controller answers complaints about the processing within 30 days at the latest.

The right to withdraw consent

You are entitled to withdraw your consent to the processing at any time. In that case we delete the data given from our systems, unless further retention is necessary on another legal basis.

Access to personal data

You are entitled to receive confirmation of whether your personal data is being processed and, if so, to access the personal data processed and the information relating to the processing.

The right to rectification

You may request the rectification of your inaccurate personal data without delay.

The right to restriction of processing

You may request the restriction of processing if you contest the accuracy of the data, the processing is unlawful, the data is no longer needed but you require it, or you have objected to the processing.

The right to erasure

You may request the erasure of your personal data if it is no longer needed for processing, you withdraw your consent, you object to the processing, or the processing is unlawful.

The right to object

For reasons relating to your particular situation you may object at any time to the processing of your personal data based on a legitimate interest. In case of processing for direct marketing purposes, the right to object applies separately as well.

The right to data portability

In case of automated processing and processing based on consent or a contract, you may ask us to provide the data you gave us in xml, JSON or csv format.

Automated decision-making

You are entitled not to be subject to a decision based solely on automated processing where it would produce legal effects concerning you or similarly significantly affect you.

8.Data security measures

The Controller has taken appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, transfer, disclosure, erasure, destruction, and against accidental damage or becoming inaccessible.

9.Remedies

If you believe the Controller has breached the statutory provisions on data processing, you may initiate an investigation with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH).

NAIH contact details:
Postal address: 1363 Budapest, Pf. 9.
Email: ugyfelszolgalat@naih.hu

In case of unlawful processing or a failure to fulfil requests, you may also turn to a court.

10.Amendment of the privacy policy

The Controller reserves the right to amend this privacy policy in a way that does not affect the purpose and legal basis of the processing. By using the website after the amendment takes effect, you accept the amended privacy policy.

If the Controller wishes to use the data collected for a purpose other than the original one, it provides separate information before the processing begins.

Date of last update: 6 May 2026.