PRIVACY POLICY
The purpose of this Privacy Policy is to inform you, as a visitor and customer of the online store (hereinafter: User), about the terms of processing your personal data, security measures, and your rights in accordance with the General Data Protection Regulation (GDPR) of the European Union.
1. Data of the Data Controller
- Name: Kovács Anna Brigitta ev.
- Registered Office: 9123 Kajárpéc Kapus utca 9
- Registration Number: 62507482
- Tax Number: 71596985-1-28
- E-mail Address: kovach.anna@gmail.com
- Phone Number: +36703178072
2. Scope, Purpose, and Legal Basis of Data Processing
A) E-commerce Purchase and Fulfillment of Orders
Processing data necessary for purchasing, invoicing, and shipping the paintings.
- Processed Data: First name, last name, billing address, shipping address, e-mail address, phone number, details of the purchased painting, payment method.
- Purpose of Data Processing: Processing the order, executing the payment, safe delivery of the painting, and issuing and mailing the Certificate of Authenticity.
- Legal Basis: Performance of a contract [GDPR Article 6(1)(b)].
- Retention Period: In order to comply with statutory accounting obligations, data on invoices are retained for 8 years from the date of invoice issuance.
B) Contacting (Contact Form or E-mail)
Answering inquiries regarding paintings or custom commissioned works.
- Processed Data: Name, e-mail address, text of the message.
- Purpose of Data Processing: Customer service, answering professional inquiries.
- Legal Basis: Legitimate interest of the Data Controller [GDPR Article 6(1)(f)].
- Retention Period: Until the purpose is achieved, but no later than 1 year after the closure of the correspondence.
3. Data Processors (Third Parties Involved)
To operate the webshop and deliver the packages, we utilize the following external partners (data processors):
- Hosting Provider: Websupport Magyarország Kft 1119 Budapest Fehérvári út 97-99. Adószám: 25138205-2-43, HU25138205 (For storing the webshop engine and database).
- Courier Service / Delivery: [e.g., GLS, DHL, FedEx, MPL] (For shipping paintings securely as insured, fragile packages).
- Online Invoicing System: Online számla NAV (For issuing mandatory electronic invoices).
- Payment Service Provider:PayPal (For secure credit card payment processing. The Data Controller does not store credit card data).
4. Data Security
The Data Controller takes necessary technical and organizational measures to protect Users' data against unauthorized access, alteration, or deletion. The webshop operates with SSL encryption (HTTPS protocol), ensuring that data flows encrypted between the User's browser and the server.
5. Rights of the User
Regarding your data, you may request the following from the Data Controller at any time:
- Information and Access: Learn what data we process about you.
- Rectification: Request correction of inaccurate data (e.g., mistyped shipping address).
- Erasure (Right to be Forgotten): Request deletion of your data if the legal basis for processing has ceased.
- Restriction of Processing: Request temporary suspension of data processing.
- Data Portability: Request your data in a machine-readable format.
You can exercise these rights via the e-mail address provided in Section 1. The request will be reviewed and fulfilled within a maximum of 30 days.
6. Remedies
If you feel that the processing of your personal data violates GDPR regulations, you have the right to lodge a complaint with your local supervisory authority. In Hungary, this is the National Authority for Data Protection and Freedom of Information (NAIH) (www.naih.hu).
Date: [Kajárpéc, 2026. july 01.