1. The data controller
The data controller is the operator of the veloura.hu online shop. Its identification and contact details are given on the Contact & legal notice page.
2. What data we process and why
- Fulfilling your order: name, shipping and billing address, e-mail address, phone number, order details. Legal basis: performance of a contract (GDPR Art. 6(1)(b)). Retention: 5 years from the end of the contract (Civil Code limitation period).
- Invoicing: the data shown on the invoice. Legal basis: legal obligation (GDPR Art. 6(1)(c), Section 169 of Act C of 2000 on Accounting). Retention: 8 years.
- Communication and complaints: name, e-mail, phone number, content of the message. Legal basis: performance of a contract and legal obligation under the Consumer Protection Act. Retention: 3 years in the case of a complaint.
- Live chat: the name, e-mail address and messages you provide in the chat. Purpose: answering your questions. Retention: up to 1 year, or until you request deletion.
- Cookies necessary for the website to work: cart and session. Legal basis: legitimate interest; the shop cannot work without them.
3. Processors and recipients
- Hosting provider: Rackhost Zrt., 6722 Szeged, Tisza Lajos krt. 41., Hungary
- Online payment: Stripe Payments Europe Ltd. (1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland). For card, Apple Pay, Google Pay or Link payments, the data needed for payment (name, e-mail, billing address, card details) is processed directly by Stripe; the Shop does not see card details. Legal basis: performance of a contract. About Stripe’s data processing: stripe.com/privacy.
- Live chat: tawk.to inc. (United States). If you write to us in the chat window on the website, your messages, the name and e-mail address you provide and technical data (IP address, browser, page viewed) are stored by tawk.to, and we can see them too. Using the chat is voluntary. Legal basis: consent, and our legitimate interest in answering your question. The data may be transferred outside the European Union. About tawk.to’s data processing: tawk.to/privacy-policy.
- Supplier partners who ship the parcel directly to you: they receive your name, shipping address and phone number for fulfilment. Some suppliers operate outside the European Union (e.g. in China); the transfer is necessary for the performance of the contract (GDPR Art. 49(1)(b)).
- Courier service: the courier company chosen by the supplier, with the data necessary for delivery.
4. Your rights
You may request access to, rectification or erasure of your data, restriction of processing and data portability, and you may object to processing. We respond to your request within 1 month. You may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH, 1055 Budapest, Falk Miksa utca 9-11., ugyfelszolgalat@naih.hu, www.naih.hu) or turn to the courts.
5. Data security
We receive your data over an encrypted (HTTPS) connection, and only those persons who need it for fulfilment have access to it.