Privacy Policy
This notice contains the data processing policy of the operator (hereinafter: “Operator”) of the webshop operating on www.erikadekanyart.com (hereinafter: “Webshop”). It provides basic information regarding the processing, management, and storage of the personal data of the users of the Webshop (hereinafter: “User”), as well as the Users’ rights and the means of exercising those rights.
This privacy policy complies with applicable data protection legislation and was prepared taking into account the following legal acts:
- Act CVIII of 2001 on certain issues of electronic commerce services and information society services (Eker. Act)
- Act XLVIII of 2008 on the basic requirements and certain restrictions of commercial advertising activities (Grt.)
- Act CXII of 2011 on informational self-determination and freedom of information (Info Act)
- Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR)
1. Data Controller Information
Data controller: Erika Dékány, sole trader
Registered office: 2483 Gárdony, Mészáros Lázár utca 7., Hungary
E-mail: erikadekanyart@gmail.com
Tax number: 91827735-1-27
Contact person: Erika Dékány
The data controller does not employ a Data Protection Officer, as it is not required under Article 37 of the GDPR.
The data provided by the User are stored by the Operator in an internal electronic database, which is accessible only to the Operator. The Operator will not use the personal data for purposes other than those specified in this notice. Personal data will only be transferred to third parties with the User’s prior informed consent, except where data transfer is required by law.
2. Data Processor Information
Data processor: SalesNet Média Kft.
Registered office: 1173 Budapest, Újlak utca 116-128. A. lház. 2. em. 8. ajtó
Tax number: 24082644-2-42
Company registration number: 01-09-989642
E-mail: marketing@salesnet.hu
3. Categories of Personal Data Processed During Purchases and Newsletter
Subscription
3.a. Placing an Order in the Webshop
Data subjects: natural persons placing orders in the Webshop, either with or without prior registration (hereinafter: “Customers”).
Personal data processed: name, e-mail address, phone number, billing address, shipping address.
Purpose of data processing: fulfillment of orders placed in the Webshop tracking and documentation of orders.
Legal basis: Article 6 (1) b) GDPR – processing necessary for the performance of a contract.
Data retention period: 1 year from the date of the order. If the User does not log into their registered account for 12 consecutive months, the Operator deletes the data provided during registration. Registered users may also request deletion of their account at any time.
3.b. Invoicing
Data subjects: Customers.
Personal data processed: billing name, e-mail address, billing address shown on the invoice.
Legal basis: Article 6 (1) b) GDPR – performance of a contract, and Act C of 2000 on Accounting – issuing and storing accounting documents.
Retention period: 8 years from the issuance of the invoice, as required by accounting legislation.
3.c. Shipping Data
Data subjects: Customers.
Personal data processed: name of recipient, e-mail address, phone number, delivery address additional delivery details (e.g. floor, door number).
Legal basis: Article 6 (1) b) GDPR – performance of a contract.
Retention period: 1 year from the order date.
3.d. Newsletter Subscription
Data subjects: Customers who choose to subscribe to the newsletter.
Personal data processed: name, e-mail address.
Purpose: providing information about news, promotions, and offers.
Legal basis: Article 6 (1) a) GDPR – voluntary consent of the data subject.
Retention period: 3 years from subscription, or until the User unsubscribes earlier.
4. Service Providers Involved in Invoicing and Delivery
4.a. Invoicing
- számlázz.hu – KBOSS.hu Kft. (1031 Budapest, Záhony utca 7/D., Hungary)
The following personal data stored in the webshop’s database are transferred to KBOSS.hu Kft. as a data processor: name, e-mail address, billing name, billing address.
By using the Webshop, the Customer consents to the transfer of these data to KBOSS.hu Kft.
4.b. Delivery
Delivery is carried out by:
- DPD Hungary Kft. (1134 Budapest, Váci út 33., Building A, 2nd floor),
- GLS General Logistics Systems Hungary Csomag-Logisztikai Kft. (2351 Alsónémedi, GLS Európa utca 2.).
The following personal data may be transferred to the courier service providers: name, e-mail address, billing name, billing address, recipient name, phone number, shipping address.
By using the Webshop, the Customer consents to the transfer of their data to the courier service provider.
5. Newsletter and Personalized Newsletter
5.1 Newsletter Subscription
Users may subscribe to the newsletter on the website. The Operator sends newsletters containing advertisements or promotional information only with the User’s explicit consent and in compliance with applicable legislation.
The Operator processes the personal data provided during subscription until the User unsubscribes, but for a maximum period of 3 years. Users may unsubscribe: by clicking the “Unsubscribe” link in the newsletter by sending a request via e-mail or post Users may request modification or deletion of their data at: erikadekanyart@gmail.com. After unsubscribing, the Operator will no longer send newsletters or promotional offers.
5.2 Personalized Newsletter
The Operator may use the personal data of newsletter subscribers to send personalized offers via newsletter. For this purpose, the Operator may analyze the previous purchase history of registered users and newsletter subscribers. If the User unsubscribes from the newsletter, they will no longer receive personalized newsletters either.
6. Data Security Measures
Personal data are stored in Hungary on secure dedicated servers located in the server room of Rackhost Zrt.
The Webshop uses an HTTPS certificate, which ensures that communication between the User’s browser and the Webshop server is encrypted. This ensures that personal data and messages sent through the website cannot be intercepted or stolen.
7. Changes to the Privacy Policy
The Operator reserves the right to modify this Privacy Policy. The current version will always be published on the Webshop. Users are encouraged to periodically review the website to stay informed about any changes.
8. Rights of the Data Subject
Users have the right to: request information about the processing of their personal data, request access to their personal data, request correction of inaccurate personal data, request deletion of personal data (except where retention is required by accounting legislation). Requests may be submitted using the contact details provided above. The Operator will fulfill requests for correction or deletion within 5 working days.
Users also have the right to object to the processing of their personal data in cases defined by law.
9. Legal Remedies
If a User believes that their rights have been violated in relation to data processing, they may: initiate legal proceedings before a court, or file a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH).
Authority details:
National Authority for Data Protection and Freedom of Information
Address: 1055 Budapest, Falk Miksa utca 9–11., Hungary
Phone: +36 -1-391-1400
E-mail: ugyfelszolgalat@naih.hu
The court will handle the case with priority. The competent court is the Székesfehérvár Regional Court.
Gárdony, March 4, 2026