Privacy Policy (GDPR)

Name and Contact Details of the Data Controller

Data Controller: Fanni Rohonczi (hereinafter: Data Controller)
Postal address: 1082 Budapest, Nagytemplom utca 34/B
Email address: collab.rohonczifanni@gmail.com
Phone number: +36 30 789 0403
Website: www.fannicaaltamoda.hu

Legal Basis, Purpose, Scope, and Duration of Data Processing Performed on the Website

Information About the Use of Cookies

What is a cookie?
The Data Controller uses cookies when you visit the website. A cookie is a small text file made up of letters and numbers that the website sends to your browser to save certain settings, simplify website usage, and collect relevant statistical data about visitors. Cookies do not contain personal information and cannot be used to identify individual users. They often contain a unique identifier – a randomly generated secret number sequence – stored on your device. Some cookies expire when you close the browser, while others remain stored for a longer period.

Legal Background and Legal Basis of Cookies:
The legal background for data processing is provided by Act CXII of 2011 on Informational Self-Determination and Freedom of Information (Infotv.), and Act CVIII of 2001 on Certain Issues of Electronic Commerce Services and Information Society Services. The legal basis for data processing is your consent in accordance with Section 5(1)(a) of Infotv.

Types of Cookies Used on the Website:

• Strictly necessary cookies: These cookies are essential for using the website and enable its basic functions. Without them, many features of the site will be unavailable. These cookies are session-based and expire once the session ends.

• Performance-enhancing cookies: These cookies collect information on how visitors use the website (e.g., which pages are visited most frequently or if the user encounters error messages). They do not collect personally identifiable information, only aggregate, anonymous data to improve site performance. These are also session-based.

• RTB personalized retargeting cookies:
  These enable previous visitors or users to be shown ads on websites within the Google Display Network, based on past visits or product/service-related search activity.

If you do not accept the use of cookies, some features of the website may not be available to you. More information on deleting cookies is available at:

• Internet Explorer: https://windows.microsoft.com/en-us/internet-explorer/delete-manage-cookies#ie=ie-11

• Firefox: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer

• Chrome: https://support.google.com/chrome/answer/95647?hl=en

Data Processing Related to Orders and Invoicing

Legal Background and Legal Basis:
The legal basis for data processing is Act CXII of 2011 (Infotv.) and Act C of 2000 on Accounting (Sztv.). Data processing is based on your consent under Infotv. Section 5(1)(a) and, in the event of consent withdrawal, on the legal obligation of the Data Controller under Sztv., pursuant to Infotv. Section 6(5)(a).

Purpose of Data Processing:
To issue invoices in accordance with legal requirements and to fulfill obligations for preserving accounting documents. Based on Sztv. Section 169(1)-(2), accounting records must be preserved for 8 years.

Scope of Processed Data:
Name, address, email address, phone number.

Duration of Data Processing:
Invoices must be retained for 8 years from issuance, even if the user withdraws consent.

Data Processing for Delivery of Goods

Legal Background and Legal Basis:
Same as above: Infotv., with consent under Section 5(1)(a).

Purpose:
To deliver the ordered goods with the help of our contracted delivery partners.

Scope of Data:
Name, address, email address, phone number.

Duration:
Data is retained until the order is delivered.

Additional Data Processing Activities

If further data processing is intended, you will be informed in advance about its legal basis, purpose, scope, and duration.

The Data Controller is obliged to fulfill official requests for data based on statutory authority. A register is maintained in accordance with Infotv. Section 15(2)-(3) to document which authority received which personal data, on what legal basis, and when. You may request information about this unless prohibited by law.

Data Retention Provider

Data Retention Provider: Fanni Rohonczi
Contact: 1082 Budapest, Nagytemplom utca 34/B | frohonczi@gmail.com

Data Security Measures

The Data Controller declares that appropriate security measures are in place to protect personal data against unauthorized access, alteration, transmission, disclosure, deletion, or destruction, as well as accidental loss or damage, and changes in applied technologies that may make data inaccessible.

Your Rights Concerning Data Processing

You have the following rights during the data processing period:

• The right to information

• The right to rectification

• The right to erasure

• The right to restriction of processing

• The right to object

You may request information from the Data Controller about the processing of your personal data. The Data Controller will respond within the shortest possible time, but no later than 25 days, in a clear and understandable form.

You may request correction of your personal data, which the Data Controller will complete within 15 days.

You may request deletion of your personal data, which the Data Controller will complete within 15 days unless legal obligations require further data retention (e.g., for accounting purposes).

You may request restriction of data if deletion would harm your legitimate interests. In such cases, the data will only be processed for the purpose that prevented deletion.

You may object to the processing of your personal data:

• If the data is processed solely to fulfill the Data Controller's legal obligations or for legitimate interests, excluding mandatory data processing and the cases defined in Infotv. 6(5);

• If your personal data is used without your consent for direct marketing, opinion polling, or scientific research.

The Data Controller will assess the objection within 15 days and inform you in writing of the decision. If the request for rectification, deletion, or restriction is denied, a reasoned explanation will be provided within 25 days.

Legal Remedies

If you believe that the Data Controller has violated any data protection law or has failed to comply with your request, you may initiate an investigation by the Hungarian National Authority for Data Protection and Freedom of Information:
Mailing address: 1530 Budapest, Pf. 5.
Email: ugyfelszolgalat@naih.hu

You may also take legal action in court.

Registration in the Data Protection Register

Under Infotv., certain types of data processing must be registered with the Data Protection Authority.

Changes to the Privacy Policy

The Data Controller reserves the right to amend this Privacy Policy. Continued use of the website following the effective date of the modifications constitutes acceptance of the updated Privacy Policy.