Privacy policy

Privacy Policy

Introduction

The purpose of this privacy policy is to provide visitors and customers of the website [kortykollektiva.hu] (hereinafter: Webshop) with clear and transparent information about the personal data we process, for what purpose, for how long, and with whom we share it.

The operator of the Webshop:

Company Name: Benergo Ergonomics Kft. (as Data Controller)
Registered Office: 6764 Balástya, Balástya tanya 117/B
Company Registration Number: 06-09-018263
Tax Number: 23765353-2-06
Representative: Dr. Török Martin
Contact Email: hello@kortykollektiva.hu
Phone Number: +36 70 422 2111

2. Scope and Purpose of Personal Data Processed

Data Category Purpose Legal Basis (GDPR) Retention Period
Name, shipping address, email, phone Order fulfillment, contacting the customer Art. 6 (1) b) – Performance of a contract 5 years (due to invoicing and accounting obligations)
Company name, tax number Issuing invoices for corporate purchases Art. 6 (1) c) – Legal obligation 8 years (in accordance with accounting laws)
Credit card data Payment processing (Shopify Payments) Art. 6 (1) b) – Performance of a contract Not stored – handled exclusively by Shopify
IP address, browsing data Webshop security, statistics Art. 6 (1) f) – Legitimate interest 26 months (based on Google Analytics settings)

3. Data Processors

The following data processors are used during the operation of the Webshop:

  • Shopify International Ltd. (webshop engine and payment system)
    Role: Webshop operation, order and payment management
    Data Storage Location: EU/USA (with GDPR-compliant safeguards in place)
    Storage Duration: Until customer account deletion; invoicing data is subject to accounting regulations

  • Számlázz.hu – KBOSS.hu Kft.
    Role: Electronic invoicing
    Storage Duration: 8 years, as required by law

  • Courier Services (current contracted partners)
    Role: Delivery of orders
    Storage Duration: Until delivery; thereafter, according to shipping label archiving regulations

4. Data Transfer to Third Countries

Some of the data stored in the Shopify system may be transferred to the USA. Shopify applies contractual guarantees (Standard Contractual Clauses) in accordance with Article 46 of the GDPR.

5. Data Subject Rights

Customers have the right to:

  • access their personal data,

  • request rectification or deletion of their data,

  • request restriction of data processing,

  • object to data processing based on legitimate interest,

  • file a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (https://www.naih.hu/).

6. Contact Regarding Data Protection

Email: hello@kortykollektiva.hu