Skip to content
Somogyi Gazda

Privacy Policy

This is an informative translation. The Hungarian version is the authentic and legally binding text.

This policy describes the processing of personal data on the somogyigazda.hu website and online shop (hereinafter: Website) under Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation, hereinafter: GDPR) and Hungarian Act CXII of 2011 on informational self-determination and freedom of information.

1. Controller

  • Name: Litresits Gábor e.v.
  • Registered office: 8700 Marcali, 027/14 hrsz.
  • Represented by: Litresits Gábor
  • Email: info@somogyigazda.hu
  • Phone: 06 20/331-5021

Please send any questions or requests concerning data protection to the contact details above.

2. Data processed, purposes, legal bases and retention

2.1. Orders in the online shop

  • Data: name, email address, phone number, delivery address and town, delivery notes; for business purchases company name and tax number; if different, billing name and address; products ordered, amounts, chosen payment method and time of order.
  • Purpose: fulfilling the order, organising delivery, communication about the order (confirmation and status emails, phone calls), issuing the invoice, handling warranty claims and complaints.
  • Legal basis: performance of a contract (Article 6 (1) b) GDPR); for accounting records, compliance with a legal obligation (Article 6 (1) c) GDPR, Section 169 of Hungarian Act C of 2000 on accounting).
  • Retention: contract data until the end of the civil law limitation period (5 years from performance); accounting records and the data on them for 8 years.

2.2. Call back requests and enquiries

  • Data: name, phone number, email address (optional), type of business (optional), content of the message.
  • Purpose: returning your call, preparing a quote, communication.
  • Legal basis: your consent (Article 6 (1) a) GDPR), given by ticking the consent checkbox and submitting the form. You may withdraw consent at any time; this does not affect the lawfulness of processing before withdrawal.
  • Retention: 1 year after the enquiry is closed, or until consent is withdrawn. If a contract results from the enquiry, the data is processed further as described in 2.1.

2.3. Cookies

The Website uses the following cookies:

  • sg_cart (strictly necessary): stores the content of the cart (product identifier and quantity only). Legal basis: necessary to provide the service (Article 6 (1) b) and f) GDPR). Lifetime: up to 30 days.
  • NEXT_LOCALE (strictly necessary): stores the chosen language. Lifetime: up to 1 year.
  • sg_consent, the cookie consent record (strictly necessary): records whether you have consented to analytics cookies. Lifetime: up to 1 year.
  • Administrator session cookies (strictly necessary): created only when Website administrators log in, never in visitors' browsers.
  • Analytics cookies (e.g. Google Tag Manager, Google Analytics): loaded only with your explicit consent and only if the controller has enabled analytics. Purpose: statistical analysis of Website traffic and use. Legal basis: consent (Article 6 (1) a) GDPR). You can withdraw consent at any time in the cookie settings at the bottom of the Website.

You can also delete or block cookies in your browser settings; if strictly necessary cookies are blocked, the cart will not work.

2.4. Server logs

When serving the Website, the hosting provider's systems log technical data (IP address, time of request, address viewed, browser type) to ensure secure operation and prevent abuse. Legal basis: legitimate interest (Article 6 (1) f) GDPR). Retention: up to 30 days. To protect forms against overload, IP addresses are stored for up to 1 hour.

3. Processors and recipients

The controller uses the following processors:

  • Hosting and website operation: Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. The provider may also process data outside the EU (United States); transfers are based on the EU-US Data Privacy Framework and the European Commission's standard contractual clauses.
  • Transactional emails: Sendinblue SAS (Brevo), 106 boulevard Haussmann, 75008 Paris, France. It processes the recipient's name, email address and the content of the message to deliver confirmation and notification emails.
  • Analytics (only with consent and if enabled): Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Delivery is carried out by the controller itself; delivery data is not passed to courier companies. For invoicing the controller may use invoicing software whose provider processes the data on the invoice as a processor. Personal data is not transferred to third parties for any other purpose unless required by law or by an authority.

4. Data security

Personal data is received over an encrypted (HTTPS) connection, access is limited to persons who need it for their tasks, and the administration interface is password protected. In the event of a personal data breach the controller acts in accordance with Articles 33-34 GDPR.

5. Your rights

Under the GDPR you have the following rights:

  • Access (Article 15): to know whether we process your personal data and, if so, which data, for what purpose and for how long.
  • Rectification (Article 16): to have inaccurate data corrected and incomplete data completed.
  • Erasure (Article 17): to have your data erased if the purpose has ceased, you have withdrawn consent or the processing is unlawful. Data subject to accounting obligations cannot be erased before the end of the retention period.
  • Restriction of processing (Article 18).
  • Data portability (Article 20): to receive data processed on the basis of consent or contract in a structured, machine-readable format.
  • Objection (Article 21): to object to processing based on legitimate interest.
  • Withdrawal of consent at any time, without affecting the lawfulness of earlier processing.

Please send your request to info@somogyigazda.hu. We reply without undue delay and at the latest within one month; this period may be extended by two further months where necessary, in which case we will inform you.

6. Remedies

If you believe that the processing of your personal data infringes the law, you may lodge a complaint with the supervisory authority:

Hungarian National Authority for Data Protection and Freedom of Information (NAIH)

  • Address: 1055 Budapest, Falk Miksa utca 9-11.
  • Postal address: 1363 Budapest, Pf. 9.
  • Email: ugyfelszolgalat@naih.hu
  • Phone: +36 1 391 1400
  • Website: naih.hu

You may also bring legal action before a court, including the regional court of your place of residence. You may also lodge a complaint with the supervisory authority of your EU member state of residence. Before filing a complaint, please contact us so that we can try to resolve the issue together.

7. Changes to this policy

The controller may amend this policy. The amended policy will be published on the Website; customers will also be informed of material changes by email.