Effective Date: 2025-08-25

1. Data Controller
   Company name: Varga Business Consulting Kft.
   Registered office: 5052 Újszász, Mező út 86., Hungary
   Tax ID: 32789755-2-16
   Company registration number: 16-09-022961
   Court of registration: Company Registry Court of Szolnok
   Email: vargabusinesskft@gmail.com

The Company acts as the Data Controller for the processing of personal data collected via the online store.

2. Hosting Provider
   The website is hosted by:
   Namecheap, Inc.
   4600 East Washington Street, Suite 300, Phoenix, AZ 85034, USA

Personal data provided by Customers is stored on servers located within the European Union. Therefore, no transfer of data outside the European Economic Area (EEA) occurs.

3. Purpose of Data Processing
   The Company processes personal data for the following purposes:

• processing and fulfilling customer orders,
• billing and invoicing,
• delivery of products,
• handling complaints and warranty claims,
• customer support communication,
• maintaining user accounts,
• compliance with legal obligations (e.g. accounting and tax),
• marketing communication, if consent is provided.

4. Categories of Personal Data Processed
   The Company may process the following personal data:

• name, billing and delivery address,
• email address and phone number,
• order history and payment details,
• user account information (if registered),
• correspondence with customer support.

5. Legal Basis for Processing
   Personal data is processed on the following legal bases:

• performance of a contract (Article 6(1)(b) GDPR),
• compliance with legal obligations (Article 6(1)(c) GDPR),
• legitimate interests of the Company (Article 6(1)(f) GDPR),
• consent of the Customer, where required (Article 6(1)(a) GDPR).

6. Data Retention
   Personal data is retained only for as long as necessary for the purposes described above, or as required by law.

• Accounting and invoicing data: 8 years (under Hungarian accounting law),
• Customer account data: until deletion request,
• Marketing data: until withdrawal of consent.

7. Data Recipients
   Personal data may be shared with:

• hosting provider (Namecheap, Inc.),
• courier and delivery partners,
• payment service providers,
• accounting and legal service providers,
• authorities if required by law.

All partners are contractually bound to comply with GDPR and Hungarian data protection requirements.

8. Data Security
   The Company applies appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. This includes secure connections (SSL), access controls, and regular monitoring of systems.
9. Rights of the Data Subject
   Customers have the following rights under GDPR:

• right of access to their personal data,
• right to rectification of inaccurate data,
• right to erasure (“right to be forgotten”),
• right to restriction of processing,
• right to data portability,
• right to object to processing based on legitimate interests,
• right to withdraw consent at any time (for consent-based processing),
• right to lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH).

Contact details of NAIH:
Hungarian National Authority for Data Protection and Freedom of Information
1125 Budapest, Szilágyi Erzsébet fasor 22/c, Hungary
Website: www.naih.hu

10. Cookies
    The website uses cookies and similar technologies to enhance user experience, enable basic site functions, and analyze traffic. Customers can manage or disable cookies in their browser settings. Detailed information is provided in the Cookie Policy.
11. Amendments
    The Company reserves the right to update this Privacy Policy at any time. The version published on the website is always the valid one.
12. Contact
    For questions, requests, or complaints regarding data protection, Customers may contact:
    Email: vargabusinesskft@gmail.com