Hétfarkas Wooden Toys Webshop

1. Data controller’s details

Name: Oroszki Linda

Registered address: 3377 Szihalom, Vasút utca 33., Hungary

Hungarian tax number: 90143201-1-30

Registration number: 59293457

Email: info@hetfarkas.com

Phone: +36 70 266 1782

The purpose of this Privacy Policy is to explain what personal data the Data Controller processes in connection with operating the hetfarkas.com website (“Webshop”) and fulfilling orders, for what purpose, on what legal basis, and for how long, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (“GDPR”) and the Hungarian Act CXII of 2011 on informational self-determination and freedom of information.

2. Data processed and purpose of processing

2.1 Order-related data processing

When placing an order, the following data is processed: name, shipping address, billing address, email address, phone number, details of ordered products, and payment-related data (bank transfer reference).

Purpose: fulfilling the order, issuing an invoice, communicating with the Customer, and shipping the product.

Legal basis: performance of a contract under Article 6(1)(b) GDPR; for accounting records, fulfilment of a legal obligation under Article 6(1)(c) GDPR (pursuant to the Hungarian Accounting Act, Act C of 2000).

Retention period: billing data is retained for 8 years under the Accounting Act; other order-related data is retained for the limitation period (5 years) from fulfilment of the order.

2.2 Contact requests (email, custom order inquiries)

If the Customer contacts the Seller by email or other means (e.g. regarding a custom order), the data provided (name, email address, message content) is processed to the extent and for the time necessary to respond to the inquiry.

Legal basis: consent under Article 6(1)(a) GDPR, given by sending the inquiry.

2.3 Website visit data (cookies)

The Webshop uses strictly necessary (technical) cookies required for functions such as remembering cart contents and maintaining login sessions. Should statistical or marketing cookies (e.g. Google Analytics) be introduced in the future, visitors will be separately and clearly informed, and prior consent will be requested for any non-essential cookies.

3. Data transfers and processors

The Data Controller transfers Customer data to the following processors, to the extent necessary to fulfil the order:

Hosting provider: cweb.hu (technical operation of the Webshop)
Courier services: Foxpost Zrt., Magyar Posta Zrt., FedEx (name, address, phone number necessary for delivery)
Accountant / accounting firm (for handling accounting records)

Beyond the above, the Data Controller transfers data to third parties only where required by law (e.g. an official request from an authority).

4. International data transfer

As the Webshop also fulfils orders for Customers residing in the United States, data necessary for shipping (name, address, phone number) may be transferred to the international courier (FedEx) outside the European Union, solely for the purpose of completing delivery.

5. Data security

The Data Controller implements appropriate technical and organizational measures to ensure the security of the personal data processed, protecting it against unauthorized access, alteration, transmission, disclosure, deletion or destruction, as well as accidental destruction and damage.

6. Rights of data subjects

The Customer (data subject) may exercise the following rights regarding their personal data, via the contact details above:

Right of access: request information about what data is processed
Right to rectification: request correction of inaccurate data
Right to erasure: request deletion of data, unless processing is required by law (e.g. retention of accounting records)
Right to restriction of processing
Right to data portability
Right to object

The Data Controller will fulfil such requests without undue delay, and in any case within 30 days.

7. Remedies

If the Customer believes that the processing of their data does not comply with legal requirements, they may lodge a complaint with:

National Authority for Data Protection and Freedom of Information (NAIH), 1055 Budapest, Falk Miksa utca 9-11., Hungary, www.naih.hu
Right to judicial remedy: the Customer may also enforce their rights before the competent Hungarian court

8. Miscellaneous

The Data Controller reserves the right to unilaterally amend this Privacy Policy; data subjects will be informed of any amendment via the Webshop.

This Privacy Policy is effective as of 2026. [month] [day], until withdrawn.