Krisztina Ferencz

Privacy Policy

This Privacy Policy outlines the terms and conditions regarding the processing of personal data by FK Art & Design / Fülöpné Ferencz Krisztina EV (hereinafter referred to as the “Webshop”). The purpose of this policy is to ensure the protection of the rights and freedoms of data subjects concerning the processing of personal data in compliance with applicable laws, particularly the General Data Protection Regulation (GDPR) of the European Union.

  1. General Provisions

Data Controller Information:

  • Company Name: FK Art & Design / Fülöpné Ferencz Krisztina EV
  • Registered Address: 1182 Budapest, Csőszkunyhó utca 9.
  • Tax Number: 90813739-1-43
  • Email: krisztinaferenczartdesign@gmail.com
  • Phone: +36309387335

Data Protection Officer: No Data Protection Officer is required as the data processing does not fall under Article 37 of the GDPR.

Contact Person: FK Art & Design / Fülöpné Ferencz Krisztina EV

Email: krisztinaferenczartdesign@gmail.com

  1. Purpose and Legal Basis of Data Processing

Purposes of Data Processing:

  • Order Fulfillment: Processing purchases and fulfilling contractual obligations.
  • Billing and Legal Compliance: Issuing invoices and fulfilling legal obligations.
  • Marketing: Sending newsletters and promotional offers, subject to the data subject’s prior consent.

Legal Bases for Data Processing:

  • GDPR Article 6(1)(b): Performance of a contract.
  • GDPR Article 6(1)(c): Compliance with legal obligations.
  • GDPR Article 6(1)(a): Consent of the data subject for marketing purposes.
  1. Data Processing and Categories of Personal Data

Processed Data:

  • Order-related data: Name, email address, billing address, shipping address, phone number.
  • Billing data: Name, address, tax number (if required).
  • Payment data: Transaction IDs (processed via payment service providers).
  • Marketing data: Name, email address (for newsletter subscription).

Data Retention Period:

  • Order-related data: Retained for the duration necessary for contract fulfillment and as required by law (e.g., 8 years for accounting documents).
  • Marketing data: Retained until consent is withdrawn.
  1. Data Sharing and Processing

The Data Controller may share personal data with the following third parties:

  • Courier Services: For order delivery (e.g., MPL, DHL, DPD, FedEx, GLS, Packeta, Someday, Foxpost).
  • Accounting Services: To comply with invoicing regulations.
  • Payment Service Providers: To process transactions (Stripe).

For international data transfers, appropriate safeguards are ensured (e.g., EU-US Data Privacy Framework or Standard Contractual Clauses).

  1. Data Security Measures

The Data Controller implements technical and organizational measures to protect personal data, including:

  • SSL encryption for secure communication.
  • Regular data backups to prevent data loss.
  • Access restrictions to ensure only authorized personnel can access data.
  • Firewalls and antivirus protection to prevent security breaches.
  1. Data Subject Rights

Under the GDPR, data subjects have the following rights:

  • Right of Access: Request information about processed data.
  • Right to Rectification: Request corrections to inaccurate data.
  • Right to Erasure: Request deletion of data when no longer necessary.
  • Right to Restriction of Processing: Request limitations on processing under certain conditions.
  • Right to Data Portability: Request transfer of data to another controller.
  • Right to Object: Object to processing, particularly for marketing purposes.

Complaints can be submitted to: National Authority for Data Protection and Freedom of Information (NAIH)

  • Address: 1055 Budapest, Falk Miksa utca 9-11.
  • Phone: +36 1 391 1400
  • Email: ugyfelszolgalat@naih.hu
  1. Cookies and Tracking Technologies

The Webshop uses cookies for the following purposes:

  • Ensuring website functionality.
  • Improving user experience.
  • Generating visitor statistics (Google Analytics or other tools).

Data subjects are informed about cookie usage upon their first visit and can choose to accept or reject cookies.

  1. Miscellaneous Provisions

This Privacy Policy may be updated periodically. The current version is always available on the Webshop’s website.

Effective Date: March 10, 2025