Privacy policy

Effective date: 1 July 2026

This Privacy Policy describes the processing of personal data carried out by EXECO Partner Kft. (hereinafter referred to as the Controller) in connection with the operation of the http://liliumlampanddesign.com online store.

This Privacy Policy has been prepared in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation – GDPR) concerning the protection of natural persons with regard to the processing of personal data and on the free movement of such data.

I. Controller Information

Company name: EXECO Partner Kft.

Registered office:
2000 Szentendre, Bartók Béla u. 5/b., Hungary

Tax number:
23027611-1-13

Company registration number:
13-09-142101

Company representative:
Dr. Zsuzsanna Erika Diószegi

Postal address / Complaints:
2112 Veresegyház, Hattyú utca 1/A, Hungary

Email:
info@liliumlampanddesign.com

Telephone:
+36 30 347 5849

Website:
http://liliumlampanddesign.com

Data Protection Officer

Name:
Zsófia Román

Postal address:
2600 Vác, Vöröskereszt sor 46, Hungary

Email:
zsofia.roman@gmail.com

Telephone:
+36 30 347 5849

II. Data Processing During the Operation of the Online Store and the Performance of Contracts

II.1. Contacting Us

Purpose of Processing

The purpose of processing is to receive and respond to your enquiries and to communicate with you where you contact us by email, contact form, telephone or any other means.

Making prior contact is entirely optional. You may place an order through the online store without contacting us beforehand.

Categories of Personal Data Processed

The personal data that you voluntarily provide when contacting us.

Retention Period

Your personal data will be processed only until your enquiry has been fully resolved.

Legal Basis

Your voluntary consent, which you provide by contacting the Controller.

Article 6(1)(a) GDPR

II.2. Website Registration

Purpose of Processing

The information provided during registration is stored in order to offer a more convenient shopping experience, for example by allowing you to make future purchases without re-entering your personal information.

Registration is not a condition for concluding a purchase contract.

Categories of Personal Data Processed

The Controller processes the following personal data:

your full name;
residential address;
telephone number;
email address;
details of the products purchased; and
the date of purchase.

Retention Period

Until you withdraw your consent.

Legal Basis

Your voluntary consent provided when registering an account.

Article 6(1)(a) GDPR

II.3. Order Processing

Purpose of Processing

Personal data are processed for the purpose of processing and fulfilling your orders, including communication relating to your order (such as order status notifications and sending invoices), as necessary for the performance of the purchase contract.

Categories of Personal Data Processed

The Controller processes the following personal data:

your full name;
residential address;
telephone number;
email address;
details of the purchased Goods;
order number; and
date of purchase.

Providing these personal data is necessary for the performance of the contract.

Retention Period

Personal data are retained for five (5) years following performance of the contract, in accordance with the applicable civil law limitation period.

Legal Basis

Performance of the contract concluded with you as the Customer.

Article 6(1)(b) GDPR

II.4. Issuing Invoices

Purpose of Processing

Personal data are processed for the purpose of issuing invoices in compliance with applicable legal requirements and fulfilling statutory accounting record-keeping obligations.

Pursuant to Sections 169(1)–(2) of Act C of 2000 on Accounting, accounting documents supporting bookkeeping records must be retained.

Categories of Personal Data Processed

Name
Address

Retention Period

Issued invoices are retained for eight (8) years from the date of issue, in accordance with Section 169(2) of the Hungarian Accounting Act.

Legal Basis

Compliance with a legal obligation.

The obligation to issue invoices is based on Section 159(1) of Act CXXVII of 2007 on Value Added Tax, while the obligation to retain accounting documents for eight years is based on Section 169(2) of Act C of 2000 on Accounting.

Article 6(1)(c) GDPR

II.5. Data Processing Related to Delivery

Purpose of Processing

Your order will be delivered to the address you provide using the delivery method selected by you, with the assistance of our delivery partners.

Categories of Personal Data Processed

Name
Delivery address
Email address
Telephone number

Retention Period

The Controller processes these personal data only for the period necessary to complete delivery of the ordered Goods.

Legal Basis

Performance of the contract.

Article 6(1)(b) GDPR

II.6. Handling Warranty and Guarantee Claims

Purpose of Processing

Warranty and statutory guarantee claims are handled in accordance with the provisions of Decree No. 19/2014 (IV.29.) of the Ministry for National Economy (NGM), which also specifies the procedure to be followed when processing such claims.

Categories of Personal Data Processed

Pursuant to Decree No. 19/2014 (IV.29.) NGM, the Controller is required to prepare a written report containing:

your name and address, together with your declaration consenting to the processing of the personal data recorded in the report in accordance with the Decree;
the description and purchase price of the movable Goods sold under the contract concluded between you and the Controller;
the date of performance of the contract;
the date on which the defect was reported;
a description of the defect;
the remedy you wish to exercise under your statutory warranty or guarantee rights; and
the method of settlement of the claim or, if the claim or the requested remedy is rejected, the reasons for such rejection.

If the purchased Goods are taken over from you, the Controller must issue a receipt confirming acceptance of the Goods, stating:

your name and address;
the information necessary to identify the Goods;
the date on which the Goods were received; and
the expected date on which the repaired Goods will be available for collection.

Retention Period

In accordance with Section 4(6) of Decree No. 19/2014 (IV.29.) NGM, the report prepared in relation to a statutory warranty or guarantee claim must be retained for three (3) years from the date of its preparation and presented to the competent supervisory authority upon request.

Legal Basis

Compliance with legal obligations arising from Sections 4(1), 4(6) and 6(1) of Decree No. 19/2014 (IV.29.) NGM.

Article 6(1)(c) GDPR

II.7. Handling Other Consumer Complaints

Purpose of Processing

You have the right to submit a consumer complaint.

The purpose of the processing is to investigate, respond to and document consumer complaints relating to the operation of the online store.

For the purposes of this Privacy Policy, a consumer complaint means an objection concerning conduct, activity or omission by the Controller or any person acting on its behalf or for its benefit in connection with the marketing or sale of Goods, intended to remedy an individual infringement of rights or legitimate interests, as defined in Section 2(28a) of Act CLV of 1997 on Consumer Protection.

If you submit a complaint, the processing of your personal data is necessary for the investigation and handling of that complaint.

Categories of Personal Data Processed

The complaint record must contain:

your name, postal address or email address;
the place, date and method of submitting the complaint;
a detailed description of the complaint, together with a list of the documents and other evidence provided;
the Controller's position regarding the complaint, where immediate investigation is possible;
the signature of the person preparing the report and, except for complaints submitted by telephone or other electronic communication services, your signature;
the place and date of preparing the report; and
in the case of complaints submitted by telephone or other electronic communication services, the unique identification number of the complaint.

Retention Period

Pursuant to Section 17/A(7) of Act CLV of 1997 on Consumer Protection, the Controller must retain:

the written record of an oral complaint or the written complaint itself; and
a copy of the substantive response provided to the complaint,

for three (3) years, and present them to the competent supervisory authority upon request.

Legal Basis

Submitting a complaint is entirely voluntary.

However, once a complaint has been submitted, the Controller is legally required to process it in accordance with Section 17/A of Act CLV of 1997 on Consumer Protection.

Article 6(1)(c) GDPR

II.8. Right of Withdrawal / Termination

Purpose of Processing

The purpose of the processing is to enable the exercise of your statutory right of withdrawal.

Processing includes receiving your notice of withdrawal or termination, identifying the relevant order or contract, processing and acknowledging the notice, handling all matters relating to the withdrawal or termination, and retaining evidence that the withdrawal or termination was exercised.

Categories of Personal Data Processed

If you withdraw from or terminate the contract, the Controller processes the following personal data:

your name;
your order number or other contract identification details;
the contents of your withdrawal or termination notice; and
if you request reimbursement using a payment method different from the one originally used, the information necessary for the refund (for example, your bank account number).

Where you exercise your right of withdrawal using the online withdrawal function provided under Government Decree No. 45/2014 (II.26.), the Controller also processes the following technical information:

the exact date and time the withdrawal notice was submitted and received;
your email address or other electronic contact details; and
information relating to the confirmation sent acknowledging receipt of your withdrawal or termination notice.

Retention Period

The Controller processes the personal data relating to your withdrawal or termination notice, as well as the processing and handling of that notice, until the end of the third calendar year following the exercise of the right of withdrawal or termination.

The retention of these data is based on the Controller's legitimate interest under Article 6(1)(f) GDPR, namely to be able to demonstrate, in the event of any consumer protection, administrative or judicial proceedings, that the withdrawal was properly handled and to evidence the actions taken in connection with it.

Legal Basis

The processing of personal data required for handling the exercise of the right of withdrawal or termination, including contract termination, return of Goods, reimbursement and related communications, is based on Article 6(1)(b) GDPR, as processing necessary for the performance or termination of a contract.

The retention of personal data relating to the exercise of the right of withdrawal for the purpose of defending against potential consumer claims is based on the Controller's legitimate interest pursuant to Article 6(1)(f) GDPR.

II.9. Records Kept to Demonstrate Consent

Purpose of Processing

Where processing is based on your consent, particularly in relation to creating a customer account or subscribing to the newsletter, the Controller stores technical information relating to your consent in order to demonstrate that valid consent was obtained.

Categories of Personal Data Processed

the date and time when consent was given;
your IP address.

Retention Period

These data are retained for the duration of the processing activity for which the consent was given.

Legal Basis

Your consent.

Article 6(1)(a) GDPR

II.10. Newsletter Subscription

Purpose of Processing

Your personal data are processed for the purpose of sending newsletters.

Categories of Personal Data Processed

name;
email address.

Retention Period

Until you withdraw your consent.

Legal Basis

Your freely given consent provided when subscribing to the newsletter.

Article 6(1)(a) GDPR

II.11. Personalised Marketing Communications

Purpose of Processing

When sending newsletters, the Controller may include personalised marketing communications tailored to your interests.

Categories of Personal Data Processed

name;
postal address;
email address;
telephone number;
information relating to previous purchases.

Retention Period

Until you withdraw your consent.

Legal Basis

Your separate and explicit consent provided when your personal data are collected.

Article 6(1)(a) GDPR

III. Information on the Use of Cookies

III.1. What Are Cookies?

During your visit to the Website, the Controller uses cookies.

Cookies are small text files consisting of letters and numbers that are sent by the Website to your browser in order to store certain preferences, facilitate the use of the Website and help us collect statistical information about how visitors use the Website.

Some cookies do not contain personal data and cannot identify you directly. Others contain a unique identifier (a randomly generated encrypted string of characters) stored on your device, which makes it possible to recognise your browser.

The lifespan of each cookie is specified in the relevant cookie description.

You may disable cookies at any time through your browser settings. Further information is available at the following pages provided by browser developers:

Internet Explorer
Firefox
Mozilla
Safari
Google Chrome
Microsoft Edge

III.2. Legal Basis for the Use of Cookies

The Controller uses three categories of cookies:

Strictly necessary cookies, which are essential for the proper operation of the Website;
Analytics cookies, used to collect statistical information about Website usage; and
Marketing cookies, used to deliver personalised advertisements and marketing content.

The legal basis for processing is:

Article 6(1)(a) GDPR (your consent) for analytics and marketing cookies; and
Article 6(1)(f) GDPR (the Controller's legitimate interest) for strictly necessary cookies that are required for the operation and security of the Website.

III.3. Main Cookies Used by the Website

Strictly Necessary Cookies

These cookies are essential for the proper functioning of the Website. If you choose not to accept these cookies, certain features and services may not be available.

Cookie	Purpose	Retention
_ab	Used for administrator access to the admin interface.	2 years
_customer_account_shop_sessions	Used together with the `_secure_account_session_id` cookie to track user sessions for the new customer account system.	30 days
_secure_session_id	Tracks a customer's session throughout the multi-step checkout process and links order, payment and shipping information.	24 hours
_shopify_country	Stores the visitor's detected country to determine the appropriate currency or regional settings and avoid repeated GeoIP lookups.	Session
_shopify_m	Stores customer privacy preferences.	1 year
_shopify_tm	Stores customer privacy preferences.	30 minutes
_shopify_tw	Stores customer privacy preferences.	2 weeks
_storefront_u	Facilitates updates to customer account information.	1 minute
_tracking_consent	Stores the visitor's tracking and cookie consent preferences.	1 year
_cmp_a	Stores customer privacy settings.	1 day
c	Used during payment processing.	1 year
cart	Stores shopping cart information.	2 weeks
cart_currency	Ensures new shopping carts use the same currency as the customer's previous checkout.	2 weeks
cart_sig	Verifies the integrity of the shopping cart and supports secure cart operations.	2 weeks
cart_ts	Used during checkout.	2 weeks
cart_ver	Stores shopping cart version information.	2 weeks
checkout	Used during checkout.	4 weeks
checkout_token	Used during checkout.	1 year
customer_account_locale	Stores the customer's language preference for the new customer account system.	1 year
dynamic_checkout_shown_on_cart	Supports dynamic checkout functionality.	30 minutes
hide_shopify_pay_for_checkout	Controls Shopify Pay visibility during checkout.	Session
keep_alive	Supports customer localisation.	2 weeks
master_device_id	Used when merchants log into the Shopify admin.	2 years
previous_step	Stores information about the previous checkout step.	1 year
discount_code	Stores an applied discount code during checkout.	Session
remember_me	Remembers returning customers during checkout.	1 year
secure_customer_sig	Identifies logged-in customers so they remain signed in.	1 year
shopify_pay	Used for Shopify Pay.	1 year
shopify_pay_redirect	Supports Shopify Pay redirection.	1 hour, 3 weeks or 1 year (depending on configuration)
shop_pay_accelerated	Supports Shop Pay accelerated checkout.	1 year
source_name	Enables customised checkout behaviour when the store is accessed through supported mobile applications.	Session
storefront_digest	Stores a digest of the storefront password to allow merchants to preview password-protected stores.	2 years
tracked_start_checkout	Tracks the beginning of the checkout process.	1 year
checkout_session_lookup	Used during checkout.	3 weeks
checkout_prefill	Pre-fills checkout information.	5 minutes
checkout_queue_token	Used during checkout.	1 year
checkout_queue_checkout_token	Used during checkout.	1 year
checkout_worker_session	Used during checkout.	3 days
checkout_session_token	Used during checkout.	3 weeks
checkout_session_token_<>	Used during checkout.	3 weeks
cookietest	Ensures our systems are functioning correctly.	1 minute
order	Used on the order status page.	3 weeks
identity-state	Used for customer authentication.	24 hours
identity-state-<>	Used for customer authentication.	24 hours
identity_customer_account_number	Used for customer authentication.	12 weeks
card_update_verification_id	Used during payment processing.	20 minutes
customer_account_new_login	Used for customer authentication.	20 minutes
customer_account_preview	Used for customer authentication.	7 days
customer_payment_method	Used during payment processing.	1 hour
customer_shop_pay_agreement	Used during payment processing.	20 minutes
pay_update_intent_id	Used during payment processing.	20 minutes
localization	Stores localisation preferences.	2 weeks
profile_preview_token	Used during payment processing.	5 minutes
login_with_shop_finalize	Used for customer authentication.	5 minutes
preview_theme	Used by the Shopify theme editor.	Session
shopify-editor-unconfirmed-settings	Used by the Shopify theme editor.	16 hours
wpm-test-cookie	Ensures our systems are functioning correctly.	Session

Analytics Cookies

Cookie	Purpose	Retention
_landing_page	Tracks landing pages visited by users.	2 weeks
_orig_referrer	Stores the original referring URL to analyse traffic sources.	2 weeks

Marketing Cookies

Cookie	Purpose	Retention
_s	Shopify Analytics.	30 minutes
_shopify_d	Shopify Analytics.	Session
_shopify_fs	Shopify Analytics.	30 minutes
_shopify_s	Shopify Analytics.	30 minutes
_shopify_sa_p	Shopify marketing and recommendation analytics.	30 minutes
_shopify_sa_t	Shopify marketing and recommendation analytics.	30 minutes
_shopify_y	Shopify Analytics.	1 year
_y	Shopify Analytics.	1 year
_shopify_ga	Shopify and Google Analytics.	Session
customer_auth_provider	Shopify Analytics.	Session
customer_auth_session_created_at	Shopify Analytics.	Session
unique_interaction_id	Shopify Analytics.	10 minutes

IV. Recipients of Personal Data

IV.1. Data Processors Engaged by the Controller

A data processor is a natural or legal person, public authority, agency or other body that processes personal data on behalf of the Controller.

IV.1.1. Website Hosting Provider

Data Processor: Shopify Inc.

Registered Office:
151 O'Connor Street, Ground Floor
Ottawa, Ontario K2P 2L8
Canada

Telephone: +1 613 241 2828

Email: support@shopify.com

Website: shopify.com

Under a data processing agreement concluded with the Controller, Shopify Inc. provides website hosting and data storage services. The Data Processor is not entitled to use the personal data for its own purposes.

IV.1.2. Newsletter Service Provider

Service Provider: Shopify Inc.

Registered Office:
151 O'Connor Street, Ground Floor
Ottawa, Ontario K2P 2L8
Canada

Telephone: +1 613 241 2828

Email: support@shopify.com

Website: shopify.com

Under a data processing agreement with the Controller, Shopify Inc. assists in the distribution of newsletters.

IV.1.3. Invoicing Service Provider

Data Processor: Számlázz.hu (KBOSS.hu Kft.)

Registered Office:
1031 Budapest
Záhony utca 7/D
Hungary

Email: info@szamlazz.hu

Website: https://www.szamlazz.hu

Under a data processing agreement with the Controller, the Data Processor assists in the issuing and recording of invoices and other accounting documents.

IV.1.4. Data Processing Relating to the Online Withdrawal Function

Data Processor: Jutasa Kft.

Registered Office:
7625 Pécs
Aradi vértanúk útja 18
Hungary

Telephone: +36 70 609 1733

Email: info@fogyasztobarat.hu

Website: fogyasztobarat.hu

Under a written agreement concluded with the Controller, the Data Processor provides the technical operation and support of the online withdrawal function.

Note: This section appears twice in the original Hungarian document (IV.1.4 and IV.1.5) with identical wording. In an English version, it should appear only once, unless the duplication is intentional.

IV.2. Transfers of Personal Data to Third Parties

The Controller transfers personal data to the following third parties (recipients). These recipients process the data as independent data controllers, in accordance with their own privacy policies, and not on behalf of the Controller.

IV.2.1. Delivery Service Provider – Hungarian Post

Recipient: Magyar Posta Zrt.

Registered Office:
1138 Budapest
Dunavirág utca 2–6
Hungary

Telephone: +36 1 767 8200

Email: ugyfelszolgalat@posta.hu

Website: posta.hu

The courier service assists the Controller in delivering ordered products under a contractual agreement. The courier processes the personal data received in accordance with its own Privacy Policy.

Purpose of the transfer

To provide the courier service with the information necessary to deliver the ordered products.

Legal basis

Performance of a contract pursuant to Article 6(1)(b) GDPR, where the customer has selected a delivery method during the ordering process.

IV.2.2. Delivery Service Provider – Packeta Hungary

Recipient: Packeta Hungary Kft.

Registered Office:
1044 Budapest
Ezred utca 2
Hungary

Telephone: +36 1 400 8806

Email: info@packeta.hu

Website: packeta.hu

Packeta Hungary assists the Controller in delivering ordered products under a contractual agreement. The courier processes the personal data received in accordance with its own Privacy Policy.

Purpose of the transfer

To provide the courier service with the information necessary to complete delivery of the purchased products.

Legal basis

Performance of a contract pursuant to Article 6(1)(b) GDPR, where the customer has chosen a delivery method during the ordering process.

IV.2.3. Transfer of Personal Data in Connection with Online Payments

Data Controller / Payment Service Provider: Shopify Inc.

Registered Office:
151 O'Connor Street, Ground Floor
Ottawa, Ontario K2P 2L8
Canada

Telephone: +1 613 241 2828

Email: support@shopify.com

Website: shopify.com

Purpose of the Data Transfer

Under a contract concluded with the Controller, the payment service provider assists in processing online payments. To enable the payment transaction, certain personal data are transferred to the payment service provider during the checkout process.

The purpose of the transfer is to provide the payment service provider with the transaction data necessary to process the payment initiated by the customer.

Categories of Personal Data Transferred

The Controller transfers only the personal data necessary for processing the payment transaction, including in particular:

the amount payable;
the order identification number;
the customer's email address.

Legal Basis

The transfer is necessary for the performance of the contract concluded between you and the Controller, including completion of the payment process where you choose to pay online.

Article 6(1)(b) GDPR

V. Your Rights Regarding the Processing of Personal Data

During the period in which your personal data are processed, you are entitled to exercise the rights provided under the GDPR and described in this Privacy Notice.

If you wish to exercise any of your rights, we must verify your identity and communicate with you regarding your request. Accordingly, you may be required to provide certain personal data for identification purposes (only data already processed by the Controller may be used for verification).

Any correspondence relating to your privacy request will be retained in the Controller's email system for the retention periods specified in this Privacy Notice.

The Controller will respond to requests concerning the processing of personal data within 30 days at the latest.

V.1. Right to Withdraw Consent

You may withdraw your consent to the processing of your personal data at any time.

Where processing is based solely on your consent, we will delete the relevant personal data from our systems following withdrawal of your consent.

V.2. Right of Access

You have the right to obtain confirmation as to whether we process your personal data.

Where this is the case, you have the right to access your personal data and to receive information about:

the purposes for which your personal data are processed;
the categories of personal data concerned;
the recipients or categories of recipients to whom your personal data have been or may be disclosed;
the period for which your personal data will be stored or, where this is not possible, the criteria used to determine that period;
your rights to request rectification, erasure or restriction of processing, and, where processing is based on legitimate interests, your right to object;
your right to lodge a complaint with a supervisory authority;
where the personal data were not collected directly from you, any available information regarding their source;
whether automated decision-making (including profiling) is used and, where applicable, meaningful information about the logic involved, as well as the significance and envisaged consequences for you.

The primary purpose of exercising the right of access is to enable you to verify the lawfulness of our processing activities.

Where you request the same information repeatedly and without reasonable justification, the Controller may charge a reasonable administrative fee.

V.3. Right to Rectification

You have the right to request that the Controller correct inaccurate personal data concerning you without undue delay.

V.4. Right to Restriction of Processing

You have the right to request restriction of processing where one of the following applies:

you contest the accuracy of your personal data, for the period necessary to verify its accuracy (where accuracy can be established immediately, no restriction will be applied);
the processing is unlawful, but you oppose erasure and instead request restriction of the use of your personal data;
the Controller no longer needs the personal data for the original purpose of processing, but you require them for the establishment, exercise or defence of legal claims; or
you have objected to processing based on the Controller's legitimate interests, pending verification of whether the Controller's legitimate grounds override your own.

Where processing has been restricted, your personal data may, apart from storage, only be processed:

with your consent;
for the establishment, exercise or defence of legal claims;
for the protection of the rights of another natural or legal person; or
for reasons of important public interest of the European Union or of a Member State.

V.5. Right to Erasure ("Right to be Forgotten")

You have the right to request that the Controller erase your personal data without undue delay where one of the following grounds applies:

the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
you withdraw your consent and there is no other legal basis for the processing;
you object to processing based on the Controller's legitimate interests and there are no overriding legitimate grounds for continuing the processing;
the personal data have been processed unlawfully and this has been established following your complaint; or
the personal data must be erased in order to comply with a legal obligation under applicable European Union or Member State law.

The right to erasure does not apply where processing is necessary:

for compliance with a legal obligation requiring processing under applicable European Union or Member State law (for example, accounting legislation requiring invoices to be retained);
for the establishment, exercise or defence of legal claims (for example, where the Controller has an outstanding claim against you or where a consumer or data protection complaint is ongoing).

V.6. Right to Object

You have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data where such processing is based on the Controller's legitimate interests.

If you object, the Controller will cease processing your personal data unless it demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms, or where the processing is necessary for the establishment, exercise or defence of legal claims.

V.7. Right to Data Portability

Where processing is based on your consent or is necessary for the performance of a contract, you have the right to receive the personal data that you have provided to the Controller in a structured, commonly used and machine-readable format.

Where technically feasible, the Controller will provide the data in XML, JSON or CSV format. You may also request that the Controller transmit those data directly to another controller where technically possible.

V.8. Right to Lodge a Complaint and Seek Judicial Remedy

If you believe that the Controller has infringed any applicable data protection legislation or has failed to comply with your request concerning the processing of your personal data, you have the right to lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH).

Hungarian National Authority for Data Protection and Freedom of Information (NAIH)

Address:
1055 Budapest
Falk Miksa utca 9–11
Hungary

Postal Address:
1363 Budapest, Pf. 9
Hungary

Email: ugyfelszolgalat@naih.hu

Telephone:

+36 30 683 5969
+36 30 549 6838
+36 1 391 1400

You are also entitled to bring proceedings before the competent Hungarian court having jurisdiction over your place of residence or habitual residence if you believe that your rights under applicable data protection legislation have been infringed or if the Controller has failed to comply with your request.

VI. Miscellaneous Provisions

VI.1. Amendments to this Privacy Notice

The Controller reserves the right to amend this Privacy Notice at any time, provided that such amendments do not affect the purposes of processing or the legal bases on which personal data are processed.

VI.2. Downloadable Version

A downloadable PDF version of this Privacy Notice is available through the Website.