Privacy Notice - Plantswillbefriends

PRIVACY POLICY

Domain: https://plantswillbefriends.com/
E-mail: kiskert.es.ecset@gmail.com
Phone: 06203942142
Company Name: Hajnal Barbara Sole Proprietor

Date of acceptance: 2026-08-28. This document contains information regarding data processing carried out by Hajnal Barbara Sole Proprietor (hereinafter: Data Controller) during the operation of the https://plantswillbefriends.com/ webshop, in accordance with
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with
regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter:
Regulation, GDPR).

I. Data of the Data Controller
Name: Hajnal Barbara Sole Proprietor
Registered office: 8600 Siófok, Komló utca 4
Tax number: 90226942-1-34
Registration number: 59381123
Representative: Hajnal Barbara Entrepreneur
Mailing address, complaint handling: 8600 Siófok, Komló utca 4
E-mail: kiskert.es.ecset@gmail.com
Phone number: 06203942142
Website: https://plantswillbefriends.com/

II. Description of Data Processing during Webshop Operation and Contract Fulfillment

II.1. Issuance of Invoice
Content and purpose of data processing: The data processing process takes place to issue an invoice complying with legislation
and to fulfill the accounting document retention obligation. Based on Section 169 (1)-(2) of Act C of 2000 on Accounting (hereinafter:
Accounting Act), economic companies must retain accounting documents directly and indirectly supporting accounting records.
Processed data: Name, address.
Duration of data processing: Issued invoices must be retained for 8 years from the date of issue based on Section 169 (2) of the
Accounting Act.
Legal basis of data processing: Fulfillment of a legal obligation. Based on Section 159 (1) of Act CXXVII of 2007 on Value Added
Tax, issuing an invoice is mandatory, and it must be retained for 8 years based on Section 169 (2) of the Accounting Act [data
processing according to Article 6 (1) c) of the Regulation].

III. Information on the Use of Cookies
The website does not use cookies.

IV. Recipients of Personal Data

IV.1. Data Processors Used by the Data Controller
Data processor: a natural or legal person, public authority, agency, or any other body which processes personal data on behalf of the
controller.

IV.1.1. Hosting Provider
Name of data processor: Mazuri Marketing Kft.
Contact details of data processor:
Phone number: 30/6966786
E-mail address: info@mazuri-marketing.com
Registered office: 5008 Szolnok Karinthy Frigyes út 40.
Website: https://mazuri.hu
The Data Processor stores personal data based on a contract concluded with the Data Controller. It is not entitled to access
personal data.

IV.2. Data Transfer to Third Parties
The Data Controller transfers data to third parties (recipients) as follows. These recipients process the data not according to the
instructions of the Data Controller, but based on their own data processing policies, as independent data controllers.

IV.2.1. Recipients of Data Processing Related to Freight Transport
Name of recipient: Magyar Posta Zártkörűen Működő Részvénytársaság
Registered office of recipient: 1138 Budapest, Dunavirág utca 2-6.
Phone number of recipient: +36-1/767-8200
E-mail address of recipient: ugyfelszolgalat@posta.hu
Website of recipient: posta.hu
The courier service participates in the delivery of the ordered goods based on a contract concluded with the Data Controller. The courier service processes the received personal data according to the privacy policy available on its website.

Purpose of data transfer: Providing the courier service with data related to the purchase to realize the delivery.
Legal basis of data transfer: Performance of a contract concluded between You and the Data Controller based on Article 6 (1) b)
of the Regulation, which includes the delivery of the product, provided You have selected a shipping method during the ordering
process.

IV.2.2. Recipients of Data Processing Related to Freight Transport
Name of recipient: FoxPost Kft.
Registered office of recipient: 1068 Budapest, Dózsa György út 84. B. ép.
Phone number of recipient: +36 1/999-0-369
E-mail address of recipient: info@foxpost.hu
Website of recipient: foxpost.hu

The courier service participates in the delivery of the ordered goods based on a contract concluded with the Data Controller. The
courier service processes the received personal data according to the privacy policy available on its website.
Purpose of data transfer: Providing the courier service with data related to the purchase to realize the delivery.
Legal basis of data transfer: Performance of a contract concluded between You and the Data Controller based on Article 6 (1) b)
of the Regulation, which includes the delivery of the product, provided You have selected a shipping method during the ordering
process.

IV.2.3. Recipients of Data Processing Related to Freight Transport
Name of recipient: DPD Hungária Kft.
Registered office of recipient: 1158 Budapest, Késmárk utca 14. B. ép.
Phone number of recipient: +36-1/501-6200
E-mail address of recipient: dpd@dpd.hu
Website of recipient: https://www.dpd.com/hu/

V. Your Rights During Data Processing
Within the duration of data processing, you are entitled to the rights indicated in this information document according to the
provisions of the Regulation. If you wish to exercise your rights, it involves your identification, and the Data Controller must
necessarily communicate with you. Therefore, providing personal data will be necessary for identification (but identification can only
be based on data that the Data Controller already processes about you), and your complaints related to data processing will be
available in the Data Controller’s email account within the period specified in this information document regarding complaints. The
Data Controller answers complaints related to data processing within 30 days at the latest.

V.1. Right to Withdraw Consent
You are entitled to withdraw your consent to data processing at any time. In this case, your personal data based on consent will be
deleted from our systems.

V.2. Right of Access to Personal Data
You have the right to receive feedback from us on whether your personal data is being processed. If so, you are entitled to access
this data and receive information about:
– for what purpose we process your personal data;
– what type (category) of personal data we process about you;
– to whom or to what recipients we have transferred or may transfer the personal data;
– how long we store the personal data, or if this cannot be determined in advance, the criteria for determining the duration of data
processing;
– your rights to rectify, delete, or restrict the processing of your personal data, and in the case of data processing based on legitimate
interest, the right to object;
– the possibility of lodging a complaint with the supervisory authority;
– if the data was not obtained from you, the source of the data;
– whether we use automated decision-making (including profiling), and if so, its logic and expected impacts on you.
The purpose of exercising the right of access is primarily to verify the lawfulness of data processing. If you request information of the
same content unreasonably frequently, we are entitled to charge a reasonable fee.

V.3. Right to Rectification
You have the right to request the Data Controller to correct inaccurate personal data concerning you without delay.

V.4. Right to Restriction of Data Processing
You have the right to request the Data Controller to restrict data processing if any of the following apply:
– You contest the accuracy of the personal data; in this case, the restriction applies for a period enabling the Data Controller to verify
the accuracy of the personal data. If the accurate data can be determined immediately, no restriction takes place;
– The data processing is unlawful, but you oppose the deletion of the data for any reason (e.g., because the data is important to you
for enforcing a legal claim), so instead of deleting the data, you request the restriction of its use;
– The Data Controller no longer needs the personal data for the stated data processing purpose, but you require them for the
establishment, exercise, or defense of legal claims; or
– You have objected to data processing, but the Data Controller’s legitimate interest may also justify the data processing. In this
case, until it is determined whether the legitimate grounds of the Data Controller override your legitimate grounds, data processing
must be restricted.
If data processing is subject to restriction, such personal data shall, with the exception of storage, only be processed with the data
subject’s consent or for the establishment, exercise, or defense of legal claims, or for the protection of the rights of another natural or
legal person, or for reasons of important public interest of the Union or a Member State.

V.5. Right to Erasure – Right to be Forgotten
You have the right to obtain the erasure of personal data concerning you from the Data Controller without undue delay if one of the

following grounds applies:
– the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed by the
Data Controller;
– You withdraw your consent, and there is no other legal ground for the processing;
– You object to the processing based on legitimate interest, and there are no overriding legitimate grounds for the processing;
– the personal data have been unlawfully processed by the Data Controller, and this has been established based on a complaint;
– the personal data must be erased for compliance with a legal obligation in Union or Member State law to which the Data Controller
is subject.
Erasure does not apply to the extent that processing is necessary:
– for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject
(such as data processing within the framework of invoicing, as legislation requires the retention of invoices), or for the performance
of a task carried out in the public interest or in the exercise of official authority vested in the controller;
– for the establishment, exercise, or defense of legal claims (e.g., if the Data Controller has a claim against you that you have not yet
fulfilled, or a consumer or data processing complaint is pending).

V.6. Right to Object
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data
based on legitimate interest. In this case, the Data Controller shall no longer process the personal data unless it demonstrates
compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or for the establishment,
exercise, or defense of legal claims.

V.7. Right to Data Portability
If the data processing is based on your voluntary consent or is carried out to fulfill a contractual obligation, you have the right to
request the Data Controller to receive the data you provided to the Data Controller, which the Data Controller will make available to
you in xml, JSON, or csv format. If technically feasible, you can request the Data Controller to transmit the data in this format to
another data controller.

V.8. Right to Legal Remedy
If you believe that the Data Controller has violated any statutory provision concerning data processing or has not fulfilled any of your
requests, you may initiate proceedings with the National Authority for Data Protection and Freedom of Information to terminate the
presumed unlawful data processing (registered office: 1055 Budapest, Falk Miksa utca 9-11., mailing address: 1363 Budapest, Pf.
9., e-mail: ugyfelszolgalat@naih.hu, phone numbers: +36 (30) 683-5969; +36 (30) 549-6838; +36 (1) 391 1400).
We also inform you that in case of violation of statutory provisions regarding data processing, or if the Data Controller has not
fulfilled any of your requests, you may turn to the competent tribunal according to your place of residence or stay.

VI. Other Provisions

VI.1. Modification of the Privacy Policy
The Data Controller reserves the right to modify this privacy policy in a way that does not affect the purpose and legal basis of data
processing.

VI.2. Downloadable Version
You can also download this privacy policy in PDF format from here.