Privacy policy

This notice describes how we process your personal data when you use orokfenyo.hu, eternapine.com, eternapine.at or eternapine.de, place an order, request a quote or subscribe to our newsletter.

1. The controller

Name: BESTRETTO (sole trader registered in Hungary), owner Milán Fodor
Registered address: Csók utca 1/B, 8230 Balatonfüred, Hungary
Registration number: 57603290
Tax number: 59557377-2-39
EU VAT number: HU59557377
Email: kave@bestretto.com
Phone: +36 70 611 0646

We are not required to appoint a data protection officer and have not appointed one.

2. What we process, why, and on what legal basis

Fulfilling your order. Name, billing and delivery address, email address, phone number, order details. Legal basis: performance of a contract, Article 6(1)(b) GDPR. Retention: until contractual claims lapse, five years.

Invoicing and accounting. The data shown on the invoice. Legal basis: compliance with a legal obligation, Article 6(1)(c) GDPR, under the Hungarian Accounting Act (Act C of 2000), which applies to the controller as a Hungarian business. Retention: eight years.

Business quote requests. Organisation name, contact name, email address, phone number, details of the requirement. Legal basis: steps taken at the request of the data subject prior to entering into a contract, Article 6(1)(b) GDPR. Retention: one year after the quote expires.

Newsletter. Name and email address. Legal basis: your consent, Article 6(1)(a) GDPR. You can withdraw consent at any time using the unsubscribe link at the bottom of each email or at the address above. Withdrawal does not affect the lawfulness of processing before it. Retention: until you unsubscribe.

Handling complaints. The complaint and related data. Legal basis: legal obligation under the Hungarian Consumer Protection Act (Act CLV of 1997). Retention: three years.

Running the website, security, statistics. IP address, browser and device data, visit data. Legal basis: legitimate interest in operating the website securely and properly, Article 6(1)(f) GDPR, and your consent for cookies that are not strictly necessary.

3. Who has access to the data

We do not sell your data and do not pass it to third parties for marketing. We use the following processors.

Shopify International Limited (Dublin, Ireland): running the online store, hosting, order management.
GLS General Logistics Systems Hungary Kft. and GLS partners in the destination country: delivering parcels. Data shared: name, delivery address, phone number, email address.
Payment provider: processing card payments. The seller neither sees nor stores card details.
Invoicing provider: issuing and sending the invoice.
Google Ireland Limited and Meta Platforms Ireland Limited: visitor statistics and advertising, where you have consented.

Where a provider processes data outside the European Economic Area, it does so on the basis of an adequacy decision of the European Commission or on the basis of standard contractual clauses.

4. Your rights

You may request access to your personal data, its rectification, erasure or the restriction of processing, object to processing, and exercise your right to data portability. Where processing is based on consent, you may withdraw it at any time. Send your request to the email or postal address above. We will respond within one month at the latest.

5. Complaints

You can complain to the Hungarian supervisory authority: Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH), 1055 Budapest, Falk Miksa utca 9-11., postal address: 1363 Budapest, Pf. 9., phone: +36 1 391 1400, email: ugyfelszolgalat@naih.hu, website: naih.hu.

If you are in another EU member state, you may also contact the supervisory authority of your country of residence. You also have the right to go to court.

6. Cookies

The website uses cookies. Strictly necessary cookies are needed for the cart and for signing in, and may be used without consent. We use statistics and marketing cookies only with your consent, which you can change at any time.