Privacy Policy
Effective: from 8 September 2026.
1. The data controller
| Name | Plastify Kereskedelmi és Szolgáltató Kft. |
| Registered office and postal address | 8095 Pákozd, HRSZ 067/28 |
| Company registration number | 07-09-029235 |
| Tax number | 26497697-2-07 |
| plastify@plastify.hu | |
| Telephone | +36 70 327 0744 |
| Representative | Miklós Rácz |
Plastify Kft. is not required to appoint a data protection officer; for privacy questions we are available at the contact details above.
2. Applicable law
- Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR)
- Act CXII of 2011 on the right of informational self-determination and freedom of information (Infotv.)
- Act CVIII of 2001 on electronic commerce services (Ekertv.)
- Act XLVIII of 2008 on commercial advertising (Grt.)
- Act C of 2000 on accounting (Sztv.)
- Act C of 2003 on electronic communications (Eht.)
3. What data we process, why, and for how long
3.1 Purchases in the shop
- Data: name, billing address, delivery address or chosen parcel point, e-mail address, telephone number, for company purchases the company name and tax number, the order details (products, amount, payment and delivery method), any note added to the order, the time and IP address of the order.
- Purpose: concluding and performing the contract (order confirmation, delivery of the parcel, handling payment) and contact regarding the order.
- Legal basis: GDPR Article 6(1)(b) — performance of a contract.
- Retention: 5 years from fulfilment of the order (limitation period for civil claims); accounting records for 8 years (Sztv. section 169), legal basis: GDPR Article 6(1)(c).
Purchases are made as a guest, without registration; we do not create user accounts.
3.2 Invoicing
- Data: name/company name, billing address, tax number (for companies), e-mail address, the items purchased.
- Purpose: issuing the invoice and the statutory real-time data reporting to the Hungarian tax authority (NAV).
- Legal basis: GDPR Article 6(1)(c) — legal obligation (VAT Act, Sztv.).
- Retention: 8 years.
3.3 Contact and trade quote requests
- Data: name, e-mail address, telephone number, company name and tax number, the content of the message; for quote requests the quantity, colours, delivery location, uploaded logo and mock-up.
- Purpose: answering the enquiry, preparing a quote.
- Legal basis: GDPR Article 6(1)(b) — steps prior to a contract at the request of the data subject, and (f) — legitimate interest (customer relations).
- Retention: 30 days from closing the enquiry; if a contract is concluded, as under 3.1.
3.4 Replacement guarantee, warranty and complaint cases
- Data: name, contact details, order number, invoice, photo of the defective product, the content of the complaint, the written record.
- Purpose: assessing the guarantee claim, handling complaints.
- Legal basis: GDPR Article 6(1)(c) — legal obligation (Consumer Protection Act, section 17/A), and (b).
- Retention: the complaint record and the reply for 3 years (Consumer Protection Act); guarantee cases for 1 year after the guarantee expires.
3.5 Product reviews
- Data: the name given, e-mail address (not displayed), the text and star rating of the review, IP address.
- Purpose: displaying reviews on the product page; we only show reviews from verified purchases.
- Legal basis: GDPR Article 6(1)(a) — consent; if withdrawn, the review is deleted.
- Retention: until withdrawal, or until the product is no longer sold.
3.6 Newsletter
We only send the newsletter to people who have signed up for it separately and voluntarily (GDPR Article 6(1)(a), Grt. section 6). On sign-up we process your e-mail address and — if you give it — your first name; we log the fact, time and IP address of the sign-up. Every e-mail has an unsubscribe link at the bottom; after unsubscribing we delete the data. The newsletter is sent through the MailPoet system (see section 4).
3.7 Cookies and tracking
The website uses cookies. Cookies needed for the site to work (basket, session, cookie settings, language choice) are placed without consent, on the basis of GDPR Article 6(1)(f) and Eht. section 155(4). Statistics and marketing cookies (Google Analytics 4, Meta pixel) are only activated with your prior consent, which you give in the cookie bar and can change or withdraw at any time via the “Cookie settings” link at the bottom of the page.
| Cookie / tool | Provider | Purpose | Category | Lifetime |
|---|---|---|---|---|
| woocommerce_cart_hash, woocommerce_items_in_cart, wp_woocommerce_session_* | plastify.hu (WooCommerce) | basket and session | necessary | session / 2 days |
| cmplz_* | plastify.hu (Complianz) | storing your cookie consent | necessary | 365 days |
| trp_language | plastify.hu (TranslatePress) | language choice | necessary | 30 days |
| _ga, _ga_* | Google Ireland Ltd. | visitor statistics (Google Analytics 4) | statistics | 2 years |
| _fbp, fr | Meta Platforms Ireland Ltd. | advertising measurement (Meta pixel) | marketing | 90 days |
The detailed, always current list of cookies is on the Cookie notice page.
4. Processors and recipients
We pass data to the following partners, solely for the stated purpose:
| Partner | Task | Data shared |
|---|---|---|
| OTP Mobil Kft. (SimplePay), 1143 Budapest, Hungária krt. 17–19. | online card payment | name, e-mail address, telephone number, billing and delivery address details, the order amount — card details are handled by SimplePay only. Its privacy policy: https://simplepay.hu/adatkezelesi-tajekoztatok/ |
| Billingo Technologies Zrt., 1133 Budapest, Árbóc utca 6. III. em. | invoicing, real-time reporting to the tax authority (NAV Online Számla) | name/company name, billing address, tax number, e-mail address, items |
| Janurik Könyvelőbázis Kft., 2483 Gárdony, Kossuth utca 62–64., tax number 14275885-2-07 | accounting | invoices, accounting records |
| Wysija SARL (MailPoet), 6 rue Dieudonné Costes, 31700 Blagnac, France | sending the newsletter | e-mail address, first name, sign-up details |
| Magyar Posta Zrt. (MPL), 1138 Budapest, Dunavirág utca 2–6. | home delivery, PostaPont, parcel lockers | name, delivery address or pickup point, telephone number, e-mail address, cash-on-delivery amount |
| FoxPost Zrt., 3300 Eger, Pacsirta utca 35/A | parcel locker delivery | name, chosen locker, telephone number, e-mail address, cash-on-delivery amount |
| NT-SERVICE Kft., 1224 Budapest, Damjanich utca 50. | hosting, servers and e-mail | all data processed on the website (storage) |
| Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4 | Google Analytics 4 (with consent), Google Merchant Center product feed | pseudonymised usage data; the feed contains product data only |
| Meta Platforms Ireland Ltd., Merrion Road, Dublin 4 | Meta pixel (with consent) | pseudonymised usage and conversion data |
Processors may use personal data only on the Seller’s instructions and for the purpose set out in the contract. In the case of Google and Meta, data may also be transferred outside the EU (USA); the legal basis is certification under the EU–US Data Privacy Framework and the European Commission’s standard contractual clauses.
In the event of an official request (court, tax authority, police) we disclose the data required by law.
5. Data security
The website uses HTTPS encryption. Card details never enter the Seller’s systems. Only the Seller’s authorised staff have access to the data. In the event of a data breach we act in accordance with GDPR Articles 33–34 (notification to the authority within 72 hours; notification of the data subjects where the risk is high).
6. Your rights
You may at any time request:
- information about and access to the data we hold about you (Article 15),
- the rectification of your data (Article 16),
- the erasure of your data — except where the law requires retention, e.g. invoices (Article 17),
- the restriction of processing (Article 18),
- data portability — data processed on the basis of a contract or consent, in machine-readable form (Article 20),
- to object to processing based on legitimate interest (Article 21),
- to withdraw your consent at any time; this does not affect the lawfulness of processing before the withdrawal.
Requests can be submitted at plastify@plastify.hu or by post; we reply within one month at the latest. We may verify your identity before fulfilling a request.
7. Remedies
If you believe that the processing of your data breaches the law, please contact us first. You may also lodge a complaint with the supervisory authority:
Hungarian National Authority for Data Protection and Freedom of Information (NAIH) 1055 Budapest, Falk Miksa utca 9–11. · postal address: 1363 Budapest, Pf. 9. telephone: +36 1 391 1400 · e-mail: ugyfelszolgalat@naih.hu · web: www.naih.hu
You may also go to court; at your choice, the action may be brought before the regional court of your place of residence.
8. Changes to this policy
The Seller may amend this policy unilaterally; the current version is always available at plastify.hu/adatkezeles.