Privacy policy
ENGLISH
Privacy Policy
Date of acceptance: 2026-03-27
Data Controller
Name: Szeléné Borza Nikoletta Sole Proprietor
Registered office: 3142 Mátraszele, Kossuth u. 32
Mailing address, complaint handling: 3142 Mátraszele, Kossuth u. 32
E-mail: hello@nikolsdesign.hu
Phone number: +36308143730
Website: http://nikolsdesign.hu
Hosting provider
Name: Shopify Inc.
Mailing address: 151 O’Connor Street, Ground Floor, Ottawa, Ontario K2P 2L8, Canada
E-mail: support@shopify.com
Phone number: +1 888 746 7439
Description of data processing carried out during the operation of the webshop
This document contains all relevant data processing information related to the operation of the webshop in accordance with Regulation (EU) 2016/679 (hereinafter: Regulation, GDPR) and Act CXII of 2011 (hereinafter: Infotv.).
Information on the use of cookies
What is a cookie?
The Data Controller uses so-called cookies during visits to the website. A cookie is a package of information consisting of letters and numbers that our website sends to your browser in order to save certain settings, facilitate the use of our website, and help collect relevant statistical information about our visitors.
Some cookies do not contain personal information and are not suitable for identifying individual users, however, some contain a unique identifier – a secret, randomly generated number sequence – stored on your device, thereby enabling your identification. The duration of each cookie is specified in its respective description.
Legal background and legal basis of cookies
We distinguish three types of cookies: cookies necessary for operation, which ensure the proper functioning of the website, statistical cookies, and marketing cookies.
The legal basis for data processing is your consent pursuant to Article 6(1)(a) of the Regulation in the case of statistical and marketing cookies, and the legitimate interest necessary to ensure the operation of the website pursuant to Article 6(1)(f) of the Regulation in the case of cookies necessary for operation.
Main characteristics of cookies used by the website
Statistical cookies:
Google Analytics cookie: Google Analytics is an analytical tool of Google that helps website and application owners gain a more accurate picture of visitor activity. The service may use cookies to collect information and generate reports on website usage statistics without individually identifying visitors for Google. The main cookie used by Google Analytics is the “__ga” cookie.
In addition to reports generated from website usage statistics, Google Analytics may also be used together with certain advertising cookies to display more relevant advertisements in Google products (such as Google Search) and across the internet.
Lifespan of Google Analytics cookies:
_ga – 2 years
ga – 2 years
Analytics cookies store information about you only if you have consented via the cookie management panel and Google stores the fact of your consent using Google Consent Mode v2. In this case, Google will also have information if you later withdraw your consent.
For more information on deleting cookies, please visit the following links:
Internet Explorer: http://windows.microsoft.com/en-us/internet-explorer/delete-manage-cookies#ie=ie-11
Firefox: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer
Mozilla: https://support.mozilla.org/hu/kb/weboldalak-altal-elhelyezett-sutik-torlese-szamito
Safari: https://support.apple.com/guide/safari/manage-cookies-and-website-data-sfri11471/mac
Chrome: https://support.google.com/chrome/answer/95647
Edge: https://support.microsoft.com/hu-hu/help/4027947/microsoft-edge-delete-cookies
Data processed for the conclusion and performance of contracts
Several data processing activities may take place for the purpose of concluding and performing a contract. Please note that data processing related to complaint handling and warranty administration will only occur if you exercise such rights.
If you do not make a purchase via the webshop but only visit it, the provisions regarding marketing-related data processing may apply to you if you give your consent.
Detailed data processing related to contract conclusion and performance:
Contact
If you contact us by email, contact form, or telephone regarding a product. Prior contact is not mandatory; you may place an order without it.
Processed data: data provided by you during contact.
Duration: until the contact is completed.
Legal basis: your voluntary consent pursuant to Article 6(1)(a) GDPR.
Registration on the website
By storing the data provided during registration, the Data Controller can provide more convenient services (e.g. data does not need to be re-entered during future purchases). Registration is not a condition for concluding a contract.
Processed data: name, address, phone number, e-mail address, characteristics of purchased goods, and time of purchase.
Duration: until withdrawal of consent.
Legal basis: your voluntary consent pursuant to Article 6(1)(a) GDPR.
Order processing
Data processing is necessary for the performance of the contract.
Processed data: name, address, phone number, e-mail address, characteristics of purchased goods, order number, and time of purchase.
If you place an order, providing this data is essential for contract performance.
Duration: 5 years in accordance with civil law limitation periods.
Legal basis: performance of a contract pursuant to Article 6(1)(b) GDPR.
Issuing invoices
Data processing is carried out to issue invoices in compliance with legal obligations and to fulfill accounting retention requirements.
Processed data: name, address, e-mail address, phone number.
Duration: 8 years from issuance.
Legal basis: legal obligation pursuant to Article 6(1)(c) GDPR.
Data processing related to delivery
Processed data: name, address, e-mail address, phone number.
Duration: until delivery of the ordered goods.
Legal basis: performance of a contract pursuant to Article 6(1)(b) GDPR.
Recipients and data processors involved in delivery
Name of recipient: Hungarian Post Plc.
Registered office: 1138 Budapest, Dunavirág utca 2-6.
Phone: +36-1/767-8200
E-mail: ugyfelszolgalat@posta.hu
Website: posta.hu
The courier service participates in the delivery of ordered goods based on a contract with the Data Controller and processes personal data in accordance with its own privacy policy.
Name of recipient: FoxPost Ltd.
Registered office: 1068 Budapest, Dózsa György út 84. B. ép.
Phone: +36 1/999-0-369
E-mail: info@foxpost.hu
Website: foxpost.hu
Name of recipient: GLS General Logistics Systems Hungary Ltd.
Registered office: 2351 Alsónémedi, GLS Európa u. 2.
Phone: 06-29-88-67-00
E-mail: info@gls-hungary.com
Website: https://gls-group.eu/HU/hu/home
Warranty and guarantee claims handling
Warranty and guarantee claims are handled in accordance with Decree 19/2014 (IV.29.) NGM.
Processed data includes: name, address, product details, purchase date, defect description, and claim details.
Duration: 3 years.
Legal basis: legal obligation pursuant to Article 6(1)(c) GDPR.
Handling other consumer complaints
Processed data: customer name, phone number, email address, complaint content.
Duration: 3 years.
Legal basis: legal obligation pursuant to Article 6(1)(c) GDPR.
ENGLISH
Legal basis of data processing
Whether you submit a complaint to us is your voluntary decision; however, if you do so, we are obliged to retain the complaint for 3 years pursuant to Section 17/A (7) of Act CLV of 1997 on Consumer Protection [data processing pursuant to Article 6(1)(c) of the Regulation].
Data processing for marketing purposes
Data processing related to sending newsletters
The data processing process is carried out for the purpose of sending newsletters.
Processed data
Name, address, e-mail address, phone number.
Duration of data processing
Until withdrawal of consent.
Legal basis of data processing
Your voluntary consent given by subscribing to the newsletter [Article 6(1)(a) GDPR].
Data processing related to sending and displaying personalized advertisements
The purpose of data processing is to send advertising content tailored to the interests of the data subject.
Processed data
Name, address, e-mail address, phone number.
Duration
Until withdrawal of consent.
Legal basis
Your voluntary, separate consent given during data collection [Article 6(1)(a) GDPR].
Prize draw
The data processing process is carried out for the purpose of organizing the prize draw.
Processed data
Name, e-mail address, phone number.
Duration
Data will be deleted after the prize draw ends, except for the data of winners, which must be retained for 8 years in accordance with accounting regulations.
Legal basis
Your voluntary consent given through the use of the website [Article 6(1)(a) GDPR].
Further data processing
If the Data Controller intends to carry out further data processing, prior information will be provided regarding the essential circumstances of the processing (legal background, purpose, scope of data, duration).
Recipients of personal data
Data processing related to data storage
Data processor: Shopify Inc.
Contact details:
Phone: +1 888 746 7439
E-mail: support@shopify.com
Registered office: 151 O’Connor Street, Ground Floor, Ottawa, Ontario K2P 2L8, Canada
Website: https://www.shopify.com
The Data Processor stores personal data based on a contract with the Data Controller and is not entitled to access the data.
Newsletter-related data processing
Service provider: Shopify Inc.
Registered office: 151 O’Connor Street, Ground Floor, Ottawa, Ontario K2P 2L8, Canada
Phone: +1 888 746 7439
E-mail: support@shopify.com
Website: https://www.shopify.com
The Data Processor participates in sending newsletters and processes the name and e-mail address to the extent necessary.
Accounting-related data processing
Data processor: SINK LÁSZLÓ ATTILA
Registered office: Hungary, 3100 Salgótarján, Arany János út 17, 2nd floor, 8
E-mail: adojarasjelentes@gmail.com
The Data Processor participates in accounting based on a written contract and processes personal data as required by accounting regulations.
Billing-related data processing
Data processor: Billingo Technologies Zrt.
Registered office: 1133 Budapest, Árbóc utca 6. III. emelet
Phone: +36 1 500 9491
E-mail: hello@billingo.hu
Website: https://www.billingo.hu
CRM system operation
Data processor: Shopify Inc.
Registered office: 151 O’Connor Street, Ground Floor, Ottawa, Ontario K2P 2L8, Canada
The Data Processor participates in order management.
Online payment
Data controller: Stripe Payments Europe Ltd.
Registered office: 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland
The payment service provider processes billing name, address, order number, and time.
Purpose: ensuring payment transaction data
Legal basis: performance of contract [Article 6(1)(b) GDPR]
Data subject rights
You are entitled to:
withdraw consent
access personal data
rectification
restriction
erasure
objection
data portability
The Data Controller responds to requests within 30 days.
Right to withdraw consent
You may withdraw consent at any time; however, certain data (e.g. invoices) must be retained due to legal obligations.
Right of access
You may request information about data processing and access your personal data.
Right to rectification
You may request correction of inaccurate data.
Right to restriction
You may request restriction of processing under certain conditions.
Right to erasure
You may request deletion of data unless legal obligations require retention.
Right to object
You may object to processing based on legitimate interest.
Right to data portability
You may request your data in structured format (XML, JSON, CSV).
Automated decision-making
You have the right not to be subject to automated decisions with legal effect.
Data security
The Data Controller applies appropriate technical and organizational measures.
Legal remedies
You may file a complaint with the Hungarian National Authority for Data Protection and Freedom of Information.
Modification of the privacy policy
The Data Controller reserves the right to modify this policy.
Further data processing may only begin after proper information and, where required, consent.