Privacy policy

ENGLISH

Privacy Policy
Date of acceptance: 2026-03-27

Data Controller

Name: Szeléné Borza Nikoletta Sole Proprietor

Registered office: 3142 Mátraszele, Kossuth u. 32

Mailing address, complaint handling: 3142 Mátraszele, Kossuth u. 32

E-mail: hello@nikolsdesign.hu

Phone number: +36308143730

Website: http://nikolsdesign.hu

Hosting provider

Name: Shopify Inc.

Mailing address: 151 O’Connor Street, Ground Floor, Ottawa, Ontario K2P 2L8, Canada

E-mail: support@shopify.com

Phone number: +1 888 746 7439

Description of data processing carried out during the operation of the webshop

This document contains all relevant data processing information related to the operation of the webshop in accordance with Regulation (EU) 2016/679 (hereinafter: Regulation, GDPR) and Act CXII of 2011 (hereinafter: Infotv.).

Information on the use of cookies

What is a cookie?

The Data Controller uses so-called cookies during visits to the website. A cookie is a package of information consisting of letters and numbers that our website sends to your browser in order to save certain settings, facilitate the use of our website, and help collect relevant statistical information about our visitors.

Some cookies do not contain personal information and are not suitable for identifying individual users, however, some contain a unique identifier – a secret, randomly generated number sequence – stored on your device, thereby enabling your identification. The duration of each cookie is specified in its respective description.

Legal background and legal basis of cookies

We distinguish three types of cookies: cookies necessary for operation, which ensure the proper functioning of the website, statistical cookies, and marketing cookies.

The legal basis for data processing is your consent pursuant to Article 6(1)(a) of the Regulation in the case of statistical and marketing cookies, and the legitimate interest necessary to ensure the operation of the website pursuant to Article 6(1)(f) of the Regulation in the case of cookies necessary for operation.

Main characteristics of cookies used by the website

Statistical cookies:

Google Analytics cookie: Google Analytics is an analytical tool of Google that helps website and application owners gain a more accurate picture of visitor activity. The service may use cookies to collect information and generate reports on website usage statistics without individually identifying visitors for Google. The main cookie used by Google Analytics is the “__ga” cookie.

In addition to reports generated from website usage statistics, Google Analytics may also be used together with certain advertising cookies to display more relevant advertisements in Google products (such as Google Search) and across the internet.

Lifespan of Google Analytics cookies:
_ga – 2 years
ga – 2 years

Analytics cookies store information about you only if you have consented via the cookie management panel and Google stores the fact of your consent using Google Consent Mode v2. In this case, Google will also have information if you later withdraw your consent.

For more information on deleting cookies, please visit the following links:

Internet Explorer: http://windows.microsoft.com/en-us/internet-explorer/delete-manage-cookies#ie=ie-11
Firefox: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer
Mozilla: https://support.mozilla.org/hu/kb/weboldalak-altal-elhelyezett-sutik-torlese-szamito
Safari: https://support.apple.com/guide/safari/manage-cookies-and-website-data-sfri11471/mac
Chrome: https://support.google.com/chrome/answer/95647
Edge: https://support.microsoft.com/hu-hu/help/4027947/microsoft-edge-delete-cookies

Data processed for the conclusion and performance of contracts

Several data processing activities may take place for the purpose of concluding and performing a contract. Please note that data processing related to complaint handling and warranty administration will only occur if you exercise such rights.

If you do not make a purchase via the webshop but only visit it, the provisions regarding marketing-related data processing may apply to you if you give your consent.

Detailed data processing related to contract conclusion and performance:

Contact

If you contact us by email, contact form, or telephone regarding a product. Prior contact is not mandatory; you may place an order without it.

Processed data: data provided by you during contact.

Duration: until the contact is completed.

Legal basis: your voluntary consent pursuant to Article 6(1)(a) GDPR.

Registration on the website

By storing the data provided during registration, the Data Controller can provide more convenient services (e.g. data does not need to be re-entered during future purchases). Registration is not a condition for concluding a contract.

Processed data: name, address, phone number, e-mail address, characteristics of purchased goods, and time of purchase.

Duration: until withdrawal of consent.

Legal basis: your voluntary consent pursuant to Article 6(1)(a) GDPR.

Order processing

Data processing is necessary for the performance of the contract.

Processed data: name, address, phone number, e-mail address, characteristics of purchased goods, order number, and time of purchase.

If you place an order, providing this data is essential for contract performance.

Duration: 5 years in accordance with civil law limitation periods.

Legal basis: performance of a contract pursuant to Article 6(1)(b) GDPR.

Issuing invoices

Data processing is carried out to issue invoices in compliance with legal obligations and to fulfill accounting retention requirements.

Processed data: name, address, e-mail address, phone number.

Duration: 8 years from issuance.

Legal basis: legal obligation pursuant to Article 6(1)(c) GDPR.

Data processing related to delivery

Processed data: name, address, e-mail address, phone number.

Duration: until delivery of the ordered goods.

Legal basis: performance of a contract pursuant to Article 6(1)(b) GDPR.

Recipients and data processors involved in delivery

Name of recipient: Hungarian Post Plc.

Registered office: 1138 Budapest, Dunavirág utca 2-6.

Phone: +36-1/767-8200

E-mail: ugyfelszolgalat@posta.hu

Website: posta.hu

The courier service participates in the delivery of ordered goods based on a contract with the Data Controller and processes personal data in accordance with its own privacy policy.

Name of recipient: FoxPost Ltd.

Registered office: 1068 Budapest, Dózsa György út 84. B. ép.

Phone: +36 1/999-0-369

E-mail: info@foxpost.hu

Website: foxpost.hu

Name of recipient: GLS General Logistics Systems Hungary Ltd.

Registered office: 2351 Alsónémedi, GLS Európa u. 2.

Phone: 06-29-88-67-00

E-mail: info@gls-hungary.com

Website: https://gls-group.eu/HU/hu/home

Warranty and guarantee claims handling

Warranty and guarantee claims are handled in accordance with Decree 19/2014 (IV.29.) NGM.

Processed data includes: name, address, product details, purchase date, defect description, and claim details.

Duration: 3 years.

Legal basis: legal obligation pursuant to Article 6(1)(c) GDPR.

Handling other consumer complaints

Processed data: customer name, phone number, email address, complaint content.

Duration: 3 years.

Legal basis: legal obligation pursuant to Article 6(1)(c) GDPR.

ENGLISH

Legal basis of data processing

Whether you submit a complaint to us is your voluntary decision; however, if you do so, we are obliged to retain the complaint for 3 years pursuant to Section 17/A (7) of Act CLV of 1997 on Consumer Protection [data processing pursuant to Article 6(1)(c) of the Regulation].

Data processing for marketing purposes

Data processing related to sending newsletters

The data processing process is carried out for the purpose of sending newsletters.

Processed data
Name, address, e-mail address, phone number.

Duration of data processing
Until withdrawal of consent.

Legal basis of data processing
Your voluntary consent given by subscribing to the newsletter [Article 6(1)(a) GDPR].

Data processing related to sending and displaying personalized advertisements

The purpose of data processing is to send advertising content tailored to the interests of the data subject.

Processed data
Name, address, e-mail address, phone number.

Duration
Until withdrawal of consent.

Legal basis
Your voluntary, separate consent given during data collection [Article 6(1)(a) GDPR].

Prize draw

The data processing process is carried out for the purpose of organizing the prize draw.

Processed data
Name, e-mail address, phone number.

Duration
Data will be deleted after the prize draw ends, except for the data of winners, which must be retained for 8 years in accordance with accounting regulations.

Legal basis
Your voluntary consent given through the use of the website [Article 6(1)(a) GDPR].

Further data processing

If the Data Controller intends to carry out further data processing, prior information will be provided regarding the essential circumstances of the processing (legal background, purpose, scope of data, duration).

Recipients of personal data

Data processing related to data storage

Data processor: Shopify Inc.

Contact details:
Phone: +1 888 746 7439
E-mail: support@shopify.com
Registered office: 151 O’Connor Street, Ground Floor, Ottawa, Ontario K2P 2L8, Canada
Website: https://www.shopify.com

The Data Processor stores personal data based on a contract with the Data Controller and is not entitled to access the data.

Newsletter-related data processing

Service provider: Shopify Inc.

Registered office: 151 O’Connor Street, Ground Floor, Ottawa, Ontario K2P 2L8, Canada
Phone: +1 888 746 7439
E-mail: support@shopify.com
Website: https://www.shopify.com

The Data Processor participates in sending newsletters and processes the name and e-mail address to the extent necessary.

Accounting-related data processing

Data processor: SINK LÁSZLÓ ATTILA

Registered office: Hungary, 3100 Salgótarján, Arany János út 17, 2nd floor, 8
E-mail: adojarasjelentes@gmail.com

The Data Processor participates in accounting based on a written contract and processes personal data as required by accounting regulations.

Billing-related data processing

Data processor: Billingo Technologies Zrt.

Registered office: 1133 Budapest, Árbóc utca 6. III. emelet
Phone: +36 1 500 9491
E-mail: hello@billingo.hu
Website: https://www.billingo.hu

CRM system operation

Data processor: Shopify Inc.

Registered office: 151 O’Connor Street, Ground Floor, Ottawa, Ontario K2P 2L8, Canada

The Data Processor participates in order management.

Online payment

Data controller: Stripe Payments Europe Ltd.

Registered office: 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland

The payment service provider processes billing name, address, order number, and time.

Purpose: ensuring payment transaction data
Legal basis: performance of contract [Article 6(1)(b) GDPR]

Data subject rights

You are entitled to:
withdraw consent
access personal data
rectification
restriction
erasure
objection
data portability

The Data Controller responds to requests within 30 days.

Right to withdraw consent

You may withdraw consent at any time; however, certain data (e.g. invoices) must be retained due to legal obligations.

Right of access

You may request information about data processing and access your personal data.

Right to rectification

You may request correction of inaccurate data.

Right to restriction

You may request restriction of processing under certain conditions.

Right to erasure

You may request deletion of data unless legal obligations require retention.

Right to object

You may object to processing based on legitimate interest.

Right to data portability

You may request your data in structured format (XML, JSON, CSV).

Automated decision-making

You have the right not to be subject to automated decisions with legal effect.

Data security

The Data Controller applies appropriate technical and organizational measures.

Legal remedies

You may file a complaint with the Hungarian National Authority for Data Protection and Freedom of Information.

Modification of the privacy policy

The Data Controller reserves the right to modify this policy.

Further data processing may only begin after proper information and, where required, consent.