Data Controller's data
Name: Rozalia Sandor
Email: info@rozaliasandor.com
Website: www.rozaliasandor.com
The data controller is responsible for the data processing through the website.
The purpose and legal basis of data processing
The purpose of data processing:
- processing and fulfilling orders
- fulfilment of billing obligations
- contacting the buyer
- Providing access to digital products (e-books)
- Compliance with legal obligations
The legal basis for data processing:
- Performance of a contract (GDPR Article 6(1)(b))
- fulfillment of a legal obligation (GDPR Article 6(1))
- legitimate interest (GDPR Article 6(1)(f))
- consent (e.g., in the case of a newsletter – GDPR Article 6(1)(a))
Scope of processed data
During the use of the website, the following personal data may be processed:
- Your name
- Your email
- billing address
- shipping address (for physical products)
- phone number (optional)
- IP address and technical data
- order details
The data of the bank card are not handled by the data controller.
4. Payment and data processors
The processing of payments is done through an external service provider:
- Stripe Payments Europe Ltd. / Stripe Inc.
Stripe processes payment data in accordance with its own data management policy.
The data controller does not have access to bank card data.
Storage, technical and logistics providers
During the operation of the website and the fulfillment of orders, the following service providers are involved in data processing:
- Hosting provider (e.g. Hostinger) – the operation of the website
- WooCommerce system – operation of the webshop
- Payment provider (Stripe) – processing of payments
- Logistic/delivery partner(s) – packaging and delivery of orders
The logistics partners may handle the data necessary to fulfill the orders, such as:
- Your name
- delivery address
- Phone number
These providers handle the data only to the extent necessary to fulfill the service, and are required to treat it confidentially.
International data transfer
Certain providers (e.g., Stripe) may also transfer data outside the European Economic Area.
The data transfer takes place with appropriate guarantees, in accordance with the requirements of the GDPR and the UK GDPR (e.g. by using Standard Contractual Clauses).
Data retention period
We will keep the data for the following period:
- Data related to orders: for the duration necessary for fulfillment
- billing data: according to law 8 years
- Marketing data: until revoked
Affected rights
The affected parties are entitled to:
- access their personal data
- request their correction
- request their deletion („right to be forgotten”)
- request the restriction of data processing
- object to the data processing
- for data portability
Submission of applications:
info@rozaliasandor.hu
Remedies available
The person concerned may file a complaint:
- Hungary: National Data Protection and Freedom of Information Authority (NAIH)
- United Kingdom: Information Commissioner’s Office (ICO)
Cookies
The website uses cookies to ensure its functioning and to improve the user experience.
The user can control the use of these features in their browser settings.
Data security
The data controller shall employ appropriate technical and organizational measures to protect the data.