Alaplé BárLegal documents
This notice describes the shop’s actual processing, legal bases, retention, recipients and GDPR rights.
Alaplé Bar Kft.; registered office and return address: 1013 Budapest, Attila út 4. 4/25., Hungary; company registration no.: 01-09-371277; tax no.: 28728207-2-41; representative: Éva Szabó-Király; email: info@alaplebar.hu; telephone: +36 30 019 7911.
The company is the controller. Requests may be sent to info@alaplebar.hu. No data protection officer has been appointed because the current activities do not require one.
IP address, request time, URL, device/browser, response and security-event data may be processed for service, troubleshooting and abuse prevention based on legitimate interest. Normal technical logs are retained up to 30 days; substantiated security or claim data may be retained until limitation expires. Application rate limits use a keyed IP-derived digest rather than storing raw IP in the application database.
Cart, country, delivery choice and cookie settings are kept in browser local storage to provide requested functions. No standalone analytics or marketing tracker is currently loaded; any future optional tracker requires prior consent, changeable from the footer.
Account name, email, salted one-way password hash and timestamps are processed to provide the account under Article 6(1)(b) GDPR. Server-side session and one-use password-reset token digests are kept until expiry. Account data remains until deletion, while order, invoice and claim data remains for applicable legal periods.
Name, email, phone, delivery and billing address, tax number, items, prices, discounts/credit, delivery choice, note, identifiers, timestamps and limited payment status are processed for pre-contractual steps and contract under Article 6(1)(b), and invoices under Article 6(1)(c). Contract records are generally kept five years after termination; accounting evidence at least eight years. Failed attempts without a contract are kept no more than 30 days unless a claim requires longer.
Teya’s payment entity processes payment and fraud data as an independent controller; full card data is not received by the shop. KBOSS.hu Kft. (Számlázz.hu), 1031 Budapest, Záhony utca 7., processes invoice data. Delivery data goes to the chosen GLS Hungary or Magyar Posta service. The GLS point widget loads only after a GLS point method is selected. Google Maps is not embedded; Google receives data only after a user opens an external map link.
Withdrawal name, email, contract reference, complete statement, time, reference and acknowledgement state are processed under legal obligation and claim-protection interest, generally for five years after the contract and claim end. Because the same channel may receive consumer complaints, messages and replies are retained no more than three years; clearly non-complaint matters may be deleted earlier.
Cloudflare, Inc., USA provides hosting, database, private storage, delivery and security. The currently configured email relay is Textiltech Kft. (Neatly), 2400 Dunaújváros, Gutenberg köz 2. If configured instead, Plus Five Five, Inc. d/b/a Resend, USA provides email delivery. Only the active provider receives message data. US processing relies, as applicable, on EU–US Data Privacy Framework certification and/or EU Standard Contractual Clauses with supplementary safeguards. Processors must be covered by an Article 28 agreement.
Authorised support, finance, administration and packing staff access data by role. Accountants, legal advisers, authorities or courts receive data only with a lawful basis. Controls include access management, hashing, secure cookies, HTTPS, private invoice storage, rate limits, audit logging, backups and incident handling. Personal data is not sold.
Data subjects may request access, rectification, restriction and, where no overriding ground applies, erasure; receive eligible contract/consent data in portable form; and object to legitimate-interest processing. Consent can be withdrawn prospectively. Requests are normally answered within one month, extendable by two months with notice. Identity may be verified and statutory retention can limit deletion.
Complaints may be lodged with NAIH, 1055 Budapest, Falk Miksa utca 9–11.; 1363 Budapest, P.O. Box 9.; ugyfelszolgalat@naih.hu; +36 1 391 1400; naih.hu, or a competent court. No Article 22 solely automated significant decision or marketing profiling is carried out. Pricing, discount, delivery and credit calculations apply predetermined contract rules.