PRIVACY POLICY

I. Data Controller

Your personal data are processed by Puhala Emese, sole proprietor (hereinafter: Data Controller) in accordance with the provisions of this Privacy Policy.

Data Controller:

Name: Puhala Emese, Sole Proprietor
Registered seat: 8200 Veszprém, Rómer Flóris utca 2., Hungary
Tax number: 69223132-1-39
Registration number: 52874004
Contact person: Puhala Emese
Mailing address: 9021 Győr, Amadé László utca 2., Hungary
E-mail: info@styledbymeshy.com

Data Protection Officer:
Puhala Emese
E-mail: info@styledbymeshy.com

II. Purpose, Scope and Amendment of the Privacy Policy

As the operator of the website www.styledbymeshy.com (hereinafter: Website), the Data Controller hereby publishes information on the processing of personal data of visitors to the Website and users of the services available on the Website (hereinafter collectively: Data Subjects).

Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) requires that the Data Controller provide data subjects with information on the processing of personal data in a concise, transparent, intelligible and easily accessible form, using clear and plain language, and facilitate the exercise of data subject rights. The Hungarian Act CXII of 2011 on Informational Self-Determination and Freedom of Information (Infotv.) also prescribes this obligation.

With the following information, the Data Controller fulfils these legal obligations. This Privacy Policy is published on the Company’s website and is provided to data subjects upon request. Personal data are collected and processed only in accordance with applicable laws.

Data are stored as securely as possible and are disclosed to third parties only with the consent of the data subject.

The Data Controller reserves the right to amend this Privacy Policy in whole or in part at any time. Any amendments shall enter into force upon publication and shall remain in effect until the Data Controller modifies them or ceases to provide Website services. Date of publication of this Privacy Policy: 6 December 2021.

Any person may request information about their stored personal data or request deletion in writing at info@styledbymeshy.com.

III. Definitions (based on Infotv. Section 3)

Data subject: any identified or identifiable natural person.

Identifiable natural person: a natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifier, or one or more factors specific to physical, physiological, genetic, mental, economic, cultural or social identity.

Personal data: any information relating to a data subject.

Special category of personal data: data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, genetic data, biometric data, health data, or data concerning a person’s sex life or sexual orientation.

Consent: any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which they signify agreement to the processing of personal data.

Data controller: the natural or legal person who determines the purposes and means of processing personal data.

Data processor: a natural or legal person who processes personal data on behalf of the data controller.

Data processing: any operation performed on personal data, such as collection, recording, storage, use, disclosure, restriction, erasure or destruction.

IV. Principles of Data Processing

Personal data shall be processed lawfully, fairly and transparently, collected for specified, explicit and legitimate purposes, and limited to what is necessary. Data shall be accurate, kept up to date, and stored only for as long as necessary. Appropriate technical and organizational measures shall be applied to ensure data security.

V. Legal Bases of Data Processing

Personal data are processed based on one or more of the following legal grounds pursuant to Article 6(1) GDPR:

• consent of the data subject;

• performance of a contract or pre-contractual steps;

• compliance with legal obligations;

• protection of vital interests;

• performance of a task carried out in the public interest;

• legitimate interests of the data controller.

VI. Rights of Data Subjects

Data subjects have the right to:

• prior information;

• access to their personal data;

• rectification;

• restriction of processing;

• erasure of personal data.

VII. Data Processing Activities

1. Contact / Request for Quotation

Processed data: name, e-mail address, phone number
Purpose: identification, contact, provision of quotation
Retention period: up to 1 year after case closure or until deletion request
Legal basis: consent and pre-contractual steps (GDPR Art. 6(1)(a), (b))

2. Purchases via the Website

Processed data: full name, e-mail address, billing address, company name (optional), phone number
Purpose: processing and fulfilment of orders, invoicing
Retention period: duration of contractual relationship; accounting documents retained for 8 years
Legal basis: contract performance and legal obligation

3. Customer Relations

Processed data: name, e-mail address, phone number
Purpose: communication, contract fulfilment
Retention period: duration of relationship + 5 years
Legal basis: contract and legal obligation

4. Reviews and Comments

Processed data: username/name, image (if any), rating, text
Purpose: service development, marketing
Retention period: until withdrawal of consent
Legal basis: consent

VIII. Cookies

The Website uses cookies to ensure functionality, improve user experience, analyze traffic and provide marketing services. Cookies may be disabled in browser settings; however, some functions of the Website may not work properly.

IX. Data Processors

The Website uses external service providers, including but not limited to:

• Namecheap Inc. (hosting)

• Facebook, Instagram, Pinterest (social media)

• Google Analytics (analytics)

• WordPress, Divi (website development)

• Számlázz.hu (invoicing)

X. Legal Remedies

Complaints may be submitted to the Hungarian National Authority for Data Protection and Freedom of Information (NAIH):
Address: 1125 Budapest, Szilágyi Erzsébet fasor 22/C, Hungary
E-mail: ugyfelszolgalat@naih.hu

Data subjects may also seek judicial remedy before a competent court.