Privacy Policy

Introduction

The service provider / data controller processes the personal data of persons registered on the website in the course of operating the website, in order to provide them with appropriate services.

The service provider intends to fully comply with the legal requirements regarding the processing of personal data, in particular those set out in Regulation (EU) 2016/679 of the European Parliament and of the Council.

This privacy notice has been prepared on the basis of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, with reference to the content of Act CXII of 2011 on the right to informational self-determination and freedom of information.

Service Provider / Data Controller

Name / company:	2 B Trade & Consulting Kft.
Registered office:	8916 Babosdöbréte, Kő-hegy utca 1752., Hungary
Mailing address:	8900 Zalaegerszeg, Kiserdei út 5., Hungary
Email:	info@2btrade.hu
Phone:	+36 70 656-0603
Website:	http://2btradeshop.com/

Definitions

GDPR (General Data Protection Regulation): the new Data Protection Regulation of the European Union;

processing: any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;

processor: a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;

personal data: any information relating to an identified or identifiable natural person (data subject); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;

controller: a natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data;

consent of the data subject: any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;

personal data breach: a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed;

recipient: a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not;

third party: a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.

Principles of Data Processing

The data controller declares that it processes personal data in accordance with the provisions of this privacy notice and complies with the applicable legal requirements, with particular regard to the following:

Personal data must be processed lawfully, fairly and in a transparent manner in relation to the data subject.

Personal data may only be collected for specified, explicit and legitimate purposes.

The purpose of processing personal data must be adequate, relevant and limited to what is necessary.

Personal data must be accurate and kept up to date. Inaccurate personal data must be erased without delay.

Personal data must be stored in a form which permits identification of data subjects for no longer than is necessary. Longer storage is only permitted for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes.

Personal data must be processed in a manner that ensures appropriate security, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.

The principles of data protection apply to all information relating to an identified or identifiable natural person.

Important Data Processing Information

The purpose of data processing is to enable the service provider / data controller to provide appropriate additional services to persons registered on the website.

The legal basis for processing is the consent of the data subject.

The scope of persons concerned is the registered users of the website.

Duration of processing and deletion. The duration of processing always depends on the specific user purpose, but data must be deleted without delay once the originally stated purpose has been achieved. The data subject may withdraw consent to processing at any time by sending an email to the contact address. If there is no legal obstacle to deletion, the data will be erased.

The data controller and its employees are authorised to access the data.

The data subject may request from the controller access to personal data relating to them, rectification, erasure or restriction of processing, and may object to the processing of such data, as well as exercise the right to data portability.

The data subject may withdraw consent to processing at any time, without affecting the lawfulness of processing carried out prior to withdrawal.

The data subject has the right to lodge a complaint with a supervisory authority.

If the data subject wishes to use the benefits of registration, i.e. to use the related services of the website, the requested personal data must be provided. The data subject is not obliged to provide personal data, and failure to do so will have no adverse consequences. However, certain website functions cannot be used without registration.

The data subject has the right to have inaccurate personal data rectified or supplemented by the controller without undue delay.

The data subject has the right to have personal data erased without undue delay, and the controller is obliged to erase personal data without undue delay where there is no other legal basis for processing.

Modification or deletion of personal data may be requested by email, phone or post using the contact details provided above.

Registration on the Website

The purpose of data processing is to provide additional services and to make contact.

The legal basis for registration data processing is your consent.

The scope of persons concerned is the registered users of the website.

Duration of processing. Processing continues until consent is withdrawn. You may withdraw your consent at any time by sending an email to the contact address.

Data are deleted upon withdrawal of consent to processing. You may withdraw your consent at any time by sending an email to the contact address.

The data controller and its employees are authorised to access the data.

Data storage method: electronic.

Modification or deletion of personal data may be requested by email, phone or post using the contact details provided above.

Provision of personal data is strictly necessary for identification in databases and for maintaining contact. The exact company name and address are required for invoicing, which is a statutory obligation.

Data processed	Specific purpose of data processing
Name	Identification, contact, invoicing.
Company name	Identification, contact, invoicing.
Address	Identification, contact, invoicing.
Email	Identification, contact.
Phone	Identification, contact.
Registration date/time	Technical information operation.
IP address	Technical information operation.

The user may give consent to data processing by deliberately ticking the empty checkbox provided specifically for this purpose on the website.

As a data subject, you may object to the processing of your personal data, and are entitled to the procedure set out in the data processing information detailed above, this notice, and the legislation described therein.

Placing an Order

The purpose of data processing is to provide additional services, make contact, and send a confirmation email. We can only fulfil your order if you provide your contact and billing details, which are strictly necessary for communication and invoicing.

The legal basis for processing is your consent. In the case of invoicing, processing is based on a statutory obligation.

The scope of persons concerned is the registered users of the website.

Duration of processing. Processing continues pursuant to statutory obligation or until consent is withdrawn. You may withdraw your consent at any time by sending an email to the contact address.

Data are deleted upon withdrawal of consent. Billing data may only be deleted in accordance with statutory requirements.

The data controller and its employees are authorised to access the data.

Data storage method: electronic.

Modification or deletion of personal data may be requested by email, phone or post using the contact details provided above.

Data processed	Specific purpose of data processing
Name	Identification, contact, invoicing.
Company name	Identification, contact, invoicing.
Address	Identification, contact, invoicing.
Email	Identification, contact.
Phone	Identification, contact.
Ordered product data	Product identification.
Registration date/time	Technical information operation.
IP address	Technical information operation.

The user may give consent to data processing by deliberately ticking the empty checkbox provided specifically for this purpose on the website.

The data subject may object to the processing of their personal data, and is entitled to the procedure set out in the data processing information detailed above, this notice, and the legislation described therein.

Invoice Issuance

The purpose of data processing is to issue and send an electronic invoice as an email attachment.

The legal basis for processing is a statutory obligation.

The scope of persons concerned is the service provider’s customer partners.

Duration of processing. Processing continues pursuant to statutory obligation or until consent is withdrawn. Billing data may only be deleted in accordance with statutory requirements.

The data controller and its employees are authorised to access the data.

Data storage method: electronic.

Modification or deletion of billing data may be requested by email, phone or post using the contact details provided above.

Data processed	Specific purpose of data processing
Name	Identification, contact, invoicing.
Company name	Identification, contact, invoicing.
Address	Identification, contact, invoicing.
Email	Identification, contact.
Phone	Identification, contact.
Tax number / tax ID	Customer identification.
Invoice data	Invoice identification.
Invoice issuance date/time	Technical information operation.

The user may give consent to data processing by deliberately ticking the empty checkbox provided specifically for this purpose on the website.

The data subject may object to the processing of their personal data, and is entitled to the procedure set out in the data processing information detailed above, this notice, and the legislation described therein.

Newsletter

As the website operator, we declare that we fully comply with the applicable legal provisions when publishing information and descriptions. We also declare that at the time of newsletter subscription, we are unable to verify the authenticity of the contact details provided or to determine whether the data relates to an individual or a company. Companies that contact us are treated as customer partners.

The purpose of processing is to send professional descriptions, electronic messages containing advertisements, information and newsletters, from which you may unsubscribe at any time without consequence — even if your company has since ceased to exist, you have left the company, or someone has provided us with your contact details.

The legal basis for processing is your consent. The user may give prior and express consent to the service provider contacting them at the email address provided at registration with advertising offers, information and other communications. The user may consequently consent to the service provider processing the necessary personal data for this purpose.

Please note that if you wish to receive our newsletter, you are required to provide the necessary data. If you do not provide the data, we will be unable to send you a newsletter.

Duration of processing. Processing continues until consent is withdrawn. You may withdraw your consent at any time by sending an email to the contact address.

Data are deleted upon withdrawal of consent. Consent may also be withdrawn via the unsubscribe link in newsletters.

The data controller and its employees are authorised to access the data.

Data storage method: electronic.

Modification or deletion of data may be requested by email, phone or post using the contact details provided above.

Data controller registration number: NAIH-………………

Data processor used: http://www.directinfo.hu

Data processed	Specific purpose of data processing
Name	Identification, contact.
Email	Identification, contact.
Subscription date/time	Technical information operation.
IP address	Technical information operation.

Please note that neither the username nor the email address needs to contain information identifying you personally. You are entirely free to decide whether to provide a username or email address that reveals your identity. The email address — which serves as a means of contact — is strictly necessary for newsletters or professional information to reach you.

Cookies

Cookies are placed on the user’s computer by visited websites and contain information such as page settings or login status.

Cookies are small files created by visited websites. They improve the user experience by saving browsing data. Cookies allow the website to remember site settings and offer locally relevant content.

The service provider’s website sends a small file (cookie) to the computers of website visitors in order to record the fact and time of the visit. The service provider informs website visitors of this.

The scope of persons concerned is the website visitors.

The purpose of processing is to provide additional services, identification, and visitor tracking.

Legal basis for processing. The user’s consent is not required where the service provider strictly needs to use cookies.

Data processed: unique identifier, timestamp, settings data.

The user may individually enable or disable cookies in the cookie settings menu, change their settings at any time, and delete cookie files from their device at any time.

Authorised data controllers. The data controller does not process personal data through the use of cookies.

Data storage method: electronic.

Social Media

Social media is a media tool where messages are spread through community users. Social media uses the internet and online publishing opportunities to enable users to transition from content consumers to content creators.

Social media is an interface of internet applications containing user-generated content, such as Facebook, Google+, Twitter, etc.

Social media may take the form of public speeches, presentations, demonstrations, descriptions of products or services.

Information published on social media may take the form of forums, blog posts, images, video and audio content, message boards, email messages, etc.

In line with the above, the scope of data processed may include the user’s public profile picture in addition to personal data.

Scope of data subjects: all registered users.

The purpose of data collection is to promote the website or its associated web page.

The legal basis for processing is the voluntary consent of the data subject.

Duration of processing: as set out in the rules of the relevant social media platform.

Data deletion deadline: as set out in the rules of the relevant social media platform.

Persons authorised to access the data: as set out in the rules of the relevant social media platform.

Rights related to data processing: as set out in the rules of the relevant social media platform.

Data storage method: electronic.

It is important to note that when a user uploads or submits any personal data, they grant the social media platform operator a worldwide licence to store and use such content. It is therefore very important to ensure that the user has full authority to publish the information disclosed.

Google Analytics

Our website □ uses □ does not use Google Analytics.

If Google Analytics is used:

Google Analytics compiles reports for its clients on website user behaviour based on internal cookies.

On behalf of the website operator, Google uses the information to evaluate how users use the website. As an additional service, it prepares reports related to website activity for the website operator so that it can provide further services.

Data are stored by Google’s servers in encrypted format to make misuse more difficult and to prevent it.

Google Analytics can be disabled as follows:

Website users who do not want Google Analytics JavaScript to report data about them can install the Google Analytics opt-out browser add-on. The add-on prevents the Google Analytics JavaScript (ga.js, analytics.js, and dc.js) from sharing information with Google Analytics. The browser add-on is available for most modern browsers. The Google Analytics opt-out browser add-on does not prevent data from being sent to the website itself or to other web analytics services.

https://support.google.com/analytics/answer/6004245?hl=en

Google Privacy Policy: https://policies.google.com/privacy?hl=en

Detailed information on data use and protection is available at the links above.

Data Processors

Hosting Provider

Name / company:	Directinfo Kft.
Registered office:	1147 Budapest, Gyarmat utca 99b, Hungary
Phone:	+36-061-273-16-16
Email:	iroda@directinfo.hu

The data you provide is stored on servers operated by the hosting provider. Only our staff and the server operating staff have access to the data, and all are responsible for handling the data securely.

Activity description: hosting service, server service.

Purpose of processing: to ensure the operation of the website.

Data processed: personal data provided by the data subject.

Duration of processing and data deletion deadline. Processing continues until the end of the website’s operation or in accordance with the contractual agreement between the website operator and the hosting provider. The data subject may also request deletion of their data by contacting the hosting provider.

The legal basis for processing is the consent of the data subject and statutory data processing.

Rights Related to Data Processing

Right to Request Information

You may contact us through the provided contact details to request information on what data our company processes about you, on what legal basis, for what purpose, from what source, and for how long. We will respond to your request without undue delay and at most within 30 days, to the email address you have provided.

Right to Rectification

You may contact us through the provided contact details to request the modification of any of your data. We will act on your request without undue delay and at most within 30 days, and will send a notification to the email address you have provided.

Right to Erasure

You may contact us through the provided contact details to request the deletion of your data. We will comply with your request without undue delay and at most within 30 days, and will send a notification to the email address you have provided.

Right to Restriction

You may contact us through the provided contact details to request the restriction of your data. The restriction will remain in place as long as the reason you have specified makes it necessary to store the data. We will act on your request without undue delay and at most within 30 days, and will send a notification to the email address you have provided.

Right to Object

You may contact us through the provided contact details to object to the processing of your data. We will examine the objection within the shortest possible time from submission and at most within 15 days, make a decision on its merits, and notify you of the decision by email.

Enforcement of Rights Related to Data Processing

If you experience unlawful data processing, please notify our company so that the lawful situation can be restored within a short time. We will do everything in our power to resolve the outlined problem.

If in your assessment the lawful situation cannot be restored, please notify the authority at the following contact details:

National Authority for Data Protection and Freedom of Information (NAIH)
Postal address: 1530 Budapest, Pf.: 5., Hungary
Address: 1125 Budapest, Szilágyi Erzsébet fasor 22/c, Hungary
Phone: +36 (1) 391-1400
Fax: +36 (1) 391-1410
Email: ugyfelszolgalat@naih.hu
URL: https://naih.hu

Legal Basis for Data Processing

REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL (27 April 2016) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

Act CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information.

Act LXVI of 1995 on Public Documents, Public Archives and the Protection of Private Archival Material.

Government Decree 335/2005 (XII. 29.) on the General Requirements of Records Management by Bodies Performing Public Duties.

Act CVIII of 2001 on Certain Issues of Electronic Commerce Services and Information Society Services.

Act C of 2003 on Electronic Communications.

Effective date: 22 April 2026.