Privacy Policy

Sinners – https://sinnersclothing.hu/

1. Introduction

The purpose of this Privacy Policy (hereinafter: "Policy") is to present how Sinners (hereinafter: "Operator" or "Data Controller") processes the personal data of customers and visitors to the Website.

The Data Controller is committed to the protection of personal data and carries out data processing in all cases in accordance with applicable legislation, in particular:

  • the GDPR (EU Regulation 2016/679),

  • the provisions of the Infotv. (Act CXII of 2011).

By using the Website, you accept the terms contained in this Policy.

2. Data of the Controller

(Fill it in, and I will insert it!)
Name of Controller:
Registered office:
Company registration number:
Tax ID number:
Representative:
Contact e-mail:
Phone:
Data Protection Officer: (if applicable)

3. Processed data, purposes and legal bases

3.1. Webshop registration and purchase

Data processed:

  • name

  • e-mail address

  • phone number

  • billing address

  • shipping address

  • order details

  • payment details (e.g., transaction ID)

Purpose of data processing:

  • creation and performance of a contract

  • billing

  • facilitating delivery

  • customer service communication

Legal basis:

  • GDPR Art. 6(1)(b) – performance of a contract

  • GDPR Art. 6(1)(c) – legal obligation (billing)

Data retention:

  • billing data: 8 years

  • order data: 5 years

  • until registration ends or deletion is requested

3.2. Contact, customer service

Data processed:

  • name

  • e-mail address

  • message content

Purpose:
responding, administration

Legal basis:
GDPR Art. 6(1)(f) – legitimate interest

Retention:
1 year

3.3. Newsletter subscription

Data processed:

  • name (if provided)

  • e-mail address

  • activity data (opens, clicks)

Purpose:

  • sending marketing and offers

  • improving customer experience

Legal basis:
GDPR Art. 6(1)(a) – consent

Retention:
until consent is withdrawn

3.4. Cookies and web analytics

The detailed cookie policy is available in a separate document (already prepared).

Data processed:

  • IP address (anonymized)

  • browsing data

  • clicks, page views

  • behavioral data for marketing purposes

Purpose:

  • ensuring functionality

  • statistics

  • marketing personalization

Legal basis:

  • essential cookies: legitimate interest

  • analytical, marketing cookies: consent

3.5. Social media (Facebook, Instagram)

Data processed:

  • profile data, interactions

  • comments, messages

Purpose:

  • communication

  • remarketing campaigns

  • community building

Legal basis:
GDPR Art. 6(1)(f) – legitimate interest

4. Data processors and data transfer

The Data Controller only works with trusted partners who comply with GDPR regulations.

Data processors may include:

  • Hosting provider

  • System operators / developers

  • Invoicing software (e.g., Billingo, Számlázz.hu)

  • Payment service provider (e.g., Barion, Stripe)

  • Logistics/courier companies (e.g., Packeta, Foxpost, MPL)

  • Marketing and analytical providers (Google, Meta)

Data transfer to a third country only occurs with appropriate safeguards (e.g., EU SCCs).

5. Data subject rights

You have the right to:

  • request access to your data

  • request rectification

  • request deletion ("right to be forgotten")

  • object to data processing

  • request restriction of processing

  • request data portability

  • withdraw your consent at any time

Contact: (e-mail address goes here)

6. Filing a complaint

If you feel that the Data Controller has violated applicable data protection laws, you may lodge a complaint with:

National Authority for Data Protection and Freedom of Information (NAIH)
Address: 1055 Budapest, Falk Miksa utca 9–11.
Website: https://naih.hu
Phone: +36 (1) 391-1400
E-mail: ugyfelszolgalat@naih.hu

7. Data security

The Data Controller takes all necessary technical and organizational measures to protect personal data, in particular:

  • encrypted data transmission (HTTPS)

  • password-protected systems

  • restricting access permissions

  • regular data backups

8. Modification of this Policy

The Data Controller reserves the right to modify this Policy at any time.
The modification enters into force on the day of its publication on the website.

Be one of the sinners yourself!

Be part of a community where like-minded people build their dreams together. Let us inspire each other.