Last updated: 2025-09-24
This Privacy Policy explains how personal data are processed for visitors and users of https://cosmopolit.hu/ (the “Website”). The Controller complies with applicable data protection laws, in particular the GDPR (Regulation (EU) 2016/679) and Hungarian Act CXII of 2011.
1) Controller details
| Name | Cosmopolit Kiadó Korlátolt Felelősségű Társaság |
|---|---|
| Registered office | 1033 Budapest, Kaszásdűlő utca 5. Fsz. 1. ajtó |
| Mailing address | 1033 Budapest, Kaszásdűlő utca 5. Fsz. 1. ajtó |
| Company reg. no. | 01-09-442873 |
| Tax no. | 32792331-2-41 |
| Representative | Sándor György Jászberényi, Managing Director |
| info@cosmopolit.hu | |
| Website | https://cosmopolit.hu/ |
Data Protection Officer
Dr. Dávid Gulyás – info@cosmopolit.hu
2) Purposes, legal bases and data scope
2.1 Online store operation
| Personal data | Purpose | Legal basis (GDPR) |
|---|---|---|
| First and last name | Contact, purchase, invoicing | Art. 6(1)(b) – contract performance |
| E-mail address | Contact | Art. 6(1)(b) |
| Phone number | Contact, delivery coordination | Art. 6(1)(b) |
| Billing name and address | Issuing invoices, fee management | Art. 6(1)(c) – legal obligation |
| Shipping name and address | Home delivery | Art. 6(1)(b) |
| Purchase timestamp; IP address at purchase | Technical operations, abuse prevention | Art. 6(1)(f) – legitimate interest |
2.2 Shipping
Processors:
- FoxPost Zrt., 3300 Eger, Maklári út 119. – Privacy notice
- Magyar Posta Zrt., 1138 Budapest, Dunavirág utca 2–6. – Privacy notice
Data processed: shipping name, shipping address, phone, e-mail.
Data subjects: customers requesting home delivery.
Purpose: delivery of ordered products.
Retention: until completion of delivery.
2.3 Online payment
Processor: Barion Payment Zrt., H-1117 Budapest, Irinyi József utca 4–20., 2nd floor.
Data processed: billing name, billing address, e-mail.
Data subjects: customers paying online.
Purpose: processing payments, confirming transactions and anti-fraud monitoring.
Retention: until completion of the payment transaction (statutory accounting/banking retention may apply).
2.4 Hosting
Processor: DigitalOcean, 101 Avenue of the Americas, 10th Floor, New York, NY 10013 – Terms & Legal • www.digitalocean.com
Data processed: all personal data necessary for operating the Website (e.g. logs, stored content).
Purpose: availability and proper operation of the Website.
Retention: until termination of the hosting agreement or fulfilment of a valid erasure request, if applicable.
2.5 Cookies (Google Tag Manager, Google Analytics)
Data processed: unique identifiers (cookie/Client ID), device & browser info, IP address (shortened/anonymized), session data (timestamps, page views, events, traffic sources), interactions (clicks/scrolls), cart/order metrics if measured.
Purposes: essential operation (tagging/consent handling), audience measurement, performance analytics, troubleshooting, UX improvements, conversion tracking.
Legal basis: consent (GDPR Art. 6(1)(a)); for strictly necessary cookies: legitimate interest/contract performance.
Retention: until cookie expiry (e.g. session: until browser close; analytics: typically 1–24 months) or withdrawal of consent. Settings can be changed anytime via browser and the cookie banner.
3) Retention
- Billing data: 8 years (accounting laws).
- Contact data: 5 years from purchase.
- Shipping data: until delivery completion.
- Online payment data: until transaction completion (subject to statutory retention).
- Cookies/analytics IDs: until expiry or withdrawal.
4) Data subject rights
Access, rectification, erasure, restriction, objection, data portability. Requests: info@cosmopolit.hu.
5) Remedies
National Authority for Data Protection and Freedom of Information (NAIH)
Address: 1055 Budapest, Falk Miksa utca 9–11 • Postal: 1363 Budapest, PO Box 9
Phone: +36 (1) 391-1400 • E-mail: ugyfelszolgalat@naih.hu • Web: https://www.naih.hu
6) Security
Appropriate technical and organizational measures (encryption, access control, logging, backups, vulnerability management).
7) Final provisions
The Controller may amend this Policy; changes take effect upon publication on the Website.
