Privacy Policy

1. Data controller

The controller is Matt-Rex Kft., Ungvári u. 26, 2030 Érd, Hungary (tax number: 28823773-2-13). Email: [email protected]. Processing is carried out in accordance with the GDPR (Regulation (EU) 2016/679).

2. Purposes and legal bases

• Fulfilling your order: name, billing and delivery address, email, telephone (Art. 6(1)(b) GDPR).
• Invoicing and accounting: data required by law (Art. 6(1)(c) GDPR), retained for 8 years.
• Warranty claims and withdrawal: Art. 6(1)(b) and (c) GDPR.
• Establishing and defending legal claims: legitimate interest (Art. 6(1)(f) GDPR).
• Newsletter / marketing: consent (Art. 6(1)(a) GDPR), which may be withdrawn at any time.

3. Recipients of data

• Stripe — payment processing.
• KBOSS.hu Kft. (Számlázz.hu) — electronic invoicing.
• Cloudflare, Inc. — hosting.
• Courier company — delivery of your parcel.

4. Transfers outside the EEA

Some providers (including Stripe and Cloudflare) may process data outside the EEA, including in the USA — on the basis of Standard Contractual Clauses (SCCs) or an adequacy decision (Data Privacy Framework).

5. Retention periods

Order and invoice data — as required by accounting law (generally 8 years). Data processed on the basis of consent — until that consent is withdrawn. Data held for the purpose of legal claims — until the limitation period expires.

6. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability, objection, and withdrawal of consent. Requests: [email protected].

7. Complaint to a supervisory authority

You have the right to lodge a complaint with a supervisory authority. As the controller is established in Hungary, the competent authority is the Hungarian National Authority for Data Protection and Freedom of Information (NAIH; Falk Miksa utca 9–11, 1055 Budapest, Hungary; naih.hu). If you are resident in another EU member state, you may also lodge a complaint with the supervisory authority of your own country.

8. Cookies

The shop uses only cookies that are strictly necessary for operation (e.g. sign-in, cart contents). We measure traffic in aggregate, without cookies and without identifying individuals, which is why we do not ask for cookie consent. Cookie settings can be managed in your browser.

9. Provision of data is voluntary

Providing your data is voluntary, but it is necessary in order to conclude and perform the contract and to issue an invoice.