Data controller
Katalin Ruházat Kft., 4440 Tiszavasvári, Gépállomás utca 13., Hungary; company registration 15-09-094935. Privacy contact: info@katalinwear.com.
Data, purposes and retention
- Orders and delivery: name, email, billing/delivery address, products and order events. Basis: contract/pre-contract steps (GDPR Article 6(1)(b)). Necessary contractual records are generally retained for the five-year limitation period.
- Accounting: legal obligation (Article 6(1)(c)); accounting documents are retained for at least eight years.
- Customer accounts: name, email, password hash and linked orders, to provide the requested account service. Kept until account closure, except records required for legal obligations or claims.
- Complaints and withdrawal: supplied contact details, order reference, statement and receipt time, for contractual/legal obligations. Consumer complaints and replies are retained for three years; other claim records for the necessary limitation period.
- Security: technical logs, IP address, errors and abuse prevention, based on our legitimate interest in protecting the shop and its customers (Article 6(1)(f)). A salted short-lived identifier limits repeated form submissions and expires within one day. Incident records are retained only as justified.
- Optional statistics: consent (Article 6(1)(a)), No analytics or marketing tracking is currently configured. Consent can be withdrawn. We do not sell personal data or make automated decisions with legal effects.
Recipients and safeguards
Authorised staff, hosting/technical operations, Hostinger email services, the selected MPL or DHL carrier and necessary accounting/authority recipients receive only data needed for their tasks. A payment provider will be identified before its service is used. HTTPS and access restrictions help protect data. We never request full card details by email.
Any transfer outside the EEA requires an appropriate legal basis and safeguards, such as an adequacy decision or standard contractual clauses. Contact us for the recipients and safeguards relevant to your data.
Cookies
Essential cookies support your basket, sign-in, language and consent choices. Optional categories are off by default. Use “Cookie settings” in the footer to change or withdraw consent at any time. Rejecting optional cookies does not prevent shopping. See the cookie notice.
Your rights
You may request access, correction, erasure, restriction or portability, object to legitimate-interest processing and withdraw consent. Withdrawal does not affect earlier lawful processing. Legal retention requirements can limit erasure. We normally respond within one month and may request proportionate identity verification.
You may complain to Hungary's National Authority for Data Protection and Freedom of Information, www.naih.hu, or seek a court remedy. Updated: 20 September 2026.
Email and customer accounts
We use Hostinger Email for incoming enquiries, registration and password-reset messages, and withdrawal and complaint acknowledgements. It processes sender, recipient and message content to deliver email. Account administration relies on performance of the contract; withdrawal and complaint communications rely on legal obligations. Website technical delivery logs are retained for up to 30 days; message bodies are removed from the technical queue after successful SMTP handoff. The underlying case records follow the retention periods stated above. DHL and MPL receive the recipient and delivery data necessary to provide the selected shipping service.