www.abcpet.hu

1. SCOPE OF PERSONAL DATA PROCESSED

2.1 User Registration

• name
• email address
• password (stored in encrypted form)

2.2 Orders (registered users and guest checkout)

• billing name and address
• shipping name and address
• email address
• phone number
• order details

2.3 Payments

During card payments, payment service providers (Barion, PayPal, Revolut) process bank card data.
 The Data Controller does not have access to bank card details.

2.4 Transactional Emails

• “Your order has been placed”
• “Your order has been completed”
• “Handed over to the courier service”

1. PURPOSE AND LEGAL BASIS OF DATA PROCESSING

User registration
 Legal basis: Article 6(1)(b) GDPR – performance of a contract

Order processing
 Legal basis: Article 6(1)(b) GDPR – performance of a contract

Invoicing
 Legal basis: Article 6(1)(c) GDPR – legal obligation

System notifications
 Legal basis: Article 6(1)(b) GDPR – performance of a contract

Internal analytics (Matomo)
 Legal basis: Article 6(1)(f) GDPR – legitimate interest

Marketing (remarketing)
 Legal basis: Article 6(1)(a) GDPR – consent

1. DATA PROCESSORS AND DATA TRANSFERS

The Data Controller uses the following data processors:

• Courier services: MPL, GLS, Foxpost, FedEx
• Payment service providers: Barion, PayPal, Revolut
• Technical tool: Google Tag Manager (used for Barion payment integration)
• Image storage: Amazon Web Services (AWS S3)
• Analytics system: internally hosted Matomo with IP anonymization

Any data transfer outside the European Union is carried out with appropriate safeguards.

1. COOKIES

Necessary cookies
 These cookies are essential for the basic operation of the website (session handling, shopping cart, payment).

Statistical cookies
 Website traffic is measured using an internally hosted Matomo system with IP anonymization, based on legitimate interest.

Marketing cookies
 Marketing cookies are used only with the prior consent of the data subject.

Suggested cookie banner text:

“This website uses cookies for operational, statistical and marketing purposes.
 Marketing cookies are activated only with your consent.”

Available options:

• Accept all
• Only necessary
• Settings

1. RIGHTS OF THE DATA SUBJECT

The data subject has the right to:

• receive information about data processing
• access personal data
• request rectification
• request erasure
• request restriction of processing
• data portability
• object to processing
• withdraw consent at any time

1. LEGAL REMEDIES

The data subject may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information.

1. DATA SECURITY

The Data Controller applies appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure or destruction.

1. VALIDITY

This Privacy Policy is effective from the date of publication and remains valid until revoked.

APPENDIX – SUMMARY OF LEGITIMATE INTEREST ASSESSMENT

• Internal analytics (Matomo): own server, IP anonymization
• Ensuring the technical operation of the webshop
• Sending transactional system messages