<h2>Privacy Policy</h2>
<p><strong>Privacy Policy of SZOM (Tamás Remetei, sole trader)</strong></p>
<p>Effective from: 16 July 2026<br>
Date of publication: 16 July 2026<br>
Version: SZOM Privacy Policy 2026 v1.0</p>
<h3>1. Data Controller</h3>
<p>
Name: Tamás Remetei, sole trader<br>
Registration number: 55039790<br>
Tax number: 56400757-1-34<br>
Registered address: 8646 Balatonfenyves, Fenyvesi utca 139, Hungary<br>
Phone: 0036703334777<br>
E-mail: info@szom.eu<br>
Website: www.szom.eu
</p>
<p>(hereinafter: the <strong>"Data Controller"</strong>)</p>
<h3>2. Purpose and Scope of this Policy</h3>
<p>The purpose of this Privacy Policy is to inform Users about the scope, purpose, legal basis, and duration of the personal data processed by the Data Controller in the course of operating the www.szom.eu webshop (hereinafter: the <strong>"Webshop"</strong>), as well as about the rights of data subjects, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (hereinafter: the <strong>"GDPR"</strong>) and Act CXII of 2011 on the Right of Informational Self-Determination and Freedom of Information (hereinafter: the <strong>"Hungarian Data Protection Act"</strong>).</p>
<h3>3. Categories of Data Processed, Purpose and Legal Basis</h3>
<h4>a. Registration and User Account</h4>
<p><strong>Data processed:</strong> name, e-mail address, phone number, password (encrypted).</p>
<p><strong>Purpose:</strong> to create a user account and provide access to the Webshop, the Wallet/points balance, and the referral (referrer) system.</p>
<p><strong>Legal basis:</strong> the User's consent (GDPR Art. 6(1)(a)) and performance of a contract (GDPR Art. 6(1)(b)).</p>
<h4>b. Orders and Invoicing</h4>
<p><strong>Data processed:</strong> billing name and address, shipping name and address, e-mail address, phone number, the ordered products and their quantities, payment method, and the identifier and address of the selected FoxPost parcel locker (where this shipping method is chosen).</p>
<p><strong>Purpose:</strong> to fulfil the order, issue an invoice, deliver the product, and communicate with the User regarding the order.</p>
<p><strong>Legal basis:</strong> performance of a contract (GDPR Art. 6(1)(b)) and compliance with a legal obligation (record-keeping obligations under applicable accounting and tax law, GDPR Art. 6(1)(c)).</p>
<p><strong>Retention period:</strong> data relating to accounting records are retained for the period required by applicable law (typically 8 years).</p>
<h4>c. Referral System and Points Program</h4>
<p><strong>Data processed:</strong> the name and e-mail address of the referring and the referred User, the identifier of the Gold/Silver SZOM Coin, the amount of points credited and redeemed, and the related transaction history (Wallet history).</p>
<p><strong>Purpose:</strong> to operate the referral program and the points system, to credit and redeem points, and to apply discounts.</p>
<p><strong>Legal basis:</strong> the User's consent and performance of a contract (GDPR Art. 6(1)(a) and (b)).</p>
<h4>d. Contact and Customer Service</h4>
<p><strong>Data processed:</strong> name, e-mail address, phone number, and the content of the message.</p>
<p><strong>Purpose:</strong> to respond to the User's inquiry and provide customer support.</p>
<p><strong>Legal basis:</strong> the User's consent (GDPR Art. 6(1)(a)).</p>
<h3>4. Data Transfers and Data Processors</h3>
<p>The Data Controller may engage the following data processors/third parties in connection with the processing of personal data:</p>
<ul>
<li><strong>Hosting provider:</strong> Port Kft. (www.webtar.hu) – for the technical operation of the Webshop.</li>
<li><strong>FoxPost Zrt.:</strong> for identifying the selected parcel locker and delivering the parcel, where the User chooses this shipping method.</li>
<li><strong>Financial/banking service provider:</strong> for processing payments made by bank transfer (to the extent necessary for the transfer initiated by the User).</li>
<li><strong>Accountant/accounting firm:</strong> for fulfilling accounting and tax law obligations.</li>
</ul>
<p>Other than as set out above, the Data Controller does not transfer personal data to third parties, unless required by law or unless the User has given prior, explicit consent.</p>
<h3>5. Use of Cookies</h3>
<p>The Webshop uses cookies to the extent necessary for its operation. Some cookies are strictly necessary for the core functions of the Webshop (e.g. login, shopping cart, language selection), while others are used to improve the user experience. Further information on managing cookies is available in your browser settings, where you can also enable, disable, or delete cookies.</p>
<h3>6. Rights of Data Subjects</h3>
<p>Users may exercise the following rights in relation to the processing of their personal data:</p>
<ul>
<li><strong>Right to information and access:</strong> the User may request information on whether their data is being processed, and if so, for what purpose, on what legal basis, which data, and for how long.</li>
<li><strong>Right to rectification:</strong> the User may request the correction or completion of inaccurate or incomplete data.</li>
<li><strong>Right to erasure ("right to be forgotten"):</strong> the User may request the deletion of their data where it is no longer necessary for the purpose for which it was collected, or where consent is withdrawn and there is no other legal basis for processing.</li>
<li><strong>Right to restriction of processing.</strong></li>
<li><strong>Right to data portability:</strong> the User may request to receive the personal data they provided in a structured, commonly used, machine-readable format.</li>
<li><strong>Right to object.</strong></li>
<li><strong>Right to withdraw consent</strong> at any time, without affecting the lawfulness of processing based on consent before its withdrawal.</li>
</ul>
<p>Requests concerning the above rights may be submitted to info@szom.eu. The Data Controller will fulfil or respond to the request within a maximum of 1 month of receipt.</p>
<h3>7. Remedies</h3>
<p>If a User believes that the processing of their personal data infringes the GDPR or the Hungarian Data Protection Act, they may lodge a complaint with the supervisory authority:</p>
<p>
<strong>National Authority for Data Protection and Freedom of Information (NAIH)</strong><br>
Address: 1055 Budapest, Falk Miksa utca 9-11., Hungary<br>
Postal address: 1363 Budapest, Pf. 9., Hungary<br>
Phone: +36 (1) 391-1400<br>
E-mail: ugyfelszolgalat@naih.hu<br>
Website: <a href="https://www.naih.hu" target="_blank" rel="noopener">www.naih.hu</a>
</p>
<p>Users may also seek judicial remedy in case of infringement of their rights. Such proceedings fall within the jurisdiction of the relevant regional court (törvényszék).</p>
<h3>8. Amendments to this Policy</h3>
<p>The Data Controller reserves the right to unilaterally amend this Privacy Policy. Users will be informed of any amendments via the Webshop interface. Amendments take effect upon publication.</p>