Draft under legal review. Last updated: 3 November 2026.
1. Controller
Nóra Puskás (Puskás Nóra)
Email: hello@puskasnori.hu
Website: puskasnori.hu
This notice is based on Regulation (EU) 2016/679 (GDPR) and Hungarian Act CXII of 2011 on informational self-determination and freedom of information.
2. Data, purposes, legal bases and retention
| Processing | Data | Legal basis | Retention |
|---|---|---|---|
| Receiving and fulfilling orders, checking payment, arranging collection | name, email, phone (optional), note, ordered product, amount, time of order | performance of contract – Art. 6(1)(b) GDPR | until contractual claims become time-barred (5 years) |
| Proof of acceptance of the Terms and acknowledgement of this notice, preventing abuse | fact and time of ticking, IP address, browser identifier | legitimate interest – Art. 6(1)(f) GDPR | 5 years |
| Handling withdrawal statements | name, email, order number, content of the statement | legal obligation – Art. 6(1)(c) GDPR, Government Decree 45/2014 | 5 years |
| Contact (form, email) | name, email, message | legitimate interest – Art. 6(1)(f) GDPR | 1 year after the matter is closed |
| Cookies and consent | see the Cookie Policy | consent or necessary for the service | as stated there |
Should invoices be issued in future, accounting records must be kept for 8 years under Hungarian Act C of 2000 on accounting.
3. Processors and recipients
Hosting and email: Websupport Magyarország Kft. (mHosting), Fehérvári út 97–99, 1119 Budapest, Hungary. For payments via Revolut, Revolut acts as an independent controller; for bank transfers, the banks of the Buyer and the Seller do so. Data is not transferred to third countries, not used for marketing and not sold.
4. Security
The website is served over an encrypted (HTTPS) connection. Order data is accessible only to the controller via a password-protected admin area. Original image files used for printing are stored in a non-public location.
5. Your rights
You may request access to, rectification or erasure of your personal data or restriction of processing, object to processing based on legitimate interest and request data portability. Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing. Send your request to hello@puskasnori.hu; we will respond within one month.
6. Remedies
You may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH, Falk Miksa utca 9–11, 1055 Budapest; ugyfelszolgalat@naih.hu; www.naih.hu) or with the supervisory authority of your country of residence, or bring an action before the courts.