Privacy notice

This notice sets out what personal data we process, why, for how long, and what rights you have. It is written under the General Data Protection Regulation (GDPR).

Effective: 2026-09-15

1. The controller

Legal name: SVT Studio Kft.
Registered seat: 1053 Budapest, Ferenciek tere 2. Fsz.
Company registration number: 01-09-445553
VAT number: 32842144-2-41
E-mail: [email protected]
Phone: +36 70 155 3083
Hosting provider: netcup GmbH, Karlsruhe

2. What we process, and on what basis

Order and delivery data (name, delivery and billing address, email, phone, order contents) — to perform the contract, GDPR Article 6(1)(b).
Invoicing data — to comply with a legal obligation, GDPR Article 6(1)(c), under section 169 of Act C of 2000 on Accounting.
Account data if you register (email, password hash, saved address, past orders, sample credits) — to perform the contract, GDPR Article 6(1)(b).
Newsletter subscription, if you ask for one — on consent, GDPR Article 6(1)(a). Consent can be withdrawn at any time without consequence.
Technical logs and anti-abuse data (IP address, timestamps, failed sign-in attempts) — on legitimate interest, GDPR Article 6(1)(f), to keep the shop secure.

3. Cookies

We use only cookies the shop needs to work: the basket, the signed-in session, the chosen language, and the record that you dismissed the cookie notice. We set no tracking or advertising cookies. Traffic measurement is cookieless and does not identify individual visitors.

4. Processors

The following providers access personal data on our behalf, solely for the purpose stated:

netcup GmbH, Karlsruhe — hosting
Stripe Payments Europe, Ltd. (Ireland) — card payment processing
Resend, Inc. — transactional email delivery

To deliver the parcel, delivery details are passed to the courier selected at checkout.

5. Retention

Invoices and accounting records: 8 years (section 169 of Act C of 2000).
Order data: until contractual claims lapse, 5 years.
Account data: until the account is deleted.
Newsletter: until consent is withdrawn.
Security logs: 12 months at most.

6. Your rights

Information about, and access to, the data we hold on you.
Rectification where data is inaccurate.
Erasure where there is no longer a basis for processing — invoices cannot be erased during the statutory retention period.
Restriction of processing.
Portability: a machine-readable copy of the data you supplied to perform the contract.
Objection to processing based on legitimate interest.
Withdrawal of consent, without affecting the lawfulness of processing before withdrawal.

Requests are accepted at the email address above and answered within 30 days at the latest.

7. Redress

If you believe the processing infringes your rights, you may complain to the Hungarian National Authority for Data Protection and Freedom of Information (NAIH, Falk Miksa utca 9–11., 1055 Budapest, [email protected]), or go to court — proceedings may also be brought before the tribunal for your place of residence.