This Privacy Policy outlines the data management principles and practices applied by the operator of the website https://decora.co.hu By submitting any personal data, the Visitor/User declares that the information provided is true and accurate.

1. DATA CONTROLLER DETAILS
Website Operator: Dóra Ender
Data Controller: Dóra Ender
Registered Office / Mailing Address: 8105 Pétfürdő, Hősök tere 3. 1/4
Contact: info@decora.co.hu, or via the website’s contact form or via phone: 0630/166-9798 
Tax Number: 91039015-1-39
Entrepreneurial Registry Number: 60414203

2. TYPES OF DATA COLLECTED AND DATA SUBJECTS

By filling out and submitting the forms available on this website, you voluntarily consent to the processing of the following personal data:

• last name
• first name
• company name
• tax number
• address (country, county, city, street, house number, postal code)
• e-mail address
• phone number

The processing of this data is based on your voluntary consent, and it is used solely for the purposes defined in the next section.
The Data Controller assumes no responsibility for the accuracy or truthfulness of the data provided by the User.

3. PURPOSE OF DATA PROCESSING

The purposes of data collection and processing are:

• Maintaining contact with the User
• Identifying the User and distinguishing them from other users
• Issuing invoices for orders
• Fulfilling and delivering orders
• Measuring and assessing user satisfaction

By using the website or registering, the User voluntarily consents to the use of the types of data mentioned in Section 2 in accordance with this Privacy Policy.
All data is handled confidentially and is not shared with unauthorized third parties.

4. OTHER INFORMATION COLLECTED DURING WEBSITE USE

Unless the User voluntarily provides personal data as outlined in Section 2, no personally identifiable information is collected.
By visiting the website or clicking the “Accept” button, all Users consent to the use of data and cookies as described in this section.

Cookies:
The website uses cookies—small data files that may contain information that does not personally identify the User. These are stored on the User’s device to record data, identify returning Users, simplify further visits, and enhance service efficiency.
Cookies can be disabled or deleted in your browser settings. Please note that disabling cookies may result in certain site functions not working properly or access to specific features or content being restricted.

Session IDs and Analytics:
When visiting the site, a session ID is generated anonymously to collect statistical data through Google Analytics, independent of personal data. This includes the start and end time of the visit and the pages viewed.

Log Files:
The website may also automatically receive data from the browser, such as the User’s IP address (e.g., 111.222.55.01), operating system, browser type, domain of origin, subpages visited, and content viewed.

This practice is disclosed to every new visitor on their first page load and is permanently available via the Privacy Policy link in the website footer.
The purpose of using cookies, session IDs, and log files is purely statistical.

5. DURATION OF DATA PROCESSING
Cookies and session IDs created by Google Analytics are stored for 30 days. Session IDs are deleted automatically when the user leaves the website.
Personal data provided by the User will be deleted by the Data Controller within 10 business days upon written request. Such requests can be submitted via any contact method listed.

6. DATA PROCESSORS
Only the employees of the Data Controller have access to the User’s data. No data is disclosed to third parties or unauthorized individuals.
The Data Controller will only share personal data with authorities if legally required and if the request is based on valid legal grounds.

7. LEGAL BASIS OF DATA PROCESSING AND USER RIGHTS
Data processing is based on the User’s consent.
The User may request information about the personal data processed by the Data Controller and the methods of processing via email.
Data may be deleted upon the User’s written request within 10 business days.

8. DATA SECURITY

The Data Controller takes all reasonable precautions to ensure data is not accidentally damaged or destroyed, and to prevent unauthorized access, disclosure, modification, or deletion.
Only the Data Controller, its employees, and any contracted data processors may access the data. No information is shared with unauthorized third parties.

The User acknowledges and accepts that while the Data Controller uses advanced security tools to protect data, complete security on the Internet cannot be guaranteed.
In the event of unauthorized access or data breach despite these efforts, the Data Controller cannot be held liable for any resulting damage.

9. HOSTING PROVIDER AND TECHNOLOGY PARTNER
The https://decora.co.hu

website is hosted by:

Company Name: EVOLUTIONET Kft.
Registered Office: 7342 Mágocs, Széchenyi utca 75., Hungary
Website: https://szerverzum.hu/
E-mail adress: ugyfelszolgalat@szerverzum.hu

The website is operated on secure servers managed by the above provider. Regular backups are made to ensure the safety and integrity of all stored data.

10. LEGAL REMEDIES AND APPLICABLE LAWS

The Data Controller takes all reasonable measures to ensure that personal data is processed in accordance with the applicable legal regulations. If a User believes that the data processing does not comply with such laws, they may submit a written complaint to the Data Controller using any of the contact options provided.

If a User believes their rights related to the protection of personal data have been violated, they are entitled to seek legal remedy under the applicable laws. They may:

• File a complaint with the National Authority for Data Protection and Freedom of Information (NAIH), or

• Initiate legal proceedings before the competent civil court.

This Privacy Notice is governed by Hungarian law, especially the following legislation:

• Act CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information

• Act VI of 1998 on the Protection of Individuals with Regard to the Automatic Processing of Personal Data

• Act LXIII of 1992 on the Protection of Personal Data and the Disclosure of Data of Public Interest