Privacy Policy
PRIVACY POLICY
Effective from: [16 August 2026]
Website: Charmea.hu
The operator of Charmea.hu is committed to protecting the personal data and privacy of its customers and website visitors.
This Privacy Policy explains what personal data we process when you use Charmea.hu, create an account, place an order, subscribe to our newsletter, or interact with analytics and advertising technologies used on the website, as well as the purposes, legal bases and duration of such processing.
Personal data is processed in accordance with applicable data protection legislation, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).
1. Data Controller
Data Controller / Operator: Bíró István EV
Registered office: 4400 Nyíregyháza, Sarló utca 21.
Postal address: 2132 Göd, Őszapó utca 143. B
Tax number: 67091968-1-35
Company registration / registration number: 67091968629023115
E-mail: [email protected]
Phone: 06-30-512-2759
Website: Charmea.hu
References to the "Data Controller", "we", "us" or "Charmea.hu" in this Privacy Policy mean the business identified above.
2. Orders and Purchases
Creating an account is not required to purchase products from Charmea.hu. Customers may place orders without registration.
When processing an order, we may process:
name,
e-mail address,
telephone number,
billing name and address,
delivery name and address,
details of the products ordered,
order number and order details,
selected payment method,
selected delivery method,
communications relating to the order,
other information required for invoicing where applicable.
Purpose: processing, confirming and fulfilling orders, arranging payment, invoicing and delivery, and communicating with customers.
Legal basis: Article 6(1)(b) GDPR – processing necessary for the performance of a contract or in order to take steps at the request of the data subject prior to entering into a contract.
Personal data contained in accounting records is retained for the period required by applicable legislation.
3. User Accounts
Customers may create an account on Charmea.hu; however, registration is optional and is not required to place an order.
We may process:
name,
e-mail address,
securely stored, non-reversible representation of the password,
billing and delivery details associated with the account,
previous order information.
Purpose: providing and maintaining the user account, simplifying future purchases and allowing customers to access previous orders and other account-related services.
Legal basis: Article 6(1)(b) GDPR.
Users may request deletion of their account. Deletion does not affect information that we are legally required to retain.
4. Customer Service and Contact
If you contact us by e-mail, telephone or through the website, we may process:
your name,
e-mail address,
telephone number,
contents of your message,
information relating to your order.
The purpose of processing is to respond to enquiries, provide customer support and, where applicable, fulfil our contractual obligations.
The legal basis depends on the nature of the enquiry and may include performance of a contract, our legitimate interests or your consent.
5. Delivery Services
To deliver your order, we may transfer the personal data necessary for delivery to the shipping provider selected by you.
This may include:
recipient's name,
delivery address or selected parcel locker/pick-up point,
telephone number,
e-mail address,
information necessary to deliver the parcel,
information required for cash-on-delivery services where applicable.
Delivery providers available on Charmea.hu may include:
DPD
DPD Hungary Kft.
We may transfer information required for delivery and recipient notifications to DPD.
MPL
Magyar Posta Zrt. / MPL
We may transfer information required for delivery, parcel handling and recipient notifications to MPL.
FOXPOST
FOXPOST delivery services
Where FOXPOST delivery is selected, we may transfer information necessary for delivery to a parcel locker or pick-up point and for notifying the recipient.
Purpose: delivery of products ordered by the customer.
Legal basis: Article 6(1)(b) GDPR – performance of the contract concluded with the customer.
6. Newsletter
Charmea.hu allows visitors and customers to subscribe to marketing newsletters.
Newsletter subscription is voluntary and is not a condition of purchasing from Charmea.hu.
We may process:
your e-mail address,
your name, if provided,
date and time of subscription and technical information required to demonstrate consent.
Purpose: sending newsletters, offers, promotions, product news and other marketing communications.
Legal basis: Article 6(1)(a) GDPR – consent.
You may withdraw your consent at any time free of charge, for example by using the unsubscribe option included in our newsletters or by contacting us.
Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
7. Google Analytics
Charmea.hu may use Google Analytics to analyse the use and performance of the website.
Google Analytics may provide statistical information about:
website traffic,
pages viewed,
duration of visits,
device and browser characteristics,
website usage,
traffic sources,
actions performed within the online store.
Google Analytics may use cookies and similar technologies.
The use of non-essential analytics storage and related technologies is subject to the visitor's consent where required.
Visitors can grant, refuse or subsequently modify their consent through the website's cookie settings.
8. Google Ads and Remarketing
Charmea.hu may use Google Ads, conversion measurement and remarketing technologies.
These services may be used to:
measure advertising performance,
determine whether a purchase or other action resulted from an advertisement,
display more relevant advertising,
display remarketing advertisements to previous visitors.
Google Ads and remarketing technologies may use cookies and other online identifiers.
Personalised advertising, remarketing and related non-essential storage are subject to the visitor's consent where required.
Consent preferences can be managed through the website's cookie settings.
9. Meta Pixel (Facebook Pixel)
Charmea.hu may use the Meta Pixel (Facebook Pixel).
The technology helps us measure how visitors arriving from advertisements displayed on Meta platforms interact with Charmea.hu.
Events measured may include:
page views,
product views,
adding products to the shopping cart,
initiating checkout,
purchases.
The technology may also be used for remarketing and advertising purposes to display more relevant advertisements to previous visitors on Meta services.
Use of marketing technologies of this nature is subject to the visitor's prior consent where required.
10. Cookies and Similar Technologies
Charmea.hu may use cookies and similar technologies.
These can generally be divided into the following categories:
Essential cookies:
Required for the basic operation of the website and online store, including session management, shopping cart functionality, security and user login.
Analytics cookies:
Help us understand how visitors use the website.
Marketing cookies:
May be used for advertising measurement, remarketing and personalised advertising.
We request consent before using non-essential cookies and similar technologies where consent is required.
Refusing non-essential cookies must not prevent visitors from using the essential functionality of the online store.
Visitors may subsequently change their cookie preferences.
11. Hosting and Infrastructure
Charmea.hu uses services provided by OVHcloud for hosting and/or server infrastructure.
As part of providing hosting and infrastructure services, the service provider may technically have access to information stored or processed on the relevant servers.
The purpose of such processing is to ensure the secure and continuous operation of the website and online store.
12. Technical and Server Log Data
When the website is used, our servers may record technical information for operational and security purposes, including:
IP address,
date and time of access,
requested page or resource,
certain browser and device characteristics,
technical errors and security events.
The purpose of processing is to maintain website security, identify technical problems, prevent abuse and ensure the proper operation of our IT systems.
Legal basis: Article 6(1)(f) GDPR – our legitimate interest in maintaining a secure and reliable website.
13. Data Recipients and Processors
We only disclose personal data to third parties where their involvement is necessary for operating the online store, fulfilling orders, complying with legal obligations or, where appropriate consent has been obtained, providing analytics and marketing services.
Recipients and processors may include:
hosting and infrastructure providers,
courier and logistics providers,
invoicing and accounting providers,
payment service providers,
IT service providers,
Google services,
Meta services,
newsletter service providers, where applicable.
Certain service providers may process or transfer personal data outside the European Economic Area. Where applicable, such transfers are made using appropriate safeguards permitted by the GDPR.
14. Data Retention
We retain personal data only for as long as necessary for the purpose for which it was collected, while a valid legal basis exists, or for as long as required by applicable law.
Accordingly:
order and contractual information is retained for the period necessary to perform the contract and handle potential legal claims;
personal data contained in accounting records is retained for the statutory retention period;
account information is retained while the account remains active, subject to applicable legal retention obligations;
newsletter information is retained until consent is withdrawn;
information required to demonstrate consent may be retained for the period necessary to establish, exercise or defend legal claims;
analytics and marketing information is processed according to the retention settings of the relevant service and the user's consent preferences.
15. Data Security
We implement appropriate technical and organisational measures to protect personal data against:
unauthorised access,
unauthorised alteration,
disclosure,
loss,
deletion,
destruction.
Access to personal data is restricted to persons who require access in order to perform their duties.
16. Your Rights
Under the GDPR, you may have the right to:
obtain information about the processing of your personal data;
request access to your personal data;
request correction of inaccurate personal data;
request deletion of your personal data where the applicable legal requirements are met;
request restriction of processing;
exercise your right to data portability where applicable;
object to processing based on legitimate interests;
withdraw your consent at any time where processing is based on consent;
lodge a complaint with the competent supervisory authority.
Requests relating to your data protection rights may be submitted to:
E-mail: [privacy/customer service e-mail address]
17. Complaints and Supervisory Authority
If you believe that the processing of your personal data infringes applicable data protection legislation, we encourage you to contact us first so that we can investigate your concern.
You also have the right to lodge a complaint with the competent supervisory authority.
In Hungary:
Hungarian National Authority for Data Protection and Freedom of Information (NAIH)
1055 Budapest, Falk Miksa utca 9–11.
Postal address: 1363 Budapest, P.O. Box 9.
18. Profiling and Advertising
Google Ads, Google Analytics and Meta services may involve marketing-related profiling based on visitors' interests, website interactions and previous activities.
The purpose of such processing may include displaying more relevant advertisements and measuring the effectiveness of advertising campaigns.
Where consent is required, visitors can manage their consent through the website's cookie settings.
19. Changes to this Privacy Policy
We may amend this Privacy Policy where necessary, including in response to changes in legislation, our services, processors or data processing activities.
The current version of this Privacy Policy will always be available on Charmea.hu.
Last updated: [16 August 2026]
