1. Data Controller
Company name: KÉTI-VIRÁG Kft.
Registered office: 6035 Ballószög, Mikszáth utca 23.
Tax number: 23425277-1-03
Email: info@floristbt.hu
Phone: +36-30-265-5305
Website: floristbt.hu
KÉTI-VIRÁG Kft. (hereinafter: Data Controller), as the operator of the floristbt.hu online store, is committed to protecting the personal data of its users. This Privacy Policy has been prepared in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Hungarian Act CXII of 2011 on Informational Self-Determination and Freedom of Information (Information Act).
2. Definitions
Personal data: any information relating to an identified or identifiable natural person.
Processing: any operation performed on personal data (collection, recording, storage, use, erasure, etc.).
Data subject: any natural person who is identified or identifiable on the basis of personal data.
Processor: any person or organisation that processes personal data on behalf of the Data Controller.
3. Scope of Personal Data Collected
3.1. Registration and Purchase
The following personal data are required to make a purchase in our webshop:
- Last name, first name
- Email address
- Phone number
- Billing address (postcode, city, street, house number)
- Shipping address (if different from billing address)
3.2. Billing Data
For business customers: company name, tax number, registered office address.
3.3. Technical Data
The following data may be automatically collected during the use of the website: IP address, browser type, time of visit, pages viewed. This data is used for statistical purposes and cannot be linked to personal data.
4. Purpose and Legal Basis of Data Processing
| Purpose | Legal Basis | Data Concerned |
|---|---|---|
| Contract performance (order processing, delivery) | GDPR Art. 6(1)(b) — performance of a contract | Name, address, phone, email |
| Invoicing | GDPR Art. 6(1)(c) — legal obligation (VAT Act, Accounting Act) | Name, address, tax number |
| Customer service and communication | GDPR Art. 6(1)(b) — performance of a contract | Name, email, phone |
| Newsletter | GDPR Art. 6(1)(a) — consent | Name, email |
| Enforcement of legal claims | GDPR Art. 6(1)(f) — legitimate interest | Order data |
5. Retention Periods
- Contractual data: 5 years from termination of the contract (general limitation period under the Hungarian Civil Code)
- Accounting records: 8 years (Section 169 of the Accounting Act)
- Newsletter subscription: until consent is withdrawn
- Complaint handling: 5 years
6. Data Transfers and Processors
The Data Controller engages the following data processors:
| Processor | Activity | Data Processed |
|---|---|---|
| Számlázz.hu (KBOSS.hu Kft.) | Invoicing | Billing data |
| PayPal (Europe) S.à r.l. et Cie, S.C.A. | Online payment | Payment data |
| Tárhely.Eu Szolgáltató Kft. (1144 Budapest, Ormánság u. 4.) | Web hosting | All stored data |
The Data Controller does not transfer personal data to third countries (outside the EU), except where the processor provides adequate safeguards (e.g. PayPal — EU-US Data Privacy Framework).
7. Rights of Data Subjects
Under the GDPR, you have the following rights:
- Right of access (Art. 15): You may request information about what personal data we process.
- Right to rectification (Art. 16): You may request the correction of inaccurate data.
- Right to erasure (Art. 17): You may request the deletion of your data when processing is no longer necessary.
- Right to restriction of processing (Art. 18): You may request the restriction of your data processing.
- Right to data portability (Art. 20): You may request your data in a machine-readable format.
- Right to object (Art. 21): You may object to processing based on legitimate interest.
- Withdrawal of consent: You may withdraw your consent at any time (e.g. newsletter unsubscribe).
Requests may be submitted to info@floristbt.hu. We will respond within one month.
8. Legal Remedies
If you believe your rights have been infringed in the course of data processing, you may file a complaint with:
National Authority for Data Protection and Freedom of Information (NAIH)
Address: 1055 Budapest, Falk Miksa utca 9-11.
Phone: +36 1 391 1400
Email: ugyfelszolgalat@naih.hu
Website: naih.hu
You may also bring the matter before a court. Proceedings may be initiated at the regional court of your place of residence or domicile.
9. Data Security
The Data Controller applies appropriate technical and organisational measures to protect personal data:
- SSL encryption on the website (HTTPS)
- Password-protected access to data
- Regular backups
- Firewall protection
10. Cookies
The website uses cookies for its operation and to improve the user experience. For detailed information about cookies, please see our Cookie Policy.
11. Amendments
The Data Controller reserves the right to amend this Privacy Policy. Any changes will be communicated on the website.
Effective: 6 February 2026