Privacy Policy – S&N Bomba food Kft
Effective Date: July 15, 2022
S&N Bomba food Kft (“Company,” “we,” “us,” “our”) respects your privacy and is committed to protecting your personal data in accordance with applicable Hungarian laws, particularly the EU General Data Protection Regulation (GDPR 2016/679/EU) and Act CXII of 2011 on the Right of Informational Self-Determination and on Freedom of Information.
1. Data Controller Information
Name of Data Controller: S&N Bomba food Kft
Registered Address: 1073 Budapest, Erzsébet körút 44-46, 2nd floor, door 15
Email:
snbombafood@gmail.comPhone: +36 31 200 3993
2. Personal Data We Process
We collect and process the following personal data:
- Identification Data: name, date of birth (if necessary)
- Contact Data: email address, phone number, postal address
- Account Data: username, password (encrypted), order history
- Payment Data: payment methods (e.g., credit card, online payments) — payment processing is handled securely via payment providers; we do not store payment card details directly
- Delivery Data: delivery address, delivery preferences
- Technical Data: IP address, device type, browser, cookies and similar technologies
- Communication Data: customer support inquiries, email correspondence
3. Purpose and Legal Basis of Data Processing
We process your data based on the following purposes and legal grounds:
Purpose of Processing | Legal Basis |
Performance of contract (order processing) | Performance of a contract |
Communication with customers | Performance of a contract |
Service improvement and marketing | Legitimate interest of the Company |
Compliance with legal obligations | Legal obligation |
Security and fraud prevention | Legitimate interest of the Company |
Payment processing | Performance of a contract |
Website analytics and behavioral analysis | Your consent (where required) |
4. Data Sharing and Processors
Your data may be shared with:
- Courier and delivery services — to fulfill your order
- Payment service providers — to process payments
- IT service providers — for website and application maintenance under confidentiality agreements
- Authorities — when required by law
- Analytics providers (e.g., Google Analytics) — only with your consent
We do not sell or share your personal data with third parties for marketing purposes without your explicit consent.
5. International Data Transfers
If your data is transferred outside the European Economic Area (EEA), we ensure compliance with GDPR by using standard contractual clauses or other appropriate safeguards.
6. Data Retention Periods
We retain your data only as long as necessary to fulfill processing purposes and comply with legal requirements:
- Order and payment data: 5 years (for accounting and tax purposes)
- Account data: for the duration of account use plus 1 year after account deletion
- Analytics data: up to 2 years or until you withdraw your consent
7. Your Rights
You have the following rights regarding your personal data:
- Request access to your data
- Request correction of inaccurate or incomplete data
- Request deletion of data where no legal grounds exist for further processing
- Request restriction of processing
- Request data portability
- Object to processing based on legitimate interest or direct marketing
- Withdraw your consent at any time
- Lodge a complaint with the supervisory authority (Hungarian National Authority for Data Protection and Freedom of Information – NAIH, www.naih.hu)
To exercise your rights, please contact us using the details in Section 1.
8. Data Security
We implement technical and organizational measures to protect your data:
- Encryption of data during transmission (SSL/TLS)
- Access restrictions based on data handling authorizations
- Regular security audits and system testing
- Employee training on data protection
9. Cookies Policy
Our website uses cookies to ensure functionality, improve performance, and collect analytics data. We request your consent for cookie usage, which you can withdraw at any time via your browser settings.
10. Changes to this Privacy Policy
We may update this Privacy Policy to reflect legal or business changes. Significant changes will be communicated via our website or email.