Privacy Notice
Effective from 1 October 2026
This notice explains what personal data the operator of the fhic.hu online shop processes, for what purposes, on what legal basis and for how long, who has access to the data, and what rights you have.
This English version is a translation provided for information. In the event of any discrepancy, the Hungarian version prevails.
1. Data controller
| Item | Details |
| Name | Ventorix Services Korlátolt Felelősségű Társaság (Ventorix Services Kft.) |
| Registered office and postal address | Hóvirág utca 2., 2457 Adony, Hungary |
| Company registration number | 07-09-037305 |
| Tax number | 32987661-1-07 |
| Represented by | Erik Imre Kárász, managing director |
| info@fhic.hu (business enquiries: uzlet@fhic.hu) | |
| Phone | +36 20 216 4040 |
| Website | https://fhic.hu |
The controller is not required to appoint a data protection officer and has not appointed one. For data protection questions, you can reach us at info@fhic.hu.
2. Legal framework
- Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation, GDPR),
- Hungarian Act CXII of 2011 on the right to informational self-determination and on freedom of information,
- Hungarian Act CVIII of 2001 on electronic commerce services,
- Hungarian Act C of 2003 on electronic communications, in particular Section 155(4) on cookies,
- Hungarian Act XLVIII of 2008 on commercial advertising,
- Hungarian Act C of 2000 on accounting and Act CXXVII of 2007 on value added tax,
- Hungarian Act CLV of 1997 on consumer protection.
3. Processing activities
3.1. Orders and performance of the contract
| Purpose | Processing the order, delivering the product, communicating about the order. |
| Data processed | Name, e-mail address, phone number, billing and delivery address, products ordered, order amount and date, chosen delivery and payment method, order notes. |
| Legal basis | Performance of a contract (Article 6(1)(b) GDPR). Providing the data is required to conclude the contract; without it we cannot fulfil the order. |
| Retention | Until claims arising from the contract become time-barred, i.e. 5 years from performance (Section 6:22 of the Hungarian Civil Code). |
3.2. Accounts for business and affiliate partners
Customers cannot register in the online shop. User accounts are provided only to our business and affiliate partners.
| Purpose | Managing the partnership: partner orders, recording and settling affiliate commissions, communication. |
| Data processed | Name, company name, e-mail address, phone number, address, tax number, password (encrypted), bank account number, data on partner orders and commissions. |
| Legal basis | Performance of the contract with the partner (Article 6(1)(b) GDPR). Where the partner is a company, processing of its contact person's data is based on the controller's legitimate interest (Article 6(1)(f) GDPR). |
| Retention | Until the partnership ends, and thereafter until contractual claims become time-barred (5 years). Accounting records are kept for 8 years. |
3.3. Invoicing
| Purpose | Issuing and retaining the invoice for the purchase. |
| Data processed | Name, billing address, tax number (if any), products purchased, amount, payment method. |
| Legal basis | Compliance with a legal obligation (Article 6(1)(c) GDPR; Section 169 of the Hungarian VAT Act, Section 169(2) of the Hungarian Accounting Act). |
| Retention | 8 years from the date the invoice is issued. |
3.4. Delivery
| Purpose | Delivering the parcel. |
| Data processed | Name, delivery address or chosen pick-up point, phone number, e-mail address, and for cash on delivery the amount payable. |
| Legal basis | Performance of a contract (Article 6(1)(b) GDPR). |
| Retention | As set out in Section 3.1. Parcels are dispatched through the logistics system of Kvikk.hu Kft. Couriers also process the data under their own privacy notices. |
3.5. Online payment
| Purpose | Processing card, Google Pay and Apple Pay payments. |
| Data processed | Name, e-mail address, billing address, amount payable, transaction ID and result. Payments are processed by Stripe. Card details are handled exclusively by Stripe and are never received by us. |
| Legal basis | Performance of a contract (Article 6(1)(b) GDPR). |
| Retention | As set out in Section 3.1. |
3.6. Contacting us
| Purpose | Answering enquiries (contact form, e-mail, phone, social media messages). |
| Data processed | Name, e-mail address, phone number (if provided), content of the message. |
| Legal basis | The controller's legitimate interest in answering enquiries (Article 6(1)(f) GDPR); for questions about an order, performance of a contract (Article 6(1)(b) GDPR). |
| Retention | 1 year after the enquiry is closed. |
3.7. Complaint handling
| Purpose | Investigating and answering customer complaints. |
| Data processed | Name, home address or electronic contact details, subject and description of the complaint, order details, the complaint report and our reply. |
| Legal basis | Compliance with a legal obligation (Article 6(1)(c) GDPR; Section 17/A of the Hungarian Consumer Protection Act). |
| Retention | 3 years. |
3.8. Warranty and guarantee claims
| Purpose | Handling warranty and guarantee claims. |
| Data processed | Name, address, phone number, e-mail address, product details, date of purchase, description of the defect, the claim and how it was handled. |
| Legal basis | Compliance with a legal obligation (Article 6(1)(c) GDPR; Hungarian Decree 19/2014 (IV. 29.) NGM). |
| Retention | 3 years from the date the report is recorded. |
3.9. Withdrawal
| Purpose | Handling the exercise of the right of withdrawal and making refunds. |
| Data processed | Name, e-mail address, order number, date of withdrawal, and where needed for the refund, bank account number. |
| Legal basis | Compliance with a legal obligation (Article 6(1)(c) GDPR; Hungarian Government Decree 45/2014 (II. 26.)). |
| Retention | 5 years from the withdrawal. |
3.10. Newsletter
| Purpose | Informing you by e-mail about news, offers and new products. |
| Data processed | Name, e-mail address, date and method of subscription. |
| Legal basis | Your explicit consent (Article 6(1)(a) GDPR; Section 6 of the Hungarian Advertising Act). |
| Retention | Until you withdraw your consent. You can unsubscribe at any time using the link at the bottom of each newsletter or by e-mailing info@fhic.hu. |
3.11. Cookies and similar technologies
The website uses cookies. Cookies are small data files that your browser stores on your device. Strictly necessary cookies are used without consent under Section 155(4) of the Hungarian Electronic Communications Act. All other cookies are placed only after you consent. You can give or refuse consent in the cookie banner (Cookiebot) that appears when you first visit the site. You can change or withdraw your settings at any time using the cookie settings icon or link on the site.
| Cookie | Provider | Type | Purpose | Duration |
| woocommerce_cart_hash, woocommerce_items_in_cart | fhic.hu | Necessary | Keeps the contents of the cart | Session |
| wp_woocommerce_session_* | fhic.hu | Necessary | Identifies the shopping session | 2 days |
| CookieConsent | Cookiebot | Necessary | Stores your cookie consent | 1 year |
| pll_language | fhic.hu (Polylang) | Necessary | Remembers the selected language (HU/EN) | 1 year |
| _ga, _ga_* | Statistics | Visitor statistics (Google Analytics) | 2 years | |
| _fbp | Meta | Marketing | Measuring and targeting ads (Meta pixel) | 3 months |
| Legal basis | Necessary cookies: the controller's legitimate interest in operating the website (Article 6(1)(f) GDPR; Section 155(4) of the Hungarian Electronic Communications Act). Statistics and marketing cookies: your consent (Article 6(1)(a) GDPR). |
Google Analytics. Statistical data is collected using the service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google Analytics does not store IP addresses. The data is used in aggregated form for statistical purposes.
Meta pixel. We use the Meta pixel to measure the effectiveness of our Facebook and Instagram ads and to show ads to people who have previously visited the website. Data collected by the pixel is transmitted to Meta Platforms Ireland Limited (Merrion Road, Dublin 4, D04 X2K5, Ireland). For the collection and transmission of this data, Meta and Ventorix Services Kft. are joint controllers. Meta is solely responsible for any further processing.
3.12. Social media pages
Ventorix Services Kft. runs Facebook and Instagram pages. If you follow the page, comment or send a message, we can see your public profile data and your message on the platform. Meta's own privacy rules also apply to this data. For page statistics (Insights), Meta and Ventorix Services Kft. are joint controllers.
4. Processors and recipients
We share data only with the partners listed in the table below, to the extent necessary to provide the service. We do not share personal data with any other third party, and we do not sell it.
| Partner | Role | Data concerned |
| Sybell Informatika Kft. (Késmárk u. 7/B 2. em. 206., 1158 Budapest, Hungary; hello@sybell.hu) | Web hosting and e-mail, website operation | All data stored on the website, content of e-mails |
| Billingo Technologies Zrt. (Árbóc utca 6. I. em., 1133 Budapest, Hungary; reg. no. 01-10-140802) | Invoicing | Billing data |
| Stripe Payments Europe, Limited (1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland) | Online payment (card, Google Pay, Apple Pay) | Name, e-mail address, billing address, amount, transaction data |
| Kvikk.hu Kft. (Béke u. 43., 3264 Kisnána, Hungary; reg. no. 10-09-039300) | Logistics, managing parcel dispatch | Name, delivery address or pick-up point, phone number, e-mail address, cash-on-delivery amount |
| The courier chosen by the Buyer: GLS General Logistics Systems Hungary Kft., Magyar Posta Zrt. (MPL), Packeta Hungary Kft., FoxPost Zrt., DPD Hungária Kft. or FámaFutár | Parcel delivery | Name, delivery address or pick-up point, phone number, e-mail address, cash-on-delivery amount |
| Cybot A/S (Cookiebot; Havnegade 39, 1058 Copenhagen, Denmark) | Managing cookie consents | Consent ID, date, selected settings, anonymised IP address |
| The Rocket Science Group LLC (Mailchimp; 405 N Angier Ave NE, Atlanta, GA 30308, USA) | Sending newsletters | Name, e-mail address, data on newsletter opens and link clicks |
| Judit Németh, accountant (judinemeth@gmail.com) | Accounting | Data on invoices and accounting records |
| Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) | Visitor statistics | Cookie data, device and browsing data |
| Meta Platforms Ireland Limited (Merrion Road, Dublin 4, D04 X2K5, Ireland) | Ad measurement, social media | Cookie data, browsing data |
Couriers and payment providers may also process certain data as independent controllers under the laws that apply to them (for example anti-money laundering rules).
Where required by law, we may disclose data in response to requests from authorities (for example courts, prosecutors, investigating authorities, the Hungarian data protection authority or the consumer protection authority). In such cases we disclose only the data strictly necessary for the purpose of the request.
5. Transfers outside the European Union
We do not ourselves transfer data outside the European Union. However, the Mailchimp newsletter service stores subscriber data in the United States, and Google, Meta and Stripe may also process data in the United States. These companies participate in the EU–US Data Privacy Framework, for which the European Commission has adopted an adequacy decision, so these transfers are lawful under Article 45 GDPR.
6. Data security
The website is accessed over an encrypted (HTTPS) connection. Only those who need the data to perform their tasks have access to it. Our systems are password-protected and regularly updated. If a personal data breach occurs, we record it and, if it poses a risk to your rights, report it to the Hungarian data protection authority (NAIH) within 72 hours. If the risk is high, we will also notify you.
7. Your rights
You can exercise the rights below by e-mail to info@fhic.hu or by post. We will respond to your request within one month at the latest. Where necessary, this period may be extended by two further months, in which case we will inform you within the original deadline. Our response is free of charge.
- Information and access. You can ask what data we process about you and request a copy.
- Rectification. You can ask us to correct inaccurate data or complete incomplete data.
- Erasure. You can ask us to erase your data if it is no longer needed, you have withdrawn your consent, or the processing is unlawful. We do not erase data that we are legally required to keep (for example invoices).
- Restriction. You can ask us only to store your data and not use it otherwise, for example while we verify the accuracy of disputed data.
- Data portability. You can request the data processed on the basis of consent or contract in a machine-readable format, or ask us to transfer it to another controller.
- Objection. You can object to processing based on legitimate interest. You can object to direct marketing (for example the newsletter) at any time without giving reasons.
- Withdrawal of consent. You can withdraw your consent at any time. This does not affect the lawfulness of processing before the withdrawal.
The online shop does not use automated decision-making or profiling. This does not apply to Meta's advertising system, which Meta operates as an independent controller.
8. Remedies
If you believe that we have infringed your data protection rights, please contact us first so that we can resolve the issue as soon as possible. You also have the following options:
Complaint to the supervisory authority:
Hungarian National Authority for Data Protection and Freedom of Information (NAIH)
Address: Falk Miksa utca 9–11., 1055 Budapest, Hungary
Postal address: Pf. 9, 1363 Budapest, Hungary
Phone: +36 1 391 1400
E-mail: ugyfelszolgalat@naih.hu
Website: https://naih.hu
If you live in another EU member state, you may also lodge a complaint with the data protection authority of your country.
Judicial remedy: Such cases fall within the jurisdiction of the regional courts (törvényszék). At your choice, you may also bring the case before the regional court of your place of residence or stay.
9. Minors
Persons under 16 may provide personal data in the online shop only with the consent of a parent or legal guardian.
10. Changes to this notice
We may amend this notice, for example due to changes in the law or the introduction of new services. The amended notice will be published on the website. In the event of material changes, we will also notify our partners and newsletter subscribers by e-mail.
Adony, 29 September 2026
Ventorix Services Kft.