I. PRIVACY NOTICE

1. The data controller

• Company name: BYB Hungary Kft.
• Registered office: 47 Kossuth Lajos út, 2161 Csomád, Hungary
• Company registration number: 01-09-709915
• Tax number: 12917604-2-42
• Email address: info@byb.hu
• Phone number: +36 30 611 6887

2. What data we process, why, on what legal basis and for how long

A. Orders, purchases and invoicing

• Data processed: Customer name, billing address, tax number (for B2B), email address.
• Purpose: Recording the order, performing the contract, processing payment, and issuing the accounting document required by law.
• Legal basis: Performance of a contract (GDPR Article 6(1)(b)) and compliance with a legal obligation (GDPR Article 6(1)(c)).
• Retention: We keep issued invoices for 8 years, as required by the Hungarian Accounting Act.

B. Delivery and logistics

• Data processed: Name, delivery address, phone number, email address.
• Purpose: Delivering the ordered products and parcel tracking.
• Legal basis: Performance of a contract (GDPR Article 6(1)(b)).
• Retention: 5 years after the product is delivered.

C. Customer service and warranty handling

• Data processed: Name, email address, phone number, and the content of the correspondence.
• Purpose: Handling complaints and return requests.
• Legal basis: Legal obligation (GDPR Article 6(1)(c)) and legitimate interest (GDPR Article 6(1)(f)).
• Retention: In the case of a consumer complaint we keep the record for 3 years.

3. Processors and data transfers (who has access to the data?)

To run the shop we transfer data to the following partners:

• Shop engine, hosting and database: Cloudflare, Inc. (101 Townsend Street, San Francisco, CA 94107, USA). The shop runs on the Cloudflare Workers platform, and order and customer data live in the Cloudflare database (D1) and object storage (R2). The sign-in and registration forms are protected by Cloudflare Turnstile, which processes your IP address and a browser token.
• Payment: Viva.com (Viva Payment Services Single Member S.A., 18-20 Amarousiou Chalandriou, 15125 Marousi, Greece). Card details are collected directly on Viva's own payment page; no card data reaches us. What goes to Viva is the amount payable and our order reference.
• Email delivery: Plus Five Five, Inc. (trading as "Resend", 2261 Market Street #5039, San Francisco, CA 94114, USA) - sending order confirmation, dispatch, sign-in code and password reset emails.
• Domain provider: MediaCenter Hungary Kft. (6000 Kecskemét, Sosztakovics u. 3. II/1).
• Invoicing: KBOSS.hu Kft. / Számlázz.hu (1031 Budapest, Záhony utca 7.).
• Accounting: Kerek Auditor Konyvelo es Penzugyi Tanacsado Kft. (29 Janos utca, ground floor 5, 1203 Budapest, Hungary; company reg. no. 01-09-469429).
• Delivery: the couriers that deliver the parcel, depending on the delivery method chosen by the customer: GLS General Logistics Systems Hungary Kft. (home delivery, GLS ParcelShop, GLS locker), FOXPOST Zrt. (parcel locker), and for international delivery DHL Express Magyarország Kft. Storage, packing and preparing parcels for dispatch happen in our own warehouse, without a third-party logistics provider.

4. International transfers

Hosting and the database are provided by Cloudflare, Inc. and email delivery by Plus Five Five, Inc. (trading as "Resend"); both are United States providers, so your personal data may be transferred outside the European Economic Area (EEA). Such transfers rely on the Standard Contractual Clauses (SCC) adopted by the European Commission and on the EU-US Data Privacy Framework. The payment provider (Viva.com) operates within the EEA, in Greece.

5. Your rights and remedies

You have the right to ask for information, rectification, erasure or restriction of processing. With a data protection complaint please write to info@byb.hu. You may also complain to the Hungarian National Authority for Data Protection and Freedom of Information (NAIH, 9-11 Falk Miksa utca, 1055 Budapest, www.naih.hu).