---
title: "Privacy Policy"
url: "https://studio68.hu/en/privacy-policy/"
date: "2026-09-25"
modified: "2026-09-30"
author: "Papp Ádám"
language: "en_GB"
excerpt: "Studio 68 Promotional Gift Ltd. data management information: what personal data we process, for what purpose and how long, and what rights you have."
---

# Privacy Policy

# Privacy Policy

**Data controller details:**

**Name:**\
Stúdió 68 Reklámajándék Kft.\
**Registered office and postal address for complaints:**\
1119, Budapest, Than Károly utca 25.

**Company registration no.:** 01-09-724274\
**Tax no.:** 13219947-2-43

**e-mail:** info@studio68.hu\
**Phone:** +36 1 781 3204\
**Website:** https://studio68.hu

**Representative:** Zoltán Plicher, Managing Director

General data processing definitions

(Identical to the definitions set out in Article 4 of the GDPR) controller: the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;

processing: any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction; processor: a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;

personal data: any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural

person;

consent: any freely given, specific, informed and unambiguous indication of the data subject’s wishes.

Data processing related to the operation of the webshop

**Cookies:** Stúdió 68 Kft. uses so-called cookies on its website. These pieces of information, consisting of letters and numbers, are sent by our website to your browser in order to save your settings. Only a small portion of them contains personal information, so they are not suitable for identifying you; you simply receive an individually generated identifier, which is stored on your device in order to ensure that it can be recognised.

Legal background and legal basis of cookies: The legal basis for the processing is your consent pursuant to Article 6(1)(a) of the Regulation (GDPR).\
Main characteristics of the cookies used by the website: Strictly necessary cookies: these cookies are essential for using the website and enable its basic functions. Without them, many features of the site will not be available to you. The lifetime of this type of cookie is limited to the duration of the session.

**Session cookie:** These cookies store the visitor’s location, browser language and payment currency; they expire when the browser is closed or after a maximum of 2 hours. Lifetime: 60 days.

**Mobile version, design cookie:** Detects the device used by the visitor and switches to full view on mobile. Lifetime: 365 days.\
Cookie acceptance cookie: On arriving at the site, you accept the statement on the storage of cookies in the notification window. Lifetime: 365 days.

**Shopping cart cookie:** Records the products placed in the cart. Lifetime: 365 days. employee_login_last_email: stores the e-mail address used at login until the browser is closed. Data processed for the purpose of concluding and performing a contract. Several data processing cases may arise for the purpose of concluding and performing a contract.\
Please note that data processing related to complaint handling and warranty administration only takes place if you exercise one of these rights. If you do not make a purchase through the webshop but are only a visitor, the provisions on data processing for marketing purposes may apply to you, provided that you give us your consent for marketing purposes.

Data processing for the purpose of concluding and performing a contract in more detail: Contact – for example, if you contact us with a question about a product by e-mail, via the contact form or by telephone.\
Prior contact is not mandatory; you can order from the webshop at any time without it.\
Data processed: The data you provide when contacting us: name, e-mail address, telephone number. Duration of processing: We only process the data until the enquiry has been closed.

**Legal basis for processing**

Your voluntary consent, given to the Controller by contacting us. \[Processing pursuant to Article 6(1)(a) of the Regulation (GDPR)\]

**Registration on the website**\
By storing the data provided during registration, the Controller can provide a more convenient service (e.g. the data subject does not need to enter their details again when making a new purchase). Registration is not a precondition for concluding a contract.

**Data processed**
In the course of processing, the Controller processes your name, address, telephone number, e-mail address, the characteristics of the purchased product and the date of purchase.

Duration of processing\
Until your consent is withdrawn.\
Legal basis for processing\
Your voluntary consent, given to the Controller by registering \[Processing pursuant to Article 6(1)(a) of the Regulation (GDPR)\]Order processingIn the course of processing orders, data processing activities are necessary for the performance of the contract\
Data processed

In the course of processing, the Controller processes your name, the address provided, telephone number, e-mail address, the characteristics of the purchased product, the order number and the date of purchase. If you have placed an order in the webshop, the processing and provision of this data is essential for the performance of the contract.

Duration of processing\
We process the data for 5 years, in line with the limitation period under civil law.\
Legal basis for processing\
Performance of the contract. \[Processing pursuant to Article 6(1)(b) of the Regulation (GDPR)\]\
Issuing invoices\
The data processing is carried out in order to issue invoices in compliance with the law and to fulfil the obligation to retain accounting documents. Under Section 169(1)–(2) of the Accounting Act, business entities must retain the accounting documents that directly and indirectly support their bookkeeping records.

Data processed\
Name, address, e-mail address, telephone number\
Duration of processing\
Under Section 169(2) of the Accounting Act, issued invoices must be retained for 8 years from the date of issue.\
Legal basis for processing\
Under Section 159(1) of Act CXXVII of 2007 on Value Added Tax, issuing an invoice is mandatory, and under Section 169(2) of Act C of 2000 on Accounting it must be retained for 8 years \[Processing pursuant to Article 6(1)(c) of the Regulation (GDPR)\].\
Data processing related to the delivery of goods\
The data processing is carried out in order to deliver the ordered product.

Data processed\
Name, address, e-mail address, telephone number, data provided under other information (e.g. doorbell, name of workplace, …)\
Duration of processing\
The Controller processes the data for the duration of the delivery of the ordered goods.\
Legal basis for processing\
Performance of the contract \[Processing pursuant to Article 6(1)(b) of the Regulation (GDPR)\].

**Warranty administration**\
The data processing is carried out in order to handle warranty claims. If you have requested warranty administration, the processing and provision of the data is essential.

Data processed\
Customer’s name, telephone number, e-mail address and the content of the complaint.\
Duration of processing\
Warranty complaints are retained for 5 years under the Consumer Protection Act.\
Legal basis for processing\
Whether you contact us regarding a warranty matter is your voluntary decision; however, if you do contact us, we are obliged to retain the complaint for 5 years under Section 17/A(7) of Act CLV of 1997 on Consumer Protection \[Processing pursuant to Article 6(1)(c) of the Regulation (GDPR)\]\
Handling of other consumer complaints\
The data processing is carried out in order to handle consumer complaints. If you have contacted us with a complaint, the processing and provision of the data is essential.

Data processed\
Customer’s name, telephone number, e-mail address, content of the complaint.\
Duration of processing\
Warranty complaints are retained for 5 years under the Consumer Protection Act.\
Legal basis for processing\
Whether you contact us with a complaint is your voluntary decision; however, if you do contact us, we are obliged to retain the complaint for 5 years under Section 17/A(7) of Act CLV of 1997 on Consumer Protection \[Processing pursuant to Article 6(1)(c) of the Regulation (GDPR)\].\
Data processed in connection with the verifiability of consent\
During registration, ordering and newsletter subscription, the IT system stores the technical data related to consent so that it can be proven later.

Data processed\
The time of consent and the IP address of the data subject.\
Duration of processing\
Due to legal requirements, it must be possible to prove consent at a later date; therefore, the data is stored for the limitation period following the end of the processing.\
Legal basis for processing\
This obligation is laid down in Article 7(1) of the Regulation (GDPR). \[Processing pursuant to Article 6(1)(c) of the Regulation (GDPR)\]Data processing for marketing purposes\
Data processing related to sending newsletters

Data processed\
Name, e-mail address\
Duration of processing\
Until the data subject withdraws their consent.\
Legal basis for processing\
Your voluntary consent, given to the Controller by subscribing to the newsletter \[Processing pursuant to Article 6(1)(a) of the Regulation (GDPR)\]Remarketing\
The data processing, as a remarketing activity, is carried out by means of cookies.\
Data processedData processed by the cookies specified in the cookie notice. Duration of processingThe data retention period of the given cookie; more information is available here: Google general cookie notice: https://www.google.com/policies/technologies/types/Google\
Analytics\
notice: https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage?hl=huFacebook\
notice: https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screenLegal basis for processing\
Your voluntary consent, given to the Controller by using the website \[Processing pursuant to Article 6(1)(a) of the Regulation (GDPR)\].

**Prize draw**

The data processing is carried out in order to run the prize draw.\
Data processed\
Name, e-mail address, telephone number.\
Duration of processing\
The data will be deleted after the prize draw has closed, except for the winner’s data, which the Controller is obliged to retain for 8 years under the Accounting Act.\
Legal basis for processing\
Your voluntary consent, given to the Controller by using the website. \[Processing pursuant to Article 6(1)(a) of the Regulation (GDPR)\]

**Other data processing**\
If the Controller wishes to carry out further data processing, it will provide prior information on the essential circumstances of the processing (the legal background and legal basis of the processing, the purpose of the processing, the scope of the data processed and the duration of the processing). Please note that the Controller must comply with written requests for data from authorities based on statutory authorisation. In accordance with Section 15(2)–(3) of the Info Act, the Controller keeps a record of data transfers (to which authority, what personal data, on what legal basis and when the Controller transferred it), the content of which the Controller will disclose to you upon request, unless such disclosure is excluded by law.\
Use of data processors and their activities related to data processing

**Data processing for the storage of personal data**\
Name of the processor: INTER.HU Kft.\
Contact details of the processor:\
Phone: E-mail: info@inter.hu Registered office: 2030 Érd, Diósdi út 18.\
The Processor stores the personal data on the basis of its contract with the Controller. It is not entitled to access the personal data.\
Processing activities related to the delivery of goods\
Processing activities related to sending newsletters\
Name of the company operating the newsletter system: Stúdió 68 Kft.\
Registered office of the company operating the newsletter system: 1119 Budapest, Than Károly utca 25.\
Phone number of the company operating the newsletter system: +36 1 781 3204\
E-mail address of the company operating the newsletter system: info@studio68.hu

On the basis of its contract with the Controller, the Processor assists in sending out newsletters. In doing so, the Processor processes the data subject’s name and e-mail address to the extent necessary for sending the newsletter and deletes them without delay at the data subject’s request.\
Data processing related to accounting\
Name of the processor: N Balance and Tax Kft.\
Registered office of the processor: 1201 Budapest, Alsóteleki utca 2/A. I. em. 4.\
Phone number of the processor: E-mail address of the processor:\
On the basis of a written contract with the Controller, the Processor assists in the bookkeeping of accounting documents. In doing so, the Processor processes the data subject’s name and address to the extent necessary for the accounting records and for the period specified in Section 169(2) of the Accounting Act, after which it deletes them without delay.

**Data processing related to invoicing**\
Name of the processor: Stúdió 68 Kft.\
Registered office of the processor: 1119 Budapest, Than Károly utca 25.\
Phone number of the processor: +36 1 781 3204\
E-mail address of the processor: info@studio68.hu

On the basis of its contract with the Controller, the Processor assists in keeping records of accounting documents. In doing so, the Processor processes the data subject’s name and address to the extent necessary for the accounting records and for the period specified in Section 169(2) of the Accounting Act, after which it deletes them.\
Data processing related to finances and bank transfers\
Name of the processor: K&H Bank\
Registered office of the processor: 1095 Budapest, Lechner Ödön fasor 9.\
Phone number of the processor: +36 1 328 9000

On the basis of its contract with the Controller, the Processor assists in executing online payments. In doing so, the Processor processes the data subject’s billing name and address and the order number and date within the limitation period under civil law.\
Your rights in relation to data processing\
During the period of processing, you have the following rights under the provisions of the Regulation (GDPR): the right to withdraw consent; access to personal data and to information related to the processing; the right to rectification; restriction of processing; the right to erasure; the right to object; the right to data portability.

If you wish to exercise your rights, this involves identifying you, and the Controller will necessarily need to communicate with you. Personal data will therefore be required for identification (although identification may only be based on data that the Controller already processes about you), and your complaint regarding data processing will be available in the Controller’s e-mail account for the period specified in this notice in relation to complaints. If you have been our customer and wish to identify yourself for the purpose of complaint handling or warranty administration, please also provide your order ID. This will allow us to identify you as a customer as well.\
The Controller will respond to complaints regarding data processing within 30 days at the latest.

**The right to withdraw consent**\
You are entitled to withdraw your consent to data processing at any time, in which case the data provided will be deleted from our systems. Please note, however, that in the case of an order not yet fulfilled, withdrawal may mean that we are unable to deliver to you. In addition, if the purchase has already been completed, we cannot delete the invoicing data from our systems due to accounting regulations, and if you have an outstanding debt towards us, we may continue to process your data even after the withdrawal of consent on the basis of our legitimate interest in recovering the claim.

**Access to personal data**\
You are entitled to obtain confirmation from the Controller as to whether or not your personal data is being processed, and, where that is the case, you are entitled to access the personal data processed and to be informed by the Controller of the following: the purposes of the processing; the categories of personal data processed about you; information on the recipients or categories of recipients to whom the personal data has been or will be disclosed by the Controller; the envisaged period for which the personal data will be stored or, if this is not possible, the criteria used to determine that period; your right to request from the Controller rectification or erasure of personal data concerning you or\
restriction of its processing, and, in the case of processing based on legitimate interest, to object to the processing of such personal data;\
the right to lodge a complaint with a supervisory authority;\
where the data was not collected from you, any available information as to its source; the existence of automated decision-making (where such a procedure is applied), including profiling, and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you.\
The purpose of exercising this right may be to establish and verify the lawfulness of the processing; therefore, in the case of repeated requests for information, the Controller may charge a reasonable fee for providing the information.

The Controller provides access to personal data by sending you the personal data processed and the related information by e-mail after identifying you. If you have registered, we provide access by allowing you to view and check the personal data processed about you by logging in to your user account.

Please indicate in your request whether you are requesting access to your personal data or information related to the processing.

**Right to rectification**\
You are entitled to have the Controller rectify inaccurate personal data concerning you without delay at your request.

**Right to restriction of processing**\
You are entitled to have the Controller restrict processing at your request where one of the following applies: you contest the accuracy of the personal data, in which case the restriction applies for a period enabling the Controller to verify the accuracy of the personal data (if the accurate data can be established immediately, no restriction will take place); the processing is unlawful, but you oppose the erasure of the data for any reason (for example, because the data is important to you for enforcing a legal claim), and therefore request the restriction of its use instead of its erasure; the Controller no longer needs the personal data for the stated purposes of processing, but you require it for the establishment, exercise or defence of legal claims; or you have objected to the processing, but the Controller’s legitimate interest may also justify the processing, in which case the processing must be restricted until it has been determined whether the Controller’s legitimate grounds override your legitimate grounds.\
Where processing has been restricted, such personal data may, with the exception of storage, only be processed with the data subject’s consent, or for the establishment, exercise or defence of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or of a Member State.

The Controller will inform you in advance (at least 3 working days before the restriction is lifted) of the lifting of the restriction of processing.

**Right to erasure – right to be forgotten**\
You are entitled to have the Controller erase personal data concerning you without undue delay where one of the following grounds applies:\
the personal data is no longer necessary for the purposes for which it was collected or otherwise processed by the Controller; you withdraw your consent and there is no other legal basis for the processing; you object to processing based on legitimate interest and there are no overriding legitimate grounds (i.e. legitimate interest) for the processing; the personal data has been unlawfully processed by the Controller and this has been established on the basis of a complaint; the personal data must be erased for compliance with a legal obligation under Union or Member State law to which the Controller is subject.

Where the Controller has made public the personal data concerning you on any lawful ground and is obliged to erase it for any of the reasons set out above, it shall, taking account of available technology and the cost of implementation, take reasonable steps – including technical measures – to inform other controllers processing the data that you have requested the erasure of any links to, or copies or replications of, that personal data. Erasure does not apply to the extent that processing is necessary: for exercising the right of freedom of expression and information; for compliance with an obligation under Union or Member State law to which the controller is subject that requires processing of personal data (such as processing in the context of invoicing, as retention of invoices is required by law), or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller; for the establishment, exercise or defence of legal claims (e.g. if the Controller has a claim against you that has not yet been settled, or a consumer or data protection complaint is being handled).

**Right to object**\
You are entitled to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on legitimate interest.\
In this case, the Controller may no longer process the personal data unless it demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms, or which relate to the establishment, exercise or defence of legal claims.

Where personal data is processed for direct marketing purposes, you are entitled to object at any time to the processing of personal data concerning you for such purposes, including profiling to the extent that it is related to such direct marketing.\
If you object to the processing of your personal data for direct marketing purposes, your personal data shall no longer be processed for such purposes.

R**ight to data portability**\
Where processing is carried out by automated means, or where processing is based on your voluntary consent, you have the right to request from the Controller the data you have provided to the Controller, which the Controller will make available to you in XML, JSON or CSV format; where technically feasible, you may request that the Controller transmit the data in this form to another controller.

**Automated decision-making**\
You have the right not to be subject to a decision based solely on automated processing (including profiling) which produces legal effects concerning you or similarly significantly affects you. In such cases, the Controller shall implement suitable measures to safeguard the data subject’s rights, freedoms and legitimate interests, including at least the data subject’s right to obtain human intervention on the part of the controller, to express their point of view and to contest the decision.

The above shall not apply if the decision: is necessary for entering into, or performance of, a contract between you and the controller; is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or is based on your explicit consent.\
Registration in the data protection register Under the provisions of the Info Act, the Controller was required to notify certain data processing operations to the data protection register. This notification obligation ceased on 25 May 2018.\
NAIH registration number obtained before 25 May 2018: NAIH-68083NAIH-68083 1119 Budapest Stúdió 68 Reklámajándék Kft.\
Newsletter sending, data processing for marketing purposes -NAIH-40090 products and services online (e.g. newsletter). www.studio68.hu\
Consent of the data subject name, address, e-mail address, postal address, telephone number\
Erasure at the request of the data subject collected directly from the data subject consent of the data subject newsletter readers, survey respondents, customers NAIH-68083 Data security measures.

The Controller declares that it has taken appropriate security measures to protect personal data against unauthorised access, alteration, transmission, disclosure, erasure or destruction, as well as accidental destruction and damage, and against becoming inaccessible due to changes in the technology used.

The Controller does everything within its organisational and technical capabilities to ensure that its data processors also take appropriate data security measures when working with your personal data.

**Legal remedies**\
If you believe that the Controller has infringed any statutory provision relating to data processing or has failed to comply with any of your requests, you may initiate an investigation procedure by the Hungarian National Authority for Data Protection and Freedom of Information (NAIH) to put an end to the allegedly unlawful processing (postal address: 1530 Budapest, Pf.: 5., e-mail: ugyfelszolgalat@naih.hu).

We also inform you that in the event of an infringement of the statutory provisions relating to data processing, or if the Controller has failed to comply with any of your requests, you may bring civil proceedings against the Controller before a court.

**Amendments to the Privacy Notice**\
The Controller reserves the right to amend this Privacy Notice in a manner that does not affect the purpose and legal basis of the processing.\
By using the website after the amendment has entered into force, you accept the amended Privacy Notice.

If the Controller intends to further process the collected data for a purpose other than that for which they were collected, it shall, prior to such further processing, inform you of the purpose of the processing and of the following information: the period for which the personal data will be stored or, if that is not possible, the criteria used to determine that period;\
your right to request from the Controller access to, rectification or erasure of your personal data or restriction of processing, and, in the case of processing based on legitimate interest, to object to the processing of your personal data, and, in the case of processing based on consent or a contractual relationship, to request the exercise of your right to data portability; in the case of processing based on consent, that you may withdraw your consent at any time; your right to lodge a complaint with a supervisory authority; whether the provision of personal data is a statutory or contractual requirement or a requirement necessary to enter into a contract, whether you are obliged to provide the personal data, and the possible consequences of failure to provide such data; the existence of automated decision-making (if such a procedure is used), including profiling, and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you.

Processing may only begin thereafter; where the legal basis for processing is consent, in addition to being informed, you must also give your consent to the processing. This document contains all relevant data processing information relating to the operation of the webshop, in accordance with Regulation (EU) 2016/679 of the European Union, the General Data Protection Regulation (hereinafter: the Regulation (GDPR)), and Act CXII of 2011 (hereinafter: the Info Act).

**Stúdió 68 Reklámajándék Kft.**\
Budapest, 11 April 2021