Privacy Notice
Effective from 26 August 2026
Data protection
Privacy Notice
This is an English translation provided for information. The contract is concluded in Hungarian, and in case of any discrepancy the Hungarian version is legally binding.
SpicaHome Kft. is committed to protecting your personal data. This notice explains what data we process, for what purposes and for how long, to whom we disclose it, and what rights you can exercise. We process personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR) and Hungarian Act CXII of 2011 on the Right to Informational Self-Determination (Infotv.).
1. The controller
SpicaHome Korlátolt Felelősségű Társaság · 2092 Budakeszi, Jegenye utca 1., Hungary · Company registration number: 13-09-248984 · Tax number: 33116602-2-13 · Email: info@spicahome.com · Phone: +36 30 214 0000.
The Service Provider is not required to designate a data protection officer, as its activities do not involve regular and systematic monitoring of data subjects on a large scale, nor does it process special categories of data on a large scale.
2. Data processed, purposes, legal bases and retention periods
| Processing activity | Data processed | Legal basis | Retention |
|---|---|---|---|
| Contacting us (form, email, phone) |
name, email address, any other data you voluntarily provide in your message | your consent – Art. 6(1)(a) GDPR | 1 year after your enquiry is closed, or until you withdraw your consent |
| Fulfilling orders | name, billing and delivery address, email address, phone number, order details | performance of a contract – Art. 6(1)(b) GDPR | 5 years from termination of the contract (general limitation period) |
| Invoicing and accounting | billing name and address, the mandatory content of the invoice | legal obligation – Art. 6(1)(c) GDPR; Section 169 of the Hungarian Accounting Act (Számv. tv.) | 8 years |
| Warranty claims and complaint handling | name, contact details, the content of the complaint and of our reply | legal obligation – Section 17/A of the Hungarian Consumer Protection Act (Fgytv.) | 3 years |
| Newsletter | email address, date and time of subscription (kept in our own records, without a separate newsletter service) | consent – Art. 6(1)(a) GDPR; Section 6 of the Hungarian Act on Commercial Advertising (Grtv.) | until you unsubscribe |
| Communication with resellers | contact person's name, job title, business email address and phone number | legitimate interest – Art. 6(1)(f) GDPR: maintaining the business relationship | 2 years from the end of the business relationship |
| Operation and security of the website | strictly necessary cookies, technical log data | legitimate interest – Art. 6(1)(f) GDPR | cookies: the expiry period stated for each cookie; logs: 30 days |
| Website traffic statistics (Google Analytics 4) |
anonymous identifier, device and browser data, pages visited, approximate geographic location (with IP anonymisation) | consent – Art. 6(1)(a) GDPR | 14 months |
When you place an order, providing your data is a requirement for concluding the contract: without it, we cannot fulfil your order. When you contact us or subscribe to the newsletter, providing your data is voluntary.
3. Processors and recipients
The following processors may access your data, solely to the extent and for the period necessary to carry out their tasks, under a written data processing agreement:
| Processor | Task | Data transferred |
|---|---|---|
| Hostinger International Ltd. 61 Lordou Vironos str., 6023 Larnaca, Cyprus Company registration number: HE301365 gdpr@hostinger.com |
web hosting and email services, operation of the website | all data provided through the website, technical log data |
| FoxPost Kft. 1097 Budapest, Könyves Kálmán körút 12-14., Hungary Company registration number: 01-09-423958 · Tax number: 32435119-2-43 infobiztonsag@foxpost.hu |
delivery of ordered products to parcel lockers | name, delivery details, phone number, email address, parcel ID |
| GLS General Logistics Systems Hungary Kft. 2351 Alsónémedi, GLS Európa u. 2., Hungary Company registration number: 13-09-111755 · Tax number: 12369410-2-44 info@gls-hungary.com |
home delivery of ordered products | name, delivery address, phone number, email address, parcel ID |
| Google Ireland Limited Gordon House, Barrow Street, Dublin 4, Ireland Company registration number: 368047 Privacy: policies.google.com/privacy |
anonymous website traffic statistics (Google Analytics 4) – only with your consent | anonymised IP address, device and browser data, pages viewed |
| KBOSS.hu Kft. 1031 Budapest, Záhony utca 7., Hungary Company registration number: 01-09-303201 · Tax number: 13421739-2-41 info@szamlazz.hu |
issuing and storing invoices, reporting invoice data to the Hungarian Tax Authority's Online Invoice system (NAV Online Számla) | billing name and address, tax number (if provided), the content of the invoice |
Your data is also disclosed to the Service Provider's account-holding bank, K&H Bank Zrt. (1095 Budapest, Lechner Ödön fasor 9.), for processing payments made by bank transfer, and to the Service Provider's accountant at any given time, for processing accounting records. We will provide the accountant's details on request.
What we do not use: we do not use an online card payment provider, an external newsletter service or advertising-related tracking (such as the Meta Pixel). The Service Provider keeps the list of newsletter subscribers in its own records. In Google Analytics we have switched off advertising signals and ad personalisation, and we anonymise IP addresses.
We do not disclose your data to third parties for marketing purposes, nor do we sell it. We disclose data to authorities only where required by law, and only to the extent necessary.
4. Transfers to third countries
Our hosting provider is established in Cyprus, and the operators of the courier services and of the invoicing system are established in Hungary, so these processing activities involve no transfer of data outside the European Economic Area.
In the case of Google Analytics, the controller is Google Ireland Limited (Ireland); however, data processing may also involve Google's servers in the United States. This transfer is based on the European Commission's adequacy decision (EU) 2023/1795 on the EU–US Data Privacy Framework, as well as on the standard contractual clauses and supplementary security measures applied by Google.
This transfer takes place only if you have selected the “Accept” button in the cookie banner. Without your consent, Google Analytics is not loaded and no data whatsoever is transferred to Google. You can withdraw your consent at any time using the “Change cookie settings” link at the bottom of the page.
5. Cookies
The website uses as few cookies as possible. Data that is strictly necessary for the website to function is stored without consent; everything else is stored only with your explicit consent.
| Name | Purpose | Type | Lifetime |
|---|---|---|---|
| spica_cookie_v1 | remembering your response to the cookie consent request | strictly necessary | in your browser's local storage, until withdrawn |
| _ga | anonymous visitor identifier for website traffic statistics | consent-based (Google Analytics) | 14 months |
| _ga_F2PQ0SGQ4N | maintaining session state for statistics | consent-based (Google Analytics) | 14 months |
We do not use advertising cookies. You can change your consent at any time using the Change cookie settings link at the bottom of the page, or by deleting the data stored in your browser.
6. Data security
The Service Provider applies technical and organisational measures in line with the state of the art: the website is accessible over an encrypted (HTTPS) connection, access to our systems is password-protected and limited to those who need it, data is backed up regularly, and paper documents are kept in a locked place.
In the event of a personal data breach, the Service Provider will notify the supervisory authority without undue delay and at the latest within 72 hours, unless the breach is unlikely to result in a risk. If the breach poses a high risk to your rights, we will also inform you directly.
7. Your rights
You may at any time ask us to inform you about the data we process about you and to provide a copy of it (right of access); request the rectification of inaccurate data and the completion of incomplete data; request the erasure of your data if it is no longer needed, if you withdraw your consent, or if the processing is unlawful (“right to be forgotten”); request the restriction of processing; request to receive the data we process about you by automated means on the basis of consent or a contract in a structured, machine-readable format, or to have it transmitted to another controller (data portability); and object to processing based on legitimate interests, including direct marketing, in which case we will no longer process your data for that purpose.
You may withdraw your consent at any time, without giving reasons. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal. You can unsubscribe from the newsletter with one click at the bottom of every email.
You can send your request to info@spicahome.com or to our registered office. We will respond to your request without undue delay and in any event within one month. Taking into account the complexity of the request, this period may be extended by two further months; we will inform you of any extension within one month of receiving your request.
8. Remedies
If you believe that the processing of your data infringes the law, please contact us first – we will do our best to resolve the issue quickly.
You may also lodge a complaint with the supervisory authority: Hungarian National Authority for Data Protection and Freedom of Information (Nemzeti Adatvédelmi és Információszabadság Hatóság, NAIH), 1055 Budapest, Falk Miksa utca 9–11., postal address: 1363 Budapest, Pf. 9., phone: +36 1 391 1400, email: ugyfelszolgalat@naih.hu, website: naih.hu.
If your rights are infringed, you may also take the matter to court. Such proceedings fall within the jurisdiction of the regional court (törvényszék) and, at your choice, may also be brought before the regional court for the place where you live or are staying.
9. Changes to this notice
The Service Provider reserves the right to amend this notice. The version currently in force is always available on the website. In the event of a material change, we will inform you on the website and, in the case of our newsletter subscribers, by email.
Effective: 26 August 2026 · SpicaHome Kft.