Privacy policy
Privacy Policy
Last updated: 17 October 2026
1. Who is responsible for your data
The data controller is MirAbdolhay Industrial Group Kft. (registered office: 1138 Budapest, Sólyatér utca 4. B. lépcsőház, U3. ajtó, Hungary; company registration number: Cg. 01-09-449423; email: studio@simetra.art; phone: +36 20 378 8848). Simetra is our brand. We have not appointed a data protection officer, as the law does not require one for us; please write to the email above with any question.
2. What we use your data for, and why we may do so
| Purpose | Data | Legal basis | How long we keep it |
|---|---|---|---|
| Taking and delivering your order, and customer service | Name, email, phone, delivery and billing address, order details, the GLS parcel locker or ParcelShop you choose (its GLS ID and address), messages you send us | Performance of the contract (GDPR Art. 6(1)(b)) | 5 years after the contract ends (general limitation period for claims under Hungarian civil law) |
| Invoicing and accounting | Name, billing address, order and payment details | Legal obligation (GDPR Art. 6(1)(c)); Hungarian VAT and accounting law | 8 years (Hungarian Accounting Act) |
| Handling withdrawals, complaints and warranty claims | Contact details, order details, the content of your claim | Legal obligation (GDPR Art. 6(1)(c)); Hungarian consumer protection law | 3 years from the complaint or claim (Hungarian consumer protection law); longer if a dispute is ongoing |
| Payment and fraud prevention | Payment details (processed by the payment provider; we do not see your full card number), device and order data | Performance of the contract and our legitimate interest in preventing fraud (GDPR Art. 6(1)(b) and (f)) | As long as needed for the payment and any dispute about it |
| Newsletter ("Hear about the next season first") | Email address | Your consent (GDPR Art. 6(1)(a)); you can withdraw it at any time with the unsubscribe link | Until you unsubscribe |
| Running the website and remembering your bag | Strictly necessary cookies and similar technologies | Our legitimate interest in a working shop (GDPR Art. 6(1)(f)); Hungarian electronic communications law | As set out in the cookie banner |
| Statistics and advertising cookies | Device and usage data | Your consent through the cookie banner (GDPR Art. 6(1)(a)); you can change your choice at any time | As set out in the cookie banner |
If you do not give us the data needed for an order, we cannot complete it. We do not make decisions about you based solely on automated processing.
3. Who receives your data
We share your data only as far as needed with the following service providers, who process it on our behalf or as independent controllers for their own legal obligations:
- Shopify International Limited (Ireland): runs our online store and checkout. Shopify also uses some store data for its own purposes, such as fraud prevention and its Shop app, as described in its own privacy policy at shopify.com/legal/privacy.
- Payment providers (Shopify Payments and its partner banks; PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg, if you pay with PayPal): process your payment.
- GLS General Logistics Systems Hungary Kft.: delivers your parcels. To let you choose a parcel locker or ParcelShop, our bag page loads the GLS map from GLS servers (map.gls-hungary.com), so GLS receives technical data such as your IP address, and what you search for on the map. The point you choose (its GLS ID and address) is saved with your order.
- KBOSS.hu Kft. (Számlázz.hu): issues our invoices and reports them to the Hungarian tax authority (NAV), as required by law.
- Revoq (Jonas Busch, Germany), our EU withdrawal button app: receives online withdrawal statements and sends the automatic confirmation. It stores the data in the EU and deletes it after 90 days; we keep our own copy by email.
- Google Ireland Limited (Ireland): we use Google Merchant Center and the Google & YouTube sales channel to show our products on Google and YouTube, and Google Search Console to see how our website appears in Google Search. If you accept statistics or advertising cookies in the cookie banner, Google tags on our website may also record your visit and purchases (device and usage data) for measurement and advertising. Google processes this data as described in its own privacy policy at policies.google.com/privacy.
- Our accountant: keeps our books, as required by law.
- Zoho Corporation B.V. (Netherlands): our email service.
- Authorities and courts: only where the law requires it.
4. Transfers outside the EU
Some of these providers, or their own sub-processors, may process data outside the European Economic Area, for example in the United States or Canada. Where this happens, the transfer relies on an adequacy decision of the European Commission (including the EU-U.S. Data Privacy Framework) or on the European Commission's Standard Contractual Clauses.
5. Your rights
You have the right to access your data, to have it corrected or deleted, to restrict its processing, to object to processing based on our legitimate interest, to receive your data in a portable format, and to withdraw any consent at any time (without affecting processing before the withdrawal). Write to studio@simetra.art; we answer within one month.
You can also complain to the Hungarian data protection authority: Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH), 1055 Budapest, Falk Miksa utca 9-11, postal address: 1363 Budapest, Pf. 9., phone: +36 1 391 1400, email: ugyfelszolgalat@naih.hu, website: naih.hu, or to the authority of the EU country where you live, or go to court.
6. Security
We and our providers protect your data with appropriate technical and organisational measures. The checkout uses an encrypted connection.
7. Changes
If we change this policy, we publish the new version here with a new date.