Privacy Policy

This Privacy Policy informs you about how Shinster (operated by Kuti József EV. as the Data Controller) processes personal data through shinster.com and its related services, in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Hungarian law.

1. Data Controller

Details of the Data Controller:

2. Data we process

2.1 Order fulfilment

• Data: name, email, phone, shipping and billing address, ordered items, uploaded custom design images.
• Purpose: processing and shipping the order, invoicing, customer communication.
• Legal basis: performance of a contract (GDPR Art. 6(1)(b)).
• Retention: 8 years (Hungarian Accounting Act § 169).

2.2 Contact form

• Data: name, email, phone, message content.
• Purpose: responding to your inquiry.
• Legal basis: consent (GDPR Art. 6(1)(a)).
• Retention: 1 year after response.

2.3 Newsletter (if you subscribe)

• Data: name, email.
• Purpose: marketing communication.
• Legal basis: consent, which can be withdrawn at any time.

2.4 Cookies

The website uses cookies necessary for its operation (e.g. to maintain cart contents). See the cookie notice on the site for details.

2.5 Session recording & usage analytics

• Data: recordings of your interactions on the site (mouse and click movements, scrolling, pages viewed, device and browser data, approximate location based on IP address). Recording is configured to exclude entered passwords and payment card details.
• Purpose: analysing and improving the user experience, detecting errors and improving usability through anonymised or pseudonymised session replays.
• Legal basis: your prior consent (GDPR Art. 6(1)(a)), given via the cookie notice and withdrawable at any time. This processing only takes place if you give consent.
• Retention: recorded sessions are stored for up to 12 months, then deleted.

3. Data processors

We use the following processors to provide our services:

• Stripe Payments Europe Ltd. (1 Grand Canal Street Lower, Dublin, Ireland), online card payments.
• Packeta Hungary Kft., pickup point delivery.
• Hungarian Post / MPL or other couriers, home delivery.
• Resend, Inc., transactional email delivery.
• Base44, hosting platform for the web store, database and session recording.

4. Your rights

You have the following rights regarding your personal data:

• right to information,
• right of access,
• right to rectification,
• right to erasure ("right to be forgotten"),
• right to restriction of processing,
• right to data portability,
• right to object,
• right to withdraw consent.

You may exercise these rights by emailing info@shinster.com. We will respond within 30 days.

5. Security

We apply appropriate technical and organisational measures to protect your data. Payment transactions are processed through Stripe over SSL-encrypted channels; we do not have access to card details.

6. Complaints

You may file a complaint with the Hungarian Data Protection Authority:

NAIH, 1055 Budapest, Falk Miksa utca 9-11., Hungary
Phone: +36 1 391 1400
Email: ugyfelszolgalat@naih.hu
Web: naih.hu

You also have the right to seek judicial remedy.