Privacy notice
What personal data I handle, why, and for how long.
Last updated:
Draft — this text is still being finalised.
Who handles your data
- Controller: (to be filled in — name, registration number, address)
- Email: hello@dragonettecrochet.com
A data protection officer is not required and has not been appointed.
What, why, how long
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| name, email, shipping and billing address | fulfilling your order | performance of a contract | 5 years from the contract |
| billing details | issuing and keeping the invoice | legal obligation | 8 years (Hungarian accounting law) |
| email address (newsletter) | sending the newsletter | consent | until you unsubscribe |
| message sent by email | answering your question | legitimate interest | 1 year after the exchange ends |
The site uses no analytics or marketing cookies and builds no visitor profile. That is why there is no cookie banner.
Who else sees it
Only those without whom the service could not run:
- Stripe Payments Europe, Ltd. (Ireland) — payment processing
- Cloudflare, Inc. (USA) — hosting and content delivery
- postal or courier service (to be filled in) — delivering the parcel
- accountant (to be filled in) — processing invoices
- newsletter provider (to be filled in, if a newsletter is added)
Where data goes to a third country (the USA), the safeguards are an adequacy decision of the European Commission or standard contractual clauses.
Your rights
You may request access to your data, its rectification or erasure, restriction of processing, portability, and you may object to processing based on legitimate interest. You may withdraw consent at any time; this does not affect processing before the withdrawal.
Ask for any of these at hello@dragonettecrochet.com; I reply within 30 days.
Where to complain
You may complain to the Hungarian National Authority for Data Protection and Freedom of Information (1055 Budapest, Falk Miksa utca 9-11., ugyfelszolgalat@naih.hu), or go to court.