Chapter 1
The data controller
| Data | Value |
|---|---|
| Name | Nagy Zoltán e.v. (sole proprietor) |
| Registered office | 2400 Dunaújváros, Lajos király körút 12. 4/2. |
| Tax number | 91023711-1-27 |
Legal document
Privacy Policy
⚠️ Informational translation This English version of the Data Processing Notice is provided as a courtesy translation for informational purposes only. The legally binding version is the Hungarian original, available at magniq.hu/adatkezeles. In the event of any discrepancy between the two versions, the Hungarian text shall prevail. Magniq currently ships within Hungary only. Orders from outside Hungary cannot be fulfilled at this time.
We hereby inform you about what personal data the magniq.hu webshop processes, for what purpose, on what legal basis, and what rights you are entitled to in connection with the data processing.
Version: v1.0 Effective: 5/5/2026 Language: EN
Chapter 2
Processed data and legal bases
Creation of a user account
| Data processing item | Content |
|---|---|
| Processed data | e-mail address, password (encrypted hash), first name, last name, telephone number, shipping address, billing address, user type (private/business) |
| For businesses | company name, tax number |
| Purpose | management of the user account, identification of orders, contact |
| Legal basis | performance of a contract – Article 6(1)(b) GDPR |
| Retention period | for the duration of the account |
Placing an order
| Data processing item | Content |
|---|---|
| Processed data | order items, shipping address, recipient's telephone number, billing address, payment method, order amount, comment |
| Purpose | fulfilment of the order, issuance of the invoice, organisation of shipping |
| Legal basis | performance of a contract – Article 6(1)(b) GDPR; accounting obligation – Article 6(1)(c) GDPR |
| Retention period | order data: 5 years; invoices: 8 years (under Act C of 2000) |
Login and session
| Data processing item | Content |
|---|---|
| Processed data | session identifier (HttpOnly cookie), user identifier, session expiry |
| Purpose | maintaining logged-in state, authentication |
| Legal basis | legitimate interest – Article 6(1)(f) GDPR |
| Retention period | 30 days, or until logout |
Chapter 3
Data processors
The data controller uses the following data processors. These organisations act exclusively according to the instructions of the data controller and do not use the data for their own purposes.
Billingo Technologies Zrt.
Online invoicing
For the purpose of issuing the invoice related to the order, it receives the customer's name, company name, tax number, billing address, and the ordered items.
Registered office: 1075 Budapest, Madách Imre út 13-14.; billingo.hu
Resend Inc.
Sending of transactional e-mails
For the delivery of order confirmation, notification, and password reset e-mails, the e-mail address and the content of the message are transferred.
Registered office: 2261 Market St #5668, San Francisco, CA 94114, USA; resend.com
Data transfer to a third country: USA – on the basis of the EU–US Data Privacy Framework.
Magyar Posta Zrt. (MPL)
Parcel delivery
In the case of packages dispatched via the MPL courier service, the customer's name, shipping address, and telephone number are transferred for the purpose of delivery.
Registered office: 1138 Budapest, Dunavirág utca 2-6.; posta.hu
DPD Hungária Kft.
Parcel delivery
In the case of packages dispatched via the DPD courier service, the customer's name, shipping address, and telephone number are transferred for the purpose of delivery.
Registered office: 1158 Budapest, Késmárk utca 14/B.; dpd.com/hu
Chapter 4
Your rights
Right of access (Article 15 GDPR)
Upon your request, we will inform you about which personal data of yours we process, for what purpose, and for how long.
Right to rectification (Article 16 GDPR)
Upon your request, we will correct inaccurate data. You can also modify your data yourself in the account settings.
Right to erasure ("right to be forgotten", Article 17 GDPR)
Upon your request, we will delete your personal data, except where data processing is required by a legal obligation (e.g. accounting retention obligation).
Right to data portability (Article 20 GDPR)
Upon your request, we will provide the data associated with your account in a machine-readable (JSON) format. This function is also accessible from the logged-in account (Export My Data).
Right to restriction of processing (Article 18 GDPR)
Upon your request, we will restrict the data processing while your objection is being assessed.
Right to object (Article 21 GDPR)
In the case of data processing based on legitimate interest, you may object to the processing.
You may exercise your rights at the e-mail address e-mail. We will respond to the request within 30 days.
Chapter 5
Data security
The data controller protects personal data with the following technical and organisational measures:
- Passwords are stored encrypted with the Argon2id algorithm – plain passwords are never recorded.
- Session identifiers are stored in cookies with HttpOnly and SameSite=Lax settings.
- Data transmission takes place over the HTTPS protocol.
- The database and the application run on a self-operated server, to which only the data controller has access.
- Administrator functions are tied to a separate authorisation level.
Chapter 6
Complaint, supervisory authority
If you believe that our data processing infringes the provisions of the GDPR or the Infotv. (the Hungarian Information Act), you may lodge a complaint with the supervisory authority:
| Contact | Data |
|---|---|
| Authority | Hungarian National Authority for Data Protection and Freedom of Information (NAIH) |
| Registered office | 1055 Budapest, Falk Miksa utca 9-11. |
| Postal address | 1363 Budapest, Pf. 9. |
| Web | naih.hu |
Before lodging a complaint, please contact the data controller directly – we can resolve most cases more quickly.
Chapter 7
Amendment of the notice
The data controller reserves the right to amend this notice. In the event of a material change, we will notify registered users by e-mail. The current version is always available on this page.
Effective: from 1 January 2026.
Chapter 8
Management of cookies
A cookie is a small data file placed in your browser by the website. The site only uses the technically necessary cookie listed below – we do not use marketing, analytics, or tracking cookies.
| Cookie name | Type | Purpose | Expiry |
|---|---|---|---|
| auth_session | Necessary | Maintaining a logged-in session | 30 days or until logout |
Disabling cookies: You can disable cookies in your browser settings at any time. Please note that if the auth_session cookie is disabled, the login function will not work.
Questions about data processing? Write to us - we reply within 30 days.