This Privacy Policy sets out the terms and conditions of the data management practices of www.mossdecoration.com, website. This website is owned and operated by Krisztina Kupi Krisztina Sole Proprietor (hereinafter referred to as the "Service Provider"). The Service Provider, as the data controller, acknowledges the contents of this legal notice as binding. It undertakes to ensure that all processing of data related to its activities complies with the requirements set out in this policy and the applicable legislation.

The purpose of this Policy is to ensure that in all areas of the services provided by the Service Provider, all individuals (hereinafter referred to as "User"), regardless of their nationality or place of residence, are guaranteed that their rights and fundamental freedoms, in particular their right to privacy, are respected when their personal data are processed by automated means (data protection).

The Service Provider respects the personal rights of the Users of the Website; the personal data recorded will be treated confidentially, in accordance with data protection legislation and international recommendations, and in accordance with this Privacy Policy.

By using the Website, the User agrees to the following and consents to the processing of data as set out below.

NAME OF THE CONTROLLER

PURPOSE OF PROCESSING

The Service Provider shall use the data provided by the User for the following purposes only

1. communication between the seller and the buyer and between the Service Provider and the User,
2. To provide the Service Provider's services in an efficient, secure and personalised manner; to enter into contracts; and to send newsletters and other marketing communications.

LEGAL BASIS FOR PROCESSING

Data processing by the Service Provider is based on the voluntary consent of the Users pursuant to Article 5 (1) (a) of Act CXII of 2011 on the Right of Informational Self-Determination and Freedom of Information (hereinafter: Infotv) and on the basis of Act CVIII of 2001 on certain issues of electronic commerce services and information society services. The consent is given by the User with regard to certain data processing by using the Website or by voluntarily providing the data in question.

DURATION OF PROCESSING

The processing of personal data provided during the registration process starts with the registration and continues until its deletion. Users can request the cancellation of their registration or the modification of their data at any time through the Contact Us menu. Upon receipt of the request, the Service Provider will permanently delete the User's personal data from its system, which cannot be restored.
The deadline for deletion of data is 3 working days after receipt of the request for deletion of registration.
The Service Provider asks the User to register on the site only if he/she has no objections or reservations regarding the above.
The above provisions do not affect the fulfilment of legal retention obligations (e.g. 8 years for account retention obligations under accounting law) or processing based on additional consents given by other means (newsletter subscription).

THE SCOPE OF THE DATA PROCESSED

Cookiek

The computer of the visitors of the Website is identified by a so-called cookie. In order to view all the content on the Service Provider's Website, the User is required to allow cookies. Accordingly, when downloading certain parts of the Website, cookies are placed on the User's computer, which are necessary for the operation of certain functions of the Website.

Cookies are small text files that are saved by your computer and browser. The User receives no further notification from the Service Provider that this has occurred. Cookies are not used to identify the User and are persistent during the session.The „Help” function in the menu bar of most browsers provides information on how to use the browser's

• how to disable cookies,
• how to accept new cookies, or
• how to instruct your browser to set a new cookie, or
• how to turn off other cookies.

In addition, Google will ensure that the User is able to opt-out of the ads displayed by Google on the page (https://www.google.hu/privacy_ads.html), you can disable cookies set by Google. The cookies used on the Websites do not cause any harm to the User's computer and do not contain any viruses.

The Service Provider uses the following cookies, grouped by lifetime:

• Session cookie: session cookies are automatically deleted after the User's visit. These cookies are used to enable the Service Provider's Website to function more efficiently and securely, i.e. they are essential to enable certain functions of the Website or certain applications to function properly.
• Persistent cookie: persistent cookies are also used by the Service Provider to improve the user experience (e.g. to provide optimised navigation). These cookies are stored for a longer period of time in the browser's cookie file. The duration of this period depends on the setting of the User's Internet browser. With the help of these cookies, the Service Provider collects data anonymously for marketing and optimisation purposes. These data are used by the Service Provider to identify the specific needs of individual customer groups and thus to send targeted advertising, i.e. to better target the information relevant to the Users. The data is not used by the Service Provider to personally identify the User. Naturally, the User may at any time opt out of the use of his/her data in this way by contacting the Service Provider at any of the contact details indicated above.

Cookies cannot be used to identify the User personally. 

TECHNICAL DATA

 During the browsing of the Website, technical information is recorded (e.g. in the form of log files containing the user's IP address, the time, the URL of the page visited). This data is logged continuously, but is not linked to the data provided during the subscription to the newsletter or during use. Users do not have access to the data obtained in this way, only the Service Provider. The Service Provider uses the above information solely for the technical operation of the Website and for statistical purposes.
For the purpose of compiling statistics on user habits, the Service Provider uses a program developed by itself or Google Analytics, Gemius, Etarget, which records the User's IP address, the time of the visit, the address of the page viewed and all other information recorded by Google Analytics, Gemius, Etarget. The Service Provider does not link the User's IP address to any other data that could be used to identify the User.

NEWSLETTER

The Service Provider allows the User to subscribe to a newsletter on the home page of the Website. The newsletter has direct marketing elements and contains advertising. The Service Provider processes the data provided by the User when subscribing to the newsletter. The User may unsubscribe from receiving the newsletter at any time, free of charge, without any restriction and without giving any reason. This can be done by letter, e-mail or by clicking on the „Unsubscribe” link at the bottom of the newsletter. In this case, the Service Provider will delete all personal data necessary for sending the newsletters from its records and will not contact the User with further newsletters or offers.

THE PERSONS WHO HAVE ACCESS TO THE DATA

The data are primarily accessible to the Service Provider or its employees, are not disclosed and are only used for the purposes set out in the Privacy Policy.

The Service Provider may use a data processor (e.g. a system operator) to operate the underlying IT system.

DATA PROCESSING

Data collection from external service providers on the website
Websites operated by the Service Provider contain links from and to external servers.
Such an external server helps to independently audit the website's traffic and other web analytics data (Google Analytics). The data controllers can provide the User with detailed information on the processing of this data.
External service providers do not have access to personal data, the Service Provider only provides access to aggregated data.

Contact: https://policies.google.com/

technologies/partner-sites

ADATABILITY
The Service Provider shall take all necessary steps to ensure the security of the personal data provided by Users on the Website, both during network communication and during the storage and safekeeping of the data.
Access to personal data is strictly limited to prevent unauthorised access, unauthorised alteration or unauthorised use of personal data.
The Service Provider's IT system and network are adequately protected against fraud, espionage, computer viruses and computer intrusions.
During the data processing, the Service Provider shall retain

1. confidentiality: it protects personal data so that only authorised persons have access to it;
2. integrity: protects the integrity of personal data and the accuracy of the way in which it is processed;

 USER RIGHTS AND REMEDIES

The Service Provider shall examine the objection within the shortest possible time from the date of the request, but not later than 15 days, decide whether the objection is justified and inform the applicant in writing of its decision.
The data subject may exercise his or her rights by contacting:

LEGAL REMEDIES
Based on the Info.tv. and the Civil Code (Act V of 2013), in connection with the processing of your data, the User may.

• to the National Authority for Data Protection and Freedom of Information (1055 Budapest, Falk Miksa utca 9-11.; www.naih.hu ) 
• or enforce your rights before the Court of Justice.

 OTHER PROVISIONS

The Service Provider reserves the right to unilaterally modify this Privacy Policy with prior notice to Users. After the amendment has entered into force, the User accepts the amended Privacy Policy by using the Service.

The effective date of this Privacy Notice is 30.03.2026.