1. Data Controller

Name of Data Controller:
Roland Ottó Popa, sole proprietor (rideshinestore.com)

Short name of Data Controller:
rideshinestore.com

Registered office of Data Controller:
2040 Budaörs, Kisfaludy utca 33/1., Hungary

E-mail address of Data Controller:
info@rideshinestore.com

Registration number of Data Controller:
60323118

Tax number of Data Controller:
60694268-1-33

Representative of the Data Controller:
Roland Ottó Popa

rideshinestore.com is not required to appoint a Data Protection Officer pursuant to Section 25/L of the Info Act and Article 37 of the GDPR. For any data protection–related questions, you may contact Roland Ottó Popa at info@rideshinestore.com.

2. Applicable Legislation

Our Privacy Policy and data processing activities comply with the following laws and regulations:

• Regulation (EU) 2016/679 (GDPR) – General Data Protection Regulation

• Act CXII of 2011 on Informational Self-Determination and Freedom of Information (Info Act)

• Act V of 2013 on the Civil Code (Ptk.)

3. Purpose and Principles of this Privacy Policy

The purpose of this Privacy Policy is to provide you, as a Data Subject, with clear, transparent, and comprehensive information regarding the processing and handling of your personal data in connection with any activity or service provided by rideshinestore.com, in accordance with the applicable laws.
This does not include processing related to individuals employed by, or otherwise performing work for, rideshinestore.com.

In line with this purpose, we ensure respect for your right to personal data protection, based on the following principles:

• Personal data is processed lawfully, fairly, and transparently.

• Data is collected for specific and legitimate purposes and is not processed in a manner incompatible with those purposes.

• The personal data collected is adequate, relevant, and limited to what is necessary.

• We take all reasonable measures to ensure that processed data is accurate and up-to-date.

• Personal data is stored only for as long as necessary for the purposes of processing.

• We ensure appropriate security of personal data against unauthorized access, loss, destruction, or damage.

4. Definitions

(I will keep the definitions accurate and legally consistent.)

Data Processing: Any operation performed on personal data, regardless of the method used (collection, recording, storage, retrieval, transmission, deletion, etc.).

Data Controller: The individual or entity that defines the purpose and means of data processing.

Data Processor: An individual or entity processing personal data on behalf of the Data Controller.

Data Protection Incident: Any breach of security that results in accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access to personal data.

Recipient: Any individual or entity to whom personal data is disclosed.

Data Subject: Any identified or identifiable natural person.

Supervisory Authority: National Authority for Data Protection and Freedom of Information (NAIH), Hungary.

Consent: A Data Subject’s freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data.

Personal Data: Any information relating to an identifiable natural person.

5. Categories of Personal Data Processed, Legal Basis, Purpose, Retention Period

5.1. Online Purchases

(table translated fully and accurately)

Personal data:
Name, phone number, e-mail address, residential or mailing address, billing address, account details, bank account number, and any additional personal data provided by the Data Subject.

Purpose of processing:
Order fulfillment, delivery, invoicing, returns, warranty claims, and payment administration.

Legal basis:
Performance of a contract; legitimate interest of rideshinestore.com; Data Subject’s consent
(Article 6(1)(a) GDPR)

Retention period:
Data is stored only as long as necessary for contractual and consumer obligations.
Billing data is retained for 8 years from invoice issuance.

Recipients:
rideshinestore.com, customer service, online payment service provider.

5.2. Marketing, Promotions, and Newsletters

Personal data:
Name, phone number, e-mail address, account details, IP address, and other personal data voluntarily provided.

Purpose:
Sending marketing materials (newsletters, promotions, etc.) through electronic channels.

Legal basis:
Legitimate interest; Data Subject’s consent
(Article 6(1)(a) GDPR)

Retention period:
Data is kept only as long as necessary to provide marketing communications.

Recipients:
rideshinestore.com, marketing personnel and contracted partners.

5.3. User Account (if applicable)

Personal data:
Name, phone number, e-mail address, date of birth, purchase history, and other data provided by the Data Subject.

Purpose:
Creation and operation of the user account, and facilitating user-based purchases.

Legal basis:
Consent
(Article 6(1)(a) GDPR)

Retention period:
Stored as long as the account is active.

Recipients:
rideshinestore.com, website operator.

5.4. Customer Support

Personal data:
Name, phone number, e-mail address, date of birth, purchase history, bank account number, and other data provided.

Purpose:
Handling complaints and warranty-related matters.

Legal basis:
Consent
(Article 6(1)(a) GDPR)

Retention period:
Kept as long as necessary to support your case and manage potential legal claims.

Recipients:
rideshinestore.com, customer service personnel.

5.5. Website-Related Data Processing

Personal data:
IP address, time of visit, e-mail address.

Purpose:
Ensuring proper and secure website operation, identifying malicious visitors.

Legal basis:
Legitimate interest – protection of data and website security
(Article 6(1)(f) GDPR)

Retention period:
3 months

Recipients:
rideshinestore.com, IT operatives and system security personnel.

5.6. Digitally Shared Content

Personal data:
Username, photos, videos.

Purpose:
To enable us to share your photos or videos on rideshinestore.com’s website or social media platforms.

Legal basis:
Legitimate interest; Consent
(Article 6(1)(a) GDPR)

Retention period:
Up to 24 months from publication.

Recipients:
rideshinestore.com, website/social media administrators.

6. Data Security Measures

Your personal data is stored digitally and accessible only to authorized recipients. Paper documents containing personal data are digitized and stored electronically.
After the retention period expires, documents are irreversibly destroyed.

rideshinestore.com does not use automated decision-making or profiling.

Data is protected through password-protected systems, firewalls, and commercially available antivirus software.

7. Rights of the Data Subject

7.1. Your Rights

You are entitled to:

• Right to prior information

• Right of access

• Right to rectification

• Right to restriction of processing

• Right to object

• Right to erasure

• Right to lodge a complaint

• Right to judicial remedy

Requests are fulfilled within 30 days.

7.2. If You Request Information

We provide:

• what personal data we process,

• its source,

• the legal basis and purpose,

• retention period,

• recipients of any data transfers,

• details of any data breaches.

Responses are provided within 10 days, but no later than 1 month, free of charge.

7.3. Complaints to rideshinestore.com

We will inform recipients, correct, delete, or restrict your data upon request. If a request is rejected, we provide written reasons within 10 days (maximum 1 month).

7.4. Complaints to the Supervisory Authority

You may contact:
National Authority for Data Protection and Freedom of Information (NAIH)
Address: 1055 Budapest, Falk Miksa u. 9–11.
Website: naih.hu

7.5. Judicial Remedy

You may initiate legal proceedings before the competent Hungarian court, including your place of residence.

8. Additional Data Processing Information

Consent-based processing may be withdrawn at any time via the contact provided in Section 1.

Any personal data received accidentally or without proper legal basis will be immediately deleted or destroyed.

9. Data Breach Management

In case of a data breach, a record is kept and the supervisory authority is notified within 72 hours, unless the incident is unlikely to pose a risk to data subjects.

If the breach poses a high risk, we will notify you without delay.

10. Amendments to this Privacy Policy

rideshinestore.com reserves the right to amend this Privacy Policy and will notify Data Subjects accordingly. Updates will be published on www.rideshinestore.com.