PRIVACY POLICY
Equine Essence Online Store
Essence Capital Kft. (hereinafter referred to as the "Data Controller") is committed to protecting the personal data of its customers.
The purpose of this Privacy Policy is to explain what personal data we collect and process in connection with the operation of the Equine Essence online store, the fulfilment of orders, the delivery of products, and communication with customers.
Personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation, hereinafter referred to as the "GDPR") and applicable Hungarian legislation.
1. Details of the Data Controller
Company Name: Essence Capital Kft.
Online Store Name: Equine Essence
Registered Office: 2040 Budaörs, Harkály utca 26., Hungary
Company Registration Number: 13-09-247355
Tax Number: 33058407-2-13
Website: https://www.equineessence.eu/
Email Address: info@equineessence.eu
Telephone Number: +36 70 708 0198
The Data Controller is responsible for ensuring the lawful processing of personal data collected and processed during the operation of the online store.
2. Categories of Personal Data Processed
When customers use the online store, make purchases, or contact us, we may process the following categories of personal data:
Customer's full name
Billing name and address
Shipping name and address
Email address
Telephone number
Order details
Purchased products and order history
Information necessary for payment processing and invoicing
Information voluntarily provided when contacting us
Technical data associated with website operation, such as IP addresses and cookie identifiers
We process only the personal data necessary for the specified purposes.
3. Sources of Personal Data
Personal data is primarily collected directly from customers.
This may occur through:
Placing an order through the online store
Submitting a contact form
Contacting us by email or telephone
Creating a customer account, where this feature is available
Technical data generated when using the website
Providing the personal data necessary to process an order is a requirement for entering into and fulfilling a purchase agreement.
4. Purposes and Legal Bases of Data Processing
4.1. Order Processing and Fulfilment
Purpose: To process and confirm purchases, arrange product delivery, and communicate with customers.
Legal basis: Article 6(1)(b) of the GDPR – performance of a contract.
4.2. Invoicing and Accounting
Purpose: To issue invoices, maintain accounting records, and comply with applicable legal obligations.
Legal basis: Article 6(1)(c) of the GDPR – compliance with a legal obligation.
4.3. Customer Enquiries and Customer Support
Purpose: To respond to customer questions, enquiries, and complaints.
Legal basis: Depending on the nature of the enquiry, performance of a contract, compliance with a legal obligation, or legitimate interests (Article 6(1)(b), (c), or (f) of the GDPR).
4.4. Website Operation
Purpose: To ensure the secure and proper functioning of the website.
Legal basis: The legitimate interests of the Data Controller in relation to necessary technical data processing (Article 6(1)(f) of the GDPR).
4.5. Analytics and Marketing-Related Data Processing
If the online store uses analytics or marketing cookies, their use is subject to the visitor's prior consent where required by applicable law.
Details of such data processing activities, including the possibility of modifying or withdrawing consent, must be provided separately on the website.
5. Retention Period of Personal Data
The Data Controller retains personal data only for as long as necessary to fulfil the specified purposes or for the periods required by applicable legislation.
Order Data: For the period necessary to fulfil the contract, handle related claims, and comply with legal obligations.
Accounting Documents: For at least 8 years in accordance with applicable Hungarian accounting legislation.
Customer Support Enquiries: For the period necessary to handle the enquiry and any related legal claims.
Consumer Complaints: For the period specified by applicable consumer protection legislation.
Consent-Based Data Processing: Until consent is withdrawn or the specified processing purpose ceases to exist, subject to any applicable legal obligations.
Following the expiry of the applicable retention period, the Data Controller deletes or anonymises personal data where there is no longer a lawful basis for its continued processing.
6. Data Processors and Data Transfers
The Data Controller may use external service providers to operate the online store and fulfil customer orders.
Data processors and other recipients may access personal data only to the extent necessary to perform their respective services.
E-commerce Platform and Hosting Services
Webnode AG – responsible for providing the technical infrastructure and operation of the online store.
Shipping and Delivery Service Providers
Magyar Posta (Hungarian Post)
GLS
These providers are responsible for delivering ordered products to customers.
Payment Service Providers
Stripe
GLS
Magyar Posta
These providers facilitate the processing and completion of payment transactions, as applicable.
Invoicing Service Provider
Számlázz.hu
Responsible for supporting the issuance and management of invoices.
Website Analytics
Google Analytics – only if this service is actively used by the online store.
The Data Controller does not sell personal data.
If personal data is transferred outside the European Economic Area (EEA), the Data Controller ensures that appropriate safeguards required by the GDPR are implemented and provides information about the applicable international data transfer mechanism.
7. Customers' Data Protection Rights
Under the GDPR, individuals have the following rights, subject to the applicable legal conditions:
7.1. Right of Access
Customers may request information about the personal data processed by the Data Controller concerning them.
7.2. Right to Rectification
Customers may request the correction of inaccurate personal data or the completion of incomplete personal data.
7.3. Right to Erasure
Customers may request the deletion of their personal data where the conditions set out in the GDPR are met.
7.4. Right to Restriction of Processing
Customers may request the restriction of the processing of their personal data in certain circumstances.
7.5. Right to Object
Customers have the right to object to the processing of their personal data where such processing is based on legitimate interests.
7.6. Right to Data Portability
Where the applicable legal conditions are met, customers may request to receive their personal data in a structured, commonly used, and machine-readable format.
7.7. Right to Withdraw Consent
Where personal data is processed on the basis of consent, customers have the right to withdraw their consent at any time.
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Requests concerning the exercise of the above rights may be submitted to:
info@equineessence.eu
The Data Controller will respond to such requests without undue delay and, as a general rule, within one month of receiving the request.
8. Right to Lodge a Complaint
If a customer believes that the processing of their personal data violates applicable data protection legislation, they have the right to lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information.
Hungarian National Authority for Data Protection and Freedom of Information (NAIH)
Address: 1055 Budapest, Falk Miksa utca 9–11., Hungary
Postal Address: 1363 Budapest, P.O. Box 9, Hungary
Email: ugyfelszolgalat@naih.hu
Website: https://www.naih.hu
Individuals also have the right to seek a judicial remedy before a competent court.
9. Security of Personal Data
The Data Controller implements appropriate technical and organisational measures to ensure the security of personal data.
Such protective measures may include:
Restricting access to personal data
Using password-protected user accounts
Maintaining secure website connections
Performing regular software updates
Implementing measures to prevent unauthorised access
Enforcing data protection requirements in relation to data processors
The Data Controller takes reasonable steps to protect personal data against loss, unauthorised access, alteration, and unlawful disclosure.
10. Use of Cookies
The online store may use cookies that are necessary for the proper functioning of the website.
If the website also uses statistical, analytical, or marketing cookies, visitors will be provided with separate information about their use and, where required, will have the opportunity to grant or refuse consent.
The exact categories, providers, purposes, and retention periods of cookies must be determined based on the actual configuration of the website.
Webnode Cookies
The website uses the Webnode platform, which may place cookies necessary for the technical operation and functionality of the online store.
Further information regarding the cookies used is available through the website's cookie settings, where applicable.
11. Final Provisions
This Privacy Policy is made available to customers when using the Equine Essence online store.
When placing an order, customers may confirm that they have read and acknowledged this Privacy Policy by selecting the appropriate checkbox.
The Data Controller reserves the right to amend this Privacy Policy at any time, particularly in response to changes in legislation, the introduction of new services, or changes in data processing practices.
The updated version of this Privacy Policy will be published on the online store's website.
Effective Date: 21 October 2026
Data Controller: Essence Capital Kft.
Online Store: Equine Essence