Privacy
Privacy notice
This notice explains what personal data we process, why, for how long, and who we share it with when you use agiva.hu or the AGIVA mobile app. It is written under the EU General Data Protection Regulation (2016/679) and Hungarian Act CXII of 2011.
1. Who processes your data
Operator (controller): Verde Holding Kft. — operator of the agiva.hu website and
the AGIVA mobile app.
Seller (controller for orders and invoicing):
Beauty & Charm Trend Kft., 8000 Székesfehérvár, Lehel utca 26., Hungary — tax number
24798095-2-07, company registration number 07-09-028313.
For privacy matters, contact the seller using the details in the Imprint. We are not required to appoint a data protection officer and have not appointed one.
2. What we process, why, and on what legal basis
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Fulfilling and delivering your order | name, e-mail, phone, delivery address or pickup point, items ordered, note | performance of a contract — GDPR Art. 6(1)(b) | 5 years from the order (civil-law limitation period) |
| Invoicing and accounting | billing name and address, tax number for companies, invoice data | legal obligation — Art. 6(1)(c) | 8 years — Act C of 2000 on Accounting, s. 169(2) |
| Account, order history, favourites | e-mail, password hash (never the password itself), company name and tax number for business accounts | performance of a contract — Art. 6(1)(b) | until you delete the account |
| Card payment | payment data — card details are handled solely by Stripe and never reach us | performance of a contract — Art. 6(1)(b) | the transaction reference, with the order |
| Loyalty points | points credited to the account and their movements | performance of a contract — Art. 6(1)(b) | until you delete the account |
| Product reviews | display name (optional), rating, text, the fact of purchase | consent — Art. 6(1)(a), withdrawable at any time | until withdrawn or the account is deleted |
| Trade or reseller pricing request | name, e-mail, phone, company name, tax number, message | steps prior to entering a contract — Art. 6(1)(b) | 2 years from the decision |
| Web analytics (Google Analytics 4) | device and browser data, pages viewed, approximate location | legitimate interest — Art. 6(1)(f): measuring and improving the service | 14 months |
| Fraud prevention and operations | IP address, request logs | legitimate interest — Art. 6(1)(f) | up to 12 months |
Providing this data is necessary to place an order; without it we cannot fulfil one. We do not carry out automated decision-making or profiling.
3. Who we share it with (processors)
- GLS General Logistics Systems Hungary Kft. — delivery and pickup points. Name, address, phone, e-mail.
- Stripe Payments Europe, Ltd. (Ireland) — card payments. Card details are handled directly by Stripe; we never see or store them.
- Bizonylat.hu — invoicing and reporting to the Hungarian tax authority (NAV).
- Google Ireland Ltd. — Google Analytics 4.
- Fly.io, Inc. — hosting of the server that stores account and order data.
- Cloudflare, Inc. — website delivery and content distribution.
- Telegram FZ-LLC — internal operational alerts about incoming orders, carrying the order reference, the e-mail address and the items.
Where data is transferred outside the European Union, the provider ensures an adequate level of protection under the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.
4. Cookies
We use strictly necessary cookies for signing in and keeping your basket — the site does not work without them and they require no consent. Google Analytics measurement cookies are used for analytics. You can delete and block cookies in your browser settings at any time.
5. Your rights
You may at any time request access to the data we hold about you, its rectification or erasure, restriction of processing, exercise your right to data portability, and object to processing based on legitimate interest. Where processing is based on consent you may withdraw it at any time; withdrawal does not affect the lawfulness of processing before it.
You can delete your account and its data yourself on the My account page. Invoices are unaffected: we are required by law to keep them for 8 years.
We respond without undue delay and within one month at the latest.
6. Complaints
If you believe the processing infringes your rights, you may contact the supervisory authority:
Hungarian National Authority for Data Protection and Freedom of Information (NAIH)
1055 Budapest, Falk Miksa utca 9–11., Hungary · Postal address: 1363 Budapest, Pf. 9.
Phone: +36 (1) 391-1400 · naih.hu
You may also seek a judicial remedy before the court with jurisdiction over your place of residence or stay.
7. Security
All traffic is encrypted (HTTPS). Passwords are stored only as one-way hashes, so not even we can recover them. The administration interface requires a separate sign-in.
This notice covers the agiva.hu website and the AGIVA mobile app. Contract terms are in the Terms and company details in the Imprint. Last updated: 13 August 2026.