The Golden Phoenix Kft. \u2022 Effective date: 3 October 2026<\/p>\n
1 The data controller<\/p>\n
Data controller: The Golden Phoenix Kft. Registered office: F\u0151 utca 45, 8394 Als\u00f3p\u00e1hok, Hungary. Tax number: 33094777-1-20. Company registration number: 20-09-080195. Email: info@szenderedina-thegoldenphoenix.com. Phone: +36 70 387 8927. Website: https:\/\/szenderedina-thegoldenphoenix.com.<\/p>\n
This policy describes the processing of data relating to visitors, customers, prospective customers and newsletter subscribers of the website. We obtain data mainly from the data subject, from the technical operation of the website, and from performance feedback received from payment and delivery providers. Individual operations are carried out on different legal bases; a purchase does not constitute automatic consent to marketing.<\/p>\n
2 Ordering and performance<\/p>\n
Purpose: preparing, concluding and performing the contract, informing the customer, and coordinating payment and delivery. Data: name, email address, billing address, company name and tax number where necessary, for physical goods the delivery address or parcel locker ID and a contact phone number; order ID, items, quantity, price, payment and delivery method, transaction ID and payment status, declarations made in connection with the order and their times.<\/p>\n
Legal basis: Article 6(1)(b) GDPR, performance of a contract and steps prior to entering into a contract. Without the necessary data the order cannot be fulfilled. Only the fields justified for the given offer are mandatory; for digital products we do not ask for a delivery address merely for delivery purposes.<\/p>\n
Retention: for the period necessary for performance; thereafter, as a general rule, we process the data needed to prove contractual claims for 5 years from performance on the basis of legitimate interest, under Article 6(1)(f) GDPR. In the event of a legal dispute, the relevant evidence may be retained until the final conclusion of the dispute and for the period necessary to enforce any resulting claim. Separate time limits apply to billing and complaint data.<\/p>\n
The legitimate interest is the enforcement of claims and legal defence. In this context we do not retain all operational data indefinitely; the data subject may object and may request information on the essence of the balancing of interests.<\/p>\n
3 Invoicing<\/p>\n
Purpose: issuing invoices and fulfilling accounting and tax obligations. Data processed: customer data that must appear on the invoice, the description, value and date of the purchase, the invoice number, and the email address used for electronic delivery.<\/p>\n
Legal basis: Article 6(1)(c) GDPR; accounting and tax law obligations, in particular Section 169 of Act C of 2000. We retain accounting documents for at least 8 years. Because of this legal obligation, the deletion of invoice data cannot be requested during the retention period. The data processor for invoicing is the operator of Sz\u00e1ml\u00e1zz.hu, KBOSS.hu Kft.<\/p>\n
4 Digital access and service organisation<\/p>\n
Purpose: delivering e-books, providing course access, verifying entitlement, scheduling and conducting consultations. Data: name, email, order and entitlement ID, time of access and download, where necessary account ID and securely handled password data, appointment scheduling; learning progress and completion data only if necessary for the operation of the given course and communicated in advance.<\/p>\n
Legal basis: Article 6(1)(b) GDPR. Retention of operational data: for the duration of the access or service and 30 days thereafter; for the evidence necessary to prove performance, the time limit set out in point 2 applies.<\/p>\n
Based on this policy, we do not make video or audio recordings of consultations and live teaching. A recording requires prior, separate information and an appropriate legal basis. Please do not provide information about your state of health, religious beliefs or other special categories of data in the contact and order fields. This policy does not provide general authorisation for the targeted collection and documentation of such data. If a consultation requires such processing, separate information and conditions compliant with Article 9 GDPR must be provided in advance.<\/p>\n
5 Contact and complaints<\/p>\n
For general enquiries, we process your name, email address, any phone number you voluntarily provide and your message in order to reply. For preparing a contract, the legal basis is Article 6(1)(b) GDPR; for other general enquiries, it is the legitimate interest in meaningful customer communication, Article 6(1)(f). We store general enquiries for no more than 1 year after they are closed, unless longer retention is necessary as contractual evidence or because of a legal dispute.<\/p>\n
In the case of a consumer complaint, we process the identification and contact data contained in the complaint, the content of the complaint, the related order, the record, the action taken and the reply. Legal basis: Article 6(1)(c) GDPR and Section 17\/A of Act CLV of 1997. The complaint record and the reply are retained for 3 years. The relevant legal obligations also apply to documents relating to warranty claims.<\/p>\n
6 Newsletter<\/p>\n
If you subscribe separately, we send newsletters about books, blog posts, courses, consultations, events and offers to the name and email address provided. Consent is voluntary; not giving it does not prevent you from making purchases. Legal basis: Article 6(1)(a) GDPR and Section 6 of Act XLVIII of 2008.<\/p>\n
We record the time of subscription and confirmation, the version of the consent text, the source of the subscription and the evidential data justified by the system. Newsletters are sent using the MailerLite system. Consent can be withdrawn at any time, free of charge, via the unsubscribe link in every email or at the data controller's email address. Withdrawal does not affect the lawfulness of earlier processing.<\/p>\n
Data remains on the active list until consent is withdrawn or the newsletter is discontinued. After unsubscribing, we stop sending and remove the data from the active marketing list. We may keep the necessary proof of consent separately for up to a further 5 years on the basis of legitimate interest; this does not entitle us to send further advertising. The suppression list may only contain the minimum data necessary to prevent further sending.<\/p>\n
In the default setting described in this policy, we do not use per-recipient newsletter open and click tracking, nor do we send promotional abandoned cart reminders without separate consent. MailerLite<\/p>\n
7 Meta Pixel and marketing<\/p>\n
With marketing consent, the website may use the Meta Pixel to measure the effectiveness of advertisements and to build audiences. Legal basis: Article 6(1)(a) GDPR. Consent can be refused and withdrawn at any time in the Cookie settings; the basic functions of the webshop can be used without it.<\/p>\n
On the permitted pages, the Pixel may forward browser and device data, IP address, cookie and event IDs, the time of page visits and other permitted events, as well as event data in line with the settings, to Meta Platforms Ireland Limited. Meta may link this data to its own user account data if it can identify the visitor. Content and form data explicitly indicating health or religious beliefs may not be forwarded as marketing measurement data.<\/p>\n
With regard to the collection and forwarding of event data, joint controllership may exist to the extent set out in the Meta Business Tools terms; Meta's further processing for its own purposes is governed by Meta's privacy policy. Details: https:\/\/www.facebook.com\/privacy\/policy\/ and https:\/\/www.facebook.com\/legal\/controller_addendum.<\/p>\n
Based on this policy, the Service Provider does not use solely automated decision-making that produces legal effects or similarly significant effects concerning the customer. Building marketing audiences may involve profiling; this does not determine the customer's contractual rights.<\/p>\n
8 Technical operation and data security<\/p>\n
To operate and protect the website, IP address, timestamp, requested resource, browser characteristics, error and security events may be logged. Legal basis: the legitimate interest in IT security and the prevention of abuse, Article 6(1)(f) GDPR. As a general rule, we keep the necessary technical logs for no more than 90 days; evidence relating to an investigated incident may be stored separately for as long as necessary for the proceedings.<\/p>\n
We protect data with access rights, use encrypted connections for data transmission, keep systems updated and restrict the number of people with access. Deleted active data disappears from backups as they are overwritten within 365 days; we do not use backups for ordinary business or marketing purposes. When restoring, we re-apply previously requested deletions.<\/p>\n
9 Data processors and other recipients<\/p>\n
Recipients receive only the data necessary for their tasks. Postal and payment service providers may also act as independent controllers for their own legal purposes; we do not automatically regard every provider as a data processor.<\/p>\n
Hostinger \u2013 hosting, website database, logs and backups, acting as data processor. Privacy policy: https:\/\/www.hostinger.com\/legal\/privacy-policy. The Hostinger group comprises several companies; the brand name alone does not replace identification of the actual partner.<\/p>\n
KBOSS.hu Kft. \u2013 Sz\u00e1ml\u00e1zz.hu, invoicing data processor. Registered office: Z\u00e1hony utca 7, 1031 Budapest, Hungary. The data transferred are the customer and purchase data necessary for invoicing and delivery. Policy: https:\/\/www.szamlazz.hu\/adatvedelem.<\/p>\n
Stripe \u2013 card payments, transaction processing, refunds and fraud prevention. The identification, contact, transaction and card data required for payment are processed by the payment system; for its own legal and fraud prevention purposes it may also act as an independent controller. Policy: https:\/\/stripe.com\/hu\/privacy.<\/p>\n
Csomagpiac Kft. \u2013 organising parcel dispatch; registered office: N\u00e9meth L\u00e1szl\u00f3 u. 1\/B, 2100 G\u00f6d\u00f6ll\u0151, Hungary; email: info@csomagpiac.hu. Data transferred: recipient's name, delivery address\/pick-up point, phone, email, parcel and shipment ID. Policy: https:\/\/csomagpiac.hu\/adatvedelmi-szabalyzat\/.<\/p>\n
Magyar Posta Zrt. (MPL) and DPD Hungary Kft. \u2013 depending on the delivery service actually selected, they receive recipient and shipment data for the purpose of parcel delivery and notification. Their own postal service data processing is governed by the privacy policies published at https:\/\/www.posta.hu\/adatkezeles and https:\/\/www.dpd.com\/hu\/hu\/.<\/p>\n
MailerLite Limited \u2013 newsletter data processor under the terms published for customers operating in the EEA. Published address: 88 Harcourt Street, Dublin 2, D02 DK18, Ireland. Policy: https:\/\/www.mailerlite.com\/legal\/privacy-policy; data processing terms: https:\/\/www.mailerlite.com\/legal\/data-processing-agreement.<\/p>\n
Meta Platforms Ireland Limited \u2013 recipient of the marketing data described in point 7. The actual processing and transfers are determined by Meta's terms and the scope of consent. Policy: https:\/\/www.facebook.com\/privacy\/policy\/.<\/p>\n
The developer of a merely installed WordPress plugin is a data recipient only if the plugin actually transmits data to it.<\/p>\n
We may transfer data to an authority or court on the basis of law or a lawful request. We do not sell data.<\/p>\n
10 International data transfers<\/p>\n
Processing outside the EEA may arise in particular because of the global infrastructure of Stripe, MailerLite, Meta, and hosting and other sub-processors. An EU contracting party does not in itself mean that all data remains within the EEA.<\/p>\n
Such a transfer may take place on the basis of an appropriate Commission adequacy decision \u2013 in the case of the EU\u2013US Data Privacy Framework only to a duly certified recipient covered by it \u2013 or with safeguards under Article 46 GDPR, such as standard contractual clauses and, where necessary, supplementary measures.<\/p>\n
Consent given to cookies does not automatically replace the safeguards for international data transfers.<\/p>\n
11 Rights of data subjects<\/p>\n
You may request information about and access to your data, request the rectification of inaccurate data and \u2013 where the legal conditions are met \u2013 erasure or restriction of processing. For automated processing based on consent or a contract, you may request data portability within the scope of the GDPR.<\/p>\n
You may withdraw your consent at any time. You may object, on grounds relating to your particular situation, to processing based on legitimate interest. You may object at any time to processing for direct marketing purposes; after such an objection your data can no longer be processed for this purpose, including related profiling.<\/p>\n
You can send your request to exercise your rights to info@szenderedina-thegoldenphoenix.com. As a general rule, we respond to requests within one month. Where justified, this deadline may be extended by a further two months, of which we will inform you within the first month. Instead of requesting unnecessary copies of identity documents, we verify the requester's identity in a proportionate manner. Exercising your rights is, as a general rule, free of charge.<\/p>\n
We do not delete invoices that must be retained by law, or data necessary for a well-founded legal claim, merely because of a request; we will inform you of the reason for refusal and the available remedies.<\/p>\n
A complaint can be lodged with the Hungarian National Authority for Data Protection and Freedom of Information: Falk Miksa utca 9\u201311, 1055 Budapest; postal address: 1363 Budapest, Pf. 9.; phone: +36 1 391 1400; website: https:\/\/www.naih.hu; online case initiation: https:\/\/www.naih.hu\/online-ugyinditas. ugyfelszolgalat@naih.hu is a general information address; according to the Authority, proceedings cannot be initiated by email. You may also turn to the courts and claim compensation or damages under the conditions of the GDPR.<\/p>\n
12 Changes<\/p>\n
We update this policy when the actual operation or the law changes. For a new purpose requiring consent, we do not automatically consider earlier consent valid for the new purpose as well. The version in force is published on the website, and where necessary we provide separate information about significant changes.<\/p>","protected":false},"excerpt":{"rendered":"
The Golden Phoenix Kft. \u2022 Hat\u00e1lybal\u00e9p\u00e9s: 2026.10.03. 1 Az adatkezel\u0151 Adatkezel\u0151: The Golden Phoenix Kft. Sz\u00e9khely: 8394 Als\u00f3p\u00e1hok, F\u0151 utca 45. Ad\u00f3sz\u00e1m: 33094777-1-20. C\u00e9gjegyz\u00e9ksz\u00e1m: 20-09-080195. E-mail: info@szenderedina-thegoldenphoenix.com. Telefon: +36 70 387 8927. Weboldal: https:\/\/szenderedina-thegoldenphoenix.com. Ez a t\u00e1j\u00e9koztat\u00f3 a weboldal l\u00e1togat\u00f3inak, v\u00e1s\u00e1rl\u00f3inak, \u00e9rdekl\u0151d\u0151inek \u00e9s h\u00edrlev\u00e9l-feliratkoz\u00f3inak adatkezel\u00e9s\u00e9t ismerteti. Az adatokat f\u0151k\u00e9nt az \u00e9rintett\u0151l, a weboldal technikai m\u0171k\u00f6d\u00e9s\u00e9b\u0151l, […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_uag_custom_page_level_css":"","site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"default","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"set","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"class_list":["post-1779","page","type-page","status-publish","hentry"],"yoast_head":"\n