Privacy Notice

Effective: from 2026-05-21

1. Identification of the Data Controller

Spark Promotions Limited Liability Company

• Registered office: 1135 Budapest, Jász u. 13., Hungary
• Company registration number: 01-09-062631
• Tax number: 10248793-2-41
• E-mail: hello@repigifts.com
• Website: repigifts.com
• Data processing registration number: NAIH-98367/2016

2. Personal data processed

During ordering

• Name
• Company name (optional)
• VAT number (for business purchases)
• E-mail address
• Phone number
• Billing and shipping address

During payment

• Transaction identifiers
• Payment status
• Note: We do not store card data. Card payments are handled by Stripe, Inc.

During customization

• Uploaded graphic files
• Product-related notes

Technical data

• IP address
• Browser type
• Visit times
• Pages viewed

3. Purposes and legal bases of data processing

Performance of a contract (GDPR Article 6(1)(b))

• Purpose: Order processing, invoicing, delivery
• Retention: 5 years (limitation period)

Legal obligation (GDPR Article 6(1)(c))

• Purpose: Retention of accounting records
• Retention: 8 years

Consent (GDPR Article 6(1)(a))

• Purpose: Newsletter, marketing communications
• Retention: Until consent is withdrawn

Legitimate interest (GDPR Article 6(1)(f))

• Purpose: Website security, fraud prevention
• Retention: 12 months

4. Recipients of the data

Stripe, Inc. (payment processor)

Card payment data is processed by Stripe, Inc. (510 Townsend Street, San Francisco, CA 94103, USA). Stripe processes data under Standard Contractual Clauses in compliance with GDPR. For details see: https://stripe.com/privacy

Shipping provider

• GLS General Logistics Systems Hungary Kft.
  • Registered office: 2351 Alsónémedi, GLS Európa utca 2.
  • E-mail: adatvedelem@gls-hungary.com
  • Data processed: name, shipping address, phone number, e-mail address

IT service provider (hosting / infrastructure)

• Numex Informatika Kft.
  • Web: numex.hu
  • Data processed: system and server logs (IP address, date/time, requests), backups

5. Data transfers to third countries

Stripe, Inc. is based in the USA. Data transfers are carried out under Standard Contractual Clauses (SCCs) approved by the European Commission. For other service providers (e.g. analytics), data transfers outside the EU are based on adequacy decisions or SCCs.

6. Use of cookies

Necessary cookies

• Session maintenance
• Cart contents
• Legal basis: Legitimate interest

Analytical cookies

• Traffic measurement
• Legal basis: Consent

Marketing cookies

• Targeted advertising, remarketing
• Legal basis: Consent

7. Your rights

• Right to information: Information about data processing
• Right of access: Access to your own data
• Right to rectification: Correction of inaccurate data
• Right to erasure: Deletion of data (“right to be forgotten”)
• Right to restriction: Restriction of data processing
• Right to object: Objection to data processing
• Data portability: Transfer of data to another service provider

Exercising your rights

• E-mail: hello@repigifts.com
• Response deadline: 30 days

8. Right to lodge a complaint

National Authority for Data Protection and Freedom of Information (NAIH)

• Address: 1055 Budapest, Falk Miksa u. 9-11., Hungary
• Phone: +36 1 391 1400
• E-mail: ugyfelszolgalat@naih.hu
• Web: naih.hu

You also have the right to lodge a complaint with the supervisory authority in your EU member state of residence.

9. Data security

Applied security measures:

• SSL/TLS encryption
• Regular backups
• Access control
• Firewall protection
• Regular security updates

10. Automated decision-making

We do not use automated decision-making or profiling that would have a significant impact on you.

11. Processing of minors’ data

Our service is intended for individuals over the age of 18. A person under the age of 18 may use our service only with the consent of their legal representative.

12. Contact

Data protection inquiries: hello@repigifts.com Customer service hours: Monday-Friday 9:00-17:00 CET