Privacy Notice

Processing of personal data, legal bases, purposes and rights

Effective: 2026-09-26

Table of Contents

Privacy Notice

Effective: from 2026-09-26

1. Identification of the Data Controller

Spark Promotions Limited Liability Company

  • Registered office: 1135 Budapest, Jász u. 13., Hungary
  • Company registration number: 01-09-062631
  • Tax number: HU10248793
  • E-mail: hello@repigifts.com
  • Website: repigifts.com
  • Data processing registration number: NAIH-98367/2016

2. Personal data processed

During ordering

  • Name
  • Company name (optional)
  • VAT number (for business purchases)
  • E-mail address
  • Phone number
  • Billing and shipping address

During payment

  • Transaction identifiers
  • Payment status
  • Note: We do not store card data. Card payments are handled by Stripe, Inc.

During customization

  • Uploaded graphic files
  • Product-related notes

Technical data

  • IP address
  • Browser type
  • Visit times
  • Pages viewed

Performance of a contract (GDPR Article 6(1)(b))

  • Purpose: Order processing, invoicing, delivery
  • Retention: 5 years (limitation period)

Legal obligation (GDPR Article 6(1)(c))

  • Purpose: Retention of accounting records
  • Retention: 8 years

Consent (GDPR Article 6(1)(a))

  • Purpose: Newsletter, marketing communications
  • Retention: Until consent is withdrawn

Legitimate interest (GDPR Article 6(1)(f))

  • Purpose: Website security, fraud prevention
  • Retention: 12 months

4. Recipients of the data

Stripe, Inc. (payment processor)

Card payment data is processed by Stripe, Inc. (510 Townsend Street, San Francisco, CA 94103, USA). Stripe processes data under Standard Contractual Clauses in compliance with GDPR. For details see: https://stripe.com/privacy

Shipping provider

  • GLS General Logistics Systems Hungary Kft.
    • Registered office: 2351 Alsónémedi, GLS Európa utca 2.
    • E-mail: adatvedelem@gls-hungary.com
    • Data processed: name, shipping address, phone number, e-mail address

IT service provider (hosting / infrastructure)

  • Numex Informatika Kft.
    • Web: numex.hu
    • Data processed: system and server logs (IP address, date/time, requests), backups

Live chat (only if you start the chat)

  • tawk.to inc.
    • Registered office: 187 East Warm Springs Rd, SB298, Las Vegas, NV 89119, USA
    • Loaded only when you click “Start live chat” on the Contact page; without that click no data is sent to tawk.to
    • Data processed: chat transcript, name and e-mail address you provide, IP address, browser data, chat cookies
    • Legal basis: pre-contractual steps or legitimate interest (GDPR Art. 6(1)(b) and (f))
    • Transfer to the USA under Standard Contractual Clauses (SCCs). Details: https://www.tawk.to/privacy-policy/

5. Data transfers to third countries

Stripe, Inc. is based in the USA. Data transfers are carried out under Standard Contractual Clauses (SCCs) approved by the European Commission. For other service providers (e.g. analytics), data transfers outside the EU are based on adequacy decisions or SCCs.

6. Use of cookies

When you first open the site, a cookie banner lets you accept or reject all cookies with one click, or choose by category. Your choice is stored in the repi_consent cookie for 12 months and can be changed at any time via “Cookie settings” in the footer. So that we can demonstrate consent, we keep a log entry of each choice (identifier, time, selected categories) without your IP address.

Necessary cookies

  • Session maintenance
  • Cart contents
  • Language and delivery-country preference
  • Storing your cookie choice (repi_consent)
  • Legal basis: Legitimate interest

Analytical cookies

  • Google Analytics – traffic measurement
  • PostHog – usage statistics (data stored in the EU)
  • Legal basis: Consent

Marketing cookies

  • Google Ads – measuring the results of our ads, remarketing
  • Legal basis: Consent

7. Your rights

  • Right to information: Information about data processing
  • Right of access: Access to your own data
  • Right to rectification: Correction of inaccurate data
  • Right to erasure: Deletion of data (“right to be forgotten”)
  • Right to restriction: Restriction of data processing
  • Right to object: Objection to data processing
  • Data portability: Transfer of data to another service provider

Exercising your rights

8. Right to lodge a complaint

National Authority for Data Protection and Freedom of Information (NAIH)

  • Address: 1055 Budapest, Falk Miksa u. 9-11., Hungary
  • Phone: +36 1 391 1400
  • E-mail: ugyfelszolgalat@naih.hu
  • Web: naih.hu

You also have the right to lodge a complaint with the supervisory authority in your EU member state of residence.

9. Data security

Applied security measures:

  • SSL/TLS encryption
  • Regular backups
  • Access control
  • Firewall protection
  • Regular security updates

10. Automated decision-making

We do not use automated decision-making or profiling that would have a significant impact on you.

11. Processing of minors’ data

Our service is intended for individuals over the age of 18. A person under the age of 18 may use our service only with the consent of their legal representative.

12. Contact

Data protection inquiries: hello@repigifts.com Customer service hours: Monday-Friday 9:00-17:00 CET

Last updated: 2026-09-26
Contact

Cookie settings

Privacy notice