Privacy Policy

Privacy Policy (GDPR)

1. Data Controller
The data controllers are:

• INFINITY-TRADE HUNGARY Kft.
  Address: 2724 Újlengyel, Nyári Pál utca 15., Hungary
  E-mail: infinity.trade.hu@proton.me

• Fastrise s.r.o.
  Address: Jaurisova 515/4, Praha 4, 140 00, Czech Republic
  E-mail: herbalboost@proton.me

The Buyer is informed about the respective data controller in the order confirmation and on the invoice.

2. Scope of Processed Personal Data
We process only the data necessary for:

• handling orders and delivering goods,

• issuing tax documents and invoices,

• communication with the Buyer (email, phone support),

• fulfilling legal obligations under Czech and Hungarian law.

Personal data may include: name and surname, delivery address, email, phone number, billing information, and order history.

3. Legal Basis for Processing
Personal data processing is based on:

• performance of the purchase contract (Art. 6(1)(b) GDPR),

• consent of the Buyer during registration and for receiving marketing communications (Art. 6(1)(a) GDPR),

• compliance with legal obligations (Art. 6(1)(c) GDPR).

4. Purpose of Processing
Personal data are processed exclusively for the purposes of:

• handling orders and delivering goods,

• issuing and archiving invoices,

• communication regarding orders, complaints, or withdrawal from the contract,

• fulfilling legal obligations of the Seller,

• providing customer service.

5. Recipients of Personal Data
Recipients may include:

• logistics companies and couriers for delivery purposes,

• payment gateways and banks for payment purposes,

• public authorities and tax offices as required by law,

• IT providers and hosting services ensuring the operation of the e-shop.

The controller does not share personal data with any third parties for marketing purposes without the explicit consent of the Buyer.

6. Data Retention Period
Personal data are retained for:

• the duration necessary to handle and deliver the order,

• compliance with legal obligations (e.g., tax regulations) – maximum 10 years according to applicable law,

• until withdrawal of consent for marketing communications.

7. Rights of the Buyer
The Buyer has the right to:

• request access to their personal data,

• request correction or completion of data,

• request deletion of personal data (“right to be forgotten”) to the extent permitted by law,

• request restriction of data processing,

• object to processing based on legitimate interest,

• request data portability,

• withdraw consent to personal data processing for marketing at any time.

8. Security of Personal Data
The Seller implements all technical and organizational measures to ensure the protection of personal data against unauthorized access, loss, misuse, or disclosure.

9. Contact and Filing Complaints
The Buyer may exercise their rights or file a complaint:

• by email: infinity.trade.hu@proton.me or herbalboost@proton.me

• in writing to the registered office of the controller.

If the Buyer is not satisfied with the handling of the complaint, they may contact the relevant supervisory authority in the Czech Republic or Hungary:

• Czech Republic: Office for Personal Data Protection (ÚOOÚ)

• Hungary: National Authority for Data Protection and Freedom of Information (NAIH)