Privacy Policy
Under GDPR (EU) 2016/679 and Act CXII of 2011 · Updated: 2026. 07. 28.
1. Controller
Keystone Dynamics Kft., 1136 Budapest, Pannónia utca 19. 1. em. 4., Hungary · Company reg. no. 01-09-355601 · Tax no. 27891472-2-41
E-mail: info@himapets.com · Data protection contact: info@himapets.com
We have not appointed a Data Protection Officer, as our activities do not require one.
2. Purposes and legal bases
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Order fulfilment | name, billing and delivery address, e-mail, phone, order data | Art. 6(1)(b) – contract | contract + limitation (5 years) |
| Invoicing, accounting | invoice data | Art. 6(1)(c) – legal obligation | 8 years |
| Payment | payment data (card data handled by Stripe; we never see it) | Art. 6(1)(b) | per Stripe's policy |
| Support, complaints | name, e-mail, message | Art. 6(1)(b) and (f) | complaints: 5 years |
| Advertising and measurement (Google) | online identifiers, usage and conversion data | Art. 6(1)(a) – consent | until withdrawal |
| Server logs, security | IP address, timestamp, user agent | Art. 6(1)(f) – legitimate interest | 30 days |
3. Cookies and consent
We use technically necessary storage to run the shop: your cart is kept in the browser's local storage until you place the order. This is strictly necessary to provide the service, requires no consent, and cannot identify you. Non-essential cookies — in particular for advertising and measurement — are only set after your prior consent. You can change your choice at any time via "Cookie settings" in the footer.
4. Anonymous, cookie-free site statistics
We run our own cookie-free analytics to measure how the shop performs. We set no cookies, use no localStorage and store no IP addresses. To tell visits apart we derive a daily rotating, irreversible hash from the IP address and browser identifier, which can no longer be linked to earlier data the next day. No profile is created and you are not identified.
What we record: time of the page view, products viewed, add-to-cart, checkout and purchase, click types, language and currency, device type (mobile/desktop), country and traffic source (e.g. Google ad, search, direct). Legal basis: Art. 6(1)(f) GDPR – legitimate interest in measuring and improving the shop. Retention: 24 months. Data is stored on the infrastructure of Cloudflare, Inc. (USA) as processor, under EU standard contractual clauses. You may object at any time at info@himapets.com.
5. Google Ads and Consent Mode v2
We use services of Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland), including Google Ads conversion tracking and remarketing and possibly Google Analytics 4. These activate only with your consent: Google Consent Mode v2 starts in a denied state, so without consent no advertising or analytics cookies are placed and no personal identifiers are transmitted.
Data may be transferred to Google servers, including in the United States. Google is certified under the EU–U.S. Data Privacy Framework. You may withdraw consent at any time with effect for the future.
6. Recipients and processors
We work with the following partners to fulfil the contract. With direct shipping, delivery data may also reach a manufacturing/logistics partner located outside the EU (e.g. in China) — this is necessary for performance of the contract (Art. 49(1)(b) GDPR).
| Partner | Role | Data transferred |
|---|---|---|
| Snipcart Inc. (Canada) | cart and checkout | order and contact data |
| Stripe Payments Europe Ltd. (Ireland) | card payments | payment data |
| Google Ireland Ltd. | advertising and measurement | online identifiers, usage data |
| Cloudflare, Inc. (USA) | anonymous statistics storage | anonymous, cookie-free event data |
| GitHub, Inc. (GitHub Pages, USA) | web hosting | server logs |
| manufacturing / logistics partner | shipping | name, delivery address, phone |
| accounting service provider | accounting | invoice data |
Transfers to third countries are covered by appropriate safeguards (adequacy decision, EU Standard Contractual Clauses, or the EU–U.S. Data Privacy Framework).
7. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection. Consent-based processing may be withdrawn at any time with effect for the future. Send requests to info@himapets.com; we respond within one month.
8. Complaints
1055 Budapest, Falk Miksa utca 9-11. · Postal: 1363 Budapest, Pf. 9., Hungary
Phone: +36 (1) 391-1400 · E-mail: ugyfelszolgalat@naih.hu · naih.hu
You may also lodge a complaint with the supervisory authority of your habitual residence, or bring court proceedings.
9. Data security
The site is served over HTTPS. Access is limited to what is necessary, and payment data is handled solely by a PCI-DSS certified provider. In the event of a personal data breach we act under Articles 33–34 GDPR.