Privacy Policy

Date of acceptance: 06-19-2026

This document contains information regarding the data processing activities carried out by Reinas Bikinis Limited Liability Company (hereinafter: Data Controller) during the operation of the http://reinasbikinis.com webshop, based on Regulation (EU) 2016/679 of the European Parliament and of the Council (April 27, 2016) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: Regulation, GDPR).

I. Data Controller Details

Name: Reinas Bikinis Limited Liability Company

Registered Office: 1094 Budapest, Tűzoltó utca 82. L3. lház. 1. fl. 13. door

Tax Number: 28733067-1-43

Company Registration Number: 01-09-371507

Representative: Dr. György Lehoczky, Managing Director (Executive Officer)

Mailing Address, Complaint Handling: 1094 Budapest, Tűzoltó utca 82. I/13.

Email: info@reinasbikinis.com, reinasbikinis@gmail.com

Phone Number: +36304888102

Website: http://reinasbikinis.com

II. Description of Data Processing Activities During Webshop Operation and Contract Fulfillment

II.1. Contact

Content and Purpose of Data Processing
Receiving your inquiry, answering your question, and maintaining the necessary contact, for example, if you contact us with a question via email, contact form, or telephone. Preliminary contact is not mandatory; you can order from the webshop at any time without it.

Processed Data
The data provided by you during the contact process.

Duration of Data Processing
We only process the data until the contact process is concluded.

Legal Basis for Data Processing
Your voluntary consent, which you provide to the Data Controller by contacting us. [Data processing according to Article 6(1)(a) of the Regulation]

II.2. Order Processing

Content and Purpose of Data Processing
Processing and fulfilling orders, and maintaining contact regarding the order (including sending notifications about order status and sending invoices) are carried out as data processing activities necessary for the performance of the contract.

Processed Data
During data processing, the Data Controller processes your name, address, phone number, email address, characteristics of the purchased Goods, order number, and time of purchase.

Duration of Data Processing
We process the data for 5 years from the fulfillment of the contract, in accordance with the civil law statute of limitations.

Legal Basis for Data Processing
Performance of the contract concluded with you as a buyer. [Data processing according to Article 6(1)(b) of the Regulation]

II.3. Issuing the Invoice

Content and Purpose of Data Processing

The data processing process takes place in order to issue an invoice in compliance with the law and to fulfill the obligation to preserve accounting documents. Based on Section 169 (1)-(2) of Act C of 2000 on Accounting (hereinafter: Accounting Act), business companies must preserve accounting documents that directly and indirectly support the bookkeeping accounts.

Processed Data
Name, address, email address, order details.

Duration of Data Processing
Based on the Accounting Act, 169. Section (2), issued invoices must be preserved for 8 years from the date of issuance.

Legal Basis for Data Processing

Compliance with a legal obligation. Based on Act CXXVII of 2007 on Value Added Tax, 159. Section (1), the issuance of an invoice is mandatory, and based on the Accounting Act, 169. Section (2), it must be preserved for 8 years [Data processing according to Article 6(1)(c) of the Regulation].

II.4. Data Processing Related to Shipping

Content and Purpose of Data Processing
We deliver your order to the address you provided, in accordance with the shipping method you selected, with the help of our partners.

Processed Data
Name, address, email address, phone number.

Duration of Data Processing
The Data Controller processes the data for the duration of the delivery of the ordered goods.

Legal Basis for Data Processing
The legal basis for data processing is the performance of a Contract [Data processing according to Article 6(1)(b) of the Regulation].

II.5. Handling Implied Warranty and Guarantee Claims

Content and Purpose of Data Processing
When handling implied warranty and guarantee claims, we must act according to the rules of NGM Decree 19/2014 (IV. 29.), which also determines how we must handle your claim.

Processed Data

When handling implied warranty and guarantee claims, we must act according to the rules of NGM Decree 19/2014 (IV. 29.).

Based on the decree, we are obliged to record a report on the implied warranty or guarantee claim reported to us, in which we record:

1. your name, address, and your statement that you consent to the processing of your data recorded in the report as specified in the decree,
2. the name and purchase price of the movable property sold under the contract between you and us,
3. the date of performance of the contract,
4. the date the defect was reported,
5. a description of the defect,
6. the right you wish to enforce based on your implied warranty or guarantee claim, and
7. the method of settling the implied warranty or guarantee claim or the reason for rejecting the claim or the right to be enforced based on it.

If we take over the purchased Goods from you, we must issue a receipt for this, which must indicate

1. your name and address,
2. the data necessary to identify the item,
3. the date the item was received, and
4. the date when you can pick up the repaired item.

Duration of Data Processing
Based on Section 4(6) of NGM Decree 19/2014 (IV. 29.), the business is obliged to preserve the report taken on the consumer’s implied warranty or guarantee claim for three years from the date it was taken and to present it at the request of the supervisory authority.

Legal Basis for Data Processing
The legal basis for data processing is compliance with the legal obligations under NGM Decree 19/2014 (IV. 29.) [Section 4(1) and (6), and Section 6(1)] [Data processing according to Article 6(1)(c) of the Regulation].

II.6. Handling Other Consumer Protection Complaints

Content and Purpose of Data Processing

You have the opportunity to file a consumer protection complaint. The purpose of data processing is to investigate, answer, and document consumer protection complaints related to the webshop.

A consumer protection complaint is an objection aimed at terminating an individual violation of rights or interests related to the conduct, activity, or omission of us or a person acting in our interest or on our behalf, directly related to the distribution or sale of goods to you (complaint according to Section 2, point 28a of Act CLV of 1997 on Consumer Protection).

If you have turned to us with a complaint, then data processing and the provision of data are essential for the investigation of the complaint.

Processed Data

The report taken on the complaint must contain the following:

1. your name, address, or electronic mail address,
2. the place, time, and method of submitting the complaint,
3. a detailed description of your complaint, a list of documents, papers, and other evidence presented by you,
4. our statement on our position regarding your complaint, if an immediate investigation of the complaint is possible,
5. the signature of the person taking the report and—with the exception of oral complaints made by telephone or using other electronic communication services—your signature,
6. the place and time the report was taken,
7. in the case of an oral complaint made by telephone or using other electronic communication services, the unique identification number of the complaint.)

Duration of Data Processing
We preserve warranty complaints for 3 years based on the Consumer Protection Act.

Legal Basis for Data Processing
Whether you turn to us with a complaint is your voluntary decision; however, if you do, we are obliged to handle it according to Section 17/A of Act CLV of 1997 on Consumer Protection [Data processing according to Article 6(1)(c) of the Regulation].

II.7. Data Processed in Connection with the Verifiability of Consent

Content and Purpose of Data Processing
In the case of data processing based on consent, especially during registration and subscription to the newsletter, the IT system stores the IT data related to the consent for the purpose of later provability.

Processed Data
The time of consent and the IP address of the data subject.

Duration of Data Processing
We process the data for the duration of the data processing affected by the consent.

Legal Basis for Data Processing
Consent of the data subject [Data processing according to Article 6(1)(a) of the Regulation].

II.8. Data Processing Related to Sending and Displaying Personalized Advertisements

Content and Purpose of Data Processing
When sending newsletters, we formulate personalized advertisements for you.

Processed Data
Name, address, email address, phone number, data of previous purchases.

Duration of Data Processing
Until the withdrawal of your consent.

Legal Basis for Data Processing
Your voluntary, specific consent, which you provide to the Data Controller during data collection [Data processing according to Article 6(1)(a) of the Regulation]

II.9. Sweepstakes

Content and Purpose of Data Processing
In order to encourage purchases, we organize sweepstakes for customers and Website visitors.

Processed Data
Name, email address, phone number.

Duration of Data Processing
The data will be deleted after the conclusion of the sweepstakes, except for the winner’s data, which the Data Controller is obliged to preserve for 8 years based on the Accounting Act.

Legal Basis for Data Processing
The legal basis for data processing is your voluntary consent. [Data processing according to Article 6(1)(a) of the Regulation]

III. Information Regarding the Use of Cookies

III.1. What is a Cookie?

The Data Controller uses so-called cookies during visits to the website. A cookie is a package of information consisting of letters and numbers that our website sends to your browser with the aim of saving certain settings, facilitating the use of our website, and contributing to the collection of some relevant, statistical information about our visitors.

Some cookies do not contain personal information and are not suitable for identifying an individual user; however, some contain a unique identifier—a secret, randomly generated sequence of numbers—that your device stores, thereby ensuring your identifiability. The operating duration of each cookie is contained in the relevant description of each cookie.

You can also disable the operation of cookies in your browser settings; you can find more information at the following links:

• Internet Explorer: http://windows.microsoft.com/en-us/internet-explorer/delete-manage-cookies#ie=ie-11
• Firefox: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer
• Mozilla: https://support.mozilla.org/hu/kb/weboldalak-altal-elhelyezett-sutik-torlese-szamito
• Safari: https://support.apple.com/guide/safari/manage-cookies-and-website-data-sfri11471/mac
• Chrome: https://support.google.com/chrome/answer/95647
• Edge: https://support.microsoft.com/hu-hu/help/4027947/microsoft-edge-delete-cookies

III.2. Legal Background and Legal Basis for Cookies:

We basically distinguish between three types of cookies: cookies essential for operation, which serve the proper functioning of the Website, statistical cookies, and marketing cookies.

The legal basis for data processing is your consent based on Article 6(1)(a) of the Regulation in the case of statistical and marketing cookies, and the legitimate interest necessary to ensure the operation of the Website according to Article 6(1)(f) of the Regulation in the case of cookies necessary for operation.

III.3. Main Characteristics of Cookies Used by the Website:

Cookies Essential for Operation:

If you do not accept the use of these cookies, certain functions may not be available to you.

Cookies Strictly Necessary for Operation: These cookies are essential for using the website and allow the use of basic functions of the website. In their absence, many functions of the site will not be available to you. The lifespan of these types of cookies is limited exclusively to the duration of the session.

Session Cookie: These cookies store the visitor’s location, browser language, and payment currency; their lifespan is until the browser is closed, or a maximum of 2 hours.

Cookie Acceptance Cookie: When arriving at the page, you accept the statement about the storage of cookies in the warning window. Lifespan is 365 days.

Barion Pixel Cookies Barion Payment Zrt. uses cookies (these are the ba_vid, ba_vid.xxx, and ba_sid cookies) during the application of the Barion payment solution to prevent fraud; these also process personal data (profile). In the case of Barion payment, the Seller can only provide payment using these cookies and cannot turn them off. The purpose of the ba_vid cookie, based on Barion’s Cookie Policy, is to filter out credit card fraud based on the digital fingerprint of the device used by the Buyer and their browsing habits. The use of the cookie is necessary to recognize fraudsters. The cookie ensures that we know data originating from browsing habits comes from one user. The purpose of the ba_vid.xxx cookie, based on Barion’s Cookie Policy, is to filter out credit card fraud based on the digital fingerprint of the device used by the Buyer and their browsing habits. The cookie ensures that Barion Zrt. can follow browsing habits between two sessions on the given website. It collects these data: ba_vid, ID related to the user, which is a hash compiled from browser properties, based on which the timestamp of the first, current, and last visit on the given website, the current session ID, and permission for third-party cookies. The purpose of the ba_sid cookie, based on Barion’s Cookie Policy, is to filter out credit card fraud based on the digital fingerprint of the device used by the Buyer and their browsing habits. The cookie ensures that Barion Zrt. can identify the session across websites. The storage time for ba_vid and ba_vid.xxx cookies is 1.5 years from the last update, and the storage time for the ba_sid cookie is 30 minutes. The data is stored by Barion Zrt. Barion’s Cookie Policy is available here: https://www.barion.com/hu/suti-tajekoztato/

Statistical Cookies:

Google Analytics Cookie: Google Analytics is Google’s analytical tool that helps website and application owners get a more accurate picture of their visitors’ activities. The service may use cookies to collect information and report statistical data regarding website usage without individually identifying visitors to Google. The main cookie used by Google Analytics is the “__ga” cookie. In addition to reports generated from website usage statistics, Google Analytics—together with some of the advertising cookies described above—can also be used to display more relevant ads in Google products (such as Google Search) and across the internet. Lifespan of Google Analytics cookies: _ga – 2 years; ga – 2 years. Analytics cookies store information about you if you have consented to the use of cookies on the cookie management panel, and the fact of consent is stored by Google using Google Consent mode v2. In this case, Google will also have information if you later withdraw this consent.

Cart Cookie: Records the products placed in the cart. Lifespan is 365 days.

IV. Recipients of Personal Data

IV.1. Scope of Data Processors Used by the Data Controller

Data Processor: the natural or legal person, public authority, agency, or any other body that processes personal data on behalf of the data controller.

IV.1.1. Hosting Provider

Name of Data Processor: MikroVPS Kft.

Contact details of the Data Processor:

Phone Number: +3694200210

Email Address: info@mikrovps.net

Registered Office: 7150 Bonyhád, Jókai Mór utca 3.

Website: www.mikrovps.net

The Data Processor performs the storage of personal data based on a contract concluded with the Data Controller. It is not entitled to access personal data.

IV.1.2. Data Processing Related to Sending Newsletters

Name of the company operating the newsletter system: NONE currently sending newsletters

Registered office of the company operating the newsletter system: no data

Phone number of the company operating the newsletter system: no data

Email address of the company operating the newsletter system: no data

Website of the company operating the newsletter system: no data

The Data Processor participates in sending newsletters based on a contract concluded with the Data Controller.

IV.1.3. Data Processing Related to Bookkeeping

Name of Data Processor: PR Accounting

Registered office of Data Processor: 1036 BUDAPEST NAGYSZOMBAT UTCA 3. 4/3.

Phone number of Data Processor: +36306006091

Email address of Data Processor: a.devenyi@prospektiv.hu

Website of Data Processor: no data

The Data Processor participates in the bookkeeping of accounting documents based on a written contract concluded with the Data Controller.

IV.1.4. Data Processing Related to Invoicing

Name of Data Processor: KBOSS. hu Kft.

Registered office of Data Processor: 1031 Budapest, Záhony utca 7.

Phone number of Data Processor: no data

Email address of Data Processor: info@szamlazz.hu

Website of Data Processor: www.szamlazz.hu

The Data Processor participates in the issuance and registration of accounting documents based on a contract concluded with the Data Controller.

IV.2. Data Transfer to Third Parties

The Data Controller transfers data to third parties (recipients) as follows. These recipients process the data not according to the instructions of the Data Controller, but as independent data controllers based on their own data processing policies.

IV.2.1. Recipients of Data Processing Related to Shipping

Name of Recipient: Magyar Posta Zártkörűen Működő Részvénytársaság

Registered office of Recipient: 1138 Budapest, Dunavirág utca 2-6.

Phone number of Recipient: +36-1/767-8200

Email address of Recipient: ugyfelszolgalat@posta.hu

Website of Recipient: posta.hu

The courier service participates in the delivery of the ordered goods based on a contract concluded with the Data Controller. The courier service processes the received personal data as set out in the data processing information available on its website.

Purpose of data transfer: to provide the courier service with data related to the purchase in order to carry out the delivery.

Legal basis for data transfer: performance of the contract concluded between you and the Data Controller based on Article 6(1)(b) of the Regulation, of which the delivery of the product is also a part, if you selected a shipping method during the order.

IV.2.2. Data Transfer Related to Online Payment

Name of Data Controller: Barion Payment Zrt.

Registered office of Data Controller: 1117 Budapest, Irinyi József utca 4-20. 2. floor

Phone number of Data Controller: no data

Email address of Data Controller: info@barion.com

Website of Data Controller: www.barion.com

Purpose of data transfer:

The payment service provider participates in the execution of the online payment based on a contract concluded with the Data Controller, for which purpose data transfer to the online payment service provider takes place during the purchase process in order to carry out the payment transaction.

Purpose of data transfer: to provide the online payment service provider with the transaction data necessary for the payment transaction initiated with it related to the purchase.

Scope of Transferred Data: Within the framework of the data transfer, we transfer the data necessary for the execution of the payment transaction to the payment service provider, especially the amount to be paid, order ID, and email data.

Legal Basis for Data Transfer: performance of the contract concluded between you and the Data Controller based on Article 6(1)(b) of the Regulation, of which payment by the buyer is a part, and in the case of online payment, the data transfer according to this point is necessary for the payment

V. Your Rights During Data Processing

Within the duration of data processing, you are entitled to the rights indicated in this information according to the provisions of the Regulation.

If you wish to exercise your rights, it involves your identification, and the Data Controller must necessarily communicate with you. Therefore, for the purpose of identification, it will be necessary to provide personal data (but identification can only be based on data that the Data Controller already processes about you), and your complaints related to data processing will be available in the Data Controller’s email account within the duration specified in this information regarding complaints.

The Data Controller will answer complaints related to data processing within 30 days at the latest.

V.1. Right to Withdraw Consent

You are entitled to withdraw your consent to data processing at any time. In this case, we will delete your personal data based on consent from our systems.

V.2. Right of Access to Personal Data

You are entitled to receive feedback from us as to whether we are processing your personal data. If so, you are entitled to access these data and receive information about the following:

• for what purpose we process your personal data;
• what types (categories) of personal data we process about you;
• to whom or to what recipients we have transferred or may transfer the personal data;
• how long we store the personal data, or if this cannot be determined in advance, based on what criteria we determine the duration of data processing;
• what rights you have to rectify, delete, or restrict the processing of your personal data, and in the case of data processing based on legitimate interest, to object;
• the possibility of lodging a complaint with the supervisory authority;
• if the data were not obtained from you, the source of the data;
• whether we apply automated decision-making (including profiling), and if so, about its essence, logic, and the expected effects on you.

The purpose of exercising the right of access is primarily to check the lawfulness of data processing. If you request information with the same content unreasonably often, we are entitled to charge a reasonable fee.

V.3. Right to Rectification

You are entitled to have the Data Controller rectify inaccurate personal data concerning you without delay upon your request.

V.4. Right to Restriction of Data Processing

You are entitled to have the Data Controller restrict data processing upon your request if any of the following is met:

• you contest the accuracy of the personal data, in which case the restriction applies to the period that allows the Data Controller to check the accuracy of the personal data; if the accurate data can be established immediately, the restriction will not take place;
• the data processing is unlawful, but you oppose the deletion of the data for any reason (for example, because the data are important to you for the enforcement of a legal claim), therefore you do not request the deletion of the data, but instead request the restriction of their use;
• the Data Controller no longer needs the personal data for the purpose of the indicated data processing, but you require them for the submission, enforcement, or defense of legal claims; or
• you have objected to the data processing, but the Data Controller’s legitimate interest may also ground the data processing; in this case, until it is established whether the Data Controller’s legitimate reasons take precedence over your legitimate reasons, the data processing must be restricted.

If data processing is subject to restriction, such personal data, with the exception of storage, may only be processed with the consent of the data subject, or for the submission, enforcement, or defense of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or a Member State.

V.5. Right to Deletion – Right to be Forgotten

You are entitled to have the Data Controller delete personal data concerning you without undue delay if any of the following reasons exist:

• the personal data are no longer necessary for the purpose for which the Data Controller collected or otherwise processed them;
• you withdraw your consent and there is no other legal basis for the data processing;
• you object to the data processing based on legitimate interest, and there is no overriding lawful reason (i.e., legitimate interest) for the data processing,
• the Data Controller processed the personal data unlawfully and this has been established based on the complaint,
• the personal data must be deleted to fulfill a legal obligation prescribed in Union or Member State law applicable to the Data Controller.

Deletion shall not apply if data processing is necessary:

• for the fulfillment of an obligation under Union or Member State law applicable to the data controller that requires the processing of personal data (such a case is data processing carried out within the framework of invoicing, since the preservation of the invoice is prescribed by law), or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller;
• for the submission, enforcement, or defense of legal claims (e.g., if the Data Controller has a claim against you and you have not yet fulfilled it, or if the handling of a consumer or data processing complaint is in progress).

V.6. Right to Object

You are entitled to object at any time, for reasons related to your own situation, to the processing of your personal data based on legitimate interest. In this case, the Data Controller may no longer process the personal data unless it proves that the data processing is justified by compelling legitimate reasons that take precedence over your interests, rights, and freedoms, or that are related to the submission, enforcement, or defense of legal claims.

V.7. Right to Portability

If the data processing is based on your voluntary consent or is carried out in order to fulfill a contractual obligation, you have the right to request from the Data Controller to receive the data you provided to the Data Controller, which the Data Controller will provide to you in xml, JSON, or csv format; if this is technically feasible, you can request that the Data Controller transfer the data in this form to another data controller.

V.8. Right to Legal Remedy

If you believe that the Data Controller has violated any legal provision regarding data processing or has not fulfilled any of your requests, then in order to terminate the presumed unlawful data processing, you may initiate the procedure of the National Authority for Data Protection and Freedom of Information (registered office: 1055 Budapest, Falk Miksa utca 9-11., mailing address: 1363 Budapest, Pf. 9., email: ugyfelszolgalat@naih.hu, phone numbers: +36 (30) 683-5969 +36 (30) 549-6838; +36 (1) 391 1400).

We also inform you that in case of violation of the legal provisions regarding data processing, or if the Data Controller has not fulfilled any of your requests, you may turn to the court competent according to your place of residence or stay.

VI. Other Provisions

VI.1. Modification of the Data Processing Information

The Data Controller reserves the right to modify this data processing information in a way that does not affect the purpose and legal basis of the data processing.

VI.2. Downloadable Version

You can also download this data processing information in PDF format from here.