In force from: 22 October 2024. This notice replaces the previous version of the same date.
As the operator of the Bagira Coffee webshop (https://bagira.coffee) we are committed to protecting your personal data. This notice explains what data we process, why, for how long, and what rights you have. Processing is carried out in accordance with Regulation (EU) 2016/679 (GDPR) and Act CXII of 2011 on informational self-determination.
This is an English translation provided for convenience. In the event of any discrepancy, the Hungarian version prevails.
1. The data controller
- Name: TTG Gastro Kft.
- Registered seat: 1074 Budapest, Dob utca 25. Fszt. 2., Hungary
- Company registration number: 01-09-995603 · VAT number: 24206729-2-42
- Email: info@bagira.coffee · Phone: +36 70 786 3670
We have not appointed a data protection officer, as our activity does not require one.
2. What we process and why
2.1 Fulfilling your order
- Data: name, billing address, delivery address, email address, phone number, contents and value of the order.
- Legal basis: performance of the contract (GDPR Art. 6(1)(b)).
- Retention: 8 years as part of accounting records (Act C of 2000 on Accounting, Section 169).
2.2 Invoicing
- Data: name, address, tax number (for business purchases), invoice details.
- Legal basis: compliance with a legal obligation (GDPR Art. 6(1)(c)).
- Retention: 8 years.
2.3 User account
- Data: name, email address, password (stored encrypted), address details, order history.
- Legal basis: performance of the contract and consent (GDPR Art. 6(1)(b) and (a)).
- Retention: until you delete the account. Deleting an account does not affect the mandatory retention of accounting records.
2.4 Product reviews
- Data: displayed name, review text, star rating, date of publication.
- Legal basis: consent (GDPR Art. 6(1)(a)). Only logged-in customers who have previously ordered may leave a review.
- Retention: until withdrawn — you can delete your own review at any time on the product page.
2.5 Contact and customer service
- Data: name, email address, phone number, content of your message.
- Legal basis: legitimate interest in answering enquiries (GDPR Art. 6(1)(f)).
- Retention: 1 year after the matter is closed.
2.6 Newsletter
- Data: email address, name.
- Legal basis: consent (GDPR Art. 6(1)(a)); Section 6 of Act XLVIII of 2008 on advertising.
- Retention: until you unsubscribe, which takes one click at the foot of every email.
2.7 Traffic statistics
- Data: IP address (truncated), device and browser information, pages viewed.
- Legal basis: your consent only (GDPR Art. 6(1)(a)). Statistical and marketing services are not loaded at all until you accept them on the cookie bar.
- Retention: per the Google Analytics configuration, up to 14 months.
3. Data processors
We use the following partners to fulfil orders. Each receives only the data needed for its task.
- OTP Mobil Kft. (SimplePay) — online card payment. Data transferred: name, delivery address, phone number, email address. Card details are never disclosed to us. Notice: simplepay.hu/adatkezelesi-tajekoztatok
- KBOSS.hu Kft. (Számlázz.hu) — electronic invoicing. Data transferred: name, address and line items required for the invoice.
- GLS General Logistics Systems Hungary Kft. — home delivery and parcel-point collection. Data transferred: name, delivery address, phone number, email address, chosen collection point.
- FOXPOST Zrt. — parcel locker collection. Data transferred: name, phone number, email address, chosen locker.
- Tárhely.Eu Szolgáltató Kft. — hosting of the webshop, server log data.
- Google Ireland Limited — traffic statistics (Google Analytics 4). Only with your consent. Any transfer to the United States takes place under the EU–US Data Privacy Framework.
4. Cookies
A cookie is a small file stored by your browser. Before you give consent, the site uses only cookies strictly necessary for it to work. The scripts that set statistical cookies are not even loaded until you accept them on the cookie bar.
4.1 Strictly necessary cookies (no consent required)
| Name | Purpose | Lifetime |
|---|---|---|
| pll_language | Remembers the selected language | 1 year |
| bagira_consent | Stores your answer on the cookie bar | 6 months |
| woocommerce_cart_hash, woocommerce_items_in_cart, wp_woocommerce_session_* | Keeps the basket contents and makes checkout work | session – 2 days |
| wordpress_logged_in_*, wordpress_sec_* | Keeps you signed in (account holders only) | session – 14 days |
4.2 Statistical and marketing cookies (consent only)
| Name | Purpose | Lifetime |
|---|---|---|
| _ga, _ga_B2KF8ZHDJJ | Google Analytics 4 — traffic statistics | 2 years |
| sbjs_current, sbjs_first, sbjs_current_add, sbjs_first_add, sbjs_session, sbjs_udata, sbjs_migrations | Records which source an order came from | session |
You can withdraw your consent at any time: delete the bagira_consent cookie in your browser and the cookie bar will reappear so you can choose again. Withdrawal does not affect the lawfulness of processing carried out before it.
5. Data security
The site is served over an encrypted (HTTPS) connection. Passwords are never stored in readable form. Access to data is limited to authorised staff, to the extent needed for their work.
6. Your rights
Under the GDPR you have the rights below. Write to info@bagira.coffee and we will respond within one month at the latest.
- Access — ask what data of yours we process.
- Rectification — ask us to correct inaccurate data.
- Erasure — ask us to delete your data, except where the law requires retention (for example invoices, 8 years).
- Restriction of processing.
- Data portability — receive the data you provided in a machine-readable format.
- Objection — to processing based on legitimate interest.
- Withdrawal of consent — at any time, with effect for the future.
7. Remedies
If you believe the processing infringes your rights, please contact us first — most questions are resolved fastest that way. You may also lodge a complaint with the supervisory authority or go to court.
- Hungarian National Authority for Data Protection and Freedom of Information (NAIH)
1055 Budapest, Falk Miksa utca 9-11. · Postal address: 1363 Budapest, Pf. 9.
Phone: +36 1 391 1400 · Email: ugyfelszolgalat@naih.hu · Web: naih.hu - Court: you may also bring proceedings before the regional court of your place of residence.