Last updated: 15 January 2026
This Privacy Policy explains how Danube Choice Kft. ("we", "us", "our") collects, uses, discloses, and safeguards your personal data when you visit our website danubechoice.eu (the "Service") and purchase products from us.
We process your personal data in accordance with Regulation (EU) 2016/679 — the General Data Protection Regulation (GDPR) and the Hungarian Act CXII of 2011 on the Right of Informational Self-Determination and Freedom of Information (Infotv.).
1. Personal Data We Collect
We only collect personal data necessary for the purposes described below. We do not collect special categories of personal data (Article 9 GDPR) such as health, religious, or biometric data.
1.1 Data you provide directly
- Account & order data: full name, email address, phone number, billing and shipping address, order history.
- Payment data: processed via our PCI-DSS compliant payment providers (Stripe, Barion, PayPal). We do not store full card numbers on our servers.
- Communication data: messages you send us via email, contact form, or live chat.
- Marketing preferences: your consent to receive newsletters and promotional emails.
1.2 Data collected automatically
- Technical data: IP address, browser type and version, device type, operating system, referring URL, time zone.
- Usage data: pages visited, time spent on pages, click behavior, items added to cart.
- Cookies and similar technologies — see Section 5 below.
2. Legal Basis for Processing
We rely on the following legal bases under Article 6 GDPR:
- Contract performance (Art. 6(1)(b)) — to process your orders, deliver products, and provide customer service.
- Legal obligation (Art. 6(1)(c)) — to comply with Hungarian tax, accounting, and consumer-protection laws (e.g., invoicing records kept for 8 years).
- Legitimate interests (Art. 6(1)(f)) — to prevent fraud, secure our platform, and analyze anonymized usage trends.
- Consent (Art. 6(1)(a)) — for marketing emails, non-essential cookies, and optional data collection. You may withdraw consent at any time.
3. Purposes of Processing
- Processing and fulfilling orders, including delivery and returns.
- Communicating with you about your orders and customer service inquiries.
- Processing payments and preventing fraud.
- Sending marketing communications (only with your consent).
- Improving our website, products, and services through analytics.
- Complying with legal and regulatory obligations.
4. Data Recipients
We do not sell your personal data. We share it only with the following categories of processors and third parties, bound by GDPR-compliant data processing agreements:
- Logistics partners: DPD Hungary, GLS, Magyar Posta — for order delivery.
- Payment processors: Stripe, Barion Payment Gateway, PayPal — for payment handling.
- Cloud & email service providers: AWS (EU region), Mailchimp — for hosting and transactional/marketing email.
- Analytics providers: Google Analytics (with IP anonymization and data retention capped at 14 months).
- Public authorities: when required by Hungarian or EU law (e.g., tax authority NAV).
5. Cookies
We use cookies and similar technologies on our website. Cookies are small text files stored on your device.
5.1 Types of cookies we use
- Strictly necessary cookies: required for the website to function (shopping cart, session, security). These cannot be disabled.
- Preference cookies: remember your settings (language, region, cookie consent choice).
- Analytics cookies: help us understand how visitors use the site (Google Analytics, anonymized).
- Marketing cookies: used by Facebook, Google, and other partners to measure ad performance and show relevant ads — only active if you consent.
5.2 Managing cookies
When you first visit our site, you will see a cookie consent banner allowing you to Accept All or Decline non-essential cookies. You can change your choice anytime by clearing your browser's local storage or contacting us at privacy@danubechoice.eu. You can also control cookies via your browser settings.
6. Data Retention
We retain personal data only as long as necessary for the purposes set out above:
- Order & accounting records: 8 years (required by Hungarian tax law).
- Customer accounts: until you request deletion, except where retention is legally required.
- Marketing data: until you withdraw consent or unsubscribe.
- Cookies: maximum 13 months from your last visit.
7. International Data Transfers
Your data is processed primarily within the European Union. Where any transfer to a third country occurs (e.g., to a non-EU subsidiary of a service provider), we rely on Standard Contractual Clauses approved by the European Commission and additional safeguards under Chapter V GDPR.
8. Your Rights Under GDPR
You have the following rights regarding your personal data:
- Right of access — request a copy of the personal data we hold about you.
- Right to rectification — correct inaccurate or incomplete data.
- Right to erasure ("right to be forgotten") — request deletion of your data, subject to legal exceptions.
- Right to restriction of processing — request that we limit processing of your data.
- Right to data portability — receive your data in a structured, machine-readable format.
- Right to object — object to processing based on legitimate interests or for direct marketing.
- Right to withdraw consent — at any time, without affecting prior lawful processing.
- Right to lodge a complaint with a supervisory authority.
To exercise any of these rights, email privacy@danubechoice.eu. We respond within 30 days (extendable by 60 days for complex requests, per Article 12 GDPR).
9. Supervisory Authority
If you believe we have not handled your personal data correctly, you have the right to lodge a complaint with the Hungarian data protection authority:
10. Security Measures
We implement appropriate technical and organizational measures to protect your personal data, including:
- SSL/TLS encryption for all data in transit (HTTPS).
- Encrypted storage of passwords and sensitive fields.
- Access controls and role-based permissions for our staff.
- Regular security audits and penetration testing.
- EU-based data centers with ISO 27001 certification.
11. Children's Privacy
Our service is not directed to individuals under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected such data, please contact us and we will delete it promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent version. Material changes will be notified via email or a prominent notice on our website.
13. Contact
For any questions about this Privacy Policy or your personal data, please contact: