Privacy Policy

Privacy Policy in accordance with Art. 13 GDPR

1. Controller
Carbon Web Kft.
Balassa utca 16.
5600 Békéscsaba, Hungary
Represented by: Szatmári Tibor – Managing Director
E-mail: carbonmedoffice@gmail.com
Phone: +36 30 074 7110

2. Collection and Processing of Personal Data
We process personal data that you provide to us in the context of an order, when contacting us, or when using our webshop. This includes in particular:

  • Name, address, contact details (e-mail, telephone number)

  • Order data, invoicing data

  • Payment information (depending on the chosen payment method)

  • IP address, browser data, cookies (see below)

Processing takes place for the purpose of fulfilling the contract, handling inquiries, billing and logistics purposes, as well as on the basis of your consent (e.g. for newsletters or cookies).
Legal basis: Art. 6 (1) lit. a, b, c, f GDPR.

3. Disclosure of Data
Data is disclosed only to service providers necessary for contract fulfillment:

  • Shipping service providers (GLS)

  • IT and hosting providers (Shopify International Ltd., Ireland)

  • Payment service providers (see below)

4. Payment Processing
We offer the following payment methods. Data will be passed on exclusively for the purpose of payment processing to the providers listed below:

  • Revolut Pay / Bank Transfer
    Revolut Bank UAB, Konstitucijos ave. 21B, 08130 Vilnius, Lithuania

  • Shopify Payments
    Shopify International Ltd., 2nd Floor, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland

  • Apple Pay
    Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland

  • Google Pay
    Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

Legal basis: Art. 6 (1) lit. b GDPR (contract fulfillment).

5. Cookies and Tracking
We use cookies to make our website user-friendly, as well as analytics and marketing tools.

  • Essential cookies: for shopping cart, login, language settings (necessary).

  • Statistics/Analytics: Google Analytics, Google Tag Manager

  • Marketing: Facebook Pixel, Google Ads Conversion Tracking

Legal basis: Your consent (Art. 6 (1) lit. a GDPR). You may withdraw your consent at any time via the cookie settings.

6. Newsletter
If you subscribe to our newsletter, we process your e-mail address to send you information about our products. You can unsubscribe from the newsletter at any time.

7. Duration of Storage
We store your data only for as long as necessary for the respective processing or as required by statutory retention periods.

8. Your Rights
You have the right to:

  • Access the data stored about you (Art. 15 GDPR)

  • Rectification of incorrect data (Art. 16 GDPR)

  • Erasure (Art. 17 GDPR)

  • Restriction of processing (Art. 18 GDPR)

  • Data portability (Art. 20 GDPR)

  • Object to certain processing activities (Art. 21 GDPR)

To exercise your rights, please contact: carbonmedoffice@gmail.com

9. Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence.

In Hungary:
Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH)
1055 Budapest, Falk Miksa utca 9-11.
www.naih.hu

10. Data Security
We use technical and organizational measures to protect your data from loss, misuse, or unauthorized access.