Privacy Policy

Legal Statement: This document is intended as a template for information purposes only. By using it, you accept this statement and acknowledge that Webnode is not responsible for any actions or use made of the content of this website. We recommend that you seek legal advice and adapt this document to the needs of your business.

The webshop on the website www.yafo.hu company identification number 13-09-238250 registered office 2112 Veresegyház, Hegyalja u 8. processes the personal data provided by the Customer for the fulfillment and supplementation of the General Terms and Conditions, for the processing of electronic orders and shipments and for the necessary communication for the period prescribed by law.

General provisions

1. Personal data controller in accordance with the GDPR (hereinafter referred to as the Regulation) is YAFO Kft., company ID 13-09-238250, registered office 2112 Veresegyház, Hegyalja u 8. (hereinafter referred to as the "Controller");

2. Contact details of the Controller: e-mail: yafo.hu tel.: 06 20 233 3845;

3. Personal data is any information that relates to the identification of a natural person.

Source of personal data

1. The Controller processes personal data obtained with the consent of the Customer, which is collected through a contract concluded during an electronic order created in the e-shop.;

2. The Controller only processes the Customer's identification and contact details, which are necessary for the performance of the contract;

3. The Controller processes personal data for the period prescribed by law for delivery and accounting purposes, as well as for the necessary communication between the contracting parties. Personal data will not be published and will not be transferred to other countries.

Purpose of data processing

The Controller processes the Customer's personal data for the following purposes:

1. Registration on the website yafo.hu in accordance with Section 2 of Chapter 4 of the GDPR;

2. To fulfill the electronic order created by the Customer (name, address, e-mail, telephone number);

3. Compliance with laws and regulations arising from the contractual relationship between the Customer and the Controller;

4. Personal data is necessary for the performance of the purchase contract. The contract cannot be concluded without personal data.

Duration of storage of personal data

1. The Controller stores the data for the period necessary to fulfill the rights and obligations arising from the contractual relationship for 3 years after the conclusion of the contractual relationship;

2. The data controller must delete all personal data after the period necessary for storing the personal data has expired.

Recipients and processors of personal data

Third parties processing the Customer's personal data are subcontractors of the Controller. The services of these subcontractors are essential for the successful performance of the contract between the Controller and the Customer for the processing of electronic orders.

Subcontractors of the Controller:

Webnode AG (online store system);

Delivery company;

Google Analytics (website statistics);

Customer rights

Customer rights in accordance with the Regulation:

1. Right of access to personal data;

2. Right to rectification of personal data;

3. Right to erasure of personal data;

4. Right to object to the processing of personal data;

5. Right to data portability;

6. The right to withdraw consent to the processing of personal data in writing or by e-mail: yafo@yafo.hu;

7. In case of suspected violation of the Regulation, file a complaint with the supervisory authority.

Protection of personal data

1. The Controller declares that it takes all necessary technical and organizational precautions to protect personal data;

2. The Controller has taken technical precautions to secure the data storage areas, in particular by protecting access to the computer with a password, using antivirus software and regular maintenance of computers.

Final provisions

1. Placing an electronic order on the website yafo.hu. The Customer confirms that he has been informed about all the circumstances of the protection of personal data and fully accepts them;

2. The Customer accepts these rules by checking the checkbox on the order purchase form.

3. The Controller may update these rules at any time. A new, updated version is available on the published website.

These rules will enter into force on 14.12.2025.