Privacy
Privacy Policy.
Detailed information on how your personal data is processed, legal bases, data processors, and your rights.
Detailed information on how your personal data is processed, legal bases, data processors, and your rights.
Effective: 22 September 2026 | Version: 1.0
1. Data Controller Details
Service Provider / Data Controller: ICSS CSOPORT Kft.
Registered Seat: 2724 Újlengyel, Nyári Pál utca 15., Hungary
Registration Number: 13-09-243210 | Tax / VAT ID: 28735595-2-13
Registering Court: Company Court of Budapest Environs Regional Court
Webshop: https://nerouniverzum.com
Email: info@nerouniverzum.com | Phone: +36 70 613 3653
Return & Complaint Address: 1133 Budapest, Kárpát u. 1/B., Hungary
2. Principles of Data Processing
The Data Controller processes personal data lawfully, fairly, and transparently, for specified purposes, and to the extent necessary. Appropriate technical and organizational measures are in place to safeguard data confidentiality and integrity.
3. Webshop Ordering & Contract Fulfillment
Processed data: name, billing and shipping address, email, phone number, order contents and ID, payment status, shipping data, related communications.
Purpose: receiving orders, establishing and fulfilling contracts, customer care, returns, and complaint handling.
Legal Basis: GDPR Art. 6(1)(b) - performance of a contract.
Retention: for the period necessary to fulfill the contract and exercise civil claims.
4. Invoicing & Statutory Accounting
Processed data: billing name, address, tax-relevant details, order and payment records.
Purpose: issuing invoices and compliance with accounting and tax laws.
Legal Basis: GDPR Art. 6(1)(c) - compliance with legal obligations.
Retention: statutory retention period mandated by tax/accounting laws (e.g. 8 years under Hungarian law).
5. Delivery & Shipping
Processed data: recipient name, shipping address or pickup point, email, phone number, package ID.
Purpose: parcel delivery and shipping updates.
Legal Basis: GDPR Art. 6(1)(b) - performance of a contract.
Recipients: selected carrier service (including Magyar Posta Zrt. where offered under Hungarian law).
6. Payment Processing
Payment processing depends on active gateways in checkout (e.g., Shopify Payments, PayPal).
The merchant does not store full credit card numbers. Legal Basis: GDPR Art. 6(1)(b).
7. Contact & Complaint Handling
Processed data: name, contact details, message/complaint content, order data.
Purpose: answering inquiries and processing consumer complaints.
Legal Basis: GDPR Art. 6(1)(b), (c), or (f). Retention: statutory complaint retention period (3 years).
8. Electronic Right of Withdrawal
Processed data: withdrawal decision, name, order ID, email address, submission timestamp.
Purpose: processing and acknowledging electronic statutory withdrawal requests. Legal Basis: GDPR Art. 6(1)(c).
9. Shopify as Platform Provider / Processor
The webshop is built on Shopify infrastructure (Shopify International Limited, Ireland). Shopify acts as a data processor for order and customer data under their Data Processing Addendum.
10. Hosting & Infrastructure
Hosting Provider: Rackhost Zrt. (6722 Szeged, Tisza Lajos körút 41., Hungary; info@rackhost.hu). Processes technical server logs on behalf of the controller.
11. Cookies, Pixels & Identifiers
Use of cookies and tracking technologies is detailed in our Cookie Policy. Optional analytics or marketing tools (e.g. Google Analytics, Meta Pixel) require prior consent.
12. Data Subject Rights & Remedies
Under GDPR, your rights include: access, rectification, erasure ('right to be forgotten'), restriction, data portability, objection, and withdrawal of consent.
Supervisory Authority: Hungarian National Authority for Data Protection and Freedom of Information (NAIH): 1055 Budapest, Falk Miksa utca 9-11., Hungary; Email: ugyfelszolgalat@naih.hu; Website: www.naih.hu.