Privacy policy

1. Who we are

The controller of your personal data, within the meaning of Art. 4(7) of the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679), is the company that operates the TIDEMARK online shop. The company is based in Hungary. In this policy, “we” and “us” mean this company.

• Company: Tidemark Kft.
• Registered office: Móló utca 4., 8230 Balatonfüred, Hungary
• Company registration number: 19-09-514207
• EU VAT number: HU28451793
• E-mail for all privacy questions and requests: hello@tidemark.site

2. What personal data we process

The data we process depends on how you use the shop.

Orders

• Your name, delivery address and billing address
• Your e-mail address, and your phone number if you give one
• The content of your order: items, sizes, quantities and prices
• The payment status of your order, for example accepted, declined or refunded

Full card numbers are never part of the data we process.

Your account

• Your e-mail address
• Your password, kept only as a password hash and never in plain text
• Your order history

Customer service

The messages you send us, your name and e-mail address, and the details you give us about your order.

Technical data

When you visit the site, our servers record technical data in server logs, such as the IP address, the date and time of the request, the page requested, and browser and device information.

You are not obliged to give us your data. Without your delivery, billing and contact details, however, we cannot process an order.

3. Why we process it, and on what legal basis

We send no marketing e-mails without your consent. You can withdraw a consent at any time, with effect for the future.

Where we rely on legitimate interests, we have weighed them against your interests and rights. You can object to this processing at any time (see section 7).

4. Who receives your data

We share personal data only where it is needed for the purposes in section 3. The recipients belong to these categories:

• Payment service providers, which process your payment
• Carriers, which deliver your parcel and return shipments
• IT hosting and e-mail service providers, which run the site and our messages
• Accounting and tax service providers, which handle our books and invoices
• Public authorities, courts and other bodies, where the law requires us to disclose data

Service providers that process data on our behalf do so under a contract that meets the requirements of Art. 28 GDPR and only on our instructions.

5. International transfers

If personal data is transferred to a country outside the European Economic Area, this happens only with appropriate safeguards under Chapter V GDPR, such as an adequacy decision of the European Commission or standard contractual clauses. You can ask for information about the safeguards that apply by writing to hello@tidemark.site.

6. How long we keep data

• Order and contract data: for the duration of the contract and the legal limitation period for claims, which under Hungarian civil law is generally five years.
• Accounting documents, such as invoices: eight years, the period required by Hungarian accounting law.
• Account data: until you delete your account. Records we must keep by law, such as invoices, stay stored for the period above and are used for that purpose only.
• Customer service messages: for as long as we need to handle your request, and afterwards for the limitation period where the message concerns a contract.
• Server logs: 30 days.
• Data processed on the basis of your consent: until you withdraw your consent.

7. Your rights

Under the GDPR you have these rights:

• Access to your personal data and to information about how we process it (Art. 15)
• Rectification of inaccurate data (Art. 16)
• Erasure of your data, where the conditions of Art. 17 are met
• Restriction of processing (Art. 18)
• Portability of the data you gave us, in a structured, commonly used and machine-readable format (Art. 20)
• Objection to processing based on legitimate interests (Art. 21)
• Withdrawal of a consent you gave, at any time (Art. 7(3))
• Not to be subject to a decision based solely on automated processing that has legal or similarly significant effects (Art. 22)

To use any of these rights, write to hello@tidemark.site. We may ask you to confirm your identity first. We answer within one month of receiving your request (Art. 12(3) GDPR). For complex requests or a large number of requests, this period can be extended by up to two further months, and we will tell you why. Your request is free of charge, unless it is manifestly unfounded or excessive.

8. Complaints

If you think we process your data unlawfully, please write to us first so that we can put it right. You also have the right to complain to a supervisory authority (Art. 77 GDPR). In Hungary this is the National Authority for Data Protection and Freedom of Information (NAIH), www.naih.hu. You may also complain to the supervisory authority of the EU country where you live or work, or where the alleged infringement took place.

You also have the right to an effective judicial remedy before a court (Art. 79 GDPR).

9. Cookies

The site uses only strictly necessary storage in your browser tab, for your cart, your signed-in state, your order summary and the storage notice. It uses no analytics and no advertising or tracking cookies. Details are in the Cookie notice.

10. Changes to this policy

We update this policy when our processing or the law changes. The date of the current version is shown at the top of this page. If a change significantly affects you, we will tell you in a suitable way.