Privacy Policy | Intech Studio

Privacy Policy

This policy explains what personal data Intech Studio Kft. ("Intech Studio", "we", "us") collects when you use intech.studio, why we collect it, and what rights you have over it. It applies to our website and online store. If you have questions, contact us at [email protected].

1. Overview of Data Protection

Who is the controller?

Intech Studio Kft., Kecskeméti utca 13., 1053 Budapest, Hungary is the data controller for all processing activities described in this policy (Art. 4(7) GDPR).

What data do we collect?

We collect data you provide directly (e.g. when placing an order, filling in a contact form, or subscribing to our newsletter) and data collected automatically when you browse our website (e.g. server log data, analytics data collected via our server-side infrastructure).

What do we use it for?

We use your data to fulfil orders, provide customer support, send newsletters (with your consent), and understand how our website is used so we can improve it.

Your rights at a glance

You have the right to access, correct, delete and restrict the processing of your personal data, the right to data portability, and the right to object to processing. See Section 2 for full details.

2. Your Rights & General Information

Right of access, rectification, erasure and restriction

You may at any time request information about the personal data we hold about you, ask us to correct inaccurate data, request deletion ("right to be forgotten"), or ask us to restrict processing while a dispute is resolved. To exercise these rights, contact us at [email protected].

Right to data portability

Where we process your data automatically on the basis of your consent or to fulfil a contract, you have the right to receive that data in a structured, machine-readable format and to transfer it to another controller.

Right to object (Art. 21 GDPR)

Where we process data on the basis of a legitimate interest (Art. 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, or the processing is necessary for legal claims. You may always object to processing for direct marketing purposes without giving reasons.

Right to revoke consent

Where processing is based on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal. To update your cookie consent preferences, use the Manage Preferences link in the cookie banner (powered by CookieChimp) at the bottom of any page.

Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of your habitual residence, place of work, or place of the alleged infringement. The Hungarian supervisory authority is the Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH), www.naih.hu.

SSL / TLS encryption

All data transmitted between your browser and our website is encrypted using TLS. You can confirm this by the https:// prefix and padlock icon in your browser's address bar.

Rejection of unsolicited emails

We object to the use of contact information published in this policy to send us unsolicited promotional material. We reserve the right to take legal action against such use, including spam.

3. Data We Collect

Cookie consent — CookieChimp

We use CookieChimp to manage cookie and tracking consent on this website. When you first visit, a consent banner lets you accept, reject, or customise which categories of cookies and tracking are active. Your preference is stored in a first-party cookie so you are not asked again on repeat visits. You can update your choices at any time via the Manage Preferences link in the footer or cookie banner.

Strictly necessary cookies (e.g. shopping cart, session authentication) are active regardless of your consent choice, on the legal basis of Art. 6(1)(f) GDPR (legitimate interest in providing a functioning service). All other tracking is only activated once you give explicit consent (Art. 6(1)(a) GDPR).

Server log files

Our hosting infrastructure automatically records standard server log files when you access our website. These contain:

  • Browser type and version
  • Operating system
  • Referrer URL
  • Hostname / IP address of the requesting device
  • Date and time of the request

Log data is not merged with other data sources and is processed on the basis of Art. 6(1)(f) GDPR (legitimate interest in technically error-free operation). Logs are retained for a limited period for security and debugging purposes, then deleted.

Order & payment data

When you place an order we collect your name, email address, billing and shipping address, and order details. This is necessary to fulfil the contract (Art. 6(1)(b) GDPR).

Payment processing is handled by Braintree (a PayPal service) and Stripe, both PCI-DSS compliant processors. We do not store card numbers or full payment credentials on our servers. For PayPal payments, additional terms apply at paypal.com. For Stripe, see stripe.com/privacy. Do not send payment information by email.

Contact form

Information submitted via our contact form — including your name, email address, and message — is stored solely to handle your enquiry and is not shared with third parties without your consent (Art. 6(1)(a) GDPR). Data is deleted once the enquiry is resolved, subject to any mandatory retention obligations.

4. Analytics & Advertising

Google Analytics via Server-Side Google Tag Manager

We use Google Analytics 4 to understand how visitors use our website. Analytics is implemented via server-side Google Tag Manager (sGTM), meaning that data is sent from our own server infrastructure to Google — not directly from your browser. This approach:

  • Reduces the amount of data sent directly from your device to Google.
  • Allows us to strip or hash personal identifiers (e.g. IP addresses) before forwarding.
  • Means that Google Analytics does not place its own cookies on your device directly; any measurement cookies are set by our first-party domain under our control.

Analytics is only activated after you provide consent via CookieChimp. The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw consent at any time by updating your preferences in the cookie banner. We have executed a Data Processing Agreement with Google.

For more information see Google's Privacy Policy. User-level data in Google Analytics is automatically anonymised or deleted after 14 months.

Conversion & ad tracking

We may run conversion tracking for advertising platforms (e.g. Google Ads, Meta) via our server-side Google Tag Manager setup. This means conversion events (e.g. completed purchases) are forwarded from our server to these platforms rather than via browser-side pixels. No ad-tracking data is sent without your consent.

5. Newsletter

If you subscribe to our newsletter, we collect your email address and (optionally) your name to send you product updates and promotions. Subscription is based on your explicit consent (Art. 6(1)(a) GDPR). You may unsubscribe at any time via the link in any newsletter email or by contacting us directly; your data will be deleted from our newsletter lists promptly.

We use MailerLite (UAB "MailerLite", J. Basanavičiaus 15, LT-03108 Vilnius, Lithuania) to send and analyse newsletters. Your email address is stored on MailerLite's servers in the EU. MailerLite provides open-rate and click-rate analytics. For more information see MailerLite's Privacy Policy.

6. Embedded Content & Third-Party Tools

YouTube

Some pages embed YouTube videos (operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). We use YouTube's enhanced privacy mode, which prevents YouTube from storing information about you unless you interact with a video. When you play a video, YouTube may set cookies and collect data about your viewing in accordance with Google's Privacy Policy. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in presenting video content in an accessible manner).

7. Amazon Selling Partner Data

To fulfil orders placed on Amazon and comply with Hungarian legal requirements, we process data obtained through the Amazon Selling Partner API (SP-API).

  • Scope: Customer name, shipping address, and order details (PII).
  • Purpose: Order fulfilment and generation of mandatory tax invoices required by the Hungarian National Tax and Customs Administration (NAV).
  • Legal basis: Compliance with a legal obligation (Art. 6(1)(c) GDPR), specifically the Hungarian Accounting Act (Sztv.).
  • Retention: Per Section 169 of the Hungarian Accounting Act, PII within financial records is retained for 8 years. Data no longer required for fulfilment is deleted or anonymised promptly.
  • Security: Amazon data is stored with AES-256 encryption at rest and transmitted via TLS 1.2+. Access is restricted to authorised personnel on a need-to-know basis. We do not share this data with third parties for marketing or profiling purposes.

8. Controller & Contact

  • Intech Studio Kft.
  • Kecskeméti utca 13., 1053 Budapest, Hungary
  • Phone: +36 70 365 0045
  • [email protected]
  • VAT: HU26696092

This policy was last updated in May 2026. We reserve the right to update it; the current version published on this page always applies.