Effective: from 23 January 2026

1. Data controller details

The data controller is responsible for processing personal data provided through the website.


2. Legal basis for data processing

Data is processed on the following legal bases under Regulation (EU) 2016/679 (GDPR):


3. Personal data processed

3.1. Orders in the online shop (WooCommerce)

Purpose of processing: order fulfillment, invoicing and delivery
Retention period: at least 8 years under accounting legislation


3.2. Online payments (SimplePay)

Card payments are processed through SimplePay (OTP Mobil Kft.).
The website does not process or store card details.

Data processed: transaction identifier and purchase amount
Data controller: OTP Mobil Kft. (SimplePay)
Legal basis for processing: performance of a contract


3.3. Invoicing (Számlázz.hu)

Invoicing is handled automatically through Számlázz.hu system.

Data processed:

Purpose of processing: compliance with a legal obligation
Data controller: KBOSS.hu Kft. (Számlázz.hu)


3.4. Delivery

Products are delivered by post.

Data processed: name, delivery address and phone number
Purpose of processing: product delivery


4. Contact form

Data provided through the website’s contact form:

Purpose of processing: contact and responding to inquiries
Retention period: until the matter is closed, for a maximum of 1 year


5. Newsletter subscription

This is based on the user’s voluntary consent.

Data processed:

Legal basis for processing: consent
Unsubscribe: at any time with one click at the bottom of the newsletter


6. Cookies

The website uses cookies for proper operation and statistical analysis.

Systems used:

Consent to cookies is given through the cookie banner displayed on the website.


7. Google Analytics and Google Search Console

The website uses the services of Google Ireland Ltd. to produce visitor statistics.

Data processed:

Purpose of processing: website improvement and statistics
Legal basis: legitimate interest / consent


8. Hosting provider

The hosting provider may have technical access to the data but processes it solely to provide the service.


9. Data transfers and processors

Data may be transferred to the following processors:


10. Rights of data subjects

Data subjects have the right to:

Requests may be sent to the following email address:
theriversidesoul@gmail.com


11. Legal remedies

If a data subject believes their rights have been infringed, they may lodge a complaint with:

Hungarian National Authority for Data Protection and Freedom of Information (NAIH)
Web: https://www.naih.hu


12. Other provisions

The data controller reserves the right to amend this policy.
Amendments take effect when published on the website.

This website uses cookies to function properly and improve your browsing experience. You can choose which cookies you consent to.

Accept all Necessary only