Privacy Policy

This policy describes how the OfficeFruit.hu website (the Website) and related services process personal data, in line with Regulation (EU) 2016/679 (GDPR) and applicable Hungarian law.

1. Data controller

• Name: Tálosné Tomisa Erika e.v. (sole proprietor)
• Registered seat: 8706 Nikla, Berzsenyi Dániel utca 108/a, Hungary
• Tax no.: 51138938-2-34
• Registration number: 2742748
• E-mail: info@officefruit.hu
• Phone: +36 30 494 8375
• Website: https://officefruit.hu

2. Hosting provider

The Website runs on Cloudflare, Inc. (101 Townsend St., San Francisco, CA 94107, USA) infrastructure (Cloudflare Workers, D1, KV). Outgoing e-mails are delivered by our mail provider.

3. Data we process: purpose and legal basis

• Registration / account: name, e-mail, password (encrypted). Purpose: creating and managing your account. Basis: performance of a contract (Art. 6(1)(b)).
• Orders: billing name and address, delivery address, phone, and for businesses company name and tax number. Purpose: fulfilling orders and invoicing. Basis: contract and legal obligation (Art. 6(1)(b) and (c)).
• Social login (Google / Facebook): name, e-mail and public profile identifier received from the provider. Purpose: simplified sign-in. Basis: contract / consent (Art. 6(1)(b) and (a)).
• Newsletter: e-mail address. Purpose: marketing messages. Basis: consent (Art. 6(1)(a)), withdrawable any time.
• Product reviews: name and rating you provide. Purpose: displaying reviews. Basis: consent.
• Logs and analytics: IP address, device/browser data, usage statistics. Purpose: security, improvement and measurement. Basis: legitimate interest (Art. 6(1)(f)); consent for measurement cookies.

4. Processors and recipients

• Cloudflare, Inc. — hosting and infrastructure (USA; appropriate safeguards / SCC).
• Mail (SMTP) provider — delivery of system and confirmation e-mails.
• Stripe Payments Europe, Ltd. — online card payment processing (Ireland; card data is handled solely by Stripe).
• KBOSS.hu Kft. (Számlázz.hu) — electronic invoicing.
• Google LLC — Google Analytics / Ads (with consent) and Google sign-in (USA; EU-US DPF / SCC).
• Meta Platforms, Inc. (Facebook) — Facebook sign-in (USA; appropriate safeguards).
• Intuit Mailchimp — newsletter delivery (with consent).

During Google and Facebook sign-in the provider shares the above basic data with us; we never post on your behalf. Transfers to a third country (USA) take place with appropriate safeguards (EU-US DPF or Standard Contractual Clauses).

5. Cookies

The Website uses strictly necessary cookies and — only with your consent given in the cookie banner — measurement and marketing cookies (Google Analytics/Ads). Consent can be changed or withdrawn at any time.

6. Retention periods

• Account data: until the account is deleted.
• Invoicing data and records: 8 years, as required by Hungarian accounting law (Act C of 2000).
• Consent-based processing (newsletter, reviews): until consent is withdrawn.
• Log data: for a proportionate period needed for security.

7. Your rights

Under the GDPR you have the right to access, rectify and erase your data, restrict or object to processing, data portability, and to withdraw consent at any time. Send requests to info@officefruit.hu; we respond without undue delay, within one month at the latest.

8. Account and data deletion

You can delete your account and associated data at any time on the My account page using the „Delete account” feature, or by e-mailing info@officefruit.hu. Accounts created via social login can be deleted the same way; invoicing records may be retained in anonymised form for the statutory period.

9. Remedies

You may lodge a complaint with the Hungarian Data Protection Authority (NAIH): 1055 Budapest, Falk Miksa utca 9-11., e-mail: ugyfelszolgalat@naih.hu, web: naih.hu. You may also seek judicial remedy.

10. Changes

We reserve the right to amend this policy. The current version is always available on the Website. Last updated: 28 June 2026.