Privacy

Effective:[August 10, 2025]

Preamble

The lawful and secure handling of the personal data you provide is of paramount importance to us, so we would like to inform you about how we use your personal data in order to provide you with an even better and more personalized customer experience.

Company details:

• Company name: Ex Voto Archaeological Limited Liability Company
• Tax number: 13909961-2-42
• Headquarters: 1143 Budapest, Ilka utca 20, 2nd floor, door 10
• Mailing address: 1126 Budapest, Tartsay V. u. 14.
• Phone number: 06-1-123-4567
• Email: info@hoffmanns.hu
• Company registration number: 01-09-985035
• Bank account manager: CIB Bank
• Bank account number: 1010700024-70884281-51100005
• Statistical number: 13909961-9102-113-01
• Representative: Zoltán Farkas, managing director

Web hosting provider details:

• Company name: Netdoor Ltd.
• Headquarters: 1055 Budapest, Nyugati tér 8, 1st floor, door 5
• Tax number: 22635813-2-41
• Website: https://serverkraft.hu/
• Contact: https://serverkraft.hu/kapcsolat/

1. Contents of the information sheet

Ex-VOTO Kft. (Data Controller or Service Provider) acknowledges the content of this information notice (Information Notice) as binding upon itself and undertakes to ensure that all elements of the Information Notice have been prepared in accordance with the provisions of the laws in force in Hungary and the EU and meet their requirements. The data processing necessary for the Service Provider to perform its activities is based on the voluntary consent of the data subject. The information is continuously available on the website https://hoffmanns.hu.

Your personal data is processed by Ex-VOTO Kft. as Data Controller. For the purposes of this Notice, Data Controller means any natural or legal person, public authority, agency, or any other body that, alone or jointly with others, determines the purposes and means of the processing of personal data.

We process your personal data in accordance with the European Union's General Data Protection Regulation (GDPR) and other applicable data protection laws, including, in particular, the following data protection laws:

• 2011. Act CXII of 2011 on the right to self-determination in information and freedom of information (Infotv.);
•  
• Act XLVIII of 1997 on the basic conditions and certain restrictions of economic advertising activities (Grt.);
•  
• Act C of 2001 on Electronic Communications (Eht.)

Please read the Information Notice, which:

• specifies what types of personal data we collect;
• provides information about how we collect and use your personal data;
• explains when and for what purposes we share personal data within the Service Provider and with other organizations;
• serves as a guide to your rights and choices regarding your personal data.

This Notice applies to you if you use our services (Our Services), which means:

• the use of online shopping via the website https://hoffmanns.hu;
• electronic direct marketing communications, e.g., subscribing to newsletters, which you may receive from us via email;
• This Notice also applies if you contact us or we contact you regarding our Services;
• participation in market research, prize draws, events, or promotions organized by us.

2. General and interpretative provisions

The Service Provider shall perform data processing in compliance with data security requirements. In this regard, it shall take all technical and organizational measures and establish all procedural rules necessary to meet data protection and confidentiality requirements.

In connection with the technical and organizational measures referred to above, the Service Provider declares that it usesGoogle Analyticson the https://hoffmanns.hu website to measure traffic, monitor visitor behavior, and compile statistics. Google Analytics provides a level of protection for personal data transferred from the EU that is in line with the GDPR.

The Google Analytics program places so-calledcookieson the user's computer, which collect user data (for more information, please read our detailed Cookie Policy under point 10). By using this program, the Service Provider mainly obtains information about how many visitors visited the https://hoffmanns.hu website and how much time these visitors spent there.

The program recognizes the visitor's IP address and can use it to track whether you are a returning or new visitor, as well as to track your path through the website. However, these cookies cannot identify the user personally.

3. Legal basis and purpose of data processing

The legal basis for data processing is always yourvoluntary consent, the performance of the contract between us, and in certain cases, compliance with legal obligations.
The purpose of personal data processing is to:

• we can fulfill your orders;
• deliver the ordered goods (courier service: GLS Hungary Kft.);
• issue an invoice;
• manage our relationship with you;
• send newsletters (service provider: MailerLite);
• ensure the functioning of user accounts;
• improve the functioning of our website (using Google Analytics and cookies).

The purpose of data processing is also to carry out marketing activities, market research, customer service tasks, fulfill our legal obligations, and settle legal disputes.

4. Scope of personal data processed

Ex-VOTO Kft. processes the following personal data for the purpose of obtaining your consent or performing a contract:

During registration:

• First and last name
• Email address
• Phone number
• Shipping and billing address
• Password (in encrypted form)

When ordering:

• In addition to the above, details of the products ordered, order amount, delivery method, and payment method.

When subscribing to the newsletter:

• Name
• Email address

When communicating:

• Name
• Email address
• Phone number
• The content of the message

When using the website:

• IP address
• Browser type and version
• Operating system information
• List of visited pages and time
• Cookie identifiers

5. Duration of data processing

Ex-VOTO Kft. retains personal data for the following periods:

• Billing data:for the period specified in accounting legislation, i.e. 8 years.
• User account data:until the account is deleted.
• Newsletter subscription data:until consent is withdrawn (unsubscribed).
• Contact details:for 1 year after the case is closed.
• Cookies:depending on their type, for up to 1 year or until deleted from the browser.

6. Data transfer, data processors

Ex-VOTO Kft. only transfers personal data to its partners to the extent necessary for the performance of their tasks:

• Courier service:GLS General Logistics Systems Hungary Csomag-Logisztikai Kft. – shipping name, address, phone number, email address.
• Newsletter sender:MailerLite – email address, name.
• Web analytics:Google LLC (Google Analytics) – IP address, cookie identifiers.
• Hosting provider:___ (name, address).

Partners may only process data in accordance with our instructions and the terms and conditions set out in the contract; they may not use it for any other purpose.

7. Data security

Ex-VOTO Kft. takes all necessary technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, accidental or unlawful destruction, damage, or loss.

We store data on secure servers in an environment equipped with appropriate firewall and virus protection. Online payment transactions are encrypted in accordance with applicable security standards.

Access to the data is only granted to persons who have been authorized to do so in the course of their work and who are bound by confidentiality obligations.

8. Rights of data subjects

You have the following rights in relation to data processing:

1. Right to information– you have the right to know what data we process, on what legal basis, for what purpose, and for how long.
2. Right of access– you have the right to obtain a copy of your personal data that is being processed.
3. Right to rectification– you may request that we correct inaccurate or incomplete data.
4. Right to erasure– you may request that we erase your personal data if the legal basis for its storage no longer applies.
5. Right to restriction of processing– in certain cases, you may request that the processing of your data be restricted.
6. Right to data portability– you may request to receive your data in a structured, machine-readable format or have it transferred to another data controller.
7. Right to object– you may object to the processing of your personal data if it is based on legitimate interests.

Complaints:
If you feel that the data processing does not comply with legal requirements, you can submit your complainttotheNational Authority for Data Protection and Freedom of Information(NAIH).

• Address:1055 Budapest, Falk Miksa utca 9-11.
• Postal address:1363 Budapest, Pf. 9.
• Phone:+36-1-391-1400
• Email:ugyfelszolgalat@naih.hu
• Website:www.naih.hu

9. Cookie management

Thehofmanz.huwebsite uses cookies to operate, improve user experience, for statistical purposes, and for marketing activities.

What is a cookie?
A cookie is a small data file that a website places in the user's browser and which stores certain information about the user.

Types of cookies we use:

• Cookies necessary for operation– to ensure the basic functions of the webshop.
• Statistical cookies– Cookies used by Google Analytics to collect anonymous data about website usage.
• Marketing cookies– for personalizing ads and offers.

You can change or delete cookie settings in your browser at any time.

10. Final provisions

This Data Processing Notice is available at all times athttps://hoffmanns.hu/adatvedelem.
Ex-VOTO Kft. reserves the right to amend this notice, in which case it shall notify its users in good time before the amendment takes effect. Issues not covered in this Policy shall be governed by the provisions of the relevant legislation.

Data processing information regarding data transfer related to the use of online payment services

Who processes your personal data?	Ex-VOTO Kft. Tax number: 13909961-2-42 Registered office: 1143 Budapest, Ilka utca 20. 2nd floor, door 10. Postal address: 1126 Budapest, Tartsay V. u. 14. Telephone number: 06-1-123-4567 E-mail: info@hoffmanns.hu
What data is processed, for what purpose, on what legal basis, and for how long?	The purpose of personal data processing, the legal basis and duration of data processing, and the scope of data processed are summarized in the table below:
Scope of data processed	Purpose of data processing	Legal basis for data processing	Duration of data processing
I. Your name, billing address, email address, phone number	more secure customer authentication by the issuing bank	your consent	In the case of personal data, this is valid until 3DS authentication, after which it is deleted.

What are your rights?	Based on Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, you (i) may withdraw your consent to data processing at any time, however, the withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. Ex-VOTO Kft. may continue to process personal data after withdrawal of consent in order to fulfill its legal obligations or to enforce its legitimate interests, if the enforcement of those interests is proportionate to the restriction of the right to the protection of personal data, (ii) you may request access to your personal data by requesting information from Ex-VOTO Kft. about the data processed. The provision of information and copies of the processed data is free of charge. A reasonable fee based on administrative costs may be charged for any additional copies you request, (ii) you may request the rectification, erasure, or restriction of the processing of personal data concerning you, (iii) you may request that Ex-VOTO Kft. inform you of the recipients to whom it has disclosed the rectification, erasure, or restriction of the processing of your data,
Who are the recipients of your personal data?	Ex-VOTO Ltd.
What happens if you do not consent to the processing of your personal data listed in point II?	If you do not consent to the transfer of data, the payment process will be as follows: The merchant will redirect you to the CIB Bank website, where you will enter your card details (card number, expiration date, validation code). CIB Bank will then redirect you to the website of the bank that issued your card, where you will need to undergo identification (e.g., by entering a code sent to your mobile phone). If the identification is successful, the payment will be made and you will receive a notification. You will then be automatically redirected back to the merchant's website.
What legal remedies are available to you?	With regard to the lawfulness of data processing, you may initiate proceedings with the National Authority for Data Protection and Freedom of Information (1055 Budapest, Falk Miksa utca 9-11, postal address: 1363 Budapest, Pf.: 9., website: www.naih.hu, telephone: +36 (1) 391-1400, fax: +36 (1) 391-1410, central email address: ugyfelszolgalat@naih.hu) or you may turn to the court. We recommend that you contact our data protection officer before turning to the National Authority for Data Protection and Freedom of Information or the court.

How can the data protection officer be contacted?

Ex-VOTO Kft. Tax number: 13909961-2-42 Registered office: 1143 Budapest, Ilka utca 20. 2nd floor, door 10. Postal address: 1126 Budapest, Tartsay V. u. 14. Telephone number: 06-1-123-4567 E-mail: info@hoffmanns.hu

Statement  

I declare that I have understood and acknowledged the information related to data processing. I hereby voluntarily and with adequate information consent to Ex-VOTO Kft. transferring my voluntarily provided personal data to CIB Bank Zrt. for the purposes specified in the above information.