Privacy Policy


The following Privacy Policy explains how we handle personal data provided on our website.


1. Data controller

Name: Candle&Dekorations

Registered  office: 2421 Kittsee, Chicago 1. Gasse 7.

E-mail: info@candledekorations.com

2. What data do we process?

When using the website and making a purchase, the following personal data may be processed:

• name

• email address

• telephone number

• billing and shipping data

• order data

• IP address

3. Purpose of data processing

We process personal data for the following purposes:

• processing and fulfilling orders

• maintaining contact with customers

• arranging deliveries

• invoicing

• fulfilling legal obligations

4. Legal basis for data processing

Legal basis for data processing:

• customer consent

• performance of a contract

• compliance with a legal obligation

5. Data Retention Period

We will only store personal data for as long as necessary or as required by law.

6. Data transfer

Personal data may be transferred to the following partners in order to provide the service:

• GLS General Logistics Systems Hungary Kft. (parcel delivery)

• Magyar Posta Zrt. (parcel delivery)

• service provider acting for accounting and invoicing purposes

Data transfer is always carried out in accordance with the law.

7. Cookies

This website uses cookies for proper functioning, statistical and marketing purposes. Detailed information on the use of cookies can be found in the Cookies menu.

8. Rights of data subjects

The data subject has the right to:

• request information about the processing of their personal data

• request the correction or deletion of their data

• request the restriction of data processing

• object to data processing

You can make your request at the contact details of the data controller.

9. Data Security

We use appropriate technical and organizational measures to protect personal data.

10. Legal Redress

If you feel that the processing of your personal data is inappropriate, you have the right to file a complaint with the competent data protection authority.