Last updated: October 20, 2026
Galerie Sac à Dos is operated by Polycontext Kft, a company registered in Hungary. This privacy policy explains how we collect, use, store and protect your personal data when you visit our website or place an order. It applies to all visitors and customers in the United States.
Who We Are
The data controller is:
Polycontext Kft
Dózsa György utca 11, Újlengyel, Pest, 2724, Hungary
Company number: 13-09-243800
VAT number: HU32299333
Email: contact@galeriesacados.com
We process your data under the European Union General Data Protection Regulation (GDPR). We also comply with the California Online Privacy Protection Act (CalOPPA) and applicable US state privacy laws.
What Personal Data We Collect and Why
| Data | Purpose | Legal basis (GDPR) | Retention |
|---|---|---|---|
| Name, email, mailing address, phone number | Fulfilling your order, delivering your purchase, contacting you about your order | Performance of a contract (Article 6(1)(b)) | 8 years from the order date (Hungarian tax and accounting law) |
| Payment information (card type, last four digits, transaction ID) | Processing your payment through Stripe or PayPal. We do not store your full card number. | Performance of a contract (Article 6(1)(b)) | 8 years (tax records) |
| Invoicing and tax records | Complying with Hungarian tax and accounting obligations | Legal obligation (Article 6(1)(c)) | 8 years |
| Account information (email, password hash, order history) | Maintaining your customer account, if you choose to create one | Performance of a contract (Article 6(1)(b)) | Until you delete your account, or 3 years after your last order if the account is inactive |
| Email address and marketing preferences | Sending you news and offers by email, only with your consent | Consent (Article 6(1)(a)) | Until you withdraw your consent |
| IP address, browser type, pages visited, referring URL | Website analytics (Google Analytics 4), security and fraud prevention | Consent for analytics cookies, legitimate interest for security (Article 6(1)(f)) | Analytics data: 14 months. Server logs: 90 days. |
| Contact form messages | Responding to your inquiry | Legitimate interest (Article 6(1)(f)) | 2 years |
| Cookies and similar technologies | Essential site functionality, analytics, consent preferences. See our cookie policy. | Essential cookies: legitimate interest. Non-essential cookies: consent. | See the cookie policy for durations per cookie. |
Who We Share Your Data With
We share your personal data only where necessary to fulfill your order or run our website:
- Stripe Inc. and PayPal process your payments. They act as independent controllers for payment data.
- Shipping carriers receive your name and delivery address to deliver your order.
- Google LLC (Google Analytics 4) receives anonymized browsing data, with your consent.
- Cloudflare Inc. provides content delivery and security for our website.
We do not sell your personal data to anyone.
International Data Transfers
Your data is stored on a server located in Hungary (within the European Union). Some of our service providers are based in the United States (Stripe, Google, Cloudflare). Transfers to these providers are protected by Standard Contractual Clauses (SCCs) approved by the European Commission.
Your Rights Under the GDPR
You have the right to:
- Access your personal data and receive a copy of it
- Rectify inaccurate or incomplete data
- Erase your data (“right to be forgotten”), where there is no legal obligation to keep it
- Restrict processing in certain circumstances
- Data portability for data you provided to us, in a structured, commonly used format
- Object to processing based on legitimate interest
- Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal
To exercise any of these rights, email us at contact@galeriesacados.com. We will respond within one month.
You may also lodge a complaint with the Hungarian data protection authority (NAIH) at naih.hu.
Information for California Residents
Under the California Online Privacy Protection Act (CalOPPA) and the California Consumer Privacy Act (CCPA), California residents have additional rights regarding their personal information.
Categories of personal information we collect:
- Identifiers: name, email address, mailing address, phone number, IP address
- Commercial information: purchase history, order details
- Internet or electronic network activity: browsing history on our site, pages visited, referring URL
Do Not Sell My Personal Information. We do not sell your personal information to third parties. We have not sold personal information in the preceding 12 months.
Your California rights:
- The right to know what personal information we collect, use and share
- The right to delete personal information we hold about you
- The right to opt out of the sale of personal information (we do not sell your data)
- The right to non-discrimination for exercising your privacy rights
To exercise any of these rights, email us at contact@galeriesacados.com. We will verify your identity before processing your request.
Information for Residents of Other US States
Residents of Virginia, Colorado, Connecticut and other states with consumer privacy laws have similar rights to those described above, including the right to access, delete and opt out of the sale of personal data. We do not sell personal data. To exercise any right, email us at contact@galeriesacados.com.
Cookies
We use cookies on our website. For full details on which cookies we use, their purpose and how to manage your preferences, please see our cookie policy.
Changes to This Policy
We may update this privacy policy from time to time. The “last updated” date at the top of this page shows when it was last revised. We encourage you to review this page periodically.
Contact
If you have questions about this privacy policy or your personal data, contact us at:
Email: contact@galeriesacados.com
Address: Polycontext Kft, Dózsa György utca 11, Újlengyel, Pest, 2724, Hungary