Privacy Policy – N’Tommy

1. Data controller

RB Events Kft.
Registered office: 1141 Budapest, Öv utca 118. 1/3, Hungary
Company registration number: 01-09-450569
Tax number: 32940266-2-42
Email: hello@ntommy.com
Website: ntommy.com

2. Personal data and purposes

When you place an order, we process the name, contact details, billing and delivery addresses, purchased items, order status, payment reference and related correspondence needed to fulfil the order, arrange delivery, provide customer service and comply with accounting obligations. We do not require account registration for guest checkout.

3. Legal bases

Order fulfilment: GDPR Article 6(1)(b). Accounting and other legal obligations: Article 6(1)(c). Legitimate interests may apply to proportionate security and legal-claims processing under Article 6(1)(f), where appropriate. Any optional marketing requires its own valid legal basis and, where required, consent.

4. Service providers and recipients

WooCommerce/WordPress supports the webshop; Számlázz.hu (KBOSS.hu Kft.) supports invoicing; MPL supports shipment. Relevant data is shared only as necessary for these purposes. Hosting provider: Tárhely.Eu. Other processors, any international transfers and their safeguards must still be verified before publication.

5. Retention

Order and customer-service data is kept for the time needed to perform the contract and resolve claims, subject to applicable statutory retention periods. Accounting documents are retained for the legally required period. Specific periods must be confirmed in the final notice.

6. Your rights

Subject to applicable conditions, you may request access, rectification, erasure, restriction, portability and object to certain processing. Where consent applies, you may withdraw it. Contact hello@ntommy.com. You may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH) or seek judicial remedy.

7. Cookies and security

WooCommerce may use strictly necessary cookies or similar technologies to maintain cart and checkout functions. Any analytics or marketing tools, consent mechanisms, retention periods and cookie inventory must be checked and documented before publication. Appropriate security measures are used to protect personal data.