PRIVACY POLICY

Effective: From May 19, 2026, until revoked.

The purpose of this Privacy Policy is for LBSTR Concept Kft. (hereinafter: Data Controller), as the operator of the website www.themostdaily.com, to provide transparent information about the processing of personal data of visitors and customers (hereinafter: Data Subject) in accordance with the General Data Protection Regulation of the European Union (GDPR 2016/679) and current Hungarian legislation.

1. DATA OF THE DATA CONTROLLER

• Name: LBSTR Concept Korlátolt Felelősségű Társaság
• Registered office: 9700 Szombathely, Honvéd tér 1. TT. 7.
• Company registration number: 18-09-116387
• Tax number: 32824911-2-18
• E-mail: hello@themostdaily.com
• Phone number: +36 70 852 0750

2. PURPOSE, LEGAL BASIS AND DURATION OF DATA PROCESSING

The services of the webshop may not be used by persons under the age of 16; their registration and purchases require the consent of their legal representative. The Data Controller is not able to verify the entitlement of the consenting person, so the Data Subject warrants that the data provided by them are authentic.

Purpose of data processing

Legal basis

Scope of processed data

Duration

Purchase, contract fulfillment

Contract fulfillment [GDPR Article 6 (1) b)]

Name, shipping/billing address, email, phone number, order details.

Civil law limitation period (5 years).

Invoicing (EUR, 27% VAT)

Legal obligation [GDPR Article 6 (1) c)]

Name, address, tax number (for companies), document data.

8 years according to the Accounting Act.

User registration

Consent [GDPR Article 6 (1) a)]

Name, email, encrypted password, order history.

Until the account is deleted.

Newsletter (Shopify Email)

Consent [GDPR Article 6 (1) a)]

Name, email address.

Until consent is withdrawn.

Complaint handling

Legal obligation [GDPR Article 6 (1) c)]

Name, email, content of complaint, minutes.

3 years according to the Consumer Protection Act.

Website operation (Cookies)

Legitimate interest / Consent

IP address, browsing data, device type.

Depending on the cookie (temporary/permanent).

3. DATA PROCESSORS AND DATA TRANSFER

The Data Controller uses the following data processors, who provide technical and operational background for the provision of the service and have data security guarantees in accordance with the law:

1. Webshop platform and Newsletter sender: Shopify Inc. (151 O'Connor Street, Ottawa, Canada). Shopify provides the webshop engine, servers, and the Shopify Email newsletter system.
2. Logistics and warehousing: Webshippy Fulfillments Kft. (Registered office: 1044 Budapest, Ezred utca 1-3. B2/11.) – Preparation and packaging of orders.
3. Shipping service providers (data transfer necessary for delivery):

• Foxpost Zrt. (Registered office: 3200 Gyöngyös, Batsányi János utca 9.)
• GLS General Logistics Systems Hungary Kft. (Registered office: 2351 Alsónémedi, GLS Európa u. 2.)
• Magyar Posta Zrt. - MPL (Registered office: 1138 Budapest, Dunavirág utca 2-6.)
• Express One Hungary Kft. (Registered office: 1239 Budapest, Európa út 12.)
• DPD Hungária Kft. (Registered office: 1134 Budapest, Váci út 33. A. ép. 3. em.)
• United Parcel Service Hungary Kft. - UPS (Registered office: 1044 Budapest, Ipari Park utca 10.)

1. Online invoicing: Octonull Kft. - Billingo (Registered office: 1107 Budapest, Mázsa utca 9.) – For the purpose of transferring data necessary for issuing legal invoices.
2. Payment service providers (The Data Controller does not have access to credit card data):

• Shopify Payments (Stripe Technology Europe Ltd., Ireland)
• PayPal (Europe) S.à r.l. et Cie, S.C.A. (Luxembourg)

4. DATA SECURITY MEASURES AND STATEMENTS

4.1. The Data Controller declares that it applies a level of protection appropriate to the state of technology to protect the data.

4.2. Data traffic through the website is protected by SSL (Secure Sockets Layer) encryption.

4.3. The Billingo and Shopify systems use high-level encryption when storing data.

4.4. Access to data is restricted by the Provider in an internal regulation; only employees involved in the fulfillment process may access it.

4.5. Automated decision-making and profiling: The Data Controller does not apply automated decision-making as per GDPR Article 22 and does not carry out automated profiling when processing the personal data of customers.

5. RIGHTS OF THE DATA SUBJECT AND THEIR ENFORCEMENT

As a Data Subject, you may exercise the following rights by sending a statement to hello@themostdaily.com (the Data Controller is obliged to respond within 30 days of receiving the request at the latest):

• Right of access: You can request information about the processing of your data and access the processed data.
• Right to rectification: You can request the immediate correction of your inaccurate or incomplete data.
• Right to erasure (“right to be forgotten”): You can request the erasure of your data, unless data processing is mandatory by law (e.g., 8-year retention according to the Accounting Act).
• Right to restriction of processing: You can request the restriction of data processing if you dispute the accuracy of the data, or if the data processing is unlawful, but you object to its erasure.
• Data portability: You can request your data to be issued in a structured, commonly used, machine-readable format.
• Right to withdraw consent: You can withdraw your consent-based data processing (registration, newsletter) at any time. Withdrawal does not affect the lawfulness of previous data processing.
• Right to object: You can object to data processing based on legitimate interest.

6. COOKIE INFORMATION

The Webshop uses cookies to operate the shopping cart function and for statistical analysis.

• Necessary cookies: Without these, the webshop would not function (e.g., login, remembering shopping cart contents).
• Marketing and analytical cookies: These can be voluntarily enabled or rejected by the visitor upon first entry using Shopify's built-in cookie manager.

7. REMEDIES

If you believe that your personal data has not been processed in accordance with regulations, please contact us at hello@themostdaily.com to amicably resolve the situation.

You can also directly contact the authority with your complaint:

• National Authority for Data Protection and Freedom of Information (NAIH)
• Address: 1055 Budapest, Falk Miksa utca 9-11.
• Mailing address: 1363 Budapest, Pf.: 9.
• Web: www.naih.hu
• Judicial remedy: In case of infringement of rights, the Data Subject may initiate legal proceedings before the Tribunal competent for the Data Controller's registered office (Szombathely Tribunal) or the Tribunal corresponding to their own place of residence.