Privacy Policy
Last updated: 14 October 2026
This policy explains what personal data Senca collects when you visit our store, buy from us or contact us, why we use it, who we share it with and the rights you have under the EU General Data Protection Regulation (GDPR) and Hungarian law.
1. Who is responsible for your data
The data controller for this website and your orders is:
- Trading name
- Senca
Senca is currently in its pre-launch stage. The final legal seller details will be published here before online ordering becomes available.
Senca has not appointed a Data Protection Officer because, based on its current processing activities, appointment of a DPO is not presently considered mandatory under Article 37 GDPR.Privacy enquiries may be sent through our Privacy Rights form or contact form.
2. What we collect
Data you give us
- Order details: your name, email address, delivery and billing address, phone number if you choose to give it, and the products you buy.
- Account details, if you create an account: name, email address and login credentials. Account authentication credentials are handled securely by our platform provider. Passwords are not available to Senca in plain text.
- Messages you send us through the contact, privacy-rights or withdrawal forms, or by email.
- Your email address, if you choose to subscribe to our newsletter.
Payment data
Card and wallet payments are processed directly by our payment provider. We never see or store your full card number. We receive only the payment status and limited details such as the card type and last four digits.
Data collected automatically
Strictly necessary information is stored in your browser so the store works — for example, your shopping bag and your cookie choice. Analytics data about how you use the store is collected only if you accept analytics cookies. Full details are in our Cookie Policy.
We ask only for what we need. A phone number is optional at checkout, and you can buy without creating an account.
3. Why we use it and our legal basis
| Purpose | Data | Legal basis | How long we keep it |
|---|---|---|---|
| Taking, processing and delivering your order | Name, email, delivery and billing address, phone number (optional), order contents, order history | Performance of a contract — Art. 6(1)(b) GDPR | For the duration of the contract and any warranty or return period, then as required for accounting |
| Invoicing and accounting records | Name, billing address, order value, invoice data | Legal obligation — Art. 6(1)(c) GDPR (Hungarian accounting and tax law) | At least 8 years, as required by Hungarian accounting law |
| Customer account (if you create one) | Name, email, account login credentials, saved addresses, orders | Performance of a contract — Art. 6(1)(b) GDPR | Until you delete your account or ask us to delete it, unless we must keep order records |
| Formal written consumer complaints | Name, email, order number, the complaint and our response | Legal obligation — Art. 6(1)(c) GDPR (Hungarian consumer-protection rules) | 3 years, as required by Hungarian consumer-protection rules. |
| Answering ordinary support messages, warranty and withdrawal requests | Name, email, order number, the content of your message | Performance of a contract / legal obligation — Art. 6(1)(b) and (c) GDPR | For as long as reasonably necessary to resolve the enquiry and, where relevant, establish, exercise or defend legal claims. |
| Handling privacy-rights requests | Name, email, order number, request type and message | Legal obligation — Art. 6(1)(c) GDPR | For as long as reasonably necessary to demonstrate compliance with our GDPR obligations and handle any related dispute, after which the data will be deleted or anonymised unless longer retention is legally required. |
| Newsletter and marketing emails (only if you opt in) | Email address, date and wording of your consent | Consent — Art. 6(1)(a) GDPR | Marketing data is retained until you unsubscribe or otherwise withdraw your consent. Records necessary to demonstrate that valid consent was obtained may be retained afterwards for the period reasonably necessary to establish compliance or defend legal claims. |
| Understanding how the store is used (analytics, only if you accept analytics cookies) | Pages viewed, clicks, device and browser type, approximate country, session identifiers | Consent — Art. 6(1)(a) GDPR | Analytics information is retained for the period configured by our analytics provider, subject to the user's consent and applicable deletion settings. |
| Keeping the store secure and preventing fraud | Technical connection data, order and payment status | Legitimate interests — Art. 6(1)(f) GDPR (protecting our customers and business) | For as long as reasonably necessary to keep the store secure, prevent fraud and establish, exercise or defend legal claims, after which the data will be deleted or anonymised unless longer retention is legally required. |
5. Transfers outside the EU
Some of our service providers, or their sub-processors, are based in or access data from outside the European Economic Area, including the United States. Where that happens, transfers are protected by an adequacy decision (such as the EU–US Data Privacy Framework, for certified companies) or by the European Commission's Standard Contractual Clauses.
6. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you and receive a copy;
- have inaccurate data corrected;
- have your data deleted, where we no longer need it or have no legal reason to keep it;
- restrict how we use your data in certain circumstances;
- receive your data in a portable, machine-readable format;
- object to processing based on our legitimate interests, and to direct marketing at any time;
- withdraw your consent at any time, without affecting processing that happened before.
To use any of these rights, use our Privacy Rights form or use our contact form. Requests are normally handled free of charge and we will respond within one month. Where permitted by the GDPR, this period may be extended by up to two additional months because of the complexity or number of requests. If an extension is necessary, we will inform you within the first month. We may ask you to confirm your identity before acting on a request.
You also have the right to complain to the Hungarian data protection authority, the Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH), at naih.hu (opens in a new tab), or to the authority in the EU country where you live. We would appreciate the chance to resolve your concern first.
7. Marketing emails
We send marketing emails only if you have actively opted in. Every marketing email includes a way to unsubscribe, and you can also withdraw consent through the Privacy Rights form. Order and delivery emails are not marketing and are sent because they are needed to fulfil your order.
9. Security
The store is served over an encrypted (HTTPS) connection, payment data is handled by certified payment providers, and access to customer data is limited to people who need it. No system is perfectly secure; if a breach affecting your data occurs, we will notify you and the authority where the law requires.
10. Automated decisions and children
We do not make decisions about you based solely on automated processing that have legal or similarly significant effects. Our store is not intended for children under 16, and we do not knowingly collect their data.
11. Changes to this policy
We may update this policy when our services or the law change. The date at the top shows the latest version. Significant changes will be highlighted on the website or sent to you by email where appropriate.