Privacy Policy

(Note: This English translation is for informational purposes only. In case of any discrepancies or interpretation differences, the Hungarian version of this Privacy Policy shall prevail.) This Privacy Policy is intended to inform you, as a visitor to our website and/or as a user of our services, about the data protection and data processing practices of our company.

1. Principles We Follow in Our Data Processing

In the course of processing personal data, our Company adheres to the following fundamental principles:
  • We process personal data lawfully, fairly, and in a transparent manner for you as a data subject.
  • We collect personal data only for specified, explicit, and legitimate purposes and do not process them in a manner incompatible with those purposes.
  • The personal data we collect and process are adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed.
  • We take all reasonable measures to ensure that the personal data we process are accurate and kept up to date; inaccurate data are erased or rectified without delay.
  • We store personal data in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed.
  • We ensure appropriate security of personal data through technical and organizational measures to protect them against unauthorized or unlawful processing, accidental loss, destruction, or damage.
Our Company processes your personal data
  • based on your prior, informed, and voluntary consent, and only to the extent necessary and for specific, legitimate purposes, i.e., for collection, recording, organization, storage, and use;
  • in certain cases, data processing is based on legal obligations, in which case we will specifically inform you of such obligations;
  • in other cases, processing may be necessary for the legitimate interests pursued by our Company or by a third party (for example, the operation, development, and security of our website).

2. Who We Are

Name: Csilla Szilvai Sole Entrepreneur Registered address: 1138 Budapest, Cserhalom utca 6, Building C, 4th floor, Apt. 7 Mailing address: 1138 Budapest, Cserhalom utca 6, Building C, 4th floor, Apt. 7 Business registration number: Business registration number: 60978354 (registered by the Budapest Metropolitan Government Office) Tax number: 91363536-1-41 Representative: Csilla Szilvai E-mail: hello@nutrisoul.hu Website: https://nutrisoul.hu Our Company is not required to appoint a Data Protection Officer under Article 37 of the GDPR.

Our Company is not required to appoint a Data Protection Officer under Article 37 of the GDPR.

Web hosting provider: Name: NetMasters Europe Kft. Address: 4200 Hajdúszoboszló, Diószegi Sámuel utca 5. Website: www.netmasters.hu Email: szia@netmasters.hu Our Company, for the purpose of providing high-quality services to its clients, may use the following data processors: Data Controller: Csilla Szilvai Address: 1138 Budapest, Cserhalom utca 6, Building C, 4th floor, Apt. 7 Responsibility: All processing activities If we modify the list of our data processors, the changes will be reflected in this Privacy Policy. Data processed: We only request personal data from our website visitors when they register, log in, or participate in a prize draw. The personal data provided during registration or for marketing services are not linked, and identification of visitors is not our objective. You may request additional information about data processing by contacting us at hello@nutrisoul.hu or by mail. We will respond within 15 days (at most 1 month) to the contact details you provided.

3. Cookies and How We Use Them

Cookies are small data files that are placed on your computer when you visit our website, and stored by your browser. Most browsers (e.g., Chrome, Firefox) accept cookies by default, but you may refuse or delete them at any time via your browser settings. Some cookies do not require your prior consent (e.g., authentication, multimedia player, load-balancing, or user-interface customization cookies). You will receive brief information about these upon your first visit. Cookies that require consent will be activated only after your approval, which we request when you first visit our website. We do not use or allow cookies that enable third parties to collect data without your consent. Acceptance of cookies is not mandatory, however, our website may not function as expected if you disable them.

Types of Cookies Used

Neccesary Necessary cookies are required for the basic functionality of the website, such as secure login or changing consent settings. These cookies do not store any personally identifiable information.
Analytical Analytical cookies are used to understand how visitors interact with the website. These cookies provide information on metrics such as the number of visitors, bounce rate, traffic sources, etc.
Advertising Advertising cookies are used to display personalized ads to visitors based on previously viewed pages and to analyze the effectiveness of advertising campaigns.
You can learn more about third-party cookies on on this page .

Cookie settings

Consent Preferences
You can change your cookie consent settings anytime by clicking the “Consent Settings” button on our website. Browser-specific instructions for managing or deleting cookies can be found here: Chrome: https://support.google.com/accounts/answer/32050 Safari: https://support.apple.com/en-in/guide/safari/sfri11471/mac Firefox: https://support.mozilla.org/en-US/kb/clear-cookies-and-site-data-firefox?redirectslug=delete-cookies-remove-info-websites-stored&redirectlocale=en-US Internet Explorer: https://support.microsoft.com/en-us/topic/how-to-delete-cookie-files-in-internet-explorer-bca9446f-d873-78de-77ba-d42645fa52fc If you are using a different browser, please refer to its official support documentation.
 

4. Additional Information About Website Data Processing

Personal data are provided voluntarily when registering or contacting us. You are responsible for ensuring that your data are accurate and up to date, as inaccurate or incomplete data may prevent you from using our services. You may withdraw your consent at any time by:
  • deleting your registration,
  • revoking consent for data processing, or
  • requesting restriction or deletion of any required registration data.
We record the withdrawal of consent within 30 days for technical reasons. However, certain data may still be retained where processing is necessary for compliance with legal obligations or legitimate interests (e.g., defense of legal claims). In cases of misleading data use or system abuse, we may delete or retain the relevant data as needed for legal proceedings.

5. Direct Marketing and Newsletter Data Processing

You may consent to receive marketing communications or newsletters by checking the relevant box during registration or later. Such consent authorizes us to process your personal data for direct marketing and/or newsletter purposes, until withdrawn, and to send you promotional materials, offers, or information (in accordance with Act XLVIII of 2008, Section 6). You can withdraw your consent at any time and free of charge, separately or jointly for newsletters and marketing communications. Withdrawal of consent for marketing purposes does not automatically mean withdrawal of consent for other website-related data processing. We register the withdrawal of marketing consent within  15 days  for technical reasons.

6. Prize Draws

Our Company may organize prize draws as part of promotional campaigns. The specific rules and data processing terms for each campaign will be included in a separate regulation published prominently on our website’s homepage.

7. Other Data Processing Issues

We may transfer personal data only as permitted by law. Our data processors are contractually bound to process personal data solely for the agreed purposes. We do not transfer data outside the European Union. Authorities such as courts, prosecutors, the police, the tax authority, or the National Authority for Data Protection and Freedom of Information (NAIH) may lawfully request data. In such cases, we provide only the minimum data necessary to fulfill legal obligations. Our employees and partners involved in data processing are bound by confidentiality and may access personal data only to the extent required. We protect your data through physical, organizational, and technical measures — including encryption, password protection, and antivirus systems. Please note that internet data transmission cannot be guaranteed to be fully secure. While we strive to ensure maximum protection, we cannot take full responsibility for data transfers over the internet. To help protect your data, please keep your website login credentials secure and do not share them with others.

8. What Are Your Rights and Remedies?

Regarding data management, you have the right to:
  • request information,
  • request the correction, modification, or completion of your personal data processed by us,
  • object to data processing and request the deletion or blocking of your data (except for mandatory data processing),
  • seek legal remedy before a court,
  • file a complaint or initiate proceedings with the supervisory authority.
Supervisory Authority: National Authority for Data Protection and Freedom of Information (NAIH)
  • Headquarters: 1055 Budapest, Falk Miksa utca 9-11
  • Mailing address: 1363 Budapest, Pf.
  • Telephone: +36 (1) 391-1400
  • Fax: +36 (1) 391-1410
  • E-mail: ugyfelszolgalat@naih.hu
Website: https://naih.hu/ At your request, we will provide information about the personal data we process or processed by our data processor(s), including:
  • your data,
  • their source,
  • the purpose and legal basis of data processing,
  • its duration, or, if this cannot be determined, the criteria for defining this duration,
  • the name, address, and data-processing activities of our data processor(s),
  • the circumstances, effects, and preventive or corrective measures taken in connection with data protection incidents,
  • and, in case of data transfer, the legal basis and recipient of such transfers.
We will provide this information within 15 days (but no later than one month) after receiving your request. Information is provided free of charge unless you have already requested similar information regarding the same data set within the current year. If your data has been unlawfully processed or the request for information leads to correction, we will refund any previously paid fees. Requests may only be refused as provided by law, and we will notify you of the legal reasons for refusal and your options for legal remedy. Our company will notify you and any parties to whom your data was previously disclosed about any corrections, blocking, marking, or deletion, unless this would not infringe your legitimate interests. If we do not fulfill your request for correction, blocking, or deletion, we will notify you in writing within 15 days (but no later than one month) of receiving your request, stating our reasons for refusal and informing you of your right to legal remedy and your right to file a complaint with the Authority. If you object to the processing of your personal data, we will investigate your request within 15 days (but no later than one month), decide whether your objection is justified, and notify you in writing. If your objection is justified, we will cease processing your data — including further data collection and data transfers — and block the data, and we will also inform those to whom your data was previously transmitted. If we deny your request, we will justify it by proving that data processing is supported by compelling legitimate grounds that override your interests, rights, and freedoms, or relate to the establishment, exercise, or defense of legal claims. If you disagree with our decision or if we miss the deadline, you may turn to the court within 30 days from the date of receiving our decision or from the expiry of the deadline. Data protection lawsuits fall under the jurisdiction of the courts; the case may be brought before the court competent for your place of residence or stay. Foreign citizens may contact the supervisory authority competent for their place of residence. We kindly ask that before contacting the supervisory authority or turning to court with your complaint, please reach out to our Company — to facilitate discussion and ensure the fastest possible resolution of your issue.

9. Governing Laws

  • EU General Data Protection Regulation (GDPR) (EU 2016/679)
  • Act CXII of 2011 on the Right of Informational Self-Determination and Freedom of Information
  • Act V of 2013 on the Civil Code
  • Act CVIII of 2001 on Electronic Commerce
  • Act C of 2003 on Electronic Communications
  • Act CLV of 1997 on Consumer Protection
  • Act CLXV of 2013 on Complaints and Whistleblowing
  • Act XLVIII of 2008 on the Basic Requirements and Certain Restrictions of Commercial Advertising

10. Amendment of the Privacy Policy

Our Company reserves the right to amend this Privacy Policy. Any changes will be published on the nutrisoul.hu website. (Note: This English translation is for informational purposes only. In case of any discrepancies or interpretation differences, the Hungarian version of this Privacy Policy shall prevail.)

25 September 2025