Privacy

1. Who is responsible for your data

1.1The data controller is WLWYB Global Korlátolt Felelősségű Társaság (WLWYB Global Kft.), registered seat 1027 Budapest, Tölgyfa utca 24., Hungary. Company registration number: 01-09-342012. Tax number: 26736583-2-41.

1.2Contact for anything in this notice: privacy@wlwyb.com.

1.3This notice covers WLWYB Open Editions, the self-service shop, and its checkout. The studio's own website, wlwyb.com, has its own notice for its forms, its booking calendar and its page statistics: wlwyb.com/privacy.

2. What we collect, and why

2.1Your order. The name, company name, email address, phone number, delivery and billing address and, if you give one, the VAT number you enter at checkout, together with what you ordered and what you paid. We use it to make and deliver your order, to invoice it, and to answer your questions. Lawful basis: performance of our contract with you, Article 6(1)(b) GDPR, and our legal obligations on tax and accounting, Article 6(1)(c).

2.2Your payment. Card and wallet payments are processed by Shopify Payments. Your card details go to the payment provider, not to us. We see that the payment succeeded, its amount, and the last four digits of the card.

2.3The artwork you upload. The file you upload for each print area, exactly as you sent it, the adjusted version if you approved one, the preview you were shown, the file's name, and which model and print area it belongs to. We print from the file; the preview is the record of what you approved. The files are seen only by the people who check the artwork and make the goods. A logo is usually not personal data, but we treat every upload as if it could be. Lawful basis: performance of our contract with you, Article 6(1)(b), and, after delivery, our legitimate interest in being able to show what was ordered and to make it again, Article 6(1)(f). You can object to the second at any time.

2.4What we do not do with your artwork. We do not use it to train anything, we do not publish it or show it as our work, and we do not pass it to anyone except for the production of your order.

2.5Messages. If you write to us, we keep the correspondence to answer you and to have a record of what was agreed. Lawful basis: Article 6(1)(b) and our legitimate interest in keeping business records, Article 6(1)(f).

2.6Your country. To show the right VAT wording, the shop asks our hosting provider which country your request appears to come from. We receive a country code and nothing else, and we do not store it. If you pick a country yourself, that choice is saved in your own browser.

2.7Advertising measurement and cookies. On the public site, and only if you agree in the cookie bar, Google Ads measures whether a visit that came from one of our advertisements led to an order. You can change your answer at any time with "Cookie settings" at the bottom of every page. Without your consent no advertising cookie is set. Lawful basis: your consent, Article 6(1)(a).

3. How long we keep it

• Artwork of a placed order (the original file, the approved file and the preview): 48 months from the order, then all of them are deleted.
• An upload that never becomes an order: deleted after 30 days.
• Order and invoice records: 8 years, the period Hungarian accounting law requires (Act C of 2000 on Accounting, Section 169).
• Correspondence: 24 months after our last contact with you, unless it belongs to an order, in which case it is kept with the order.

4. Who processes it for us

• Shopify runs the cart, the checkout, the payment (Shopify Payments) and the order record, and sends the order emails. Shopify also checks an EU VAT number against the European Commission's VIES register. Shopify uses its own suppliers for this, which it lists in its own privacy documents.
• Netlify hosts the shop's pages and stores the artwork you upload, in a store that belongs to this shop alone. Netlify keeps server access logs for up to 30 days.
• FedEx delivers the order. FedEx receives the recipient's name, company, address, phone number and email address, and, for destinations outside the EU, the customs data of the shipment.
• Google Workspace carries our email, so it holds the messages you send us.
• Our invoicing provider issues the invoice and so receives the invoice data. As Hungarian tax law requires, invoice data is also reported to the Hungarian tax authority.

4.2We do not sell your data, and we do not share it with anyone else unless the law requires it.

5. Where your data goes

5.1Shopify, Netlify, Google and FedEx are international companies and process data outside the European Economic Area as well, including in the United States and Canada. Where they do, the transfer rests on an adequacy decision of the European Commission or on the Commission's standard contractual clauses in our agreement with the provider.

6. Your rights, and deleting your artwork

6.1You can ask us for a copy of your data, ask us to correct or delete it, ask us to restrict its use, ask for it in a portable form, and object to processing that rests on our legitimate interest. Write to privacy@wlwyb.com. We answer within 30 days, and normally much sooner.

6.2You can ask us to delete your artwork at any time. Two honest limits: while your order is in production we cannot delete the file and also make the goods, so we will ask whether you want to cancel; and the invoice and the order record stay for the accounting period whatever happens to the artwork.

6.3If you think we have handled your data wrongly, you can complain to the Hungarian National Authority for Data Protection and Freedom of Information (NAIH), 1055 Budapest, Falk Miksa utca 9-11., Hungary, or to the data protection authority of the country where you live.