Privacy Policy
This Privacy Policy explains how Ourabura ("we", "us", or "our") collects, uses, stores, and protects personal data when you visit or use our website [www.ourabura.com] (the "Website") or contact us regarding our products and services.
We are committed to protecting your privacy and processing your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable Hungarian data protection legislation.
1. Data Controller
The data controller responsible for the processing of your personal data is:
Burány Veronika e.v.
Registered office: 1081 Bp. Vay Ádám u. 8.
Registration number: 53055310
Tax number: 69350676-1-42
Email: hello@ourabura.com
Website: www.ourabura.com
For privacy-related questions or requests, please contact us at hello@ourabura.com.
2. Personal Data We Collect
Depending on how you interact with our Website and services, we may collect the following categories of personal data:
-
name;
-
email address;
-
telephone number;
-
wedding date or planned wedding date;
-
preferred appointment date and time;
-
information provided in enquiries or messages;
-
measurements or fitting-related information where necessary for providing our services;
-
billing and transaction information where applicable;
-
information contained in correspondence with us;
-
cookie and similar technology data.
We only collect information that is reasonably necessary for the relevant purpose.
3. How We Collect Your Personal Data
We may collect personal data when you:
-
submit a contact or enquiry form;
-
request or book a bridal appointment;
-
communicate with us by email, telephone or other communication channels;
-
purchase our products or services;
-
subscribe to our newsletter or marketing communications;
-
interact with our Website;
-
give consent to the use of cookies or similar technologies.
4. Purposes of Processing
We may process your personal data for the following purposes:
Responding to enquiries
We use the information you provide to respond to your questions, requests and messages.
Appointment management
If you request or book a bridal appointment, we use your information to arrange, confirm, modify or cancel the appointment and to communicate with you about it.
Providing our services
We may process information necessary to provide bridal, fitting, alteration, consultation, purchasing or other services requested by you.
Orders and payments
Where applicable, we process personal data necessary to process orders, payments, invoices, refunds and related accounting obligations.
Customer communication
We may contact you regarding your enquiry, appointment, order or other service-related matters.
Marketing
Where permitted by law and where required, based on your consent, we may use your contact details to send newsletters, promotions, bridal inspiration, new collection announcements or other marketing communications.
You can withdraw your consent to marketing communications at any time.
Website operation and security
We may process technical information to operate, maintain and secure the Website, prevent fraud or abuse, and diagnose technical problems.
Legal obligations
We may process personal data where necessary to comply with legal, accounting, tax or other obligations applicable to our business.
5. Legal Bases for Processing
Depending on the circumstances, we process personal data on one or more of the following legal bases under Article 6 of the GDPR:
-
Performance of a contract – where processing is necessary to provide a service or fulfil an agreement with you;
-
Taking steps at your request prior to entering into a contract – for example, when responding to an enquiry about our bridal services;
-
Legal obligation – where processing is required by applicable law;
-
Legitimate interests – where processing is necessary for legitimate business interests, such as website security, fraud prevention, or managing customer relationships, provided that these interests do not override your rights and freedoms;
-
Consent – where you have provided consent, for example for certain marketing or non-essential cookies.
Where processing is based on consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
6. Cookies and Similar Technologies
Our Website may use cookies and similar technologies.
Some cookies are necessary for the operation and security of the Website. Other cookies, such as analytics, advertising or functionality cookies, may only be used where the applicable legal requirements have been satisfied.
Depending on the services used on our Website, cookies may be used to:
-
remember your preferences;
-
ensure the Website functions correctly;
-
understand how visitors use the Website;
-
improve our services and Website;
-
measure marketing performance;
-
provide relevant advertising, where applicable.
You can manage your cookie preferences through our cookie consent mechanism where available.
7. Third-Party Services
We may use third-party service providers to operate our Website and business. Depending on the services we use, these may include:
-
website hosting providers;
-
booking or appointment platforms;
-
email and communication providers;
-
payment service providers;
-
analytics providers;
-
advertising and social media platforms;
-
IT and security providers;
-
accounting and professional service providers.
These providers may process personal data only to the extent necessary to provide their services to us and, where applicable, under appropriate contractual and data protection arrangements.
8. International Data Transfers
Some of our service providers may process personal data outside the European Economic Area ("EEA").
Where personal data is transferred outside the EEA, we will take appropriate measures required by applicable data protection law to ensure that the transfer is lawful and that your personal data remains adequately protected.
Where applicable, such measures may include an adequacy decision, Standard Contractual Clauses approved by the European Commission, or another legally recognised transfer mechanism.
9. How Long We Keep Your Data
We retain personal data only for as long as necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law.
For example:
-
enquiry information is generally retained for as long as reasonably necessary to handle the enquiry and related customer relationship;
-
appointment and customer records may be retained for as long as necessary to provide our services and manage related obligations;
-
accounting and transaction records are retained for the period required by applicable Hungarian accounting and tax legislation;
-
marketing information is retained until you withdraw your consent or otherwise object to the relevant marketing, unless another lawful basis applies.
Specific retention periods may vary depending on the nature of the information and the purpose for which it is processed.
10. Your Data Protection Rights
Subject to the conditions and limitations set out in applicable law, you may have the following rights:
Right of access
You may request information about whether we process your personal data and, where applicable, request a copy of that data.
Right to rectification
You may ask us to correct inaccurate or incomplete personal data.
Right to erasure
In certain circumstances, you may request that we delete your personal data.
Right to restriction
In certain circumstances, you may request that we restrict the processing of your personal data.
Right to data portability
Where applicable, you may request to receive certain personal data in a structured, commonly used and machine-readable format, or request that it be transferred to another controller.
Right to object
You may object to certain processing activities, including direct marketing.
Right to withdraw consent
Where processing is based on your consent, you may withdraw your consent at any time.
Withdrawing consent does not affect processing that took place before the withdrawal.
To exercise your rights, please contact us at:
hello@ourabura.com
We may need to verify your identity before responding to certain requests.
11. Complaints
If you believe that your personal data has been processed unlawfully, you may contact us first so that we can investigate your concern.
You also have the right to lodge a complaint with the competent data protection supervisory authority.
In Hungary, the supervisory authority is:
Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH)
1055 Budapest, Falk Miksa utca 9–11.
Postal address: 1363 Budapest, Pf. 9.
Email: ugyfelszolgalat@naih.hu
Website: https://www.naih.hu/
The NAIH provides information and procedures for individuals wishing to exercise their data protection rights or make a complaint.
12. Data Security
We take reasonable technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
However, no method of transmitting or storing information online can be guaranteed to be completely secure.
13. Children's Privacy
Our Website and services are not intentionally directed at children.
We do not knowingly collect personal data from children where such collection is not permitted by applicable law.
If you believe that a child has provided us with personal data without appropriate authorisation, please contact us so that we can take appropriate steps.
14. Social Media
Our Website may contain links to or integrations with social media platforms such as Instagram, Facebook, Pinterest or TikTok.
When you interact with these third-party platforms, their own privacy policies and terms may apply. We recommend reviewing the privacy policies of the relevant platforms.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our business, Website, services, technology or legal requirements.
The updated version will be published on this page.