Privacy Policy for the Online Shop of Be sCool Kft.

This privacy policy applies to the online shop operated by Be sCool Kft. under the domain [insert domain].

Protecting your personal data is important to us. Be sCool Kft. processes your data in strict compliance with the applicable data protection laws of the European Union and the Federal Republic of Germany.

With this privacy policy, we inform you about the data we collect on our websites, the purposes for which we process this data, the recipients to whom we may disclose data, the legal bases for processing, the storage periods, the parties responsible for processing, and your rights.

 

1. Controller

The controller within the meaning of Art. 13(1)(a) GDPR is:

Be sCool Kft.

Becsi korut 23

6722 Szeged

Hungary

Phone: +36 30 286 6552

Availability: Mon–Fri 08:00–16:00

E-mail: info@belmil.de

Managing Directors: Timea Benak-Bakos, Zsanett Benak-Miklos

Data Protection Officer (contact):

Timea Benak-Bakos

Becsi korut 23, 6722 Szeged, Hungary

Phone: +36 30 286 6552

E-mail: info@bescool.net

 

2. Specific information on processing activities

2.1. Personal data

Under Art. 4(1) GDPR, personal data means any information relating to an identified or identifiable natural person (e.g., name, address, telephone number, e-mail address, bank details, credit card number).

2.2. What data is collected when you visit our website?

When you visit our webshop, your browser automatically transmits certain information to our server. This information is temporarily stored in so-called log files (see 6. Log files).

Processing is based on Art. 6(1)(f) GDPR (legitimate interest in the stability and functionality of our website). Data is not transferred or otherwise used. We reserve the right to subsequently check server log files if there are concrete indications of unlawful use.

For security and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries), this website uses SSL/TLS encryption. You can recognize an encrypted connection by “https://” and the lock symbol in your browser.

2.3. Purposes of processing

• Order processing (see 4.)
• Customer service and communication (see 4.and 9.)
• Marketing (see 9. or 10.)
• Compliance with legal obligations

2.4. Processing for the performance of a contract

When you place an order with Be sCool Kft., we process your name, address, e-mail, phone number and, where applicable, payment data to fulfill the order (shipping, returns, claims). For pre-contractual inquiries (e.g., advice via e-mail), we process your data to take steps at your request prior to entering into a contract. Legal basis: Art. 6(1)(b) GDPR.

For fulfillment, we share data with payment providers (e.g., banks, Stripe, PayPal, Amazon Pay, card schemes), logistics and shipping providers (e.g., DHL, DPD, Hermes, GLS, carriers), and where applicable with suppliers for direct delivery—each only to the extent required. Recipients may only use the data to perform their task.

Retention: Contract-related data is stored until statutory warranty periods expire. Commercial/tax records are retained per §57 HGB and §47 AO (generally 10 years). Data processed for pre-contractual measures is deleted within 24 months if no contract is concluded.

 

3. Cookies

3.1. What are cookies?

Cookies are small text files that store certain settings/data. We use cookies to offer an optimal user experience, to compile statistics and to enable marketing activities.

3.2. Cookie preferences (consent)

On first visit we ask for your consent via our cookie consent tool. Technically necessary cookies are always active. Comfort as well as marketing and analytics cookies are used only with your explicit consent (Art. 6(1)(a) GDPR). You can adjust your personal choices at any time via the shop footer and withdraw consent with effect for the future.

3.3. Technically necessary cookies

Examples: session ID (to associate actions across pages, e.g., cart/login), storage of your consent settings.

3.4. Comfort cookies

Used only with consent. Example: cart cookie to restore the cart beyond the session.

3.5. Marketing and analytics cookies

With consent only, we use Google Analytics and Google Tag Manager (see 4.).

3.6. Third-party cookies (technically required)

For example, when you actively choose specific payment methods (Stripe, PayPal) or play an embedded YouTube video.

3.7. Legal bases

Technically necessary cookies: Art. 6(1)(f) GDPR (legitimate interest in smooth operation). Comfort and marketing/analytics cookies: Art. 6(1)(a) GDPR (consent).

3.8. Withdrawal and deletion

Withdraw via the consent tool; you can also delete cookies in your browser. Details on our cookies: https://belmil.de/pages/cookie-info

 

4. Purchase of goods & payment methods

4.1. Purchase process

Data collected: salutation (optional), name (billing/shipping), address, e-mail, payment details, phone number. Legal basis: Art. 6(1)(b) GDPR; blocking/deletion after retention periods unless you have consented to further use.

4.2. Credit card payment (Stripe)

Stripe Payments Europe Ltd., Dublin. Data transmitted may include: name, address, account/IBAN, card details (if applicable), invoice amount, currency, transaction number. Legal bases: Art. 6(1)(b) GDPR; where applicable Art. 6(1)(c) GDPR (PSD2). Further info: https://stripe.com/de/privacy#translation

4.3. PayPal payment (via PAYONE)

Transmission of relevant order/contact data to PAYONE and PayPal. PayPal may process additional data for identity/credit checks. Legal bases: Art. 6(1)(b) and, where applicable, (c) GDPR. PayPal privacy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

 

4. Google Analytics and Google Tag Manager

Services by Google Ireland Limited. Used with IP anonymization (anonymizeIP). Data may be transferred to the U.S. Legal basis: consent under Art. 6(1)(a) GDPR. You can object via a browser add-on; you can also prevent cookies in your browser settings.

 

5. Google reCAPTCHA

Used to prevent abuse by automated input/spam. Your IP address and potentially further device data are transmitted to Google. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in preventing abuse). Further information: https://www.google.com/intl/de/policies/privacy/

 

6. Log files

Stored data includes date/time, type of request, protocol type/status, file size/name, IP address, referrer URL, browser information. Purposes: operation/security, error analysis, further development of the shop. Legal basis: Art. 6(1)(f) GDPR. IP addresses are deleted or anonymized no later than after 10 days.

6.1. Shopify E-commerce CMS

Hosting/shop operation by Shopify International Limited (possible transfer to Canada/USA under adequacy decision/appropriate safeguards). Details: https://www.shopify.de/legal/datenschutz

6.2. Software integration system (BaseLinker)

BaseLinker, WrocŽw. Data transfer under Art. 6(1)(b) GDPR (order fulfillment). Data includes: order no., date, name, e-mail, phone, shipping address, payment status. Info: https://baselinker.com/pl-PL/polityka/

 

7. Content Delivery Network (CDN)

CDN77 (DataCamp Ltd, London) for fast delivery (e.g., product images). Receives your IP address. Logs only for errors; IP anonymized; logs deleted after max. 10 days. Legal basis: Art. 6(1)(f) GDPR.

 

8. International data transfers

We may transfer personal data to partner companies (e.g., Studio Present d.o.o., Belmil Team d.o.o.). We ensure that any transfer to countries outside the EU/EEA is safeguarded by appropriate measures (e.g., EU Standard Contractual Clauses) in accordance with the GDPR. For questions, contact our DPO (see section 1).

8.1. Studio Present d.o.o.

Serbia, Somborski put 33a, 24000 Subotica. Purposes: data maintenance, IT infrastructure/support. Data (e.g., order no., date, name, e-mail, phone, shipping address, payment status). Privacy: https://www.studiopresent.com/privacy-policy

8.2. Belmil Team d.o.o.

Serbia, 24430 Ada, Svetozara Miletik 36. Purposes: administration/support. Data as above. Privacy: https://www.belmil.rs/pages/privatnost-podataka

 

9. Use of customer data for direct marketing

Newsletter via double opt-in. Legal basis: Art. 6(1)(a) GDPR. Stored data includes e-mail, name, language, and double opt-in metadata (retained under Art. 6(1)(f) GDPR as proof). Sent/managed by Be sCool Kft.; no disclosure to third parties.

Unsubscribe at any time via the link in each e-mail or by e-mail to info@belmil.de. Legal basis for processing to document consent: Art. 6(1)(f) GDPR.

E-mail to existing customers under Sec. 7(3) German UWG (similar goods/services); you can object at any time.

Transactional e-mails (e.g., order/shipping confirmations, invoices, password info) are sent in connection with business transactions.

Marketing/communication software used

– Intuit Mailchimp (standard newsletters): https://mailchimp.com/about/security/

– Omnisend (abandoned checkout mailings): https://www.omnisend.com/privacy/

– Shopify Email (abandoned checkout mailings): https://www.shopify.com/legal/privacy

– Pop Convert (CartKit) – pop-ups/lists: https://www.pop-convert.com/privacy

 

10. Social media platforms

Links/presence on Facebook, Instagram, YouTube, TikTok. When using them, data is also processed by the respective provider. Important: For social media plugins and tracking (including Facebook/Meta Pixel) we rely exclusively on your consent under Art. 6(1)(a) GDPR; we do not process based solely on legitimate interests.

We use aggregated statistics/insights to optimize our presence (legitimate interests, Art. 6(1)(f) GDPR). If you are logged in, networks can associate usage with your account.

10.1. Facebook & Facebook (Meta) Pixel

Facebook Ireland Ltd., Dublin. Data may be processed outside the EU. Facebook provides anonymized insights. The Facebook (Meta) Pixelis deployed only with consent (Art. 6(1)(a) GDPR). Opt-out/preference links are available in Facebook’s privacy information.

10.2. Instagram

Platform operated by Facebook Ireland Ltd. Data storage outside the EU possible. See Instagram/Facebook settings for opt-outs.

10.3. YouTube

YouTube (Google). Embedded with “enhanced privacy mode”; data is transmitted to YouTube only when playback starts. Possible linkage to your YouTube account. See Google Privacy Policy for details.

10.4. TikTok

Posts/ads on TikTok; no integrated TikTok app in our shop. See TikTok privacy policy.

Note:For order/product support, please contact our customer service—not social media channels.

 

11. Amazon.com

For purchases, Amazon may transmit relevant order information to us. Amazon requires sellers to protect your data per Amazon.de’s privacy policy. More information: https://aws.amazon.com/compliance/data-privacy/

 

12. Third-party hosting (Hetzner)

Server hosting by Hetzner. Hetzner provides infrastructure; no access to purchase data. Servers are operated/controlled solely by Be sCool Kft.

 

13. Disclosure to shipping and logistics providers

13.1. Logistics providers

EUROCOMMERCE Logistics; Webshippy. Data processed: name, address, e-mail, phone/mobile, order information. See the respective providers’ privacy notices.

13.2. Carriers

Hermes, DHL, GLS, DPD – Transfer of your contact details for delivery scheduling/notifications only with consent (Art. 6(1)(a) GDPR); otherwise, name/address for delivery (Art. 6(1)(b) GDPR).

 

14. Your rights

14.1. Withdrawal of consent (Art. 7(3) GDPR)

You may withdraw your consent at any time with effect for the future.

14.2. Access (Art. 15 GDPR)

Right to obtain confirmation and access, including purposes, categories, recipients, storage period, rights, source, existence of automated decision-making (including profiling) and meaningful information about the logic involved, as well as appropriate safeguards for third-country transfers.

14.3. Rectification (Art. 16 GDPR)

Right to have inaccurate data corrected and incomplete data completed.

14.4. Erasure – “Right to be forgotten” (Art. 17 GDPR)

Right to deletion where the conditions of Art. 17 GDPR are met.

14.5. Restriction of processing (Art. 18 GDPR)

Under the conditions of Art. 18 GDPR.

14.6. Notification obligation (Art. 19 GDPR)

We will notify recipients of rectification/erasure/restriction unless impossible or disproportionate.

14.7. Data portability (Art. 20 GDPR)

Right to receive data you provided in a structured, commonly used, machine-readable format and to have it transmitted to another controller where technically feasible and without adversely affecting the rights of others.

14.8. Automated decision-making / profiling (Art. 22 GDPR)

We do notmake decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you, unless(i) you have given explicit consent, (ii) the decision is necessary for a contract, or (iii) there is a legal basis. In such cases, we implement suitable measures to safeguard your rights, including the right to obtain human intervention, to express your point of view and to contest the decision.

Note: Remarketing measures (e.g., via Facebook Pixel) take place only with your consent; profiling within the meaning of the GDPR occurs only within the scope of your consent.

14.9. Right to object (Art. 21 GDPR)

Object to processing based on legitimate interests on grounds relating to your particular situation; object to direct marketing at any time (including profiling related to such marketing).

14.10. Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement. For Germany: the competent data protection authority of your federal state; for Hungary: Nemzeti Adatv9delmi 9s Inform1ci3szabads1g Hat3s1g (NAIH).

 

15. Retention periods

Retention depends on the legal basis, purpose and statutory retention periods. Where processing is based on consent (Art. 6(1)(a) GDPR), data is stored until consent is withdrawn; for contracts/legal obligations (Art. 6(1)(b)/(c) GDPR), after expiry of the respective periods; for legitimate interests (Art. 6(1)(f) GDPR), until a successful objection unless overriding compelling legitimate grounds exist. Otherwise, data is deleted once the purpose ceases to apply.

Be sCool Kft., Szeged, 2024-12-04