Privacy Notice

Thank you for visiting our website! Protecting your personal data is very important to us, so in this notice we explain what data we process, why, for how long, and what your rights are. The legal framework for data processing is set by the GDPR [Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data].

1. Who is responsible for your data?

The website and related services are operated by: BLUBLUBLU Europe Kft. Address: 1068 Budapest, Király utca 80. Fsz. 11. ajtó Email: hello@blublublu.com If you have any questions, feel free to contact us!

2. What data do we collect and why?

A) Newsletter Service and Personalized Marketing If you subscribe to our newsletter, we’ll send you updates, promotions, and tips. If you give separate consent, we will also personalize our messages based on your interests. For this, we may:

• Track which newsletters you open and what links you click;
• Collect website visit data if you allow it;
• Use predictive tools in our email system to create relevant offers for you (profiling).

What data do we process?

• Name, nickname, email address, country of residence, gender, age;
• Your consent, timestamp, and IP address;
• Newsletter engagement data (opens, clicks);
• Profile data and predictions generated by the newsletter system.

Legal basis: your consent [GDPR Article 6(1)(a)]. How long do we keep your data?

• Until you withdraw your consent.
• You can withdraw consent for personalized marketing separately if you no longer want tailored offers but still want to receive general newsletters.

B) Customer Inquiries, Complaints, and Data Protection Requests If you email us with a question, complaint, or data protection request, we will process your email to respond and to document compliance (if necessary). What data do we process?

• Name, email address;
• Content of your message and any additional data you provide (e.g., phone number, order details);
• Date of the inquiry and processing status.

Legal basis:

• For data protection requests: compliance with a legal obligation [GDPR Article 6(1)(c)];
• For general inquiries: our legitimate interest in responding to you [GDPR Article 6(1)(f)].

How long do we keep your data?

• Data protection requests: 5 years (for proof of compliance);
• Other inquiries: 1 year.

3. Who do we share your data with?

Only with service providers necessary for our operations, including:

• Hosting provider: Magyar Hosting;
• Website maintenance partner;
• Newsletter campaign management partner;
• Email marketing platform: Mailchimp (Intuit Inc.).

We ensure that all partners have GDPR-compliant data processing agreements with us.

4. Where else might your data go?

Due to the use of Mailchimp, your data may be transferred to the United States. Mailchimp is certified under the EU–US Data Privacy Framework and provides safeguards in line with the GDPR.

5. Profiling and Automated Decision-Making

If you consent to personalized marketing, we may perform profiling to send you more relevant offers about our products and promotions. However: we do not make decisions based solely on automated processing that would have legal or similarly significant effects on you.

6. What are your rights?

Under the GDPR, you have several rights that allow you to stay in control of your data. You can exercise these rights anytime by emailing us at hello@blublublu.com. We will respond without undue delay and within 1 month (this can be extended by 2 months in exceptional cases, and we will inform you in advance). A) Right of Access You have the right to know what data we hold about you. On request, we will tell you:

• What data we process and where it came from;
• Why we process it (purpose and legal basis);
• How long we keep it;
• Who we have shared it with (if anyone).

B) Right to Rectification If any of your personal data is incorrect—such as your name or email—you can have it corrected. Just email us with the exact details to update. C) Right to Restrict Processing If something seems wrong with how we process your data (e.g., you dispute accuracy or lawfulness), but you don’t want the data deleted, you can ask us to “freeze” the processing temporarily. This means we won’t use the data until the issue is resolved. D) Right to Object If you don’t want us to process your data for marketing purposes—whether for personalized or general newsletters—you can object. You can do this by email or by clicking “unsubscribe” at the bottom of our newsletter. Once you object, we will stop sending promotional content. E) Right to Erasure (“Right to Be Forgotten”) You can ask us to delete your personal data if you no longer want us to keep it. We will delete it unless we are legally required to retain it (e.g., for accounting purposes). To exercise any of these rights, contact us at: hello@blublublu.com

7. Remedies

If you believe we are mishandling your data, you have several options: A) Contact us first – this is usually the fastest way to resolve any issue. B) Submit a complaint to 

1. the Hungarian National Authority for Data Protection and Freedom of Information („NAIH”; Address: 1055 Budapest, Falk Miksa utca 9-11.; Website: www.naih.hu; Email: ugyfelszolgalat@naih.hu); or
2. the supervisory authority responsible for the application of the GDPR in your country (if you reside in another Member State of the European Union). 

C) Take legal action – you can file a lawsuit in court. You may initiate the case before the court competent for your residence or before the court competent for the NAIH’s headquarters.