1. General Provisions

1.1 The VINTAGE GUITARS Trading, Service and Manufacturing Limited Liability Company (registered office. 4/1 Company registration number: 01 09 410819 ; tax number: 32183812-2-41 hereinafter referred to as “the Company”), as data controller, is subject to the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Regulation (EC) No 95/46/EC (General Data Protection Regulation, hereinafter referred to as “GDPR”), the Hungarian Data Protection Act of 2011 on the right to information self-determination and freedom of information. Based on Act CXII of 1995 on the processing of name and address data for the purposes of research and direct marketing (hereinafter referred to as the “Information Act”) and Act CXIX of 1995 on the processing of name and address data for the purposes of research and direct marketing, the following Privacy Policy is established for the processing of data on the Company’s online platforms (such as the Guitarsforcat.com webshop, newsletter).

1.2 This Privacy Policy applies to the processing of personal data provided by the User to the Company and to all personal data collected by the Company either through the Company’s online interfaces or through the use of ‘Cookies’. The purpose of this Privacy Policy is to inform the User about the lawful operation of the records kept by the Company in the course of the automated processing of personal data, to ensure compliance with the constitutional principles of data protection, the right to information self-determination and data security, to prevent unauthorized access, alteration and unauthorized disclosure of data, and to specify the information and data that the Company may request from the User when using its online interfaces and the purposes for which it may use them.

2. Interpretative provisions

2.1 For the purposes of this Privacy Notice:

– Personal Data means any information relating to an identified or identifiable natural person (“Data Subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;

– Processing: any operation or set of operations which is performed upon personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, storage, adaptation or alteration, use, retrieval, consultation, disclosure, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;

– Controller: the natural or legal person, public authority, agency or any other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of the processing are determined by Union or Member State law, the controller or the specific criteria for the designation of the controller may also be determined by Union or Member State law;

– Processor: a natural or legal person, public authority, agency or any other body which processes personal data on behalf of the controller;

– Destruction of data: the total physical destruction of a data carrier containing data;

– Transfer: making data available to a specified third party;

– Erasure: rendering data unrecognisable in such a way that it is no longer possible to retrieve it;

– User: a natural person who registers and, in the context of this registration, provides the data listed in point 3.3 below (data subject)

– Online platform: the webshop (www.guitarsforcat.com) operated by the Company and the sending of newsletters

3. Purpose of processing, scope of personal data processed by the Company

3.1 Anyone can access the Company’s website without providing any personal data and can obtain information freely and without restriction on the website and its linked pages.

3.2 The Company collects personal data during the registration or purchase in the www.guitarsforcat.com webshop and the subscription to the www.guitarsforcat.com newsletter, based on the User’s explicit consent.

3.3 Purpose of data processing:

1. a) to ensure the provision of the services available through the Company’s online interfaces (the data processed for this purpose are: name, address, delivery address, e-mail address, date of birth, telephone number),
2. b) to send newsletters (the data processed for this purpose: name, address, e-mail address, data concerning the User’s search history)
3. c) the display of personalised content and advertisements (the scope of the data processed for this purpose: name, address, e-mail address, data concerning the User’s search history),
4. d) in support of administrative and legal purposes, such as fraud prevention filtering, security and protection purposes (scope of data processed for these purposes: name, address, e-mail address, IP address).

Please be informed that, in case of purchases on the Site, the Company needs to collect the data specified in section 3.3 a) in order to fulfil the terms and conditions and to provide the services. If the User fails to provide the requested personal data, the Company will not be able to provide the requested services or only partially.

The Controller shall not use the personal data provided for purposes other than those described in this clause. If the Company intends to use the User’s personal data for a new purpose not covered by this Privacy Policy, the Company will send the User a notice prior to the new processing, setting out the conditions that apply to the new processing. If necessary, it will obtain the User’s consent before starting the new processing activity.

3.4 The Company may collect non-personally identifiable information about visitors to its online sites, other than personal data, automatically and without limitation, and may automatically (i.e. not by registration) record technical information that is not identifiable (such as the type of browser and operating system used by visitors to its online sites, or the address of the website from which they came to the Company’s online site.

4. Profiling

4.1 Subject to the User’s consent, the Company may carry out profiling in order to display content and advertisements on the Site tailored to the User’s needs, wishes and interests.

4.2 Profiling is any form of automated processing of personal data whereby personal data is used to evaluate certain personal characteristics relating to the User, in particular to analyse or predict characteristics related to personal preferences, interests, reliability or behaviour.

5. Legal basis and method of data processing

5.1 The legal basis for the processing activities described in point 3.3 a) of this Privacy Notice is Article 6 (1) b) GDPR, which provides that processing is necessary for the performance of a contract to which the data subject (User) is a party or for taking steps at the request of the data subject prior to entering into the contract.

5.2 The legal basis for the processing activities referred to in sections 3.3 b-d) of this Privacy Notice is Article 6(1)(a) of the GDPR, according to which the processing of personal data is based on the voluntary and informed consent of the Company’s Users, which includes the express consent of the Users to the use of their personal data provided by them when using the Site and the personal data generated about them.

5.3 The legal basis for the processing activities referred to in point 3.3 e) of this Privacy Notice is Article 6(1) f) GDPR, according to which the processing is based on the legitimate interests of the Company, subject to the Company’s careful consideration of the interests and fundamental rights and freedoms of the User and their priority over the legitimate interests of the Company (balancing test).

5.4 Personal data whose processing is necessary for the purposes of complying with a legal obligation to which the controller is subject or for the purposes of the legitimate interests pursued by the controller or by a third party (where such interests are proportionate to the restriction of the right to the protection of personal data) may be processed without further specific consent and even after consent has been withdrawn.


5.5 The controller does not control the personal data provided to it. The person providing the data is solely responsible for the correctness of the data provided.

5.6 By providing an e-mail address, each User also assumes responsibility for the fact that he/she is the only one to use the services from the e-mail address provided. With regard to this assumption of responsibility, any liability for accessing the service from a given e-mail address shall be borne solely by the User who registered the e-mail address.

6. Privacy policy applied by the Company

6.1 The Company respects the rights of visitors and users of the online sites it operates as set out in the law.

6.2 The Company uses personal data that is essential for the use of the Company’s services on the basis of the consent of the data subjects and only for the purposes for which they are intended. The Company shall use the personal data of Users as defined in Section 3.3 only in the manner and for the purposes set out in this Privacy Policy.

6.3 The Company, as data controller, undertakes to process the data it obtains in accordance with the provisions of the GDPR, the Infotv. and other applicable laws and this Privacy Policy and not to transfer them to third parties other than the data controllers specified in this Privacy Policy. An exception to the provisions of this clause is the use of data in aggregated statistical form, which may not contain the name of the User concerned or any other identifiable data in any form, and therefore does not constitute processing or transfer of data.

6.4 The Company may, in certain cases, in particular in response to a formal judicial or police request, legal proceedings for infringement or reasonable suspicion of infringement of copyright, property rights or other rights, or for the purpose of prejudicing the interests of the Company, endangering the provision of its services, or on the basis of court or other official decisions, unless otherwise provided by law, or with the prior express consent of the User, make available to third parties the User’s available data.

6.5 The Company shall make every effort to ensure that the processing and handling of Users’ data are protected in accordance with the legislation in force, for which purpose the Company shall operate a security system.

7. Duration of processing

7.1 The Company shall process the personal data provided by the User until the time necessary for the purposes stated in this Privacy Policy or until the expiry of the limitation period provided for in the applicable legislation.

7.2 The Company will not retain personal data for longer than is reasonably necessary. For a period of 4 (four) years from the date of performance of the contract concluded between the Company and the User (account deletion).

7.3 Search data collected from the User will be kept by the Company for 4 (four) days.

7.4 Pursuant to Article 169 of Act C of 2000 on Accounting, the Company shall keep the accounting records and related supporting documents for 8 (eight) years after the end of the financial year.

7.5 In the event of unlawful or fraudulent use of personal data or in the event of a criminal offence or system attack committed by the User, the Data Controller is entitled to delete the data immediately upon termination of the User’s registration, but is also entitled to retain the data for the duration of the proceedings in the event of suspected criminal offences or civil liability.

7.6 If the User does not unsubscribe from the service or does not cancel his/her registration, the Company will keep the User’s personal data for eight years, after which the personal data will be deleted.

8. Data transmission

8.1 The Company shall be entitled and obliged to transmit to the competent authorities any personal data at its disposal and stored by it in accordance with the law, which it is obliged to transmit by law or by a final and binding obligation of a public authority. The Company shall not be held liable for any such transfer and the consequences thereof.

9. Sharing data

9.1 The Company informs the User that in order to fulfil the obligations and services undertaken in the General Terms and Conditions, it uses the following data processors, on the basis of a separate contract:

9.2 I acknowledge that the following personal data stored by Vintage Guitars Kft. (Hungary 1042., Budapest, Szent István tér 11. 4/1) in the user database of www.guitarsforcat.com will be transferred to the companies listed in 9.1 as data processors. The following data are transferred by the data controller. The nature and purpose of the data processing activities carried out by the processors is the statutory provision of a business-related service without error.

10. Protection of personal data

10.1 The Company complies with its obligations under applicable data protection legislation by.

– keeping personal data up to date; – storing and destroying personal data securely; – not collecting or retaining excessive amounts of data; – protecting personal data against loss, misuse, unauthorised access and disclosure and ensuring that appropriate technical measures are in place to protect personal data.


10.2 The Company shall take appropriate technical and organisational measures to protect the User’s personal data against accidental or unlawful destruction or accidental loss or alteration, or against unauthorised disclosure or access, in particular where the processing involves, for example, the transmission of data over a network, and against all unlawful forms of processing.

Accordingly, the Company applies, among other things, different levels of access rights to the data, which ensure that only persons with the appropriate rights have access to the data and who need to know the data in order to fulfil their obligations arising from or in connection with their work.

11. Rights of the User

11.1 Subject to data protection legislation, the User is entitled to:

(a) request access to his/her personal data, (b) request rectification of his/her personal data, (c) request erasure of his/her personal data, (d) request restriction of the processing of his/her personal data, (e) object to the processing of his/her personal data, (f) request data portability, (g) object to the processing of his/her personal data (including objection to profiling; and other rights related to automated decision-making), (h) withdraw his/her consent or lodge a complaint with the competent supervisory authority.


a) Right of access

The User has the right to receive feedback from the Company as to whether his/her personal data are being processed and, if such processing is ongoing, to request access to his/her personal data.

The User has the right to request a copy of his/her personal data that are subject to processing. For identification purposes, the Company may request additional information from the User or charge a reasonable fee for additional copies as an administrative charge.

1. b) The right to rectification

The User has the right to request the Company to correct inaccurate personal data concerning the User. Depending on the purpose of the processing, the User has the right to request the completion of incomplete personal data, including by means of a supplementary declaration.

1. c) Right to erasure (“right to be forgotten”)

The User shall have the right to request the Company to delete his/her personal data and the Company shall be obliged to delete such personal data. In this case, the Company cannot provide any further services to the User.

1. d) Right to restriction of processing

The User has the right to request the restriction of the processing of his/her personal data. In this case, the Company shall indicate the personal data concerned which it may process only for certain purposes.

1. e) Right to object

The User has the right to object to the processing of his/her personal data, including profiling, by the Company at any time on grounds relating to his/her particular situation, or to request the Company to no longer process his/her personal data.

In addition, if the Company processes the User’s personal data on the basis of legitimate interest, the User has the right to object at any time to the processing of his or her personal data for this purpose.

In addition, the User has the right to request human intervention in individual matters relating to automated decision-making. Please note that the Company does not use automated decision-making mechanisms.

1. f) The right to data portability

The User has the right to receive the personal data provided in a structured, commonly used, machine-readable format (i.e. digital format) and the right to request, where transfer is technically feasible, the transfer of such data to another controller without the Company preventing this.

1. g) Right to withdraw consent

If the User’s personal data are processed on the basis of his/her consent, he/she may withdraw his/her consent at any time without giving reasons by clicking on the link in the newsletters or by changing the settings of his/her website account or mobile device. The withdrawal of consent does not affect the lawfulness of the processing based on consent prior to its withdrawal.

If the User withdraws the consent given to the Company to process his/her personal data, the Company may not be able to provide the requested services at all or only partially.

1. h) Right to lodge a complaint with a supervisory authority

If the User believes that his/her personal data has been misused, he/she may also contact the local data protection authority and lodge a complaint, in particular in the Member State of his/her habitual residence, place of work or place of the alleged infringement.

In Hungary, you can also contact the National Authority for Data Protection and Freedom of Information (H-1125, Hungary, Budapest, Szilágyi Erzsébet fasor 22/C.; phone: +36-1 391-1400; fax: +36-1 391-1410; e-mail: ugyfelszolgalat@naih.hu).

12. Keeping in touch

12.1 If the User wishes to exercise his/her rights or lodge a complaint regarding data protection issues, he/she may contact the Company’s designated staff member by sending an e-mail to the e-mail address provided below. You may also contact the Company by post to the address below.

E-mail: hello@guitarsforcat.com

Address for correspondence.

13. Other provisions

13.1 The Company reserves the right to amend this Privacy Policy at any time by unilateral decision. You can find information about the amendments here: https://guitarsforcat.com/privacypolicy

13.2 The Company regularly monitors its online platforms and the information published on them and makes every effort to ensure that the information is up-to-date and accurate. Nevertheless, you may find information on the online platforms that is no longer up to date. The Company accepts no financial responsibility for such information.

13.3 Visitors to the online interfaces and Users may also visit other websites not operated by the Company from the Company’s online interfaces. The Company shall not be liable for the accuracy of the information provided therein, for the content of the websites or for the security of the data provided by visitors to the online areas and Users on the Company’s online interfaces. Therefore, when using these websites, please check the privacy policy of the company concerned.

This Privacy Policy is valid from 01 January 2023.