Terms and Conditions

The online store is operated and the products are sold by:

Name: Gulyás Marcell Sándor, sole proprietor
Registered office: 2030 Érd, Felsővölgyi út 73., Hungary
Registration number: 59802361
Registering authority: National Tax and Customs Administration of Hungary
Tax number: 90563214-1-33
Email: info@thirstycow.hu
Website: thirstycowstudio.com

Hereinafter referred to as the Seller.

Hosting Provider

Name: UNAS Online Kft.
Registered office: 9400 Sopron, Kőszegi út 14., Hungary
Tax number: 14114113-2-08
Company registration number: 08-09-015594
Registering authority: Company Registry Court of the Győr Regional Court
Email: unas@unas.hu
Telephone: +36 99 200 200

These Terms and Conditions apply to orders placed through the online store operated by the Seller at thirstycowstudio.com and through other distance-selling channels accepted by the Seller.

Before completing an order, the Customer has the opportunity to review these Terms and Conditions. By submitting an order and selecting the relevant acceptance checkbox, the Customer accepts these Terms and Conditions.

The version of the Terms and Conditions in force at the time the order is placed shall apply to that order.

The Seller reserves the right to amend these Terms and Conditions for the future. Any amendment shall not affect contracts already concluded.

Customer: any natural person, legal entity or organisation purchasing a Product from the Seller.

Consumer: a natural person acting for purposes outside their trade, business, craft or profession.

Product: any movable item offered for sale through the online store or individually ordered from the Seller.

Custom-made or personalised Product: a non-prefabricated Product manufactured according to specifications selected or provided by the Customer, including size, material, colour, inscription, graphics, engraving, motif, design or other individual requirements, or a Product that is clearly personalised for the Customer.

The Seller primarily designs, manufactures and sells custom-made, small-batch or made-to-order wooden products, furniture, home furnishings and decorative items.

A significant proportion of the Products are handcrafted using natural materials, particularly solid wood.

The colour, grain, pattern, knots and other natural characteristics of wood may vary from one piece to another. Variations resulting from the natural characteristics of the material that do not affect the Product's intended use shall not in themselves constitute a defect.

Images displayed on the Website are primarily intended to illustrate the nature, design and appearance of the Products. In the case of handcrafted Products and Products made from natural materials, minor differences may occur between the Product received and the sample shown in photographs.

Nothing in this section limits the Customer's statutory rights in relation to defective or non-conforming Products.

The Customer selects the Product they wish to purchase and, where applicable, specifies the available options or individual requirements.

Before completing the order, the Customer may review and amend the order details in the shopping cart.

Submitting an order entails an obligation to pay.

The online store sends an electronic acknowledgement confirming receipt of the order. The contract is concluded when the Seller accepts the Customer's order.

If manufacture or fulfilment of the ordered Product becomes impossible for an unforeseen reason, the Seller shall inform the Customer without undue delay. If payment has already been made, the amount paid shall be refunded.

The language of the contract is English. Order information is stored electronically by the online store.

For custom-made Products, the Seller and Customer may agree on the essential specifications of the Product before production begins.

These may include, in particular, dimensions, material, colour, design, inscriptions, engraving, graphics, motifs or other personalised elements.

The Customer is responsible for the accuracy of personalised information supplied by them, including names, inscriptions, dates and other text.

The Seller shall not be responsible for a defect resulting solely from incorrect information, text, graphics or other content supplied or expressly approved by the Customer.

Prices displayed on thirstycowstudio.com are shown in euros (EUR) unless otherwise indicated and represent the consumer prices payable for the Products.

The total amount payable by the Customer, including applicable delivery charges, shall be displayed before the order is finalised.

The Seller may change prices displayed in the online store for future orders. The price of an order already accepted by the Seller cannot subsequently be changed.

In the event of an obvious pricing error caused, for example, by a technical malfunction, the Seller shall inform the Customer of the correct price before the contract is concluded.

The payment methods currently available are displayed during the checkout process.

These may include:

• online payment by debit or credit card;
• bank transfer, where offered for the relevant order.

Online card transactions are processed by an external payment service provider.

The detailed and currently available payment options are displayed during checkout.

A significant proportion of the Seller's Products are not supplied from stock but are manufactured after an order has been placed.

The usual production time is approximately 2–3 weeks, unless a different production time is stated on the relevant Product page, in an individual quotation or agreed with the Customer.

The Seller shall inform the Customer without undue delay if a significant delay in production is expected.

Where production of a custom-made Product requires additional information or approval from the Customer, the production period may be calculated from the date on which the required information or approval is received.

The Seller currently offers international delivery to selected European Union countries made available during checkout.

Delivery is currently available to:

Austria, Belgium, Czechia, Denmark, Finland, France, Germany, Ireland, Italy, the Netherlands, Poland, Portugal, Slovakia, Spain and Sweden.

Available delivery methods and the applicable delivery charge are displayed during checkout before the Customer submits the order.

Delivery charges may depend on the weight, dimensions, destination and other characteristics of the shipment. The delivery charge displayed during checkout forms part of the total amount payable by the Customer.

The usual transit time following completion of production and dispatch is approximately 2–7 business days, although actual delivery times may vary depending on the destination and carrier.

For deliveries to Consumers, unless otherwise provided by applicable law, the risk of loss or damage to the Product passes to the Consumer when the Consumer, or a third party designated by the Consumer other than the carrier, takes physical possession of the Product.

Consumers entering into distance contracts generally have a statutory 14-day right of withdrawal without giving a reason, subject to the exceptions provided by applicable law.

11.1 Custom-made and Personalised Products

Under Article 16(c) of Directive 2011/83/EU on consumer rights, the right of withdrawal does not apply to the supply of goods made to the Consumer's specifications or clearly personalised.

Accordingly, the 14-day withdrawal right does not apply where a Product is manufactured according to the Customer's individual specifications or is clearly personalised for the Customer.

The fact that a Product is manufactured only after an order has been placed does not, by itself, necessarily make it a personalised Product. Whether the exception applies depends on the nature of the Product and the Customer's individual specifications.

The absence of a right of withdrawal for a custom-made or personalised Product does not affect the Consumer's statutory rights in relation to defective or non-conforming Products.

11.2 Products Not Covered by an Exception

Where a Product does not fall within a statutory exception, the Consumer may withdraw from the contract without giving any reason within 14 days from the day on which the Consumer, or a third party designated by the Consumer other than the carrier, acquires physical possession of the Product.

The Consumer may exercise the right of withdrawal by sending an unequivocal statement to the Seller:

Email: info@thirstycow.hu
Postal address: Gulyás Marcell Sándor, 2030 Érd, Felsővölgyi út 73., Hungary

Model Withdrawal Form

To: Gulyás Marcell Sándor, sole proprietor
2030 Érd, Felsővölgyi út 73., Hungary
Email: info@thirstycow.hu

“I hereby give notice that I withdraw from my contract of sale for the following Product:

Product:
Ordered on / received on:
Name of Consumer:
Address of Consumer:
Date:
Signature of Consumer (only if this form is submitted on paper).”

Where a valid right of withdrawal is exercised, the Seller shall reimburse the amounts required by applicable law within the statutory time limit.

The direct cost of returning the Product shall be borne by the Consumer unless the Seller agrees otherwise or applicable law provides otherwise.

The Seller does not offer a general voluntary exchange service for non-defective custom-made or personalised Products.

This does not affect the Consumer's statutory rights in relation to defective or non-conforming Products, which may include repair or replacement where required by applicable law.

The Seller is responsible for delivering Products that conform to the contract.

Where a Product is defective or does not conform to the contract, the Consumer may exercise the remedies available under applicable consumer protection law.

Depending on the circumstances and applicable law, these remedies may include repair, replacement, an appropriate reduction in price or termination of the contract and refund.

Any repair or replacement shall be carried out within a reasonable period and without significant inconvenience to the Consumer.

Nothing in these Terms and Conditions excludes or restricts statutory consumer rights that cannot lawfully be excluded or restricted.

Where applicable, the Consumer may also exercise product liability rights in accordance with applicable law.

Depending on the applicable legal rules, the Consumer may be entitled to request repair or replacement of a defective Product.

The statutory rules governing product liability, including the circumstances in which a producer may be exempt from liability, shall apply.

Where a Product falls within a category of new durable consumer goods subject to mandatory warranty requirements under Hungarian law and its selling price reaches the statutory threshold, the Seller shall provide the mandatory warranty required by law.

Under the applicable Hungarian rules, where mandatory warranty applies:

• for a selling price of HUF 10,000 up to and including HUF 250,000, the warranty period is 2 years;
• for a selling price above HUF 250,000, the warranty period is 3 years.

The warranty period generally begins when the Product is delivered to the Consumer.

Where a Product is repaired, the warranty period shall be extended by the period during which the Consumer was unable to use the Product as intended due to the defect.

The fact that a Product was manufactured according to the Consumer's individual specifications or personalised does not in itself affect statutory rights relating to defective Products or any mandatory warranty that applies to that Product.

Mandatory warranty rights are additional to and do not affect the Consumer's other statutory rights.

Customers may report defects or submit warranty claims using the following contact details:

Email: info@thirstycow.hu
Postal address: Gulyás Marcell Sándor, 2030 Érd, Felsővölgyi út 73., Hungary

To facilitate handling of a claim, the Customer is encouraged to provide the Customer's name and contact details, order number, Product name, description of the defect, date on which the defect was discovered and, where available, photographs showing the defect.

Providing photographs is not a condition for exercising statutory rights.

Claims shall be handled in accordance with applicable law.

Customers may submit complaints relating to a Product or the Seller's activities by using the following contact details:

Email: info@thirstycow.hu
Postal address: Gulyás Marcell Sándor, 2030 Érd, Felsővölgyi út 73., Hungary

Written complaints shall be considered and answered within the period required by applicable law.

Where a complaint is rejected, the Seller shall provide the Consumer with information regarding the available means of further redress where required by applicable law.

Where a dispute between a Consumer and the Seller cannot be resolved directly, the Consumer may have access to an appropriate alternative dispute resolution body in accordance with applicable law.

Information on recognised consumer dispute resolution bodies within the European Union is available from the European Commission's Consumer Redress resources.

The former European Online Dispute Resolution (ODR) Platform was discontinued on 20 July 2025 and is therefore no longer included as a dispute-resolution mechanism in these Terms and Conditions.

Consumers may contact the competent consumer protection authority where their consumer rights have been infringed.

Consumers also retain the right to pursue claims before the competent courts.

For cross-border consumer contracts within the European Union, mandatory consumer protection provisions applicable under EU and national law remain unaffected by these Terms and Conditions.

Privacy

The Seller processes personal data in accordance with applicable data protection legislation, including Regulation (EU) 2016/679 (GDPR).

Detailed information concerning the processing of personal data is provided in the Privacy Policy available on the Website.

Intellectual Property and Customer-Provided Content

Texts, photographs, graphics, Product designs and other content on the Website that are protected by intellectual property rights may not be used without authorisation.

Where the Customer supplies graphics, logos, images, text or other content for use in a custom Product, the Customer represents that they are entitled to authorise its use for this purpose.

The Seller may refuse to use custom content that is manifestly unlawful or infringes the rights of third parties.

Force Majeure

The Seller shall not be liable for delay or failure to perform caused by circumstances beyond the Seller's reasonable control that could not reasonably have been foreseen or avoided at the time the contract was concluded.

Such circumstances may include, in particular, natural disasters, war, government measures or serious disruptions to transport or supply chains.

The Seller shall inform the Customer as soon as reasonably practicable if such circumstances materially affect fulfilment of an order.

Governing Law and Final Provisions

These Terms and Conditions are governed by Hungarian law, without prejudice to any mandatory consumer protection rights that a Consumer may have under the law applicable in the Consumer's country of residence.

Relevant legislation includes, in particular, the Hungarian Civil Code, Hungarian and European Union consumer protection and e-commerce legislation, Directive 2011/83/EU on consumer rights, Regulation (EU) 2016/679 (GDPR), and the applicable Hungarian legislation concerning conformity, product liability and mandatory warranties.

If any provision of these Terms and Conditions is found to be invalid or unenforceable, this shall not affect the validity or enforceability of the remaining provisions.

These Terms and Conditions enter into force on 9 September 2026 and apply to contracts concluded on or after that date.

Name of the Data Controller:
Gulyás Marcell Sándor, sole proprietor

Registered address:
2030 Érd, Felsővölgyi út 73., Hungary

Registration number:
59802361

Tax number:
90563214-1-33

E-mail:
info@thirstycow.hu

Webshops operated by the Data Controller:

https://thirstycow.hu
– Hungarian-language webshop

https://www.thirstycowstudio.com
– English-language international webshop

This Privacy Policy applies to both webshops and to the related data processing activities of the Data Controller described herein.

Purpose of the Privacy Policy

The purpose of this Privacy Policy is to provide customers, prospective customers, clients and visitors of the websites with transparent and easily understandable information regarding the processing of their personal data.

The Data Controller processes personal data in particular for the operation of the webshops, receiving and fulfilling orders, processing payments, invoicing, delivery of products, communication with customers, handling requests for quotations, complaint handling and, where the appropriate consent of the data subject has been obtained, statistical and marketing measurement purposes.

When processing personal data, the Data Controller acts in accordance in particular with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR), as well as the applicable Hungarian and European Union data protection legislation.

The Data Controller respects in particular the principles of lawfulness, fairness and transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality.

The Data Controller processes only personal data necessary for achieving the relevant processing purpose, retains such data only for as long as necessary and applies appropriate technical and organisational measures to protect the data.

The Data Controller reserves the right to amend this Privacy Policy, particularly where the services used, technologies applied or applicable legislation change. The current version is available in the Data Controller’s webshops.

This Privacy Policy applies to the Data Controller and to natural persons whose personal data are processed by the Data Controller in connection with the use of the webshops, orders, requests for quotations, communications, payments, delivery, complaint handling or any other activity described in this Privacy Policy.

The material scope of this Privacy Policy covers the processing of personal data carried out by the Data Controller in connection with the operation of https://thirstycow.hu and https://www.thirstycowstudio.com and the related commercial and customer service activities.

This Privacy Policy shall remain effective from the date of publication until withdrawn or amended.

The Data Controller may amend this Privacy Policy particularly in the event of changes to legislation, technologies, service providers or data processing activities. The current version is available in the webshops.

The terms used in this Privacy Policy shall primarily be interpreted in accordance with Regulation (EU) 2016/679 (GDPR).

Data subject:
an identified or identifiable natural person to whom personal data relate.

Personal data:
any information relating to an identified or identifiable natural person.

Processing:
any operation or set of operations performed on personal data or sets of personal data, including in particular collection, recording, organisation, storage, alteration, retrieval, use, disclosure, restriction or erasure.

Data Controller:
the natural or legal person which, alone or jointly with others, determines the purposes and means of the processing of personal data.

Data Processor:
a natural or legal person which processes personal data on behalf of the Data Controller.

Recipient:
a natural or legal person to whom personal data are disclosed.

Consent:
any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which the data subject signifies agreement to the processing of personal data relating to him or her.

Personal data breach:
a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of or access to personal data processed.

The Data Controller processes personal data only where an appropriate legal basis exists.

Depending on the purpose of processing, the legal basis may in particular be:

– the consent of the data subject – Article 6(1)(a) GDPR;
– performance of a contract to which the data subject is party or taking steps at the request of the data subject prior to entering into a contract – Article 6(1)(b) GDPR;
– compliance with a legal obligation to which the Data Controller is subject – Article 6(1)(c) GDPR;
– the legitimate interests pursued by the Data Controller or by a third party – Article 6(1)(f) GDPR, provided that such interests are not overridden by the interests or fundamental rights and freedoms of the data subject.

Where processing is based on consent, the data subject may withdraw his or her consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

The Data Controller shall not use personal data in a manner incompatible with the purposes specified in this Privacy Policy.

1. Orders and performance of contracts

Purpose of processing:
processing orders submitted through the webshop, identifying the customer, communicating with the customer, performing the contract, producing the product, handing it over and arranging delivery.

Personal data processed may include:
name, billing address, delivery address, e-mail address, telephone number, product ordered and its characteristics, order details, selected payment and delivery method and any information provided by the customer that is necessary for producing a customised product.

Legal basis:
Article 6(1)(b) GDPR – performance of a contract.

Provision of the necessary data is required for performance of the contract. Without such data, the Data Controller may not be able to fulfil the order.

2. Contact and requests for quotations

Purpose of processing:
responding to enquiries, discussing requirements relating to customised products and preparing quotations.

Personal data processed may include:
name, e-mail address, telephone number and any data voluntarily provided by the data subject in the message or during the quotation process.

Legal basis:
where the contact is made for the purpose of entering into a contract, Article 6(1)(b) GDPR; in other cases, Article 6(1)(f) GDPR – the legitimate interest of the Data Controller in responding to enquiries.

The Data Controller retains data relating to such communications for as long as necessary for the relevant purpose or, where a contract is concluded, for the retention period applicable to the related contractual documentation.

3. Payment

In the case of payment by advance bank transfer, the Data Controller may process banking transaction details necessary to verify receipt of payment.

For online card payments, payment is processed through Stripe. The Data Controller does not receive or store the customer’s full bank card details.

Purpose of processing:
processing and verifying payment of the purchase price.

Legal basis:
Article 6(1)(b) GDPR – performance of a contract and, in relation to accounting documentation, Article 6(1)(c) GDPR – compliance with a legal obligation.

The Data Controller uses the following service providers in the course of its activities. Depending on the specific activity performed, the relevant provider may act as a data processor, independent data controller or other recipient.

1. Webshop platform and hosting

UNAS Online Kft.
Registered office: 9400 Sopron, Kőszegi út 14., Hungary
E-mail: unas@unas.hu
Website: https://unas.hu

Activity:
provision of the technical platform, hosting and related IT services required for the operation of the webshops.

2. Invoicing

KBOSS.hu Kft. – Számlázz.hu
Website: https://www.szamlazz.hu

Activity:
provision of electronic invoicing services.

3. Online payment

Stripe
Website: https://stripe.com

Within the European Economic Area, several Stripe entities may be involved in the provision of Stripe services, including in particular Stripe Payments Europe, Limited, Stripe Technology Company, Limited and, depending on the service concerned, other Stripe group companies.

Activity:
online card payment and related payment services.

4. Domestic delivery

GLS General Logistics Systems Hungary Kft.
Registered office: 2351 Alsónémedi, GLS Európa utca 2., Hungary
Website: https://gls-group.com/HU/

Activity:
delivery of ordered products.

Personal data necessary for delivery, including in particular the customer’s name, delivery address, telephone number and e-mail address, may be disclosed to GLS to the extent necessary to perform delivery.

5. International delivery

FedEx
Website: https://www.fedex.com

Activity:
international parcel transport and delivery.

Personal data necessary for delivery, including in particular the customer’s name, delivery address, telephone number and e-mail address, may be disclosed to FedEx to the extent necessary to perform the delivery service.

6. Google services

Google Ireland Limited
Gordon House, Barrow Street, Dublin 4, Ireland

The Data Controller may use Google services, including in particular Google Analytics for measuring website traffic and usage and, subject to appropriate consent where required, Google Ads for advertising and conversion measurement purposes.

7. Meta services

Meta Platforms Ireland Limited
Merrion Road, Dublin 4, D04 X2K5, Ireland

Activity:
The Data Controller uses Meta Pixel and related Meta Business Tools for measuring the effectiveness of advertising campaigns, measuring conversions and, subject to the visitor’s consent, supporting personalised advertising and remarketing activities on Facebook and Instagram.

The Meta Pixel may collect and transmit information relating to the visitor’s interaction with the website, including in particular information about page views, actions performed on the website, device and browser information, IP address and other online identifiers.

The use of Meta Pixel and other non-essential marketing technologies is based on the visitor’s prior consent. Where consent is required, such technologies are activated only after the visitor has provided the appropriate consent through the website’s cookie settings.

Depending on the processing operation concerned, Meta Platforms Ireland Limited may act as an independent or joint data controller in accordance with the applicable Meta terms and data protection rules.

8. Accounting

The accountant engaged by the Data Controller may have access to invoicing and accounting data to the extent necessary for the fulfilment of accounting and tax obligations.

9. Authorities and other recipients authorised by law

The Data Controller may disclose personal data where required by law or pursuant to a lawful request from a competent authority, including in particular the Hungarian National Tax and Customs Administration, courts, prosecution authorities, police or other authorities authorised by law.

The Data Controller discloses only personal data necessary for providing the relevant service or fulfilling the applicable legal obligation.

The Data Controller processes personal data for the purposes of entering into, performing, amending and terminating contracts with customers and clients, as well as enforcing the rights and obligations arising from such contracts.

Purpose of processing:
conclusion and performance of the contract, documentation of the order, communication, evidence of performance and, where necessary, establishment, exercise or defence of legal claims.

Personal data processed:
the data subject’s name, contact details, billing and delivery information, order and contractual details and communications relating to performance of the contract.

Legal basis:
Article 6(1)(b) GDPR – performance of a contract and, where applicable, Article 6(1)(f) GDPR – the legitimate interest of the Data Controller in establishing, exercising or defending legal claims.

Personal data are processed for as long as necessary for the relevant purpose and taking into account the limitation periods applicable to potential legal claims, unless a longer retention period is required by law.

The Data Controller issues invoices for purchases in accordance with the applicable legislation.

Purpose of processing:
issuing invoices and fulfilling accounting and tax obligations.

Personal data processed:
name, billing address and other personal data lawfully included on invoices and related accounting documents.

Legal basis:
Article 6(1)(c) GDPR – compliance with a legal obligation to which the Data Controller is subject.

The Data Controller retains accounting documents and the personal data included therein for at least 8 years in accordance with Section 169(2) of Act C of 2000 on Accounting.

The Data Controller uses the Számlázz.hu electronic invoicing service for issuing invoices.

During the statutory retention period, the data subject’s right to erasure is restricted with respect to data that must be retained in order to comply with a legal obligation.

The webshops operated by the Data Controller are not online services specifically intended for children, and the Data Controller does not seek to collect personal data relating to children in the ordinary course of its activities.

As a general rule, the Data Controller does not request or process special categories of personal data within the meaning of Article 9 GDPR, including in particular health data, biometric data or data revealing religious or political beliefs, sex life or sexual orientation.

Data subjects are requested not to provide such information unnecessarily when placing an order, requesting a quotation or contacting the Data Controller.

Where a customised product is ordered, text, graphics, photographs or other content voluntarily supplied by the data subject will be used solely to the extent necessary to fulfil the order.

Where the Data Controller becomes aware that personal data have been provided without an appropriate legal basis or are not necessary for the relevant purpose, such data will be deleted in accordance with applicable law.

The Data Controller processes e-mail addresses and telephone numbers only in connection with specific and defined processing purposes.

In connection with an order, e-mail addresses and telephone numbers are processed for the purposes of order confirmation, communication with the customer and arranging delivery.

In the case of a request for quotation or other enquiry, contact details are processed for the purposes of responding to the enquiry and carrying out any necessary follow-up communication.

The Data Controller does not use e-mail addresses or telephone numbers for newsletters or other direct electronic marketing communications without the appropriate consent of the data subject.

Contact details are retained for as long as necessary for the original purpose of processing, performance of the contract, compliance with legal obligations or establishment, exercise or defence of legal claims.

The Data Controller operates the following webshops:

https://thirstycow.hu
https://www.thirstycowstudio.com

The websites may use cookies and similar technologies in order to ensure their proper operation.

Strictly necessary cookies are used to provide essential webshop functionality, including in particular session management, shopping cart functionality, security and features specifically requested by the user. Where such cookies are strictly necessary for providing a service requested by the user, prior consent is not required.

Non-essential cookies and similar technologies, including in particular analytics and marketing cookies, are used on the basis of appropriate prior consent where required by law.

The Data Controller may use Google Analytics to measure website traffic and usage, Google Ads to measure advertising performance and conversions, and Meta Pixel and related Meta Business Tools to measure advertising performance and conversions and, where applicable, to support personalised advertising and remarketing activities on Facebook and Instagram.

Where consent is required for the use of such technologies, they will only be activated after the visitor has provided the appropriate consent.

Visitors may use the cookie settings available on the website to give or refuse consent to non-essential cookies and to withdraw previously given consent.

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

The technical operation of the websites is supported by the platform provided by UNAS Online Kft.

The current categories, providers, purposes and duration of cookies used by the websites may be viewed in the cookie settings available on the relevant website and may change according to the current technical configuration.

The Data Controller is present on the following social media platforms:

Facebook:
https://www.facebook.com/profile.php?id=61564030032893

Instagram:
https://www.instagram.com/_thirstycow/

The purpose of processing personal data through social media is to present the Data Controller’s products, services and activities, communicate with prospective and existing customers and engage in social media communication.

Where a data subject interacts with a social media page of the Data Controller, for example by following the page, liking or commenting on content or sending a message, personal data made available by that person may be processed.

The Data Controller processes such personal data only to the extent necessary for the relevant interaction and communication.

The operators of the relevant social media platforms may also process personal data as independent data controllers. Such processing is governed by the privacy terms of the relevant platform.

The Data Controller processes personal data for the purposes of handling consumer complaints.

Purpose of processing:
identifying, investigating, responding to and documenting consumer complaints and complying with applicable consumer protection legislation.

Personal data processed may include in particular:
the consumer’s name, residential or electronic correspondence address, the place, time and method of submitting the complaint, a detailed description of the complaint, documents and other evidence supplied by the consumer and any other information necessary for handling the complaint.

Legal basis:
Article 6(1)(c) GDPR – compliance with a legal obligation, in particular Act CLV of 1997 on Consumer Protection.

Written complaints are answered within the deadline prescribed by applicable law.

The Data Controller retains the record of an oral complaint or the written complaint and a copy of the substantive response for three years.

Personal data processed for complaint handling are used exclusively for investigating and responding to the complaint, complying with related legal obligations and, where necessary, handling legal claims.

The Data Controller applies technical and organisational measures appropriate to the level of risk in order to ensure the security of personal data.

The Data Controller seeks to prevent unauthorised access to, alteration, disclosure, publication, erasure or destruction of personal data, as well as accidental loss or damage.

Access to personal data is limited to persons and service providers who require access in order to perform the relevant task.

When selecting service providers, the Data Controller seeks to use partners that provide appropriate data security and data protection safeguards.

Due to the nature of data transmission over the internet, absolute security cannot be guaranteed in all circumstances; however, the Data Controller takes all measures that can reasonably be expected to protect personal data.

Subject to the conditions set out in the GDPR, data subjects have in particular the following rights:

Right to information and access:
The data subject has the right to obtain confirmation as to whether the Data Controller processes personal data relating to him or her and, where that is the case, to access those personal data and information relating to the processing.

Right to rectification:
The data subject may request the correction of inaccurate personal data concerning him or her and the completion of incomplete personal data.

Right to erasure:
The data subject may request the erasure of personal data concerning him or her in the cases specified by the GDPR. The right to erasure does not apply, among other circumstances, where processing is necessary for compliance with a legal obligation or for the establishment, exercise or defence of legal claims.

Right to restriction of processing:
The data subject may request restriction of the processing of personal data concerning him or her in the circumstances specified by the GDPR.

Right to data portability:
Where the conditions specified in the GDPR are met, the data subject has the right to receive the personal data concerning him or her which he or she has provided to the Data Controller in a structured, commonly used and machine-readable format and to request transmission of those data to another controller.

Right to object:
Where processing is based on Article 6(1)(f) GDPR, the data subject may object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her.

Withdrawal of consent:
Where processing is based on consent, the data subject may withdraw his or her consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Requests relating to the exercise of data subject rights may be submitted to:

info@thirstycow.hu

The Data Controller shall respond to the request without undue delay and in any event within one month of receipt. In the circumstances specified by the GDPR, this period may be extended by a further two months. The Data Controller shall inform the data subject of any extension and the reasons for it within the first month.

Right to lodge a complaint

Where a data subject considers that the processing of personal data relating to him or her infringes the GDPR, he or she may lodge a complaint with the supervisory authority:

Hungarian National Authority for Data Protection and Freedom of Information
(NAIH)

Address:
1055 Budapest, Falk Miksa utca 9–11., Hungary

Postal address:
1363 Budapest, P.O. Box 9., Hungary

Website:
https://www.naih.hu

The data subject also has the right to seek a judicial remedy in accordance with the GDPR and applicable law.

The Data Controller does not carry out decision-making based solely on automated processing which produces legal effects concerning the data subject or similarly significantly affects him or her.

A personal data breach means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of or access to personal data processed.

The Data Controller handles and documents personal data breaches in accordance with the GDPR.

Where a personal data breach is likely to result in a risk to the rights and freedoms of natural persons, the Data Controller shall notify the competent supervisory authority without undue delay and, where feasible, no later than 72 hours after becoming aware of the breach.

Where a personal data breach is likely to result in a high risk to the rights and freedoms of natural persons, the Data Controller shall also communicate the breach to the affected data subject without undue delay, unless the GDPR provides that such individual notification is not required.

The Data Controller maintains records of personal data breaches, including the circumstances of the breach, its effects and the remedial actions taken.

This Privacy Policy takes effect on 14 September 2026.

Gulyás Marcell Sándor
sole proprietor
Data Controller