Last updated: 12 August 2026

1. Introduction

At Grape Empire, we take the protection of your personal data seriously.

This Privacy Policy explains how Horváth Balázs, Sole Proprietor, operating the Grape Empire online store at grape-empire.com, collects, uses, stores and protects your personal data.

Personal data is processed in accordance with applicable data protection legislation, including the General Data Protection Regulation (EU) 2016/679 (GDPR).

Data Controller

Business name: Horváth Balázs, Sole Proprietor
Trading name: Grape Empire
Registered address: 7000 Sárbogárd, Tinódy utca 156., Hungary
Email: info@grape-empire.com
Website: grape-empire.com

2. Personal Data We Process

We process only the personal data necessary to operate our online store, fulfil and deliver orders, communicate with customers, comply with our legal obligations and improve our services.

Depending on how you use our website, we may process the following categories of personal data.

2.1 Customer and Order Data

When you place an order, we may collect:

• your name;
• billing address;
• shipping address;
• email address;
• telephone number required for delivery;
• country;
• details of the products ordered;
• order number and order history;
• order value and payment status; and
• information necessary for invoicing and delivery.

We process this information in order to:

• process and fulfil your order;
• arrange delivery;
• enable cash-on-delivery payment;
• communicate with you regarding your order;
• handle returns, complaints and customer service requests; and
• comply with accounting, tax and other legal obligations.

The legal basis for processing is primarily the performance of a contract or taking steps at your request before entering into a contract under Article 6(1)(b) GDPR.

Where we are required by law to retain or process information, the legal basis is compliance with a legal obligation under Article 6(1)(c) GDPR.

2.2 Communication Data

When you contact us through our website or by email, we may process:

• your name;
• email address;
• country;
• order number, if provided;
• the content of your message; and
• any other information you voluntarily provide.

We process this information to answer enquiries, provide customer support, resolve problems and, where necessary, establish, exercise or defend legal claims.

Depending on the nature of your enquiry, the legal basis may be the performance of a contract, steps taken before entering into a contract, or our legitimate interest in providing customer service and operating our business.

2.3 Technical and Website Usage Data

When you visit our website, certain technical information may be generated automatically, including:

• IP address;
• browser type and version;
• device type;
• operating system;
• pages visited;
• date and time of visits;
• referring website;
• navigation and interaction data; and
• cookie or similar technology identifiers.

Technical information necessary for the secure and reliable operation of the website may be processed on the basis of our legitimate interests.

Analytics, advertising and other non-essential tracking technologies are used only where permitted by applicable law and, where required, after obtaining your consent.

For more information, please see our Cookie Policy.

3. How We Collect Personal Data

We may collect personal data directly from you when you:

• place an order;
• create or use a customer account;
• complete a contact form;
• contact us by email;
• request customer support; or
• otherwise voluntarily provide information to us.

Certain technical information may also be collected automatically when you use our website through cookies and similar technologies.

We may also receive information from service providers involved in operating and securing our online store and delivering orders.

4. Payment – Cash on Delivery

Orders placed through Grape Empire are currently paid using Cash on Delivery (COD).

This means that payment is made in connection with the delivery of your order rather than through an online card payment service on our website.

We therefore do not collect or store payment card details for online card transactions.

Information necessary for the collection and administration of the cash-on-delivery payment may be shared with GLS where required to fulfil your order.

The legal basis for this processing is the performance of the purchase contract.

5. Delivery by GLS

Orders placed through Grape Empire are delivered by GLS.

To arrange and complete delivery, we may provide GLS with personal information necessary for shipment, including:

• your name;
• delivery address;
• country;
• telephone number;
• email address;
• shipment and order reference information; and
• information necessary for the collection of cash-on-delivery payment.

GLS processes this information for purposes related to the transport, delivery and administration of your shipment.

The legal basis for sharing the information necessary for delivery is the performance of the contract between you and Grape Empire.

GLS may also process certain information in accordance with its own legal obligations and applicable privacy terms.

6. Cookies and Similar Technologies

Grape Empire uses cookies and similar technologies to operate the website, remember preferences and, where consent has been provided, analyse website usage and support advertising activities.

Cookies that are strictly necessary for the operation of the website may be used without consent where permitted by law.

Analytics, advertising and other non-essential cookies or tracking technologies are activated only where the required consent has been obtained.

You can manage or withdraw your cookie preferences through the cookie settings available on our website.

For more information, please see our Cookie Policy.

7. Marketing and Analytics

Where required by law, we process personal data for electronic marketing, analytics or personalised advertising only after obtaining the necessary consent.

Depending on the services enabled on our website, these activities may include measuring website usage, evaluating advertising performance and displaying relevant advertisements.

You may withdraw your consent at any time through the available cookie settings or, in the case of marketing emails, through the unsubscribe mechanism provided in the communication.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

Messages necessary for fulfilling an order, providing customer service or meeting legal obligations are not considered marketing communications.

8. Sharing Personal Data

We do not sell your personal data.

We may share personal data only where necessary and lawful, including with:

• GLS, for shipping, delivery and cash-on-delivery administration;
• website hosting providers;
• IT and website security service providers;
• email and communication service providers;
• accounting and professional advisers;
• analytics or advertising providers where the required consent has been obtained; and
• competent public authorities where disclosure is required by law.

Only information necessary for the relevant purpose is shared.

Where required by applicable data protection law, we use appropriate contractual and organisational safeguards with service providers processing personal data on our behalf.

9. International Transfers of Personal Data

Some service providers used in connection with our website may process personal data outside the European Economic Area (EEA).

Where personal data is transferred outside the EEA, we take appropriate steps to ensure that the transfer complies with applicable data protection law.

Depending on the recipient and destination, safeguards may include:

• an adequacy decision adopted by the European Commission;
• the European Commission’s Standard Contractual Clauses;
• the EU–US Data Privacy Framework, where applicable; or
• another lawful transfer mechanism permitted under the GDPR.

10. Data Security

We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, loss or destruction.

Our website uses encrypted HTTPS connections, together with appropriate website security, access-control and backup measures.

Access to personal data is restricted to persons and service providers who require access for legitimate business purposes.

While we take reasonable measures to protect personal data, no method of electronic storage or transmission can guarantee absolute security.

11. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected and to comply with applicable legal, accounting and tax obligations.

The applicable retention period depends on the type of information and the purpose for which it is processed.

Order, invoicing and accounting information is retained for the period required under applicable Hungarian law.

Customer service correspondence may be retained for as long as reasonably necessary to resolve the enquiry, manage the customer relationship and protect our legitimate legal interests.

Where processing is based solely on consent, we will cease the relevant processing after consent is withdrawn unless another lawful basis requires or permits continued retention.

Information that has been irreversibly anonymised and can no longer identify an individual may be retained and used for statistical purposes.

12. Your Rights Under the GDPR

Subject to the conditions and limitations set out in the GDPR, you may have the right to:

• request access to your personal data;
• request correction of inaccurate or incomplete personal data;
• request erasure of your personal data;
• request restriction of processing;
• object to processing based on legitimate interests;
• object to direct marketing at any time;
• request data portability where applicable;
• withdraw consent at any time where processing is based on consent; and
• lodge a complaint with a competent supervisory authority.

These rights are not absolute and may be subject to limitations or exceptions under applicable law.

To exercise any of your data protection rights, you can use the Data Protection Request Form below or contact us at info@grape-empire.com.