Privacy notice

In force from 10 August 2026.

1. The data controller

Name: Mezei Ádám Rudolf
Activity: registered agricultural smallholder
Registered seat: 7694 Hosszúhetény, Püspökszentlászló u. 14.
Premises: 7334 Szalatnak, Béke u. 47.
Tax number: 55209618-1-22
Telephone: +36 30 211 4982
Email: adam@mezei.info

We are not required to appoint a data protection officer and have not appointed one.

2. Principles

We ask only for what fulfilling an order or sending the newsletter actually needs. We do not pass the data to third parties, do not sell it, and do not use it for profiling. No automated decision-making takes place.

3. What we handle, and why

3.1 Orders

Data handled: name, email address, how and where you collect, the address if it is delivered, the collection times you chose, your note, and the products and quantities ordered
Purpose: processing the order, getting in touch, arranging collection and payment, performing the contract
Legal basis: performance of a contract and steps taken before entering into one (GDPR Article 6(1)(b))
Retention: 5 years from performance (the general limitation period under the Civil Code)

If an order does not lead to performance — we cannot agree, or you withdraw — we delete the data within a year of closing the correspondence.

3.2 Accounting records

Data handled: the data appearing on the invoice
Purpose: meeting a statutory obligation
Legal basis: legal obligation (GDPR Article 6(1)(c)); Section 169 of Act C of 2000 on Accounting
Retention: 8 years

Data handled: email address, the kind of subscription and when it was made
Purpose: letting you know about harvests and the close of the season; if you ticked it separately, a monthly summary of new diary and blog entries
Legal basis: consent (GDPR Article 6(1)(a))
Retention: until consent is withdrawn

Consent can be withdrawn at any time and without giving a reason: every message carries an unsubscribe link at the foot, or a message to the email address above is enough. Withdrawing it does not affect the lawfulness of what was done beforehand.

4. Processors

We use these providers to store the data and to send the messages:

Hosting

Name: RackForest Zrt.
Registered seat: 1132 Budapest, Victor Hugo utca 11. 5. em. B05001.
Email: info@rackforest.hu
Activity: storing the website and the databasethe data sits on a server within the European Union, in Hungary

Email delivery

Name: Mailtrap (Railsware Products Studio LLC)
Registered seat: 117 E Colorado Blvd, Suite 600, Office 650, Pasadena, CA 91105, United States
Activity: delivering the confirmation and newsletter emailsthe processing also takes place in the United States

We pass data to no one else. To deliver the emails, the recipient's name and email address and the content of the message are transferred to the United States. The provider participates in the EU–U.S. Data Privacy Framework, for which the European Commission has adopted an adequacy decision (GDPR Art. 45). No other data is transferred outside the European Union.

5. Cookies and browser storage

The website uses only the cookies it strictly needs to work (session identifier, security token, language choice). The law does not require consent for these.

The order basket. The products and quantities you choose are kept in your own browser's storage (sessionStorage), so that they are not lost as you move between pages. It is not a cookie: no identifier is attached to it, and its contents reach us only when you send the order, which section 3.1 covers. It clears itself when you close the browser tab, and until then emptying the basket removes it. Because the basket is needed for the service you asked for, this needs no consent either.

We use no analytics, marketing or social-media cookies, and no third-party tracker runs on the website.

The visit statistics we keep ourselves contain no personal data and cannot identify anyone.

Embedded video. Videos in blog entries are embedded through YouTube's privacy-enhanced mode (youtube-nocookie.com), which sets no cookie until playback starts. Once you start playing, YouTube's own data handling applies (Google Ireland Limited), governed by that provider's privacy notice.

6. Security

The website is served over an encrypted connection (HTTPS). Only the data controller can reach the database, through a password-protected interface. The system is backed up regularly.

7. Your rights

At any time you may ask for

information about what data we hold on you,
correction, if something is inaccurate,
erasure, if there is no longer a legal basis for holding it,
restriction of the processing,
your data in a portable form,
and you may object to the processing or withdraw your consent to the newsletter.

We take these requests at the email address above and answer within 30 days at the latest.

8. Remedies

If you believe the handling of your data breaches your rights, you may complain to the supervisory authority:

Authority: Hungarian National Authority for Data Protection and Freedom of Information (NAIH)
Address: 1055 Budapest, Falk Miksa utca 9–11.
Postal address: 1363 Budapest, Pf. 9.
Contact: ugyfelszolgalat@naih.hu · naih.hu

You may also go to court: proceedings can be brought before the tribunal for your domicile or your place of residence.

9. Amendment

We amend this notice when it needs amending. The text in force is always the one on the website.