Free EU shipping on stickers ● Free file check and digital proof ● Next-day dispatch up to 200 pcs
Privacy policy
What personal data the sticker4y.eu shop processes, why, for how long, who we share it with – and your rights.
This page explains what personal data we process when you shop or browse on sticker4y.eu: why, for how long, who we share it with, and what you can do if you disagree.
Effective: 20 October 2026
- We only ask for what the order needs: your name, contact details, billing and shipping address, your VAT ID for business purchases, and the artwork you upload for your stickers.
- Payment is handled by PayPal – we never see or store your card details.
- We only measure site traffic and usage with Google Analytics and Microsoft Clarity if you allow it in the cookie banner.
- By law we must keep invoice data for eight years and cannot delete it earlier.
- We only send a newsletter if you subscribed to it; you can unsubscribe at any time. We do not sell your data to anyone.
- You can ask us at any time to show, correct or delete your data: sticker@sticker4y.eu.
1. Who is responsible for your data
The controller – the person who decides what happens to your data – is:
| Name | Mikó Tamás |
|---|---|
| Registered address | Fülesi utca 11., 9464 Und, Hungary |
| Workshop | Baross út 24/A, 9400 Sopron, Hungary |
| Tax number | 69014570-2-28, EU VAT ID: HU69014570 |
| sticker@sticker4y.eu | |
| Phone | +36 70 884 1919 |
| Website | sticker4y.eu |
We have not appointed a data protection officer because our activities do not require one under the GDPR. We answer data protection questions at the e-mail address above.
2. What we process, why and for how long
Every processing activity has a purpose, a legal basis and a time limit. “Legal basis” means the provision of the GDPR we rely on.
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Taking and fulfilling your order | Name, e-mail, phone, billing and shipping address, company name and VAT ID for business purchases, the product settings you chose, your notes | Performance of a contract – Art. 6(1)(b) GDPR | 5 years from fulfilment (general limitation period) |
| Producing your stickers, digital proof | The artwork you upload, your notes, our proof correspondence | Performance of a contract – Art. 6(1)(b) GDPR | 1 year from fulfilment so you can reorder without uploading again; earlier on request |
| Customer account (if you register) | Name, e-mail, password (encrypted), saved addresses, past orders | Contract – Art. 6(1)(b) GDPR | Until you delete the account; order-related data follows the periods above |
| Invoicing and accounting | Billing name and address, VAT ID, payment and fulfilment data | Legal obligation – Art. 6(1)(c) GDPR, Hungarian Accounting Act (Act C of 2000) § 169 | 8 years – we cannot delete it earlier, even on request |
| VAT-free business purchases (reverse charge) | EU VAT ID, company name, the VIES check result | Legal obligation – Art. 6(1)(c) GDPR, Hungarian VAT Act (Act CXXVII of 2007) | 8 years |
| Newsletter and 10% coupon (if you subscribe) | Email address, language, time of subscription, coupon code | Your consent – Art. 6(1)(a) GDPR | Until you unsubscribe; you can unsubscribe at any time via the newsletter or at sticker@sticker4y.eu |
| Quote requests (For businesses page, “Larger quantities” window) | Name, company, email, phone, VAT number, product details, uploaded artwork, message | Steps prior to entering into a contract at your request – Art. 6(1)(b) GDPR | 1 year from the request if no order follows; otherwise the order retention periods apply |
| Sample pack coupon | Email, coupon code, related order number | Contract – Art. 6(1)(b) GDPR | Until the coupon expires (60 days); after that, the order retention periods apply |
| Running the website | Strictly necessary cookies, server logs (IP address, time, page, browser type) | Legitimate interest in operating the shop securely – Art. 6(1)(f) GDPR | Server logs: up to 30 days |
| Traffic and usage measurement | Usage and device data collected by Google Analytics and Microsoft Clarity (clicks, scrolling), shortened IP address, purchase amounts (without name or contact details) | Your consent in the cookie banner – Art. 6(1)(a) GDPR | Google Analytics: up to 14 months; Microsoft Clarity: up to 13 months |
Unfinished orders and saved designs
If you enter your email address and details at checkout but do not complete the order, we keep the details you entered (name, company, email address, phone number, country, VAT number) and the contents of your cart for up to 90 days. For logged-in customers we also keep the cart contents if you did not reach checkout. Designs made in the editor are stored for up to 1 year, even if you do not order them. Purpose: helping you complete an unfinished order, and analysing and improving how the shop works. Legal basis: our legitimate interest – Art. 6(1)(f) GDPR. We only send marketing emails if you gave separate consent. You can ask us to delete this data at any time: sticker@sticker4y.eu.
3. Cookies
We always use the cookies the shop needs to work, and statistics cookies only with your consent. Which cookie does what and for how long is described in our cookie policy. You can change your choice at any time: Cookie settings.
4. Who we share your data with
We never sell or rent your data. Some service providers are essential to run the shop. Processors act on our behalf and on our instructions; PayPal and the courier act as independent controllers under their own privacy rules.
| Who | What they do | What data they see |
|---|---|---|
| Tárhely.Eu Szolgáltató Kft. Ormánság utca 4. X. em. 241., 1144 Budapest, Hungary | Web hosting | Everything submitted through the shop, plus server logs |
| PayPal (Europe) S.à r.l. et Cie, S.C.A. 22-24 Boulevard Royal, L-2449 Luxembourg | Payment processing (independent controller) | Name, e-mail, billing address, amount; only PayPal sees card and account details |
| The courier delivering your parcel (named in your order confirmation and tracking e-mail) | Parcel delivery (independent controller) | Name, shipping address, phone, e-mail |
| Google Ireland Limited Gordon House, Barrow Street, Dublin 4, Ireland | Google Analytics – only with your consent | Usage and device data, shortened IP address |
| Microsoft Ireland Operations Limited One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland | Microsoft Clarity (usage analysis, heatmaps) – only with consent | Usage and device data, clicks, scrolling |
| Brevo (Sendinblue SAS) 106 boulevard Haussmann, 75008 Paris, France | Newsletter delivery – only if you subscribe | Email address, language, time of subscription |
| Billingo Technologies Zrt. Árbóc utca 6., 1133 Budapest, Hungary | Invoicing software | Billing name, address, VAT ID, invoice data |
| LISMON Számviteli Szolgáltató Bt. Szent György utca 14., 9400 Sopron, Hungary | Accounting, tax returns | Accounting records |
Beyond this, we only disclose data where the law requires it, for example at the request of an authority or court.
5. Transfers outside the EU
We contract with the European subsidiaries of Google, Microsoft and PayPal, but these companies may transfer data to the United States. Such transfers are based on the European Commission’s adequacy decision on the EU–US Data Privacy Framework and on the Standard Contractual Clauses adopted by the Commission. All other providers listed process data within the EU.
6. Your rights
Under the GDPR you can request the following free of charge at sticker@sticker4y.eu. We reply within one month.
- Access. Ask whether we process your data, what data, and get a copy.
- Rectification. Have incorrect or outdated data corrected – most of it you can edit yourself in your account.
- Erasure. Have your data and account deleted, except where the law requires us to keep it (e.g. invoices).
- Restriction. Ask us to keep your data but not use it for the time being.
- Objection. Object to processing based on our legitimate interest.
- Portability. Receive the data you gave us in a machine-readable format, or have it sent to someone else.
- Withdrawing consent. You can withdraw your consent to statistics cookies at any time: Cookie settings. This does not affect the lawfulness of earlier processing.
7. If you disagree
Please write to us first – most things can be solved in one e-mail. If that does not help, you can complain to a supervisory authority – including the one in the country where you live – or go to court. Our lead authority is:
| Authority | Hungarian National Authority for Data Protection and Freedom of Information (NAIH) |
|---|---|
| Address | Falk Miksa utca 9-11., 1055 Budapest, Hungary |
| Phone | +36 1 391 1400 |
| ugyfelszolgalat@naih.hu | |
| Website | naih.hu |
You can also bring legal proceedings before the courts of the place where you live.
8. How we protect your data
The shop only works over an encrypted connection (HTTPS). Only people who need data for their work can access it. We keep our systems up to date and make regular backups. If a data breach is likely to put you at risk, we report it to the authority within the legal deadline and, if the risk is high, inform you as well.
9. Changes to this policy
If what we do changes – a new provider or a new processing activity – we update this policy. The current version is always available on this page.
Effective: 20 October 2026
