Last Updated: 06.2026

1. Introduction

Welcome to SunDori ("we", "our", "us"). We are committed to protecting your privacy and handling your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable national data protection laws.

This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you visit our website or purchase our products.

Data Controller

Company Name: SunDori / Burján Dorina
Registered Address: 1116 Budapest Kalotaszeg utca 11.
Email: sundoriglasses@gmail.com
VAT Number: 60990835-1-43

If you have any questions regarding this Privacy Policy or your personal data, please contact us using the details above.

2. What Personal Data We Collect

Depending on how you use our webshop, we may collect:

Information you provide

• Full name

• Billing address

• Shipping address

• Email address

• Telephone number

• Company name (if applicable)

• VAT number (if applicable)

• Account login details

• Order history

• Customer service communications

• Product reviews or feedback

Information collected automatically

• IP address

• Browser type

• Device information

• Operating system

• Pages visited

• Referral URLs

• Date and time of visits

• Cookies and similar technologies

Payment Information

We do not store complete payment card information.

Payments are processed securely by our payment service providers. We only receive confirmation of successful payment together with limited transaction information.

3. How We Use Your Personal Data

We process your personal data to:

• Process and deliver your orders

• Provide customer support

• Manage your customer account

• Send order confirmations and shipping notifications

• Process refunds

• Prevent fraud

• Improve our website and services

• Comply with legal obligations

• Send marketing communications (only with your consent where required)

4. Legal Basis for Processing

Under the GDPR, we process your personal data based on one or more of the following legal grounds:

• Performance of a contract

• Compliance with legal obligations

• Legitimate interests

• Your consent (where required)

You may withdraw your consent at any time.

5. Cookies

Our webshop uses cookies and similar technologies.

Cookies help us:

• Operate the website

• Remember your preferences

• Analyse website traffic

• Improve user experience

• Measure marketing performance

Where required by law, we will ask for your consent before placing non-essential cookies.

You may change your cookie preferences at any time through our cookie settings.

6. Marketing Communications

If you subscribe to our newsletter, we may send promotional emails regarding products, offers and news.

You may unsubscribe at any time by:

• Clicking the "Unsubscribe" link in any email

• Contacting us directly

7. Sharing Your Personal Data

We only share your personal data when necessary.

Recipients may include:

• Payment service providers

• Shipping and logistics companies

• IT hosting providers

• Website maintenance providers

• Accounting firms

• Legal advisers

• Public authorities where legally required

All third parties process your data under appropriate contractual safeguards.

8. International Data Transfers

Where personal data is transferred outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place, including:

• European Commission adequacy decisions

• Standard Contractual Clauses (SCCs)

• Other lawful transfer mechanisms under the GDPR

9. Data Retention

We retain personal data only for as long as necessary.

Typical retention periods include:

• Customer account data: until account deletion or inactivity

• Orders and invoices: as required by tax and accounting laws (typically up to 5 years, depending on national legislation)

• Marketing data: until consent is withdrawn

• Customer support communications: up to 3 years after resolution unless a longer period is required

When data is no longer required, it is securely deleted or anonymised.

10. Your Rights

Under the GDPR, you have the right to:

• Access your personal data

• Correct inaccurate data

• Request deletion ("Right to be Forgotten")

• Restrict processing

• Object to processing

• Data portability

• Withdraw consent

• Lodge a complaint with your national Data Protection Authority

To exercise your rights, please contact us using the details provided above.

11. Security Measures

We implement appropriate technical and organisational measures to protect your personal data, including:

• SSL/TLS encryption

• Secure servers

• Access controls

• Password protection

• Regular software updates

• Data minimisation

• Staff confidentiality obligations

No online system can guarantee absolute security, but we continuously work to protect your information.

12. Children's Privacy

Our webshop is not intended for individuals under the age of 16.

We do not knowingly collect personal data from children.

If we become aware that such data has been collected, we will delete it promptly.

13. Third-Party Links

Our website may contain links to external websites due to delivery or payment solutions.

We are not responsible for the privacy practices or content of third-party websites.

Please review their privacy policies before providing personal information.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

The latest version will always be available on our website, together with the date of the last update.

Material changes will be communicated where required by law.

15. Contact

For any questions regarding this Privacy Policy or your personal data, please contact:

Company Name: SunDori
Email: sundoriglasses@gmail.com

If you believe your data has been processed unlawfully, you have the right to lodge a complaint with your competent supervisory authority within the European Union.

Annex – Typical Categories of Processors

Your personal data may be processed by service providers in the following categories:

• Web hosting provider

• E-commerce platform provider

• Payment gateway

• Courier and shipping companies

• Email service provider

• Customer support software

• Analytics provider

• Cloud storage provider

• Accounting software provider

• Fraud prevention services

Each processor acts under a data processing agreement where required by Article 28 GDPR.