Terms and conditions
Please read this privacy notice carefully to understand how we handle your personal data and what your rights are.
We are committed to handling personal data in full compliance with the applicable data protection laws, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).
This privacy notice is based on the GDPR, which governs the protection of natural persons with regard to the processing of personal data and the free movement of such data, and also takes into account Hungarian Act CXII of 2011 on informational self-determination and freedom of information.
This is an English translation for convenience. In case of any discrepancy, the Hungarian version prevails.
Service provider and data controller
Company name
KATI NATURALS SRL.
Registered office
520064, Egészségügyi sétány 11/A, door 13,
Sfântu Gheorghe, Covasna County, Romania
Company registration number
41269864
Tax number
J14/381/2019
Website: https://www.katinaturals.com
Why we process personal data
We process your personal data to operate the webshop on https://katinaturals.com, to sell the products it offers and to promote them (marketing). We also process the data of registered members of the press in order to maintain press relations.
Key terms in plain words
GDPR
The General Data Protection Regulation – the European Union’s data protection regulation.
Processing
Anything we do with personal data, from collecting and storing it to using, sharing or deleting it.
Processor
A company or person that handles personal data on our behalf, following our instructions.
Personal data
Any information that identifies you or can be linked to you, such as your name, email address, address or IP address.
Controller
The party that decides why and how personal data is processed – in this case KATI NATURALS SRL.
Consent
Your freely given, specific, informed and clear agreement to the processing of your data, for example by ticking a checkbox.
Data breach
A security incident in which personal data is lost, destroyed, altered or accessed or disclosed without authorisation.
Recipient
Anyone to whom personal data is disclosed, whether or not they are a third party.
Third party
Anyone other than you, the controller, the processor and the people authorised to process the data under their direct control.
The full legal definitions are in Article 4 of the GDPR: eur-lex.europa.eu
Data security
The servers that store your personal data are kept in a server room protected by appropriate security systems, inaccessible to unauthorised persons. Remote access to the servers running the website is only possible through a specially encrypted channel and only for people who need it to operate the server. Passwords entered during registration are never stored as plain text – only their so-called “hash” is kept.
Your rights as a data subject
Right of access
You can ask us whether we process your personal data and, if we do, request a copy of it together with the information listed in Article 15 of the GDPR.
Right to rectification
If any of your data is inaccurate, we will correct it without delay at your request, and we will complete it if it is incomplete.
Right to erasure
You can ask us to delete your data in the cases listed in Article 17 of the GDPR – for example if we no longer need it for the original purpose, or if you withdraw your consent and there is no other legal basis. This right does not apply where the data is needed to establish, exercise or defend legal claims.
Right to restriction
You can ask us to limit the processing of your data in the cases listed in Article 18 of the GDPR – for example while you contest its accuracy, if the processing is unlawful but you don’t want the data deleted, or if you have objected to the processing.
Right to data portability
Where processing is based on your consent and carried out by automated means, you can receive the data you gave us in a structured, commonly used, machine-readable format and pass it on to another controller.
Right to withdraw consent
You can withdraw your consent at any time. This does not affect the lawfulness of any processing carried out before the withdrawal.
Registering on the website
We process registration data to offer you additional services and to keep in touch with you. The legal basis is your consent. The data subjects are the registered users of the website.
How long we keep the data: until you withdraw your consent. You can withdraw it at any time by writing to our contact email address; your data is then deleted.
The data can be accessed by the controller and its employees. The data is stored electronically.
You can ask us to change or delete your personal data by email, by phone or by post, using the contact details above.
Providing your personal data is necessary to identify you in our database and to keep in touch with you. Your exact name or company name and address are needed for invoicing, which is a legal obligation.
| Data processed | Purpose |
|---|---|
| Name | Identification, communication, invoicing. |
| Company name | Identification, communication, invoicing. |
| Address | Identification, communication, invoicing. |
| Identification, communication. | |
| Phone | Identification, communication. |
| Time of registration | Technical information. |
| IP address | Technical information. |
You give your consent by deliberately ticking the empty checkbox provided for this purpose on the website.
As a data subject you can object to the processing of your personal data; in that case you are entitled to the procedure described in this notice and in the laws it refers to.
Newsletters
As the operator of this website, we fully comply with the applicable legal requirements in the information we publish. When you subscribe to our newsletter, we cannot verify whether your contact details are genuine or whether they belong to a private individual or a business. Businesses that contact us are treated as customer partners.
The purpose of this processing is to send you professional information, promotional emails and newsletters. You can unsubscribe at any time without any consequences – including if your business has closed, you have left it, or someone else gave us your contact details.
The legal basis is your consent. You can agree in advance and explicitly that we contact you at the email address you provided with our offers, information and other messages, and that we process the personal data needed for this.
If you would like to receive our newsletter, you need to provide the required data; without it we cannot send you newsletters.
How long we keep the data: until you withdraw your consent. You can withdraw it at any time by writing to our contact email address or by using the unsubscribe link in any newsletter; your data is then deleted.
The data can be accessed by the controller and its employees. The data is stored electronically. You can ask us to change or delete it by email, by phone or by post, using the contact details above.
Where your data comes from
You provided your personal data to us yourself while using the webshop.
KATI Naturals · Last updated: 15 October 2026