Privacy Policy

1. Introduction

Spirit Energy (hereinafter: Data Controller) is committed to protecting personal data. This Privacy Policy has been prepared in accordance with the European Union General Data Protection Regulation (GDPR – Regulation 2016/679) and applicable Hungarian data protection laws.

1.1 Data Controller Information

• Company name: Spirit Energy
• Email: info@spiritenergy.hu

2. Categories of Personal Data Processed

2.1 Data Provided During Registration

• First and last name
• Email address
• Password (in encrypted form)
• Phone number (optional)

2.2 Billing Data

• Billing name and address
• Tax number (for companies)
• Payment transaction data

2.3 Automatically Collected Data

• IP address
• Browser type and version
• Operating system
• Time and duration of visit
• Pages visited
• Cookie and similar technology data

3. Purpose and Legal Basis of Data Processing

4. Cookies

The website uses cookies to improve user experience.

4.1 Essential Cookies

These cookies are necessary for the basic functioning of the website and cannot be disabled.

4.2 Analytics Cookies

These help understand how visitors use the website. They are only activated with consent.

4.3 Managing Cookies

You can modify cookie settings in your browser. Disabling cookies may affect website functionality.

5. Data Transfers

5.1 Data Processors

The Data Controller uses the following data processors:

• Stripe, Inc. – payment services (USA, under appropriate safeguards)
• Hosting provider – server services (EU)

5.2 Transfers to Third Countries

If data is transferred outside the EU, it is done only with appropriate safeguards (e.g., Standard Contractual Clauses).

6. Your Rights

Under the GDPR, you have the following rights:

6.1 Right of Access

You have the right to obtain confirmation as to whether personal data concerning you is being processed, and if so, to access the personal data.

6.2 Right to Rectification

You have the right to request the correction of inaccurate personal data.

6.3 Right to Erasure ("Right to be Forgotten")

You have the right to request the deletion of your personal data when there is no other legal basis for processing.

6.4 Right to Restriction of Processing

You have the right to request restriction of processing in certain circumstances.

6.5 Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format.

6.6 Right to Object

You have the right to object to the processing of your personal data based on legitimate interests.

6.7 Withdrawal of Consent

If processing is based on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

7. Data Security

The Data Controller implements appropriate technical and organizational measures to protect personal data:

• SSL/TLS encryption during data transmission
• Password hashing
• Regular security backups
• Access management and permission restrictions
• Firewall and intrusion detection systems

8. Data Breach

In case of a data breach, the Data Controller will notify the supervisory authority within 72 hours and, if the breach poses a high risk, will also inform the affected individuals.

9. Legal Remedies

If you believe that the processing of your personal data violates applicable laws:

9.1 Complaint to the Data Controller

As a first step, contact the Data Controller: info@spiritenergy.hu

9.2 Supervisory Authority

You may file a complaint with the National Authority for Data Protection and Freedom of Information (NAIH):

• Address: 1055 Budapest, Falk Miksa utca 9-11., Hungary
• Phone: +36 1 391 1400
• Email: ugyfelszolgalat@naih.hu
• Website: www.naih.hu

9.3 Judicial Remedy

You have the right to seek judicial remedy if you believe the Data Controller has violated personal data protection rules.

10. Amendments

The Data Controller reserves the right to amend this Policy. We will notify you of amendments on the website.

11. Contact

For questions about data processing, please contact us:

• Email: info@spiritenergy.hu