Privacy Policy

premiumbike.hu is committed to protecting your personal data. This policy explains what personal data we process when you use our online store, for what purposes, on what legal basis and for how long, who has access to the data, and what rights you have.

1. The data controller

  • Name: TRISPORT EUROPE Kereskedelmi és Szolgáltató Korlátolt Felelősségű Társaság
  • Registered office: 1044 Budapest, Fiumei út 18. A ép. 4. lház, 3. emelet, 6. ajtó
  • Email: info@premiumbike.hu
  • Online store: premiumbike.hu

2. General provisions

We process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation, “GDPR”) and Hungarian Act CXII of 2011 on the Right of Informational Self-Determination and on Freedom of Information (Infotv.). Personal data means any information relating to an identified or identifiable natural person, such as a name, address, email address or IP address.

3. Scope and source of the data processed

The personal data we process comes mainly from you, when you place an order, use a customer account, subscribe to our newsletter or contact us.

  • Orders: name, delivery and billing address, email address, phone number, the products ordered, the order value, and the payment and delivery method.
  • Customer account: email address, name, saved addresses, previous orders.
  • Newsletter: email address and – if provided – name.
  • Contact, customer service, returns: name, email address, order number, the content of your message, attached photos, bank account number required for refunds.
  • Technical data: IP address, browser and device type, time of visit, data stored by cookies (see our Cookie Policy).

For card payments, card details are processed by the payment provider, not by us, and we have no access to them.

4. Purposes and legal bases of processing

  • Processing and fulfilling orders, communicating about your order, handling withdrawals and warranty claims – legal basis: performance of a contract (Article 6(1)(b) GDPR).
  • Invoicing and retention of accounting records – legal basis: compliance with a legal obligation (Article 6(1)(c) GDPR; Hungarian Act C of 2000 on Accounting).
  • Operating your customer account – legal basis: performance of a contract or your request (Article 6(1)(b) GDPR).
  • Sending newsletters and offers – legal basis: your consent (Article 6(1)(a) GDPR), which you can withdraw at any time using the unsubscribe link in our newsletters or by email.
  • Secure operation of the online store and fraud prevention – legal basis: legitimate interest (Article 6(1)(f) GDPR).
  • Statistics and marketing cookies – legal basis: your consent, which you can give or refuse in the cookie banner.

5. Data retention periods

  • We keep invoices and accounting records for 8 years as required by law.
  • We keep other order-related data until claims arising from the contract become time-barred, as a rule 5 years from fulfilment.
  • We process customer account data until the account is deleted.
  • We process marketing data until consent is withdrawn, but for no longer than 7 years.
  • We keep customer service correspondence for up to 5 years after the matter is closed.

6. Data processors and recipients

We only share your personal data with partners who help us provide our service, and only to the extent necessary for their tasks:

  • Shopify International Limited (Victoria Buildings, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland) – operation of the online store, hosting, order management, customer accounts and email notifications.
  • Payment provider – processing the card or other online payment selected at checkout.
  • Courier service – the data needed to deliver your parcel (name, address, phone number, email address).
  • Accountant and invoicing provider – issuing invoices and meeting accounting obligations.
  • Analytics and marketing providers (for example Google Ireland Limited, Meta Platforms Ireland Limited) – only if you have consented in the cookie banner.

Shopify and some providers may also store data outside the European Economic Area (for example in Canada or the United States). In such cases, the transfer takes place on the basis of a European Commission adequacy decision (for example the EU–US Data Privacy Framework) or standard contractual clauses, with the safeguards required by the GDPR.

7. Your rights

  • Right of access: you can find out what personal data we hold about you.
  • Right to rectification: you can ask us to correct or update your data.
  • Right to erasure: you can ask us to delete your data if processing is no longer necessary or you have withdrawn your consent (unless the law requires us to retain it).
  • Right to restriction of processing: you can ask us to temporarily restrict processing.
  • Right to object: you can object to processing based on legitimate interest.
  • Right to data portability: you can ask to receive your data in a structured, machine-readable format or have it transferred to another controller.
  • Withdrawal of consent: you can withdraw consent to consent-based processing at any time; this does not affect the lawfulness of processing before withdrawal.

You can send your request to info@premiumbike.hu, and we will respond within 30 days at the latest.

If you have a complaint, you can contact the Hungarian National Authority for Data Protection and Freedom of Information (NAIH): 1055 Budapest, Falk Miksa utca 9–11.; postal address: 1363 Budapest, Pf. 9.; email: ugyfelszolgalat@naih.hu; web: www.naih.hu. If your rights are infringed, you may also go to court.

8. Use of cookies

Our website uses cookies to operate the online store (for example, to keep the contents of your basket), to improve your browsing experience and – with your consent – for statistics and marketing purposes. You can read more about cookies in our Cookie Policy.

9. Data security

We take all necessary technical and organisational measures to protect personal data against unauthorised access, alteration, deletion or loss. The online store is accessible via an encrypted (HTTPS) connection, and payment data is processed in systems compliant with the PCI DSS security standard.

10. Final provisions

This policy may be amended from time to time. The current version is always available on our website. By using the online store, you confirm that you have read this policy.

Effective from 23 October 2026