Privacy policy

🇬🇧 PRIVACY POLICY 

Last updated: 9 September 2026

This Privacy Policy explains how Mazsola Műhely Szolgáltató Szociális Szövetkezet (“Oilholder”, “we”, “us”, “our”) collects, uses, stores and shares your personal data when you visit the Oilholder online store, contact us, subscribe to our newsletter or make a purchase.

We process your personal data in accordance with applicable data protection laws, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council (“GDPR”), as well as applicable Hungarian legislation.

1. Data Controller

Data Controller: Mazsola Műhely Szolgáltató Szociális Szövetkezet
Trade name: Oilholder
Website: www.oilholder.com
Registered office: 8000 Székesfehérvár, Palotai út 62/C., Hungary
Email: hello@oilholder.com
Phone: +36 70 942 9368
Tax number: 32697827-1-07
EU VAT number: HU32697827
Company registration number: 07-02-001604
Registering court: Székesfehérvári Törvényszék Cégbírósága

2. What Personal Data Do We Process?

Depending on how you use our online store and services, we may process the following personal data.

Contact and identification information

  • name;
  • email address;
  • phone number;
  • billing address;
  • shipping address.

Order and purchase information

  • products ordered;
  • order value;
  • order and fulfilment information;
  • shipping method;
  • payment-related information;
  • billing information.

Oilholder does not store the full payment card details required for card payments. Payment information is processed by the applicable payment service providers in accordance with their own privacy and security policies.

Technical and usage information

  • IP address;
  • browser and device type;
  • operating system;
  • time zone;
  • cookie identifiers and identifiers generated by similar technologies;
  • information about how you use and interact with the website;
  • referring website;
  • other technical information required for the operation, measurement and security of the website.

Communication information

We may also process information that you voluntarily provide to us by email, contact form or other communication channels.

Marketing information

If you subscribe to our newsletter or consent to marketing-related data processing, we may process, among other things:

  • your name;
  • your email address;
  • information relating to your newsletter subscription and consent;
  • your interactions with marketing communications;
  • data collected by marketing and advertising technologies based on your consent.

3. Purposes and Legal Bases for Processing

Processing and fulfilling orders

We process personal data to receive, process and confirm your order, prepare and deliver the products and communicate with you in connection with your purchase.

Legal basis: performance of a contract or taking steps prior to entering into a contract – Article 6(1)(b) GDPR.

Invoicing, accounting and legal obligations

We process certain personal data related to purchases in order to comply with applicable tax, accounting and other legal obligations.

Legal basis: compliance with a legal obligation – Article 6(1)(c) GDPR.

Customer service and communications

We process information provided to us in order to respond to enquiries, resolve order-related issues and communicate with customers.

Legal basis: depending on the nature of the enquiry, performance of a contract, taking steps prior to entering into a contract or our legitimate interests.

Newsletter and direct marketing

If you have given your consent, we may send you newsletters, product information, news and other marketing communications.

We use Shopify Email to send newsletters.

Legal basis: your voluntary consent – Article 6(1)(a) GDPR.

You may withdraw your consent at any time, free of charge and without giving a reason, by using the unsubscribe option included in marketing emails or by contacting us at hello@oilholder.com.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Website operation and security

Certain technical data may be processed to ensure the proper and secure operation of our online store, prevent misuse and provide our services.

Legal basis: depending on the nature of the processing, our legitimate interests – Article 6(1)(f) GDPR – or, where applicable law requires consent, your consent.

4. Cookies and Similar Technologies

Our online store uses cookies, pixels and other similar technologies.

These may include the following categories:

Strictly necessary cookies: technologies required for the basic operation and security of the online store, shopping cart functionality, preferences and the purchasing process.

Analytics cookies: these help us understand how visitors use our website and allow us to improve its operation and performance.

Marketing and advertising cookies/pixels: these may be used to measure our marketing activities and advertising performance and – where applicable and where you have given your consent – to display personalised or more relevant advertisements.

Except for strictly necessary technologies, cookies and similar technologies for which consent is required under applicable law are used only on the basis of your appropriate consent.

You can manage and change your cookie preferences through the privacy/cookie settings available on our website.

5. Google and YouTube Services

Our online store may use Google and YouTube services for analytics, measurement and marketing purposes.

These services may help us measure the use of our website and the performance of our marketing campaigns and – depending on your consent and the settings applied – display more relevant advertisements.

Data processed by Google may include technical information, cookie and device identifiers, IP addresses and information relating to actions performed on the website.

Where applicable law requires consent for Google/YouTube analytics or marketing-related processing, such processing is based on your consent.

In connection with Google services, personal data may also be processed outside the European Economic Area, subject to applicable data protection rules and appropriate international data transfer safeguards.

6. Meta Pixel

Our online store may use the Meta Pixel to measure actions performed on the website, analyse the performance of our advertising campaigns and – where applicable and where you have given your consent – for marketing and remarketing purposes.

Through the Meta Pixel, Meta may receive technical information, cookie and device identifiers, IP addresses and information about certain actions performed on the website.

Meta Pixel functions requiring consent are used only on the basis of your appropriate consent.

In connection with Meta services, personal data may also be processed outside the European Economic Area, subject to applicable data protection rules and appropriate international data transfer safeguards.

7. Who Do We Share Your Personal Data With?

We share or make personal data available to other organisations only to the extent necessary to operate our services, fulfil orders or comply with our legal obligations.

Shopify / Shopify Payments

We use Shopify services to provide the technical platform for our online store, manage orders and customer information, operate Shopify Email and process payments.

Depending on the payment method selected, banks, payment card networks and digital wallet providers may also participate in the payment process, including:

  • Visa;
  • Mastercard;
  • Maestro;
  • American Express;
  • UnionPay;
  • Apple Pay;
  • Google Pay.

Oilholder does not store your full payment card details.

Billingo

We use the services of Billingo Technologies Zrt. to issue electronic invoices.

Billingo Technologies Zrt.
1133 Budapest, Árbóc utca 6., 1st floor
Hungary

We transfer the personal and billing information necessary to issue invoices to the Billingo system.

Shipping providers

We may provide the relevant shipping provider with the information necessary to deliver your order, in particular the recipient's name, shipping address, phone number and/or email address.

Our shipping providers include:

  • Magyar Posta (MPL);
  • FOXPOST;
  • DHL.

Google and YouTube

For analytics, measurement and marketing functions, in accordance with applicable law and your consent where required.

Meta

For measurement and marketing functions related to the Meta Pixel, in accordance with applicable law and your consent where required.

Accounting, IT and other professional service providers

Accounting, IT and other professional service providers may have access to personal data where this is necessary for them to provide their services.

Authorities

We may disclose personal data to public authorities or other authorised bodies where required by law, a lawful authority request or another legal obligation.

We do not sell your personal data in exchange for monetary consideration.

However, privacy laws in certain jurisdictions may define some transfers of personal data for marketing or advertising purposes as a “sale”, “sharing” or targeted advertising. Where applicable law gives you the right to opt out, object or otherwise control such processing, we will provide those rights in accordance with applicable law.

8. Shopify

Our online store operates on the Shopify platform. We use Shopify services for the technical operation of our online store, order management, payment processing and certain marketing communication services.

For merchants operating in the European Economic Area, the relevant Shopify contracting entity is:

Shopify International Limited
The Sidings, 4th Floor
Grand Canal Quay
Dublin D02 E7K8
Ireland

In providing its services, Shopify may transfer certain personal data to other Shopify entities, payment service providers and subprocessors, including, where applicable, processing outside the European Economic Area.

9. International Data Transfers

Because our online store uses an international technology and service infrastructure, your personal data may in certain circumstances be processed in countries outside the European Economic Area.

Such transfers may occur, among other things, in connection with the use of Shopify, Google and Meta services.

For international orders, personal data necessary to fulfil and deliver your order may also be processed by delivery and logistics providers operating in the destination country.

Where personal data is transferred to a country that is not covered by an adequacy decision of the European Commission, the transfer will be carried out using appropriate safeguards under applicable data protection law, such as Standard Contractual Clauses adopted by the European Commission or another valid international data transfer mechanism.

10. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was processed or for as long as required by applicable law.

Order and contractual data: for as long as necessary to perform the contract and, where applicable, for the period necessary to establish, exercise or defend legal claims, taking into account the applicable limitation periods.

Accounting documents and supporting data: for at least 8 years, in accordance with Hungarian accounting legislation.

Newsletter and marketing data: until you withdraw your consent or for as long as necessary to demonstrate the lawfulness of the processing.

Communication data: for as long as necessary to resolve your enquiry or, where the communication relates to a contract or legal claim, until the end of the applicable retention period.

Data processed through cookies and similar technologies: for a period depending on the type, purpose and settings of the relevant cookie or technology.

11. Requirement to Provide Personal Data

Certain personal data – such as your name, billing and shipping address and the contact information required to fulfil your order – is necessary for us to process and fulfil your order.

If you do not provide the required information, we may be unable to accept or fulfil your order.

Consent to marketing, newsletter subscriptions and acceptance of non-essential analytics and marketing cookies are voluntary. Refusing them does not affect your ability to make purchases from our online store.

12. Your Privacy Rights

Depending on applicable data protection laws and your location, you may have various rights in relation to your personal data.

In particular, individuals covered by the GDPR have the right to:

  • request access to their personal data;
  • request correction of inaccurate or incomplete personal data;
  • request deletion of their personal data in circumstances provided by law;
  • request restriction of processing;
  • object to certain processing based on legitimate interests;
  • request data portability where the applicable conditions are met;
  • withdraw consent at any time where processing is based on consent;
  • lodge a complaint with the competent data protection supervisory authority.

You may object to the processing of your personal data for direct marketing purposes at any time.

To exercise your rights, contact us at hello@oilholder.com.

We will respond to your request without undue delay and, in any event, within one month of receiving it. Where permitted by law, this period may be extended, in which case we will inform you accordingly.

13. Right to Lodge a Complaint

If you believe that the processing of your personal data violates applicable data protection law, you have the right to lodge a complaint with the competent supervisory authority.

In Hungary:

Hungarian National Authority for Data Protection and Freedom of Information (NAIH)
1055 Budapest, Falk Miksa utca 9–11.
Postal address: 1363 Budapest, P.O. Box 9.
Hungary
Email: ugyfelszolgalat@naih.hu
Phone: +36 1 391 1400

If you are located in another country of the European Economic Area, you may also have the right to lodge a complaint with the supervisory authority of your habitual residence, place of work or the place of the alleged infringement.

14. Data Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, disclosure or destruction.

External service providers involved in processing personal data also apply their own technical and organisational security measures.

However, no method of transmission over the internet or electronic storage system can guarantee complete security.

15. Automated Decision-Making

Oilholder does not use solely automated decision-making that produces legal effects concerning you or similarly significantly affects you.

However, Shopify, Google, Meta, payment service providers or other service providers may use automated systems for purposes such as security, fraud prevention, measurement or – where appropriate consent has been provided – advertising, in accordance with their own services and privacy terms.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time, for example due to changes in our services, the technologies we use, our data processors or applicable laws.

The current version will always be available on this page. The date of the latest update will be displayed at the top of this Privacy Policy.

17. Contact

If you have any questions about this Privacy Policy or the processing of your personal data, or if you wish to exercise your privacy rights, please contact us:

Mazsola Műhely Szolgáltató Szociális Szövetkezet
Oilholder
8000 Székesfehérvár, Palotai út 62/C.
Hungary

Website: www.oilholder.com
Email: hello@oilholder.com
Phone: +36 70 942 9368