By using our website, you consent to the use of cookies in accordance with the Cookie Policy.

Privacy Policy

Privacy Policy

Data management information

The controller of your personal data is

Imperity Ltd.
Registered office: 2161 Csomád, Kossuth Lajos Street 103.
Registration authority: Registry Court of the Tatabánya General Court,
Company registration number: 11-09-016297,

Tax number: 11690117-2-13,
E-mail address:
Imperity Ltd.
Represented by: Imer Majerik Managing Director

Hosting provider details

Headquarters: 129. Kassai road, Debrecen, 4028 
Contact: +36 1/234 5012,

(hereinafter: Imperity Ltd. or Data Controller)

This information informs the users of its services about the handling and protection of personal data processed in connection with the services provided by Imperity Ltd.

With regard to the personal data managed by Imperity Ltd., please see the overview table below.












Purpose of data management

Scope of data processed

Legal basis of data management

Duration of data management

Consequence of refusal to provide data or withdrawal of consent

Fulfillment of the order placed in the Webshop

Full name,


Address needed for delivery / delivery address, collection point,


E-mail address,


Telephone number (for delivery, with transmission to courier service)


Details of your purchases (product, quantity, price, date),


Payment-related data (payment deadline, bank account number)


Notes provided during the order,


Order ID,


Customer ID,


Ordered products and their prices,


Total amount of the order,


in case of choosing personal collection, the fact of this,


Payment method, payment status, date, amount paid, in case of online credit card payment OTP Simple Pay transaction ID, external reference number, amount paid, transaction status, product names, discounts, delivery fee,

Performance of the contract (Article 6 (b) GDPR)

The limitation period (5 years from the termination of the contract).


With respect to your telephone number, until your consent will be revoked

You cannot use the services of our webshop


If you do not enter your telephone number, telephone contact is not possible

Regarding the contact person of a non-natural person:


Contact name, position,


Work e-mail address.

There is a legitimate interest of the contractors in the processing of the contact details (Article 6 par. (1) (f) [1] of the GDPR)

The limitation period (5 years from the termination of the contract).


Sending direct marketing and advertising messages based on user behavior containing news and discount offers, providing information for the development of the Data Controller's business

Full name,


E-mail address,


Telephone number,


One-time or permanent discounts, participation in promotions,


(Article 6 (a) of the GDPR and 6. § (1) of Act XLVIII of 2008 on the basic conditions and certain restrictions on commercial advertising) moreover Section 6 (1) of Act CVIII of 2001). Act Eca.)

Until withdrawal of consent.

You will no longer receive our newsletter, so you will not be informed about our news and offers.


If you withdraw your consent with regard to your telephone number, we will only be able to inform you by e-mail.

Applying for education and training events

Full name,


Billing information,


E-mail address,

Telephone number,


Salon name, salon address, course and / or event name you applied for

Performance of the contract


(Article 6 (b) GDPR)


Except: telephone number where your consent is (Article 6 (a) GDPR)

Limitation period (5 years from the end of the contract)


Exception: for your telephone number until your consent is withdrawn

You cannot apply for or participate in our education or training events.


In case you do not enter your phone number, telephone contact will not be possible

Registration on the website to create a public account

Full name,


E-mail address,


Password you provided during registration.

Consent (Article 6 (a) GDPR)

Until the consent is revoked or the account is deleted.

You cannot use the services of our website outside of browsing.

Register on the website to create a professional account

Full name,


Name of hairdressing salon,


Address of hairdressing salon,


E-mail address,


Telephone number,


Password provided by you during registration,


-Copy of document certifying professional qualifications jpg, pdf

Consent (Article 6 (a) GDPR)

Until the consent is revoked or the account is deleted.


Except: a copy of your proof of professional qualification will be deleted at the same time you create your account.

You cannot create a professional account.


If you do not enter your phone number, telephone contact will not be possible

Fulfillment of the obligation of the data controller to keep a certificate in connection with certain services

Personal data in the invoices


(billing name, billing address, tax number)

Fulfillment of the legal obligation of the data controller


(Article 6 (c) GDPR)


and Act C of 2000 on Accounting

Data required to meet accounting obligations for 8 years.

Without providing your billing information, we will not be able to complete the services you requested.

Handling of complaints

Full name,


Home address,


Mailing address,


Personal data provided by you in the complaint.

Fulfillment of the data controller's legal obligation


(Article 6 (c) GDPR)


and 17 / A. § (5) and (7) of CLV Act of 1997 on consumer protection

For 5 years

You cannot exercise your consumer rights.

Registration required to participate in events

E-mail address,


Full name, Salon name, salon address, phone number, name of the event you applied for

Performance of the contract


(Article 6 (b) GDPR)


Except: telephone number for which your consent is


(Article 6 (a) GDPR)

The limitation period (5 years from the termination of the contract).


In the case of a telephone number, until your consent is revoked.

You cannot register for or participate in our events.


If you do not enter your phone number, telephone contact will not be possible.

Taking camera shots and photos at events organized by the data controller

Your portrait and other personal information recorded by the camera, e.g. the photo of you.

Consent (Article 6 (a) of the GDPR) and Act V of 2013 on the Civil Code 2:48. §


Participants are informed in advance by the camera pictogram placed at the events that we will take photos at the event and that our photographers can be clearly distinguished

Until withdrawal of consent.

No individual camera shots or photos are taken of you.

Use of unique photos and videos taken at events for marketing purposes

Photo, video and audio recording of you.

Consent (Article 6 (a) of the GDPR) and Act V of 2013 on the Civil Code 2:48. §

Until withdrawal of consent.

We will not publish a custom recording of you.

Participation in the prize draw and the registration required for it

Depending on the sweepstakes:


Full Name,


E-mail Address,


Phone Number,


Home Address.

Consent (Article 6 (a) GDPR)

For participants until the end of the game,


for Winners their billing details for 8 years.

You will not be able to participate in the sweepstakes.


If you are the winner of the sweepstakes but do not consent to the processing of your billing information, you will not be able to receive your winnings.


If you do not enter your phone number, telephone contact will not be possible.

In connection with the Cookies used on the Website, please see our Cookie Information, which can be accessed: HERE

The following rules apply to data management:

1. Consent

In all cases, our data processing based on your consent is based on your express decision to do so. This decision includes:

1. your registration or purchase (including education and training) for the online store,

2. you give your consent to our direct marketing and Newsletter service by registering a separate statement to this effect at registration or at a later date,

3. applying for the prize draw in respect of our sweepstakes,

4. in connection with our events, the application for the event, as well as the statement at the venue of the event regarding certain data (photo, video recording).

5. You can withdraw your statement or consent at any time, or cancel your registration on the website at any time, which will always be construed as the withdrawal of your consent. However, we emphasize that we can undertake to delete a registered account within 10 days for technical reasons.

2. Data subject

Data subjects are natural persons who can be identified on the basis of the personal data processed. These are involved in the processes related to the processing of personal data by the Data Controller

1. the users of the webshop,
2. the natural person customer,
3. who keep in touch with the Data Controller on the part of the non-natural person customer,
4. complainants to the Data Controller,
5. browsers of the website, registrants,
6. applicants for events, education and training,
7. candidates and participants of the prize draw,
8. subscribers to the newsletter.
9. (hereinafter together referred to as the "Data subject").

3. Data processors, data transfer to third parties

  • Imperity Milano Professional Ltd. uses the following data processors in the processing of your personal data:


Company name


Data transfer, purpose of data transfer, transmitted data

Hosting provider



provides us with hosting services for Webshop and website

Webshop / website operator


Operates a webshop and website for us

Corporate governance system



Operates the integrated corporate governance system


Webshippy Hungary Logistics and Transport Ltd.


2. B.bldg. 13. Ezred str. Budapest H-1044

Provides logistics and home delivery services


Taxtika Audit Ltd.

39. Ifjúság str. Tatabánya, H-2800




Services in connection with the compilation and sending of newsletters

Web analytics

Google LLC.

1600 Amphitheatre Parkway Monuntain View, California 94043 USA

Provides web analytics services for the website

Cookie provider


a cookie provider that collects visitor behavior


  • Imperity Milano Professional Ltd. transfers your personal data to the following independent data controllers:

payment processing

OTP Bank Plc.

16. Nádor str. Budapest, H-1051

Provides an online payment service in the SimplePay system.

payment processing

OTP Mobil Ltd.

30-32. Közraktár str. Budapest H-1093

Provides an online payment service in the SimplePay system.



Fulfillment of the Act  CXXVII. of 2007 on the obligation to provide electronic data on the issued invoices


  • We would like to inform you that the online payment on our website is made via the Simple Pay by OTP Mobile system, the data management related to the use of the SimplePay online service is subject to the data management information of SimplePay, as an independent data controller, over which we have no influence. Imperity Ltd. does not have access to the card data provided during the online payment, you will be redirected back to the website after the successful transaction. When making a SimplePay online payment as well as a credit card payment, the service provider usually asks for the following data of your bank card: name on the card, card number, expiry date, name of the issuing bank, CVC / CVV security code. Please pay attention to the security of your credit card details in all cases. SimplePay's data management information can be viewed at the following link:

4. Data security, data access, payment service

  • At the end of the data management period specified in the table, the Data Controller deletes the data of the Data Subject.
  • The Data Controller shall ensure the security of the processed data and shall take all measures to ensure that the personal data of the Data Subjects are adequately protected.
  • The Data Controller takes the necessary measures to maintain the data security requirement, so it stores the data in a computer database in a password-protected system. Access to the data may only take place in the context of the provision of the service, to the extent strictly necessary for that purpose.
  • Computer systems are equipped with a firewall and adequate virus protection.
  • The data controller shall ensure that those entitled to access the data are fully informed about the data protection rules.
  • In relation to your personal data, the employees and senior officials of the Data Controller are bound by strict confidentiality.
  • The duty of confidentiality continues after termination of employment.

5. Rights of the Data subject

  • The data subject may exercise his / her rights set forth in this section electronically, to the e-mail address, or by post to the Data Controller's registered office by letter to the Data Controller and to the telephone number +36-70-311-4806.
  • With regard to data processing, we provide information about your rights in a concise and comprehensible manner below. You:

1. can request access to your personal data or information about your data managed by the Data Controller. The provision of information and copies of processed data is free of charge. Additional copies requested by you may be charged a reasonable fee based on the administrative cost,

2. you can request the amendment (i.e. correction), deletion or restriction of the processing of your personal data,

3. you can request that Imperity Ltd. inform you who has been informed about the correction, deletion or restriction of data processing,

4. if the legal basis of data processing is your consent, you can withdraw your consent to data processing at any time, but pre-withdrawal data processing is still lawful,

5. Imperity Ltd. may process your personal data even after the withdrawal of the consent, if the goal is the fulfillment of its legal obligations or the enforcement of its legitimate interests and achieving the goal is proportionate to restricting your rights. In order to decide this, the Data Controller will make a decision within 10 days of receiving the request, and informs you about it. You may object to our decision or apply to the authorities specified in the Remedies section,

6. if the legal basis for the processing is the performance of the contract or your consent, you may request that the personal data concerning you be received in a structured, widely used, machine-readable format or that the data be transferred by the Data Controller to another data controller (right to data portability)

6. Remedies

  • Please be informed that in accordance with the provisions of the GDPR, no data protection officer has been appointed by Imperity Ltd. However, if you have any questions, comments or wishes regarding the data management of any company, you can do so at the following e-mail address:
  • In connection with the lawfulness of data processing, you may initiate proceedings at the National Authority for Data Protection and Freedom of Information (22 / c. Szilágyi Erzsébet avenue. Budapest 1125, Postal address: Po. Box 5. Budapest 1530, website:, phone: +36 (1) 391-1400, fax : +36 (1) 391-1410, central e-mail address: or apply to the court. The trial falls within the jurisdiction of the tribunal. The lawsuit must be instituted in the court of the Data Controller's domicile (Tatabánya Tribunal), however, you may also initiate the lawsuit in the court of your domicile or, failing that, your residence. You can find the court of your domicile or residence on the portal / birosag search page.
  • A detailed description of your rights and the rules not covered in this prospectus are contained in the following legislation:

1. Regulation (EU) 2016/679 of the European Parliament and Council on the protection of individuals with regard to the processing of personal data and on the free movement of such data,

2. Repealing of Directive 95/46 / EC (GDPR), Act CXII of 2011 on the right to information self-determination and freedom of information (Info Act),

3. Act V of 2013 on the Civil Code (Civ Code)

4. Act C of 2000 on Accounting (Act Law)

5. Act CVIII of 2001 on certain points of electronic commerce services and information society services (Ec Act.)

6. Act C of 2003 on Electronic Communications (ECPA)

7. Act CLV of 1997 on consumer protection (COPRA)

8. Act CLXV of 2013 on Complaints and Notices of Public Interest. (CPID)

9. Act XLVIII of 2008 on the basic conditions and certain restrictions of commercial advertising activity (Ca Act)

7. Modification of data management information

  • Our company reserves the right to amend this Privacy Notice. We will make the amendment to the prospectus immediately available on our website, thus making it accessible to all Interested Parties.

[1] Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC.