Terms and Conditions

Effective from: 3 September 2026

These General Terms and Conditions (hereinafter: “GTC”) govern purchases made through the beasteemerch.com online store (hereinafter: the “Web Store”) operated by Beastee Kft.

The operator of the Web Store and the Seller is:

Company name: Beastee Kft.
Registered office: 1163 Budapest, Cziráki utca 26–32., Hungary
Company registration number: 01-09-928198
Tax number: 14849705-2-42
Email: hello@beasteemerch.com
Website: beasteemerch.com
Represented by: Zsolt Futó, Managing Director
Telephone: +36 70 676 2673

Hereinafter referred to as the “Seller” or “Service Provider”.

Customer: any natural person, legal person or other organisation that places an order through the Web Store.

Consumer: a Customer who qualifies as a consumer under the applicable legislation.

Product: any movable item offered for sale through the Web Store.

These GTC apply to electronic commerce transactions concluded through the Web Store.

The language of the Hungarian contract is Hungarian. The English-language version of the Web Store and these English GTC are provided for customers using the English-language version of the Web Store.

The Web Store and its Products may be browsed without registration.

Customers may create a user account in the Web Store. The information provided during registration must be true and accurate.

Customers are responsible for maintaining the confidentiality and security of the login credentials associated with their accounts.

Where available, the Web Store may also provide login functionality through an external service provider.

Registered Customers may use the functions provided through their accounts, including access to previous orders and other personalised functions made available by the Web Store.

Registration is not mandatory for making a purchase where the Web Store provides the possibility of purchasing as a guest.

The processing of personal data is governed by the current Privacy Policy of the Web Store.

The Customer may add the selected Product to the shopping cart and, after reviewing the contents of the cart, proceed to checkout.

During checkout, the Customer must provide the information necessary for fulfilment and select from the available delivery and payment methods.

Before finally submitting the order, the Web Store allows the Customer to review the information provided, the Products and their quantities, the selected delivery method, payment method and the total amount payable.

The Customer may correct input errors through the Web Store interface before submitting the order.

The Customer is responsible for the accuracy of the information provided. The Seller shall not be liable for delays or failed fulfilment resulting from incorrect or incomplete information provided by the Customer, provided that such failure is not attributable to the Seller.

Submitting an order entails an obligation to pay.

As a condition of submitting an order, the Customer must accept these GTC using the relevant checkbox and acknowledge the information contained in the Privacy Policy.

After the order has been submitted, the Web Store sends an automatic email confirming receipt of the order.

This automatic email only confirms that the order has been received and does not, in itself, constitute acceptance of the Customer’s offer or conclusion of the contract.

The Seller subsequently reviews the order.

If the Seller accepts the order, its status is changed to “Order accepted and being processed”, and the system sends a separate electronic notification to the Customer.

The notification includes, among other things, the following information:

“Your order has been accepted and is now being processed. With this confirmation, the contract between you and Beastee Kft. has been concluded.”

The contract between the parties is concluded when this electronic acceptance notification is sent to the Customer.

If the Seller is unable to accept or fulfil the order, the Customer will be informed accordingly and any amount already paid will be refunded.

Depending on the processing status of the order, modification or cancellation may be possible following consultation with the Seller.

The essential characteristics, price and, where applicable, available size, colour or other variations of each Product are displayed on the relevant Product page.

Product photographs are intended to represent the Products as accurately as possible. Due to display settings, lighting conditions and manufacturing characteristics, the actual colour or appearance of a Product may differ slightly from its appearance on screen.

Stock information displayed in the Web Store is for information purposes. In exceptional cases, a Product may no longer be available even though the system showed it as available for ordering.

In such cases, the Seller will inform the Customer without undue delay.

Where a Product is available for pre-order, this is indicated separately on the relevant Product page. The expected fulfilment time for pre-ordered Products may differ from that applicable to Products held in stock.

Consumer prices displayed in the Web Store are gross prices and include value added tax payable under the applicable legislation.

Delivery charges and any additional payment-related costs are displayed separately during checkout.

Before finally submitting the order, the Customer can always review the total amount payable.

Prices are displayed in the currency available on the Web Store interface. Where currency conversion is applied, it is performed by the Web Store system using the applicable exchange rate.

The Seller may offer promotions and discounts. The conditions applicable to a particular discount are specified in the information relating to the relevant promotion.

In the case of an obviously incorrect price – for example, a price of HUF 0 or a price that is clearly unrealistic compared with the usual value of the Product – the Seller is not obliged to sell the Product at the incorrect price.

In such a case, the Seller will inform the Customer of the correct price, and the Customer may decide whether to maintain the order at that price.

In the case of unusually large quantities, the Seller may contact the Customer separately to agree on the conditions of fulfilment.

Depending on the language, delivery method and geographical settings applicable to the order, the following payment methods may be available in the Web Store:

Payment by bank card through myPOS.

The Customer is redirected to the myPOS payment system to complete the payment. The Seller does not process or store the Customer’s full bank card details.

Cash on delivery.

Cash on delivery is available exclusively for GLS home delivery within Hungary.

The cash-on-delivery handling fee is HUF 490.

Cash on delivery is not available for GLS Parcel Shop, MPL courier delivery or PostaPont delivery.

PayPal.

PayPal payment is available on the English-language version of the Web Store. Payment is processed through the PayPal system.

The payment methods actually available for a particular order are always those displayed during checkout.

The Seller issues an invoice for purchases made through the Web Store.

Invoices are generated using the Számlázz.hu invoicing system.

The Customer is responsible for providing accurate information necessary for issuing the invoice.

The Seller shall not be liable for consequences resulting from incorrect invoice information where the error results from incorrect or incomplete information provided by the Customer.

Invoices are issued and retained in accordance with the applicable accounting and tax legislation.

For delivery within Hungary, the following delivery methods are available:

GLS home delivery: HUF 1,990
GLS Parcel Shop: HUF 1,990
MPL courier service: HUF 2,490
PostaPont: HUF 2,490

For GLS home delivery, cash on delivery may also be selected, subject to an additional handling fee of HUF 490.

For MPL courier delivery and PostaPont delivery, parcels are handed over to Magyar Posta according to the Seller’s operating schedule every two weeks on Tuesdays. As a result, dispatch may take longer for orders using these delivery methods.

In accordance with the relevant provisions of Hungarian Government Decree 335/2012 (XII. 4.), the Seller provides the option to choose the postal delivery service provided by Magyar Posta for eligible consignments.

The Seller provides GLS delivery to selected European destinations.

GLS Region 1 – HUF 5,000

Expected delivery time: 1–3 business days.

Austria, Belgium, Bulgaria, Croatia, Czech Republic, Germany, Liechtenstein, Luxembourg, the Netherlands, Poland, Romania, Slovakia and Slovenia.

GLS Region 2 – HUF 7,000

Expected delivery time: 3–5 business days.

Denmark, France, Ireland and Italy.

GLS Region 3 – HUF 9,000

Expected delivery time: 3–7 business days.

Estonia, Finland, Greece, Latvia, Lithuania, Portugal, Spain and Sweden.

Cash on delivery is not available for international delivery.

The delivery charge may also be displayed in euros in the Web Store based on the current currency conversion applied by the system.

The indicated delivery times are estimated and are provided for information purposes.

The Seller processes orders as soon as reasonably possible.

The actual delivery time may depend on factors including the selected delivery method, Product availability, destination country and the operation of the carrier.

The Customer must provide delivery information that enables successful delivery of the parcel.

The Customer is advised to inspect the parcel upon receipt where reasonably possible. In the event of visible damage, the Customer is advised to have the damage recorded by the carrier.

The absence of such a report does not, in itself, remove any statutory rights available to the Consumer.

In the event of unsuccessful delivery, the availability and conditions of any repeated delivery attempt may depend on the rules of the relevant carrier.

In the case of a distance contract, the Consumer is entitled to exercise the statutory right of withdrawal without giving any reason.

In the case of the sale of Products, the withdrawal period is generally 14 days, calculated from the day on which the Consumer or a third party designated by the Consumer, other than the carrier, takes physical possession of the Product.

Where several Products are ordered in a single order but delivered separately, the withdrawal period is calculated from the date on which the last Product is received.

The Consumer may also exercise the right of withdrawal during the period between conclusion of the contract and receipt of the Product.

The right of withdrawal is exercised within the applicable time limit if the Consumer sends the withdrawal notice before expiry of that period.

The Consumer may communicate the decision to withdraw from the contract by making an unequivocal statement to the Seller.

The withdrawal notice may be submitted by email to:

hello@beasteemerch.com

or through the English-language online withdrawal function of the Web Store:

beasteemerch.com/withdrawal-from-the-contract

The Consumer may also use the Model Withdrawal Form included at the end of these GTC, although use of the model form is not mandatory.

The Consumer must return or hand over the Product within the period prescribed by applicable law following communication of the withdrawal.

Return address:

Beastee Kft.
1163 Budapest, Cziráki utca 26–32.
Ground floor, Office 24/A
Hungary

As a general rule, the direct cost of returning the Product is borne by the Consumer

The Seller is not obliged to accept parcels returned using cash on delivery.

In the event of a valid withdrawal, the Seller refunds the amounts paid by the Consumer within the period prescribed by applicable law, including delivery costs that must be refunded under the applicable legislation.

If the Consumer expressly selected a delivery method more expensive than the least expensive standard delivery method offered by the Seller, the Seller is not required to reimburse the resulting additional cost.

The Seller may withhold the refund until the Product has been returned or the Consumer has provided reliable evidence that the Product has been sent back, whichever occurs first.

As a general rule, the refund will be made using the same payment method as used for the original transaction, unless the Consumer expressly agrees to another method.

In the case of partial withdrawal, only the purchase price of the Product or Products concerned and any associated costs refundable under applicable law will be refunded.

The Consumer is liable only for any diminished value of the Product resulting from handling beyond what is necessary to establish the nature, characteristics and functioning of the Product.

The Consumer may not exercise the right of withdrawal in cases where this right is excluded by applicable law.

This may include, in particular, Products manufactured according to the Consumer’s instructions or at the Consumer’s express request, or Products that are clearly personalised.

Where a statutory exception to the right of withdrawal applies to a particular Product, the Seller provides the relevant information before purchase.

Voluntary 30-day exchange

In addition to statutory rights, the Seller may voluntarily provide the possibility of exchanging eligible Products within 30 days of receipt.

To qualify for an exchange, the Product must be unused, undamaged, clean, in its original condition and, where applicable, with its original labels attached.

The Customer may be required to bear the cost of returning the Product and sending the replacement Product.

The current fee for processing the exchange is HUF 2,500, where this service is provided by the Seller for the relevant exchange.

This voluntary exchange option does not affect or restrict the Consumer’s statutory rights of withdrawal, warranty or other statutory remedies.

The Seller performs defectively if, at the time of performance, the Product does not comply with the quality requirements established by the contract or applicable law.

In the event of defective performance, the Consumer is entitled to the conformity remedies provided by the Hungarian Civil Code and applicable consumer protection legislation.

Subject to the statutory conditions, the Consumer may request repair or replacement unless the chosen remedy is impossible or would impose disproportionate additional costs.

Where the conditions prescribed by law are met, the Consumer may request an appropriate price reduction or terminate the contract.

The Consumer is not entitled to terminate the contract if the lack of conformity is minor.

The exercise of conformity rights, applicable time limits and rules concerning the burden of proof are governed by the legislation in force at the relevant time.

In the event of a defect in a movable Product, the Consumer may, subject to the conditions prescribed by law, assert a product warranty claim against the manufacturer or distributor of the Product.

Under a product warranty claim, the Consumer may primarily request repair or replacement of the defective Product in accordance with the applicable statutory conditions.

A Product is defective if it does not meet the quality requirements applicable when it was placed on the market or does not possess the characteristics described by the manufacturer.

A mandatory statutory guarantee applies only to new durable consumer goods for which applicable legislation requires such a guarantee.

Where a Product is subject to a mandatory statutory guarantee, the duration of the guarantee is determined according to the selling price of the Product and the legislation in force at the relevant time.

The existence of a statutory guarantee does not affect the Consumer’s other statutory conformity rights.

Customers may submit warranty, guarantee or other complaints using the following contact details:

Beastee Kft.
Email: hello@beasteemerch.com
Registered office: 1163 Budapest, Cziráki utca 26–32., Hungary

The Customer is advised to include the information necessary to identify the order, the Product concerned, a description of the issue and the remedy requested.

The Seller handles and responds to complaints in accordance with applicable legislation.

If a consumer dispute cannot be resolved directly between the parties, the Consumer may refer the matter to a conciliation board.

The conciliation board competent according to the Seller’s registered office is:

Budapest Conciliation Board
Address: 1016 Budapest, Krisztina krt. 99., 1st floor, Room 111, Hungary
Postal address: 1253 Budapest, P.O. Box 10, Hungary
Email: bekelteto.testulet@bkik.hu
Telephone: +36 1 488 2131

The Seller complies with its statutory obligation to cooperate in conciliation board proceedings.

In the event of an infringement of consumer protection rights, the Consumer may contact the competent consumer protection authority.

The parties will seek to resolve disputes primarily by amicable means.

If an amicable solution cannot be reached, the dispute may be submitted to a court having jurisdiction and competence under the applicable rules.

The Seller may periodically make promotions, discounts or other offers available. Additional conditions relating to a particular promotion may apply.

The Seller processes personal data in accordance with applicable data protection legislation and the current Privacy Policy of the Web Store.

Subscription to the newsletter is voluntary and is not a condition of making a purchase.

Newsletters and electronic marketing communications are sent on the basis of the Customer’s separate consent. Consent may be withdrawn at any time.

The Web Store may use cookies and, where the user has provided the required consent, analytics and marketing technologies. Further details are provided in the Privacy Policy and the Web Store’s cookie settings.

The Seller may amend these GTC with effect for the future.

Amended GTC apply from the date specified therein following their publication in the Web Store.

An amendment does not affect contracts concluded before the amendment enters into force unless otherwise permitted or required by law.

Matters not regulated by these GTC are governed by Hungarian law, in particular the Hungarian Civil Code and the legislation in force concerning electronic commerce, consumer contracts, consumer protection, conformity and statutory guarantees.

If any provision of these GTC is found to be invalid or unenforceable, this shall generally not affect the validity of the remaining provisions.

Annex 1 – Model Withdrawal Form

To:

Beastee Kft.
1163 Budapest, Cziráki utca 26–32.
Hungary
Email: hello@beasteemerch.com

I hereby give notice that I withdraw from my contract of sale for the following Product(s):

Product(s):

............................................................

Date of conclusion of the contract / date of receipt:

............................................................

Order number (if available):

............................................................

Name of Consumer:

............................................................

Address of Consumer:

............................................................

Date:

............................................................

Signature of Consumer:

............................................................

(only if this form is submitted on paper)

Effective from: 2 September 2026

Data Controller: Beastee Kft.
Registered office: 1163 Budapest, Cziráki utca 26–32, Hungary
Representative: Zsolt Futó, Managing Director
Contact e-mail: hello@beasteemerch.com
Webshop: beasteemerch.com

Beastee Kft. (hereinafter: the “Data Controller”) is committed to protecting personal data.

The purpose of this Privacy Policy is to provide transparent information to visitors, registered users, customers, newsletter subscribers and other persons contacting the Data Controller regarding the processing of their personal data in connection with the beasteemerch.com webshop.

The processing of personal data is governed in particular by Regulation (EU) 2016/679 of the European Parliament and of the Council (“GDPR”) and the applicable Hungarian legislation.

The Data Controller may amend this Privacy Policy where necessary, in particular if the services used, the processing activities or the applicable legislation change. The current version is made available through the webshop.

2.1. Processing and Fulfilment of Webshop Orders

Purpose of processing: recording, processing, confirming and fulfilling orders placed through the webshop, communicating with the customer and carrying out activities necessary for the performance of the contract.

Legal basis: Article 6(1)(b) GDPR – processing is necessary for the performance of a contract with the data subject or in order to take steps at the request of the data subject prior to entering into a contract.

Personal data processed may include:

• name;
• e-mail address;
• telephone number;
• billing address;
• shipping address;
• products ordered and quantities;
• order value;
• selected payment method;
• selected delivery method;
• order identifier;
• other data necessary for fulfilling the order.

The provision of data required to fulfil the order is mandatory. Without such data, the order may not be fulfilled or may not be fulfilled properly.

Following completion of the contract, the Data Controller retains the relevant data for the period required by applicable civil, accounting, taxation and consumer protection legislation and for the establishment, exercise or defence of legal claims.

2.2. Registration and User Account

Users may create a customer account in the webshop.

Purpose of processing:

• creating and maintaining the user account;
• identifying the user;
• enabling login;
• providing functions linked to the account;
• facilitating purchases;
• providing access to previous orders and account-related information.

Legal basis: Article 6(1)(b) GDPR.

Personal data processed may include:

• name;
• e-mail address;
• data necessary to identify the user account;
• address information linked to the account;
• telephone number, where provided;
• order history;
• account settings and related information.

As a general rule, personal data associated with the user account are processed for as long as the account remains active.

Deletion of an account does not affect the further retention of data that the Data Controller is legally required to retain or which are necessary for the establishment, exercise or defence of legal claims.

2.3. Sign-in with a Google Account

The webshop may allow users to sign in using their Google account.

Use of this function is voluntary.

Purpose of processing: identifying the user and providing a convenient method of signing into the user account.

Legal basis: Article 6(1)(b) GDPR.

When Google sign-in is used, information necessary for user identification and operation of the sign-in function may be exchanged between Google and the webshop.

Google may also process personal data in connection with its own services in accordance with its own privacy terms.

2.4. Invoicing

Purpose of processing: issuing, delivering and recording invoices related to purchases and complying with accounting and taxation obligations.

Legal basis: Article 6(1)(c) GDPR – compliance with a legal obligation to which the Data Controller is subject.

Personal data processed may include:

• billing name;
• billing address;
• other data required by law for issuing an invoice;
• order and invoice details;
• e-mail address where the invoice is issued or delivered electronically.

Billing information is retained for the period prescribed by applicable accounting and taxation legislation.

The webshop uses the Számlázz.hu service for invoicing. The UNAS system automatically transfers the information necessary for issuing the invoice to the invoicing system.

2.5. Online Payment

Online payments in the webshop may be made using myPOS or PayPal.

During online payment, the customer is redirected to the payment interface of the selected payment service provider.

The Data Controller does not obtain or store the customer's full bank card details, including the full card number or card security code.

Purpose of processing:

• initiating payment;
• linking the payment transaction to the order;
• recording the result of the payment;
• fulfilling the order;
• handling refunds and financial reconciliation where necessary.

Legal basis: Article 6(1)(b) GDPR and, with regard to applicable legal obligations, Article 6(1)(c) GDPR.

Payment service providers may also process information transferred to them or entered directly on their payment interfaces in accordance with their own privacy policies.

The webshop does not currently use CIB Bank for online card payments.

2.6. Delivery

Purpose of processing: delivering ordered products to the customer or to the selected collection point.

The webshop may currently use the following delivery services:

• GLS home delivery;
• GLS ParcelShop;
• GLS EU delivery;
• MPL courier service;

Legal basis: Article 6(1)(b) GDPR – performance of the sales contract.

Data transferred may include:

• recipient's name;
• shipping address or selected collection point;
• telephone number;
• e-mail address;
• information required to identify the shipment/order;
• amount to be collected in the case of cash on delivery.

The Data Controller transfers or exports the necessary information from the UNAS system to the system of the delivery service selected by the customer.

GLS and Magyar Posta may also process personal data in their own capacity in connection with their postal, logistics and delivery services.

2.7. Withdrawal, Returns, Complaints, Warranty and Statutory Guarantee Claims

Purpose of processing:

• handling withdrawal notices;
• managing returns and refunds;
• handling consumer complaints;
• handling statutory warranty, product warranty and guarantee claims;
• complying with related legal obligations.

Legal basis: depending on the nature of the matter, Article 6(1)(b) GDPR – performance of a contract – and/or Article 6(1)(c) GDPR – compliance with a legal obligation.

Personal data processed may include:

• name;
• contact details;
• address;
• order and invoice information;
• contents of the complaint or claim;
• return and refund information;
• other information necessary to resolve the matter.

Retention periods are determined by the applicable consumer protection, civil law, accounting and other legal requirements relevant to the particular case.

2.8. Newsletter

Visitors and customers may subscribe to the Beastée newsletter through the newsletter subscription form available on the Web Store or during the checkout process by giving their separate and voluntary consent.

Subscription to the newsletter is not a condition of making a purchase.

Purpose of data processing:

• sending newsletters;
• providing information about new products and collections;
• providing information about promotions, offers and other commercial communications.

Legal basis: Article 6(1)(a) GDPR – the consent of the data subject.

Data processed for newsletter purposes:

• name, where provided by the data subject when subscribing to the newsletter;
• email address;
• the fact of subscription and consent, and the data necessary to demonstrate that consent was given.

The name, address, telephone number and other order-related data processed for the performance of an order do not become data processed for newsletter purposes merely because a purchase has been made. Where subscription takes place during the checkout process, only the data necessary for sending newsletters and covered by the relevant consent may be used for newsletter purposes.

Consent may be withdrawn at any time without giving any reason. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

The Controller exports the data of newsletter subscribers from the UNAS system and subsequently uses the system provided by MediaCenter Hungary Kft. to send newsletters.

As a general rule, data processing for newsletter purposes continues until consent is withdrawn. The minimum data necessary to demonstrate that consent was given or withdrawn may be retained for a period corresponding to the limitation period applicable to potential legal claims.

2.9. Abandoned Cart Reminder

The webshop may automatically send a reminder e-mail to registered users who have placed products in their shopping cart but have not completed the purchase.

The sole purpose of the reminder is to facilitate continuation of a purchase process previously initiated by the user.

The abandoned cart reminder does not contain coupons, discounts or separate promotional offers.

Legal basis: Article 6(1)(f) GDPR – the legitimate interest of the Data Controller in facilitating completion of a purchasing process initiated by a registered user.

Personal data processed may include:

• e-mail address;
• user account identifier;
• contents of the shopping cart;
• technical data associated with the shopping cart.

The Data Controller uses these data for this purpose only for as long as necessary to operate the reminder function, unless the same data may lawfully be retained for another purpose and on another legal basis.

The data subject has the right to object to processing based on legitimate interests.

2.10. Favourites and Recently Viewed Products

The webshop may provide “Favourites” and “Recently Viewed Products” functions.

Purpose of processing: improving the usability of the webshop and displaying products previously saved or viewed by the user.

To operate these functions, the system may process identifiers and product identifiers associated with a user account, browser or device.

The use of cookies or similar technologies involving storage of information on, or access to information from, the user's device is governed by the webshop's cookie settings and the cookie provisions of this Privacy Policy.

2.11. Contact by E-mail

The webshop does not operate a separate contact form.

Data subjects may contact the Data Controller by e-mail, including at hello@beasteemerch.com.

Purpose of processing: responding to enquiries, administration and communication.

Depending on the subject matter of the enquiry, the legal basis may in particular be:

• Article 6(1)(b) GDPR where the enquiry relates to a contract or steps taken prior to entering into a contract;
• Article 6(1)(c) GDPR where processing is required to comply with a legal obligation;
• Article 6(1)(f) GDPR for other justified customer service or business communications.

The technical infrastructure for the e-mail service is provided by MediaCenter Hungary Kft.

This Privacy Policy applies in particular to:

• visitors to beasteemerch.com;
• registered users;
• customers and persons placing orders;
• newsletter subscribers;
• persons contacting the Data Controller by e-mail;
• persons exercising consumer, withdrawal, warranty, guarantee or other claims;
• natural persons identified as recipients or contact persons in an order.

The webshop is not an online service specifically directed at children.

The Data Controller does not seek to collect children's personal data unnecessarily.

If the Data Controller becomes aware that personal data are being processed without an appropriate legal basis, it will take the measures necessary to regularise or restrict the processing or delete the data, as appropriate.

The Data Controller does not retain personal data indefinitely.

Retention periods depend on the purpose and legal basis of the processing.

In particular:

• data related to performance of a contract are retained until completion of the contract and thereafter for as long as necessary for compliance with legal obligations and the establishment, exercise or defence of legal claims;
• accounting and invoicing records are retained for the period prescribed by applicable legislation;
• newsletter-related processing generally continues until consent is withdrawn;
• user account data are generally retained for as long as the account remains active;
• data relating to complaints, withdrawal, warranty and guarantee matters are retained for the statutory retention period applicable to the particular matter and/or for as long as required for legal claims;
• data processed through cookies and similar technologies are retained for the lifetime specified for the relevant technology or until deletion.

The webshop indicates on the relevant forms which information is required for fulfilment of an order or provision of a particular service.

If required information is not provided, the Data Controller may be unable to fulfil the order or provide the requested service.

Consent to receive newsletters is voluntary and is not a condition of placing an order.

The Data Controller uses external service providers in connection with the operation of the webshop.

The data protection role of a particular service provider may depend on the specific processing operation. Some service providers act as processors on behalf of the Data Controller, while others may process personal data under their own responsibility as independent controllers.

7.1. Webshop Platform – UNAS

UNAS Online Kft.
Registered office: 9400 Sopron, Kőszegi út 14, Hungary

Role: provision of the IT system used to operate beasteemerch.com and related technical processing and storage.

7.2. Invoicing – Számlázz.hu

KBOSS.hu Kft.

Role: provision of the Számlázz.hu electronic invoicing system and technical support for invoicing.

The UNAS system automatically transfers the information necessary for issuing invoices to the Számlázz.hu system.

7.3. Online Payment – myPOS

myPOS Limited
The Oval, 160 Shelbourne Road, Dublin 4, D04 E7K5, Ireland

Role: provision of online payment services.

When using myPOS, the customer is redirected to the payment service provider's interface. The Data Controller does not obtain or store full bank card details.

7.4. Online Payment – PayPal

PayPal (Europe) S.à r.l. et Cie, S.C.A.
22–24 Boulevard Royal, L-2449 Luxembourg, Luxembourg

Role: provision of online payment services.

PayPal may process personal data in connection with its own services under its own privacy policy.

7.5. Parcel Delivery – GLS

GLS Hungary

Role: transportation and delivery of ordered parcels and provision of the relevant GLS collection-point services.

The Data Controller transfers the information necessary for delivery to GLS.

7.6. Parcel Delivery – Magyar Posta / MPL / PostaPont

Magyar Posta Zrt.
1138 Budapest, Dunavirág utca 2–6, Hungary

Role: postal parcel delivery, MPL courier delivery and PostaPont services.

Magyar Posta may also process personal data necessary for the provision of postal services under its own responsibility as a data controller.

7.7. E-mail, Domain and Newsletter – MediaCenter

MediaCenter Hungary Kft.
6000 Kecskemét, Erkel Ferenc utca 5, Hungary

Role includes:

• domain-related services;
• technical provision of the Data Controller's e-mail services;
• provision of the system used to send newsletters.

E-mail addresses of newsletter subscribers are exported by the Data Controller from UNAS and newsletters are sent using the MediaCenter system.

7.8. Google

Google Ireland Limited
Gordon House, Barrow Street, Dublin 4, Ireland

The webshop may use Google Analytics, Google Consent Mode and sign-in with a Google account.

Personal data processed in connection with Google's own services are also subject to Google's applicable privacy terms.

7.9. Meta

The webshop uses Meta Pixel and the Data Controller also operates Facebook and Instagram pages.

In connection with Meta services, Meta Platforms Ireland Limited and its affiliated companies may process personal data in accordance with their own privacy terms.

Within the Data Controller's organisation, personal data may only be accessed by persons who require access for the performance of their duties.

The Data Controller applies appropriate technical and organisational measures aimed at preventing unauthorised access to personal data.

Personal data are disclosed to external recipients only where an appropriate legal basis exists and only to the extent necessary for the relevant purpose.

The Data Controller does not currently carry out decision-making based solely on automated processing, including profiling, which produces legal effects concerning a data subject or similarly significantly affects them.

Automatic technical rules used in operating the webshop, such as determining shipping conditions based on the value of an order, do not in themselves constitute such automated individual decision-making.

Data subjects may submit requests relating to the processing of their personal data to hello@beasteemerch.com.

Subject to the conditions laid down in the GDPR, data subjects have the right in particular to:

• request information about and access to their personal data;
• request rectification of inaccurate personal data;
• request erasure of their personal data;
• request restriction of processing;
• object to processing in the cases specified by the GDPR;
• exercise the right to data portability where the applicable conditions are met;
• withdraw consent at any time where processing is based on consent;
• lodge a complaint with a supervisory authority;
• seek a judicial remedy.

Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

The Data Controller responds to requests without undue delay and, as a general rule, within one month of receiving the request. In the cases specified by the GDPR, this period may be extended by a further two months, in which case the data subject will be informed of the reasons for the extension.

Measures taken in connection with the exercise of data subject rights are generally provided free of charge.

Where a request is manifestly unfounded or excessive, in particular because of its repetitive character, the Data Controller may, subject to the conditions of the GDPR, charge a reasonable fee or refuse to act on the request.

The Data Controller implements technical and organisational measures appropriate to the risks associated with the processing in order to ensure an appropriate level of security for personal data.

In particular, the Data Controller seeks to:

• appropriately control access to personal data;
• prevent unauthorised access;
• maintain the confidentiality, integrity and availability of personal data;
• select appropriate service providers;
• reduce the risk of accidental or unlawful loss, alteration, destruction or disclosure of data;
• maintain appropriate protection of the IT systems used.

In the event of a personal data breach, the Data Controller will act in accordance with the applicable provisions of the GDPR.

The webshop uses cookies and similar technologies.

A cookie is a small data file which a website may store in the user's browser or device.

12.1. Strictly Necessary Cookies

These are required for the basic operation of the webshop, for example:

• session management;
• shopping cart operation;
• login;
• security functions;
• remembering cookie choices;
• other essential technical functions of the webshop.

Where a cookie is strictly necessary solely for providing a service expressly requested by the user or for carrying out electronic communications, its use does not depend on consent.

12.2. Analytics Technologies

The webshop uses Google Analytics.

Analytics technologies requiring consent are used only on the basis of the visitor's appropriate consent.

12.3. Marketing Technologies

The webshop uses Meta Pixel.

Marketing technologies requiring consent are activated only on the basis of the visitor's appropriate consent.

12.4. Managing Consent

The webshop's cookie management interface allows visitors to accept or reject non-essential cookies.

The webshop uses Google Consent Mode. The default consent status for storage purposes requiring consent is Denied.

Users may subsequently change or withdraw their cookie consent.

The lifetime of cookies depends on the function and configuration of each cookie. Some cookies are deleted at the end of the browsing session, while others may remain on the user's device for a specified period.

The webshop uses Google Analytics to analyse website traffic and the use of the webshop.

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Purposes include:

• measuring webshop traffic;
• statistical analysis of website use;
• improving the operation and user experience of the webshop.

Analytics technologies requiring consent are used on the basis of the visitor's consent.

The webshop uses Google Consent Mode. The default consent status is Denied.

Depending on the settings used and the visitor's consent, Google Analytics may process technical and usage information such as device and browser information, online identifiers, approximate geographical information and website interaction events.

Google may also process information in connection with its own services in accordance with its privacy terms.

The webshop does not currently use Google Ads remarketing or conversion tracking services.

If the Data Controller introduces Google Ads or another Google marketing technology requiring consent in the future, this Privacy Policy and the relevant cookie settings will be updated before such technology is used.

The Data Controller operates Facebook and Instagram pages and also uses Meta Pixel on the webshop.

Meta may process personal data in connection with the use of its social media services in accordance with its own privacy terms.

The Data Controller's purposes in relation to its social media presence include:

• presenting Beastée's products and activities;
• communicating with users;
• community interaction;
• handling messages and comments sent by users.

The purpose of Meta Pixel is to measure the use of the webshop and the effectiveness of marketing activities and, depending on the Meta settings used, to manage advertising audiences and campaigns.

Meta Pixel is classified as a Marketing technology in the webshop's cookie management system.

Meta Pixel functions requiring consent may only operate after the user has given the appropriate consent.

Depending on the settings used and the user's consent, technical information, device and browser information, online identifiers and event data may be transferred to Meta.

The respective data protection roles of the Data Controller and Meta may differ depending on the particular Meta service and processing operation.

If a data subject believes that the processing of their personal data is not compliant with applicable data protection law, they may first contact the Data Controller:

Beastee Kft.
1163 Budapest, Cziráki utca 26–32, Hungary
E-mail: hello@beasteemerch.com

The data subject also has the right to lodge a complaint with the competent supervisory authority:

Hungarian National Authority for Data Protection and Freedom of Information
(Nemzeti Adatvédelmi és Információszabadság Hatóság – NAIH)

Address: 1055 Budapest, Falk Miksa utca 9–11, Hungary
Postal address: 1363 Budapest, P.O. Box 9, Hungary
E-mail: ugyfelszolgalat@naih.hu
Telephone: +36 1 391 1400

Data subjects may also seek judicial remedies under the GDPR and applicable law.

The processing of personal data is governed in particular by:

• Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation – GDPR);
• Act CXII of 2011 on Informational Self-Determination and Freedom of Information;
• Act CVIII of 2001 on Electronic Commerce and Information Society Services;
• Act C of 2000 on Accounting;
• Act V of 2013 on the Civil Code;
• Act CLV of 1997 on Consumer Protection;
• Act XLVIII of 2008 on the Basic Requirements and Certain Restrictions of Commercial Advertising Activities;
• Act C of 2003 on Electronic Communications.

This Privacy Policy is effective from 2 September 2026.