Last updated: 13 October 2026
This notice explains how Telek Dominik e.v. processes personal data in connection with the online store at celtheralabs.com, under Regulation (EU) 2016/679 (GDPR) and Act CXII of 2011 on informational self-determination.
1. Controller
Telek Dominik e.v., 2837 Vértesszőlős, Baji utca 17., Hungary. Contact for data protection matters: info@celtheralabs.com. No data protection officer has been appointed; the controller does not carry out processing that requires one.
2. What is processed, why, and on what basis
Placing and fulfilling an order
| Data | Name, billing and delivery address, email address, telephone number, order contents and value, and the research-use declaration made at checkout. |
|---|---|
| Purpose | Concluding and performing the contract of sale, delivery, contact about the order. |
| Legal basis | Performance of a contract — GDPR Article 6(1)(b). |
| Retention | Five years from performance, in line with the general limitation period under the Civil Code. |
Invoicing
| Data | Name, billing address, tax number where given, and the contents and value of the order. |
|---|---|
| Purpose | Issuing and keeping the accounting document. |
| Legal basis | Legal obligation — GDPR Article 6(1)(c), Act C of 2000 on accounting, Section 169(2). |
| Retention | Eight years. |
Withdrawal from the contract
| Data | Name, email address, order number, postal address, the content of the declaration, and the exact time it was received. |
|---|---|
| Purpose | Receiving and confirming the declaration, and proving when it arrived. |
| Legal basis | Legal obligation — GDPR Article 6(1)(c), Government Decree 45/2014 (II. 26.), Section 22. |
| Retention | Five years from the declaration. |
Enquiries
| Data | Name, email address and anything else written in the message. |
|---|---|
| Purpose | Answering the enquiry. |
| Legal basis | Legitimate interest in answering people who write to us — GDPR Article 6(1)(f). Where the enquiry concerns an order, performance of a contract. |
| Retention | Two years from the last message, unless it becomes part of an order file. |
User account
| Data | Email address, encrypted password, stored addresses, order history. |
|---|---|
| Purpose | Operating the account. |
| Legal basis | Consent — GDPR Article 6(1)(a). An account is optional; orders can be placed without one. |
| Retention | Until the account is deleted. Invoicing data is retained for its own statutory period. |
Newsletter
| Data | Email address; when, where on the site and from which IP address the subscription was made and confirmed, and the consent text shown at the time. |
|---|---|
| Purpose | Sending research updates by email — launch news, new batches, certificates of analysis and restocks — and proving that consent was given. |
| Legal basis | Consent — GDPR Article 6(1)(a) and Act XLVIII of 2008 on commercial advertising, Section 6. The subscription takes effect only once it is confirmed through the link sent to the email address (double opt-in). |
| Retention | Until consent is withdrawn: every email contains an unsubscribe link, or write to info@celtheralabs.com. The address is then deleted from the list without delay. Sign-ups that are never confirmed are deleted after 30 days. |
Operating the website
| Data | Cookies strictly necessary for the store to work — basket, session, cookie preference, and the research-use confirmation. Server logs kept by the hosting provider. |
|---|---|
| Purpose | Operating and securing the site. |
| Legal basis | Legitimate interest in a functioning and secure service — GDPR Article 6(1)(f). Non-essential cookies are only set with consent. |
| Retention | As set out in the Cookie policy. |
3. Who else sees the data
Personal data is not sold, and is not used for profiling or automated decision-making. It is shared only with the processors needed to run the store:
| Hosting | Tárhely.Eu Szolgáltató Kft. 1097 Budapest, Könyves Kálmán körút 12–14., Hungary Company registration number: 01-09-909968 Tax number: 14571332-2-42 support@tarhely.eu · +36 1 789 2 789 |
|---|---|
| Delivery | GLS General Logistics Systems Hungary Kft. — name, delivery address, telephone number and email address, for the delivery of the parcel. |
| Invoicing | ⟨invoicing provider⟩ |
Data may also be disclosed to a public authority where a legal obligation requires it. No transfer to a third country outside the European Economic Area takes place.
4. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability, and the right to object to processing based on legitimate interest. Where processing rests on consent, you may withdraw it at any time; withdrawal does not affect the lawfulness of processing before it.
Write to info@celtheralabs.com. We answer within one month. If the request is complex, that period may be extended by two further months, and we will tell you why.
5. Complaints
If you believe your data has been handled unlawfully, you may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (Nemzeti Adatvédelmi és Információszabadság Hatóság), 1055 Budapest, Falk Miksa utca 9–11., postal address 1363 Budapest, Pf. 9., telephone +36 1 391 1400, email ugyfelszolgalat@naih.hu, web naih.hu. You may also bring the matter before the competent court.
6. Security
The site is served over an encrypted connection. Access to the administration interface is restricted and protected by brute-force protection. Data is stored on servers within the European Union.